Merge pull request #26 from UCEAP/dx/secrets

Support secrets handling

Author: kurowski

Dockerfile

@@ -36,8 +36,22 @@ RUN echo 'xdebug.log_level = 0' >> /usr/local/etc/php/conf.d/xdebug.ini
 RUN sed -i 's/Listen\s*80$/# Listen 80/' /etc/apache2/ports.conf
 
 # Install terminus
-RUN curl -L https://github.com/pantheon-systems/terminus/releases/latest/download/terminus.phar --output /usr/local/bin/terminus
-RUN chmod +x /usr/local/bin/terminus
+RUN curl -L https://github.com/pantheon-systems/terminus/releases/latest/download/terminus.phar --output /usr/local/bin/terminus \
+  && chmod +x /usr/local/bin/terminus \
+	&& terminus self:plugin:install terminus-secrets-manager-plugin
+
+# Install 1password-cli, see https://developer.1password.com/docs/cli/get-started/
+RUN curl -sS https://downloads.1password.com/linux/keys/1password.asc \
+  | gpg --dearmor --output /usr/share/keyrings/1password-archive-keyring.gpg \
+	&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/1password-archive-keyring.gpg] https://downloads.1password.com/linux/debian/$(dpkg --print-architecture) stable main" \
+	| tee /etc/apt/sources.list.d/1password.list \
+	&& mkdir -p /etc/debsig/policies/AC2D62742012EA22/ \
+	&& curl -sS https://downloads.1password.com/linux/debian/debsig/1password.pol \
+	| tee /etc/debsig/policies/AC2D62742012EA22/1password.pol \
+	&& mkdir -p /usr/share/debsig/keyrings/AC2D62742012EA22 \
+	&& curl -sS https://downloads.1password.com/linux/keys/1password.asc \
+	| gpg --dearmor --output /usr/share/debsig/keyrings/AC2D62742012EA22/debsig.gpg \
+	&& apt update && apt install 1password-cli
 
 # Install atuin
 #