53 lines
3.2 KiB
Bash
53 lines
3.2 KiB
Bash
#!/bin/bash
|
|
echo '[NOTICE] Make sure to run this script as the user that forejo runs as, via ssh or with manual ownership grants to your current tty!'
|
|
echo '[NOTICE] If you\'re running this script over sudo or su into the other account this WILL FAIL, gpg will not tolerate it!'
|
|
echo '[NOTICE] While it is not recommended by this script, you can set up gpg in a non-standard directory.'
|
|
echo '[NOTICE] If you do so, this script will disable git modifications, regardless of your selection.'
|
|
echo '[NOTICE] Otherwise, this script will modify the global git configuation for the user it runs as, and use the default GPG home.'
|
|
read -p '"Real Name" for gpg and git [Testing]: ' rname
|
|
rname=${rname:-Testing}
|
|
read -p 'Email [test@test.test]: ' email
|
|
email=${email:-test@test.test}
|
|
read -p 'Override default git config. Unless forgejo runs as you, this should be left alone! (Y|N) [Y]: ' ovrgit
|
|
ovrgit=${ovrgit:-Y}
|
|
read -p "Use default gpg directory. Unless you know exactly what you're doing, you should leave this alone! (Y|N) [Y]: " ovrgpg
|
|
ovrgpg=${ovrgpg:-Y}
|
|
temp=~/.gnupg
|
|
[[ $overgpg == n || $ovrgpg == N ]] && read -p "GPG home [$temp]: " gpghome
|
|
gpghome=${gpghome:-~/.gnupg}
|
|
echo "[INFO] Ensuring '$gpghome' exists with the correct permissions"
|
|
echo "$ mkdir -p $gpghome"
|
|
mkdir -p "$gpghome"
|
|
echo "$ chmod 700 $gpghome"
|
|
chmod 700 "$gpghome"
|
|
echo '[INFO] Now creating a gpg key using the real name and email provided'
|
|
echo "$ GPGHOME=$gpghome gpg --default-new-key-algo rsa4096 --quick-gen-key --batch --passphrase '' \"$rname <$email>\""
|
|
GNUPGHOME="$gpghome" gpg --default-new-key-algo rsa4096 --quick-gen-key --batch --passphrase '' "$rname <$email>"
|
|
echo '[INFO] Listing keys'
|
|
echo "$ GNUPGHOME=$gpghome gpg --list-secret-keys --keyid-format=long"
|
|
GNUPGHOME="$gpghome" gpg --list-secret-keys --keyid-format=long
|
|
key_id=$(GNUPGHOME="$gpghome" gpg --list-secret-keys --keyid-format=long|grep sec|sed -E 's_.+ .+/([^ ]+) .+_\1_g')
|
|
echo "[INFO] Detected key: $key_id"
|
|
if [[ "${ovrgit}" == "y" || "${ovrgit}" == "Y" ]] ; then
|
|
echo '[NOTICE] Reconfiguring git!'
|
|
echo '[INFO] Having git recognize this as the default signing key for this user...'
|
|
echo "$ git config --global user.signingkey $key_id"
|
|
git config --global user.signingkey $key_id
|
|
echo "[INFO] Having git use \"$rname\" as name and \"$email\" as email..."
|
|
echo "$ git config --global user.name \"$rname\""
|
|
git config --global user.name "$rname"
|
|
echo "$ git config --global user.email \"$email\""
|
|
git config --global user.email "$email"
|
|
else
|
|
echo '[NOTICE] Not Reconfiguring git!'
|
|
echo '[INFO] If you want forgejo to use the new gpg key, you\'ll need to set a few keys in `app.ini`.'
|
|
echo '[INFO] The keys you\'ll need to set are:'
|
|
echo '[repository.signing]'
|
|
echo "SIGNING_KEY = $key_id"
|
|
echo "SIGNING_NAME = $rname"
|
|
echo "SIGNING_EMAIL = $email"
|
|
echo '[INFO] This script does recommend that you use the default git setup with GPG keys, however.'
|
|
[[ $overgpg == n || $ovrgpg == N ]] && echo '[NOTICE] I notice you\'re trying to use a non-standard gpg directory'
|
|
[[ $overgpg == n || $ovrgpg == N ]] && echo '[NOTICE] I have no idea how to make forgejo read from a non-standard gpg dirctory'
|
|
[[ $overgpg == n || $ovrgpg == N ]] && echo '[NOTICE] So you\'re on your own from here. I hope you know what you\'re doing.'
|
|
fi
|