edit GPG-encrypted files reasonably

vim-gpg

#!/bin/bash
set -e

usage() {
	local s="$(basename "$0")"
	echo "usage: $s [identity] [file]"
	echo "   ie: $s [email protected] ~/some-secret-file.asc"
}

identity="$1"; shift || { usage >&2; exit 1; }
filename="$1"; shift || { usage >&2; exit 1; }

tmp="$(mktemp)"
trap "( set -x; shred -zu '$tmp' )" EXIT

if [ -s "$filename" ]; then
	( set -x; gpg --decrypt --output "$tmp" --yes "$filename" )
fi

vim "$tmp"

( set -x; gpg --encrypt --armor --recipient "$identity" --output "$filename" --yes "$tmp" )

# trap shreds $tmp