111 lines
3.5 KiB
Bash
Executable file
111 lines
3.5 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# Exit if there's an error
|
|
set -e
|
|
# Modify constants as needed
|
|
GITEA_URL="https://git.askiiart.net"
|
|
GIT_NAME="askiiart"
|
|
GIT_EMAIL="dev@askiiart.net"
|
|
KEY_ID="02EFA1CE3C3E4AAD7A863AB8ED24985CA884CD61"
|
|
|
|
# Note: This waits until enter is pressed
|
|
# read -p "Press Enter to continue" < /dev/tty
|
|
|
|
if [ $(whoami) == "root" ]; then
|
|
echo "Run as a normal user, not root"
|
|
exit 1
|
|
fi
|
|
|
|
command_exists() { type "$1" &>/dev/null; }
|
|
|
|
if command_exists "apt-get"; then
|
|
sudo apt-get install pass git -y
|
|
elif command_exists "yum"; then
|
|
sudo yum install pass git -y
|
|
elif command_exists "pacman"; then
|
|
sudo pacman -S git --noconfirm --needed
|
|
sudo pacman -S pass --noconfirm --needed
|
|
elif command_exists "zypp"; then
|
|
sudo zypper install pass git -y
|
|
elif command_exists "emerge"; then
|
|
sudo echo Not yet supported, exiting...
|
|
elif command_exists "apk"; then
|
|
sudo apk add pass
|
|
sudo apk add git
|
|
else
|
|
echo "Unsupported: unknown package manager and distro"
|
|
fi
|
|
|
|
# Check if GCM is installed
|
|
if [ -d "${HOME}/git-credential-manager" ]; then
|
|
echo "Git Credential Manager already installed, skipping..."
|
|
else
|
|
if command_exists "apt-get"; then
|
|
curl $(curl -s https://api.github.com/repos/git-ecosystem/git-credential-manager/releases/latest | grep "browser_download_url.*gcm-linux_amd64.*.deb" | cut -d : -f 2,3 | tr -d \") -LO
|
|
chmod 777 ./gcm-linux_amd64.*.deb
|
|
sudo apt-get install ./gcm-linux_amd64.*.deb -y
|
|
rm -f ./gcm-linux_amd64.*.deb
|
|
else
|
|
# Install git credential manager
|
|
curl -L https://aka.ms/gcm/linux-install-source.sh | sh
|
|
rm dotnet-install.sh
|
|
fi
|
|
fi
|
|
|
|
############################################
|
|
# Do GPG key stuff for commit verification #
|
|
############################################
|
|
git config --global user.name "${GIT_NAME}"
|
|
git config --global user.email "${GIT_EMAIL}"
|
|
git-credential-manager configure
|
|
git config --global commit.gpgsign true
|
|
git config --global credential.credentialStore gpg
|
|
|
|
echo "GPG key ID: ${KEY_ID}"
|
|
echo "Go to https://github.com/drduh/YubiKey-Guide to set up git with GPG"
|
|
read -p "Mirrored at https://git.askiiart.net/mirrors/YubiKey-Guide"
|
|
|
|
git config --global user.signingkey ${KEY_ID}
|
|
pass init ${KEY_ID}
|
|
|
|
#############
|
|
# SSH stuff #
|
|
#############
|
|
|
|
# Get SSH key
|
|
if [ -d "${HOME}/.ssh" ]; then
|
|
echo "SSH keys already exist, skipping..."
|
|
else
|
|
# Generate SSH keys
|
|
echo
|
|
# -f: file, -N: passphrase, -t: type
|
|
ssh-keygen -f ~/.ssh/id_rsa -N "" -t rsa
|
|
echo
|
|
fi
|
|
|
|
# From https://superuser.com/a/954639
|
|
# Archived at https://web.archive.org/web/20230606153856/https://superuser.com/a/954639
|
|
echo Fixing .gnupg/ permissions
|
|
# Set ownership to your own user and primary group
|
|
chown -R "$USER:$(id -gn)" ~/.gnupg
|
|
# Set permissions to read, write, execute for only yourself, no others
|
|
chmod 700 ~/.gnupg
|
|
# Set permissions to read, write for only yourself, no others
|
|
chmod 600 ~/.gnupg/*
|
|
# Fixes dirmngr stuff
|
|
sudo chmod 700 $(ls -d $HOME/.gnupg/*/)
|
|
|
|
read -p "Done. Now verify your SSH and GPG keys in Git*" </dev/tty
|
|
|
|
# Export GPG key
|
|
gpg --armor --export $KEY_ID
|
|
echo This is the exported key, copy it and put it in GitHub/Gitea/whatever
|
|
echo Gitea URL: ${GITEA_URL}/user/settings/keys
|
|
echo GitHub URL: https://github.com/settings/gpg/new
|
|
read -p "Press enter when you're done" </dev/tty
|
|
|
|
cat ~/.ssh/id_rsa.pub
|
|
echo This is the SSH public key, copy it and put it in GitHub/Gitea/whatever
|
|
echo Gitea URL: ${GITEA_URL}/user/settings/keys
|
|
echo GitHub URL: https://github.com/settings/ssh/new
|
|
read -p "Press enter when you're done" </dev/tty
|