From a505309d9d46bfc7681f73e0da4bef7bec834036 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maurice=20Preu=C3=9F?= Date: Sat, 21 Mar 2026 13:19:16 +0000 Subject: [PATCH] =?UTF-8?q?dev/core.sh=20hinzugef=C3=BCgt?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- dev/core.sh | 72 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 72 insertions(+) create mode 100644 dev/core.sh diff --git a/dev/core.sh b/dev/core.sh new file mode 100644 index 0000000..2ee1a8f --- /dev/null +++ b/dev/core.sh @@ -0,0 +1,72 @@ +#!/bin/bash +# +# Sources: +# https://gist.github.com/artizirk/d09ce3570021b0f65469cb450bee5e29 +# https://gist.github.com/greeflas/431bc50c23532eee8a7d6c1d603f3921 +# + +echo "==> Add identity from keyserver.ubuntu.com" + +gpg --keyserver keyserver.ubuntu.com --recv-keys A355308DA385BEF5 + +echo "==> Install YubiKey Manager" + +sudo apt install -y yubikey-manager + +ykman openpgp + +sudo apt install -y gnupg pcscd scdaemon + +mkdir -p ~/.gnupg +cat > ~/.gnupg/scdaemon.conf <<'EOF' +disable-ccid +pcsc-driver /usr/lib/x86_64-linux-gnu/libpcsclite.so.1 +card-timeout 1 + +# Always try to use yubikey as the first reader +# even when other smart card readers are connected +# Name of the reader can be found using the pcsc_scan command +# If you have problems with gpg not recognizing the Yubikey +# then make sure that the string here matches exacly pcsc_scan +# command output. Also check journalctl -f for errors. +reader-port Yubico YubiKey +EOF + +cat > ~/.gnupg/gpg.conf <<'EOF' +trust-model tofu+pgp +EOF + +systemctl --user restart gpg-agent.service + +gpg --card-status + +echo "==> Setup YubiKey" + +mkdir -p ~/.config/autostart +mkdir -p ~/.config/environment.d + +cat > ~/.config/autostart/gnome-keyring-ssh.desktop <<'EOF' +[Desktop Entry] +Name=GNOME Keyring SSH Agent +Exec=/usr/bin/gnome-keyring-daemon --start --components=ssh +Type=Application +X-GNOME-Autostart-enabled=true +Hidden=true +EOF + +cat >> ~/.profile <<'EOF' +export SSH_AUTH_SOCK=${XDG_RUNTIME_DIR}/gnupg/S.gpg-agent.ssh +EOF + +echo "==> Setup Git" + +sudo apt install -y git + +wget https://github.com/envoyr.keys -O ~/.ssh/envoyr.pub + +git config --global user.name "Maurice Preuß" +git config --global user.email hello@envoyr.com +git config --global gpg.format ssh +git config --global user.signingkey ~/.ssh/envoyr.pub + +echo "Done! Please reboot..." \ No newline at end of file