amber: init at 0.1.1

[psibi]

Motivation for this change

This tools allows for easily managing secrets in a repo. Tested it locally on a NixOS machine:

❯ amber
amber 0.1.1
Utility to store encrypted secrets in version trackable plain text files

USAGE:
    amber [FLAGS] [OPTIONS] <SUBCOMMAND>

FLAGS:
    -h, --help        Prints help information
        --unmasked    Disable masking of secret values during exec
    -v, --verbose     Turn on verbose output
    -V, --version     Prints version information

OPTIONS:
        --amber-yaml <amber-yaml>    amber.yaml file location [env: AMBER_YAML=] [default:
                                     amber.yaml]

SUBCOMMANDS:
    encrypt     Add or update a secret
    exec        Run a command with all of the secrets set as environment variables
    generate    Generate a new strong secret value, and add it to the repository
    help        Prints this message or the help of the given subcommand(s)
    init        Initialize a new directory
    print       Print all of the secrets
    remove      Remove a secret

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• 21.11 Release Notes (or backporting 21.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

[figsoda]

package is not added to all-packages.nix, also commit message should be amber-secret: init at 0.1.1

[figsoda]

maybe the file name should be amber-secret instead of amber? otherwise lgtm

[psibi]

Thanks @figsoda for the review!

maybe the file name should be amber-secret instead of amber?

I can change that if you feel strongly. But the reason I have kept it as amber is because:

• amber is the name of the project
• I'm using amber-secret because there is already another package named amber in the nixpkgs repo.

[figsoda]

fair enough

[figsoda]

darwin build failed, i think you need CoreFoundation and Security in buildInputs, inherited from darwin.apple_sdk.frameworks inside all-packages.nix

[figsoda]

@ofborg build amber-secret

[figsoda]

Result of nixpkgs-review pr 138159 run on x86_64-linux 1

1 package built:

• amber-secret