From dfc1a36ee51bf7fafe9391e611704d9ab0551be3 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sat, 29 Jun 2024 08:02:11 -0500
Subject: [PATCH] deploy.sh: Wrapper for deployment scripts

The `deploy.sh` script ensures the execution environment is correct by
configuring the Ansible Vault secret, unlocking the `rbw` vault, and
requesting an SSH client certificate.  It then runs the specified
end-to-end deployment script from the `deploy` directory.
---
 deploy.sh | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 deploy.sh

diff --git a/deploy.sh b/deploy.sh
new file mode 100644
index 0000000..12a256b
--- /dev/null
+++ b/deploy.sh
@@ -0,0 +1,16 @@
+#!/bin/sh
+# vim: set ts=4 :
+
+eval $(ssh-agent)
+trap 'ssh-agent -k' INT TERM QUIT EXIT
+
+set -a
+. ./.env
+SSHCA_SERVER=https://sshca.pyrocufflink.blue
+set +a
+
+virsh uri || exit
+rbw unlock || exit
+sshca-cli user login || exit
+
+. deploy/"${1}".sh