CLI Reference

salt-gnupg-rotate

Easily rotate gnupg encryption keys of fully or partially encrypted files.

salt-gnupg-rotate [OPTIONS]

Options

-d, --dir, --directory <directory>

Required The directory of encrypted data to recursively re-encrypt encrypted blocks within.

--decryption-gpg-homedir <decryption_gpg_homedir>

The path of the directory of the gnupg keyring that should be used for decryption.

Default:

'~/.gnupg'

--encryption-gpg-homedir <encryption_gpg_homedir>

The path of the directory of the gnupg keyring that should be used for encryption.

Default:

'~/.gnupg'

-r, --recipient <recipient>

Required The name of the recipient key to use in the encryption keyring.

--write

Write the re-encrypted data back out to disk. If not passed then no changes will be made.

Default:

False

-l, --log, --log-level <log_level>

The logging verbosity level to use

Default:

'info'

Options:

critical | error | warning | info | debug | trace | notset

--version

Show the version and exit.

-h, --help

Show this message and exit.