forked from TrueCloudLab/restic
118a69a84b
The new functions much better convey the intent behind the lock request. This allows cleanly integrating noLock (for read) and dryRun (write/exclusive) handling. There are only minor changes to existing behavior with two exceptions: - `tag` no longer accepts the `--no-lock` flag. As it replaces files in the repository, this always requires an exclusive lock. - `debug examine` now returns an error if both `--extract-pack` and `--no-lock` are given.
66 lines
1.5 KiB
Go
66 lines
1.5 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/restic/restic/internal/errors"
|
|
"github.com/restic/restic/internal/repository"
|
|
"github.com/restic/restic/internal/restic"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
var cmdKeyRemove = &cobra.Command{
|
|
Use: "remove [ID]",
|
|
Short: "Remove key ID (password) from the repository.",
|
|
Long: `
|
|
The "remove" sub-command removes the selected key ID. The "remove" command does not allow
|
|
removing the current key being used to access the repository.
|
|
|
|
EXIT STATUS
|
|
===========
|
|
|
|
Exit status is 0 if the command is successful, and non-zero if there was any error.
|
|
`,
|
|
DisableAutoGenTag: true,
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
return runKeyRemove(cmd.Context(), globalOptions, args)
|
|
},
|
|
}
|
|
|
|
func init() {
|
|
cmdKey.AddCommand(cmdKeyRemove)
|
|
}
|
|
|
|
func runKeyRemove(ctx context.Context, gopts GlobalOptions, args []string) error {
|
|
if len(args) != 1 {
|
|
return fmt.Errorf("key remove expects one argument as the key id")
|
|
}
|
|
|
|
ctx, repo, unlock, err := openWithExclusiveLock(ctx, gopts, false)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer unlock()
|
|
|
|
return deleteKey(ctx, repo, args[0])
|
|
}
|
|
|
|
func deleteKey(ctx context.Context, repo *repository.Repository, idPrefix string) error {
|
|
id, err := restic.Find(ctx, repo, restic.KeyFile, idPrefix)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if id == repo.KeyID() {
|
|
return errors.Fatal("refusing to remove key currently used to access repository")
|
|
}
|
|
|
|
err = repository.RemoveKey(ctx, repo, id)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
Verbosef("removed key %v\n", id)
|
|
return nil
|
|
}
|