Unseal Vault Secret Storage

vault_unseal.py

#!/usr/bin/env python3

import re
import random
import subprocess

initfile = "/usr/local/etc/vault/.init"
data = ""

with open(initfile, "r") as ifile:
  data = ifile.read()

findkeys = re.compile(r'(?:Key\s\d+:\s)(.+)')
allkeys = findkeys.findall(data)

for x in range(0, 3):
  randomkey = random.choice(allkeys)
  allkeys.remove(randomkey)
  print("vault unseal %s" % randomkey)
  try:
    out = subprocess.check_output(['vault', 'unseal', randomkey], stderr=subprocess.STDOUT)
  except subprocess.CalledProcessError as e:
    emsg = e.output
    ecode = e.returncode
    print("exited with code %s and message: %s." % (emsg, ecode))

and yes, of course, the above is no production Vault!