Diff -- /var/www/vhosts/3dshawn.com/site1/_schema/drift_sense_key_encryption.sql

O Operator
Diff

/var/www/vhosts/3dshawn.com/site1/_schema/drift_sense_key_encryption.sql

added on local at 2026-07-11 23:15:10

Added
+30
lines
Removed
-0
lines
Context
0
unchanged
Blobs
from
to eede8caf8916
Restore this content →
Unified diff
Naive LCS-based line diff. Additions in emerald, deletions in rose. Both sides decompressed live from BLOB_STORE.
1-- DriftSense -- Encrypted SSH-key storage
2--
3-- Adds two columns to SERVERS:
4-- ssh_key_blob -- base64 ciphertext of a full PEM private key
5-- ssh_key_enc -- indicator of how the blob was encrypted
6-- (currently 'aes-256-cbc-pbkdf2', for future migration)
7--
8-- Idempotent: uses the same _drift_add_col procedure as
9-- drift_sense_agent_mode.sql.
10
11DELIMITER $$
12DROP PROCEDURE IF EXISTS _drift_add_col $$
13CREATE PROCEDURE _drift_add_col(IN t_name VARCHAR(64), IN c_name VARCHAR(64), IN c_ddl VARCHAR(500))
14BEGIN
15 IF NOT EXISTS (
16 SELECT 1 FROM INFORMATION_SCHEMA.COLUMNS
17 WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = t_name AND COLUMN_NAME = c_name
18 ) THEN
19 SET @sql = CONCAT('ALTER TABLE ', t_name, ' ADD COLUMN ', c_name, ' ', c_ddl);
20 PREPARE stmt FROM @sql;
21 EXECUTE stmt;
22 DEALLOCATE PREPARE stmt;
23 END IF;
24END $$
25DELIMITER ;
26
27CALL _drift_add_col('SERVERS', 'ssh_key_blob', 'TEXT DEFAULT NULL');
28CALL _drift_add_col('SERVERS', 'ssh_key_enc', "VARCHAR(40) DEFAULT NULL");
29
30DROP PROCEDURE _drift_add_col;