#!/bin/sh set -e cd /distcenter /distcenter/bin/create_ca.sh cd /distcenter/data DCOUNT=$(ls -d host_* 2> /dev/null | wc -l) if [ "$DCOUNT" != "0" ] then DLIST=`ls -d host_*` #Iterate over all hosts (host in k8s corresponds node) for DIR in $DLIST; do echo $DIR cp /distcenter/ca/ca.cert /distcenter/data/$DIR cd /distcenter/data/$DIR /dup/bin/ossl_tpm_duplicate -pemfile /distcenter/ca/privkey.pem -parentPub \ /distcenter/data/$DIR/out_parent_public -dupPub dupPub -dupPriv dupPriv -dupSymSeed \ dupSymseed -dupEncKey dupEncKey done else cd /distcenter/ca cat /distcenter/passphrase/passphrase | gpg --no-tty --symmetric -z 9 --require-secmem \ --cipher-algo AES256 --s2k-cipher-algo AES256 --s2k-digest-algo SHA512 \ --s2k-mode 3 --s2k-count 65000000 --compress-algo BZIP2 \ --passphrase-fd 0 privkey.pem cp /distcenter/ca/privkey.pem.gpg /distcenter/data cp /distcenter/ca/ca.cert /distcenter/data fi