Python tar 一个目录并使用 gpg 进行对称加密

Question

此时脚本非常适合单个文件。当给定目录时，它使用 tar 创建一个运行良好的单一文件，然后使用提供的密码对 tar 文件进行 gpg 加密。 gpg 也可以。问题是，当您解密 gpg 文件时，tar 每次都会损坏。我试图在这里找出我做错了什么。请帮忙。

#!/usr/bin/env python3
# Takes file in does symmetric encryption with the password you provide
# then  adds it to a running IPFS(ipfs.io) instance.   
#
import os
import argparse
import gnupg
import ipfsapi
import tarfile

# Parse command arguments
parser = argparse.ArgumentParser(description='Encrypt file/directory and add it to IPFS')
parser.add_argument('-i','--input', help='File.txt or Directory', required=True)
parser.add_argument('-p','--password', help='Password to encrypt with', required=True)
args = parser.parse_args()

# Set GPG Home directory
gpg = gnupg.GPG(homedir='')
# Set GPG Encoding
gpg.encoding = 'utf-8'
# Get dataToEncrypt full path
dataToEncrypt = (os.path.abspath(args.input))
# Setup tar filename to end with .zip
tarFile = ("{}.tar".format(dataToEncrypt))
# Setup encrypted filename to end with .gpg
encryptedFile = ("{}.tar.gpg".format(dataToEncrypt))
# Tell module where IPFS instance is located
api = ipfsapi.connect('127.0.0.1', 5001)

def dataTar():
    if os.path.isfile(dataToEncrypt):
        return
else:
    #return
    with tarfile.open(tarFile, 'w|') as tar:
        tar.add(dataToEncrypt)
        tar.close()

def encryptFile():
    passphrase = (args.password)
    if os.path.isfile(dataToEncrypt):
        with open(dataToEncrypt, 'rb') as f:
            status = gpg.encrypt(f,
            encrypt=False,
            symmetric='AES256',
            passphrase=passphrase,
            armor=False,
            output=dataToEncrypt + ".gpg")

    else:
        with open(tarFile, 'rb') as f:
            status = gpg.encrypt(f,
            encrypt=False,
            symmetric='AES256',
            passphrase=passphrase,
            armor=False,
            output=dataToEncrypt + ".tar.gpg")
        print ('ok: ', status.ok)
        print ('status: ', status.status)
        print ('stderr: ', status.stderr)


def ipfsFile(encryptedFile):
    # Add encrypted file to IPFS
    ipfsLoadedFile = api.add(encryptedFile, wrap_with_directory=True)
    # Return Hash of new IPFS File
    fullHash = (ipfsLoadedFile[1])
    ipfsHash = fullHash['Hash']
    return(ipfsHash)

def delEncryptedFile(encryptedFile):
    try:
        os.remove(encryptedFile)
    except:
        print("Error: %s unable to find or delete file." % encryptedFile)


def main():
    dataTar()
    encryptFile()
    #ipfsFile(encryptedFile)
    #print ("File encrypted and added to IPFS with this hash " + ipfsFile(encryptedFile))
    #delEncryptedFile(encryptedFile)

if __name__ == "__main__":
    main()

Answer 1

代码看起来不错。我刚刚用https://pypi.org/project/python-gnupg/ 试了一下，效果很好。我必须根据这个包修复 API，但我认为这并不重要。只需比较它即可查看更改。除了您应该使用gpg -d file.tar.pgp | tar xvf - 之外，我没有看到任何问题。

#!/usr/bin/env python3
# Takes file in does symmetric encryption with the password you provide then
# adds it to a running IPFS (ipfs.io) instance.

import os
import argparse
import gnupg
import tarfile

parser = argparse.ArgumentParser(
    description='Encrypt file/directory and add it to IPFS')
parser.add_argument('-i','--input',
                    help='File.txt or Directory',
                    required=True)
parser.add_argument('-p','--password',
                    help='Password to encrypt with',
                    required=True)
args = parser.parse_args()

gpg = gnupg.GPG()
gpg.encoding = 'utf-8'
dataToEncrypt = (os.path.abspath(args.input))
tarFile = ("{}.tar".format(dataToEncrypt))
encryptedFile = ("{}.tar.gpg".format(dataToEncrypt))


def dataTar():
    if os.path.isfile(dataToEncrypt):
        return
    else:
        with tarfile.open(tarFile, 'w|') as tar:
            tar.add(dataToEncrypt)
            tar.close()

def encryptFile():
    passphrase = (args.password)
    if os.path.isfile(dataToEncrypt):
        with open(dataToEncrypt, 'rb') as f:
            status = gpg.encrypt(f.read(),
            recipients=None,
            symmetric='AES256',
            passphrase=passphrase,
            armor=False,
            output=dataToEncrypt + ".gpg")

    else:
        with open(tarFile, 'rb') as f:
            status = gpg.encrypt(f.read(),
            recipients=None,
            symmetric='AES256',
            passphrase=passphrase,
            armor=False,
            output=dataToEncrypt + ".tar.gpg")
        print ('ok: ', status.ok)
        print ('status: ', status.status)
        print ('stderr: ', status.stderr)


def ipfsFile(encryptedFile):
    ipfsLoadedFile = api.add(encryptedFile, wrap_with_directory=True)
    fullHash = (ipfsLoadedFile[1])
    ipfsHash = fullHash['Hash']
    return(ipfsHash)

def delEncryptedFile(encryptedFile):
    try:
        os.remove(encryptedFile)
    except:
        print("Error: %s unable to find or delete file." % encryptedFile)


def main():
    dataTar()
    encryptFile()

if __name__ == "__main__":
    main()