Migrates a 'pass' setup to a different GPG key

migrate-pass.py

#!/usr/bin/env python3
# Re-encrypt all pass files with a different GPG key
# 1) First, add your new key to ~/.password-store/.gpg-id
# 2) Run this script.
# 3) Confirm that things work
# 4) Remove the old backup keys with `find ~/.password-store -name '*.old' | xargs rm`
import os
import shutil
import subprocess

KEY = 'ADCE8DEB'

for root, dirs, files in os.walk(os.path.expanduser('~/.password-store')):
    for file in files:
        filename = os.path.join(root, file)
        if filename.endswith('.gpg'):
            assert os.path.exists(filename)
            print(filename)
            old = filename + '.old'
            shutil.move(filename, old)
            p = subprocess.Popen('gpg2 -d {} | gpg2 -r {} -u {} -e -o {}'.format(old, KEY, KEY, filename), shell=True)