.gitignore

@@ -1,3 +1,4 @@
 .secrets.cfg
 __pycache__
 *.swp
+src/

Jenkinsfile

@@ -31,6 +31,7 @@ pipeline {
                             . venv/bin/activate
 
                             export BW_VAULT_DUMMY_MODE=1
+                            export BW_PASS_DUMMY_MODE=1
                             bw test --metadata-determinism 3 --config-determinism 3
                         """
                     }
@@ -43,6 +44,7 @@ pipeline {
                             bw test --ignore-missing-faults
 
                             export BW_VAULT_DUMMY_MODE=1
+                            export BW_PASS_DUMMY_MODE=1
                             bw test
                         """
                     }

nodes.py

@@ -1,6 +1,8 @@
 from os.path import join
 from pathlib import Path
 
+import bwpass
+
 nodes = {}
 for node in Path(join(repo_path, "nodes")).rglob("*.py"):
     with open(node, 'r') as f:

nodes/htz/ex42-1048908.py

@@ -370,7 +370,7 @@ nodes['htz.ex42-1048908'] = {
         },
         'radicale': {
             'users': {
-                'kunsi': vault.decrypt('encrypt$gAAAAABgJ3tp1DTK0ssglKSsHxlf7p3soDtdSPpgBqyABcHTFGPdnb7ym1an7WXK7idWhx1Tyqf_CLL0IcoMPPoOR-sgzGQJBKXKhPtib6JoPjCzAUphmbo='),
+                'kunsi': bwpass.password('dav.kunsmann.eu/kunsi'),
             },
         },
         'rspamd': {
@@ -395,7 +395,7 @@ nodes['htz.ex42-1048908'] = {
                 '217.197.80.134',
                 '2001:bf0:c000:a::2:134',
             },
-            'password': vault.decrypt('encrypt$gAAAAABfp7qzym32R6Go1A6oax0NGQM7EBMckbEbnZC6-RSKx-klSJsL57XbSUTD-AJM-gBIPzlmor-3bfVxPWLRYXtO8uTVw6jNQ1yt15ReHkOTijVqV2ACk-LTDBG3p4YKBn0pQgNvvjXhWV_J1-Pgjywbl4sHXc0zqjCGZ6xtEn6ywj0Pd599JJjREF4QCIFVZVWuKvo1'),
+            'password': bwpass.password('rspamd.mx0.kunbox.net'),
         },
         'smartd': {
             'disks': {

requirements.txt

@@ -1,2 +1,3 @@
 bundlewrap>=4.5.1
 PyNaCl
+bundlewrap-pass @ git+https://git.kunsmann.eu/kunsi/bundlewrap-pass.git#egg=bundlewrap-pass