dev/core.sh hinzugefügt
This commit is contained in:
72
dev/core.sh
Normal file
72
dev/core.sh
Normal file
@@ -0,0 +1,72 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# Sources:
|
||||
# https://gist.github.com/artizirk/d09ce3570021b0f65469cb450bee5e29
|
||||
# https://gist.github.com/greeflas/431bc50c23532eee8a7d6c1d603f3921
|
||||
#
|
||||
|
||||
echo "==> Add identity from keyserver.ubuntu.com"
|
||||
|
||||
gpg --keyserver keyserver.ubuntu.com --recv-keys A355308DA385BEF5
|
||||
|
||||
echo "==> Install YubiKey Manager"
|
||||
|
||||
sudo apt install -y yubikey-manager
|
||||
|
||||
ykman openpgp
|
||||
|
||||
sudo apt install -y gnupg pcscd scdaemon
|
||||
|
||||
mkdir -p ~/.gnupg
|
||||
cat > ~/.gnupg/scdaemon.conf <<'EOF'
|
||||
disable-ccid
|
||||
pcsc-driver /usr/lib/x86_64-linux-gnu/libpcsclite.so.1
|
||||
card-timeout 1
|
||||
|
||||
# Always try to use yubikey as the first reader
|
||||
# even when other smart card readers are connected
|
||||
# Name of the reader can be found using the pcsc_scan command
|
||||
# If you have problems with gpg not recognizing the Yubikey
|
||||
# then make sure that the string here matches exacly pcsc_scan
|
||||
# command output. Also check journalctl -f for errors.
|
||||
reader-port Yubico YubiKey
|
||||
EOF
|
||||
|
||||
cat > ~/.gnupg/gpg.conf <<'EOF'
|
||||
trust-model tofu+pgp
|
||||
EOF
|
||||
|
||||
systemctl --user restart gpg-agent.service
|
||||
|
||||
gpg --card-status
|
||||
|
||||
echo "==> Setup YubiKey"
|
||||
|
||||
mkdir -p ~/.config/autostart
|
||||
mkdir -p ~/.config/environment.d
|
||||
|
||||
cat > ~/.config/autostart/gnome-keyring-ssh.desktop <<'EOF'
|
||||
[Desktop Entry]
|
||||
Name=GNOME Keyring SSH Agent
|
||||
Exec=/usr/bin/gnome-keyring-daemon --start --components=ssh
|
||||
Type=Application
|
||||
X-GNOME-Autostart-enabled=true
|
||||
Hidden=true
|
||||
EOF
|
||||
|
||||
cat >> ~/.profile <<'EOF'
|
||||
export SSH_AUTH_SOCK=${XDG_RUNTIME_DIR}/gnupg/S.gpg-agent.ssh
|
||||
EOF
|
||||
|
||||
echo "==> Setup Git"
|
||||
|
||||
sudo apt install -y git
|
||||
|
||||
wget https://github.com/envoyr.keys -O ~/.ssh/envoyr.pub
|
||||
|
||||
git config --global user.name "Maurice Preuß"
|
||||
git config --global user.email hello@envoyr.com
|
||||
git config --global gpg.format ssh
|
||||
git config --global user.signingkey ~/.ssh/envoyr.pub
|
||||
|
||||
echo "Done! Please reboot..."
|
||||
Reference in New Issue
Block a user