Add --sops mode to encrypt harvest and manifest data at rest (especially useful if using --dangerous)

2025-12-17 18:51:40 +11:00 · 2025-12-17 18:51:40 +11:00 · 33b1176800
commit 33b1176800
parent 6a36a9d2d5
12 changed files with 760 additions and 117 deletions
--- a/Dockerfile.debbuild
+++ b/Dockerfile.debbuild
@ -25,6 +25,7 @@ RUN set -eux; \
      python3-all \
      python3-poetry-core \
      python3-yaml \
+      python3-paramiko \
      rsync \
      ca-certificates \
    ; \