gkleen@sif: systemd-based ssh socks proxy

1 files changed, 26 insertions, 0 deletions

diff --git a/overlays/sshpass-secret.nix b/overlays/sshpass-secret.nix
new file mode 100644
index 00000000..cfd19afe
--- /dev/null
+++ b/overlays/sshpass-secret.nix
@@ -0,0 +1,26 @@
+final: prev: {
+  sshpassSecret = prev.writeScriptBin "sshpass-secret" ''
+    #!${final.zsh}/bin/zsh -e
+
+    typeset -a cmd
+    cmd=()
+
+    while
+      if [[ "$#" -le 0 ]]; then
+        echo "Insufficient arguments" >&2
+        exit 2
+      fi
+      arg="''${1}"
+      shift
+    do
+      [[ "''${arg}" == '--' ]] && break
+      user=''${arg%@*}
+      host=''${arg#*@}
+      exec {fdnum}< <(${final.gnome.libsecret}/bin/secret-tool lookup service sshpass host "''${host}" user "''${user}")
+      cmd+=(${final.sshpass}/bin/sshpass -d ''${fdnum} -P "''${user}@''${host}'s password:")
+    done
+
+    cmd+=($@)
+    exec -a ''${cmd[1]} -- $cmd
+  '';
+}