[rpms/fedora-packager] epel10.2: fkinit: Allow to pass the OTP token via $FKINIT_OTP

[rpms/fedora-packager] epel10.2: fkinit: Allow to pass the OTP token via $FKINIT_OTP

[@ 2026-06-25 13:20 UTC (permalink / raw)]

            A new commit has been pushed.

            Repo   : rpms/fedora-packager
            Branch : epel10.2
            Commit : 56bb70b205af4a5b7158e907b2499f1954d78db5
            Author : Miro Hrončok <miro@hroncok.cz>
            Date   : 2025-02-06T14:39:00-05:00
            Stats  : +1/-1 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/fedora-packager/c/56bb70b205af4a5b7158e907b2499f1954d78db5?branch=epel10.2

            Log:
            fkinit: Allow to pass the OTP token via $FKINIT_OTP

This allows me to run:

    $ FKINIT_OTP=$(ykman oath accounts code accounts.fedoraproject.org --single) fkinit

I can even alias this:

    $ alias fkinit='FKINIT_OTP=$(ykman oath accounts code accounts.fedoraproject.org --single) fkinit'

And the invocation then looks like this:

    $ fkinit
    Touch your YubiKey...
    🔐 FAS password: (press TAB for no echo)

Signed-off-by: Miro Hrončok <miro@hroncok.cz>

---
diff --git a/fkinit b/fkinit
index 1d53287..077678d 100755
--- a/fkinit
+++ b/fkinit
@@ -104,7 +104,7 @@ fi
 kinit -n @$domain -c FILE:$armorcache
 
 F_PASSWORD=$(systemd-ask-password "FAS password:")
-F_OTP=$(systemd-ask-password "FAS OTP (leave blank if not configured):")
+F_OTP=${FKINIT_OTP:-$(systemd-ask-password "FAS OTP (leave blank if not configured):")}
 
 kinit -T FILE:$armorcache $_arg_user@$domain <<< "${F_PASSWORD}${F_OTP}" >/dev/null
 unset F_PASSWORD