git.delta.rocks / fleet / refs/commits / 3b8059d4c529

94		#[clap(short = 'p', long, default_value = "secret")]94		#[clap(short = 'p', long, default_value = "secret")]
95		part: String,95		part: String,
96	},96	},
97	/// Read secret from remote host, requires sudo on said host
98	ReadShared {
99		name: String,
100		/// Which private secret part to read
101		#[clap(short = 'p', long, default_value = "secret")]
102		part: String,
103		/// Which host should we use to decrypt, in case if reencryption is required, without
104		/// regeneration
105		#[clap(long)]
106		prefer_identities: Vec<String>,
107	},
97	UpdateShared {108	UpdateShared {
98		name: String,109		name: String,
99110
634645
635				stdout().write_all(&data)?;646				stdout().write_all(&data)?;
636			}647			}
648			Secret::ReadShared {
649				name,
650				part: part_name,
651				prefer_identities,
652			} => {
653				let secret = config.shared_secret(&name)?;
654				let Some(part) = secret.secret.parts.get(&part_name) else {
655					bail!("no part {part_name} in secret {name}");
656				};
657				let data = if part.raw.encrypted {
658					let identity_holder = if !prefer_identities.is_empty() {
659						prefer_identities
660							.iter()
661							.find(|i| secret.owners.iter().any(|s| s == *i))
662					} else {
663						secret.owners.first()
664					};
665					let Some(identity_holder) = identity_holder else {
666						bail!("no available holder found");
667					};
668					let host = config.host(identity_holder).await?;
669					host.decrypt(part.raw.clone()).await?
670				} else {
671					part.raw.data.clone()
672				};
673				stdout().write_all(&data)?;
674			}
637			Secret::UpdateShared {675			Secret::UpdateShared {
638				name,676				name,
639				machine,677				machine,

--- a/crates/fleet-base/src/lib.rs
+++ b/crates/fleet-base/src/lib.rs
@@ -1,5 +1,5 @@
+pub mod command;
 pub mod fleetdata;
 pub mod host;
-pub mod command;
+mod keys;
 pub mod opts;
-mod keys;

--- a/crates/nix-eval/build.rs
+++ b/crates/nix-eval/build.rs
@@ -9,7 +9,6 @@
 //     }
 // }
 
-
 fn main() {
 	//
 	// let mut libnix = bindgen::builder().header_contents("nix.h", "