3 debian_version="bookworm"
6 expect_n_args 1 "(system name)" "$@"
7 get_system_name_arg "$1"
9 git clone https://plomlompom.com/repos/clone/config
11 ./copy_dirtree.sh "${config_tree_prefix}/home_files" "${HOME}" minimal user "${system_name}"
14 source_dir_secrets="/media/${secrets_dev}/to_usb"
15 target_dir_secrets="${HOME}/tmp_secrets"
16 echo "Put secrets drive into slot for /dev/${secrets_dev}."
17 while [ ! -e /dev/"${secrets_dev}" ]; do
21 printf "Secrets passphrase: "
24 echo "" # newline so user knows their input return was accepted
26 echo "${SECRETS_PASS}" | sudo pmount /dev/"${secrets_dev}"
27 cp -a "${source_dir_secrets}" "${target_dir_secrets}"
28 sudo chown -R plom:plom "${target_dir_secrets}"
29 sudo pumount "${secrets_dev}"
30 echo "You can remove /dev/${secrets_dev} now."
32 # Set up iniitial non-public parts of infrastructure: SSH authentication.
34 cd "${target_dir_secrets}"
36 echo "Setting up .ssh"
39 ssh-keygen -y -f ~/.ssh/id_rsa > ~/.ssh/id_rsa.pub
43 ssh-keyscan -H "plomlompom.com" >> ~/.ssh/known_hosts
45 # Fill ~/public_repos.
46 public_repos_dir="${HOME}/public_repos"
47 repos_list_file="${public_repos_dir}/repos"
48 mkdir -p "${public_repos_dir}"
49 cat "${repos_list_file}" | while read line; do
50 first_char=$(echo "${line}" | cut -c1)
51 if [ "${first_char}" = "#" ]; then
55 if [ ! -d "${public_repos_dir}/${repo_name}" ]; then
56 cd "${public_repos_dir}"
57 git clone plom@plomlompom.com:/var/repos/${repo_name}
61 # # Set up native messenger for tridactyl.
62 # version='ef9f02d0da258f68d7faf8898707f6d83d90d07a'
63 # curl -fsSl "https://raw.githubusercontent.com/tridactyl/tridactyl/${version}/native/install.sh" | bash
65 # Set up further non-public parts of infrastructure.
66 cd "${target_dir_secrets}"
67 script -c 'gpg --import secret_keys.asc' /dev/null
68 path_borgscript="${config_tree_prefix}//borg.sh"
71 borgkeys_dir=~/.config/borg/keys
72 borgrepos_file=~/.borgrepos
73 tar xf borg_keyfiles.tar
74 mkdir -p "${borgkeys_dir}"
75 mv borg_keyfiles/* "${borgkeys_dir}"
76 # Sync org dir via borgbackup. For this we need the borgbackup servers
77 # in our .ssh/known_hosts file.
78 cat "${borgrepos_file}" | while read line; do
79 first_char=$(echo "${line}" | cut -c1)
80 if [ "${first_char}" = "#" ]; then
83 server=$(echo "${line}" | sed 's/.*@//')
84 ssh-keyscan "${server}" >> "${ssh_dir}"/known_hosts
86 BORG_PASSPHRASE="${SECRETS_PASS}" "${path_borgscript}" orgpull
88 # .authinfo may not be present on every secrets drive yet
89 authinfo_file=.authinfo
90 if [ -f "${authinfo_file}" ]; then
91 cp "${authinfo_file}" ~
95 # rm -rf "${dir_secrets}"
97 maildir=~/mail/maildir
98 # # Set up e-mail system. Note that we only do mbsync if the imap pass file
99 # # is found. It may not be present on every secrets drive yet, so we have to
100 # # deal with the possibility of it being absent at this point.
101 mkdir -p "${maildir}" # expected by mbsync/isync
102 if [ -f "${HOME}/${authinfo_file}" ]; then
107 # # Final note on how to integrate tridactyl.
108 # echo "TODO: As tridactyl user, don't forget to do :source on the first Firefox run, wait a little while (Tridactyl needs to walk through all commands in the .tridactylrc) and then re-start."