6 expect_n_args 1 "(system name)" "$@"
7 get_system_name_arg "$1"
10 ./copy_dirtree.sh "${config_tree_prefix}/home_files" "${HOME}" minimal user "${system_name}"
13 source_dir_secrets="/media/${secrets_dev}/to_usb"
14 target_dir_secrets="${HOME}/tmp_secrets"
15 echo "Put secrets drive into slot for /dev/${secrets_dev}."
16 while [ ! -e /dev/"${secrets_dev}" ]; do
20 printf "Secrets passphrase: "
23 echo "" # newline so user knows their input return was accepted
25 echo "${SECRETS_PASS}" | sudo pmount /dev/"${secrets_dev}"
26 cp -a "${source_dir_secrets}" "${target_dir_secrets}"
27 sudo chown -R plom:plom "${target_dir_secrets}"
28 sudo pumount "${secrets_dev}"
29 echo "You can remove /dev/${secrets_dev} now."
31 # Set up iniitial non-public parts of infrastructure: SSH authentication.
33 cd "${target_dir_secrets}"
35 echo "Setting up .ssh"
38 ssh-keygen -y -f ~/.ssh/id_rsa > ~/.ssh/id_rsa.pub
42 ssh-keyscan -H "plomlompom.com" >> ~/.ssh/known_hosts
44 # Fill ~/public_repos.
45 public_repos_dir="${HOME}/public_repos"
46 repos_list_file="${public_repos_dir}/repos"
47 mkdir -p "${public_repos_dir}"
48 cat "${repos_list_file}" | while read line; do
49 first_char=$(echo "${line}" | cut -c1)
50 if [ "${first_char}" = "#" ]; then
54 if [ ! -d "${public_repos_dir}/${repo_name}" ]; then
55 cd "${public_repos_dir}"
56 git clone plom@plomlompom.com:/var/repos/${repo_name}
60 # Remove redundant config repo copy.
61 config_tree_prefix="${public_repos_dir}/config/${debian_version}"
64 # # Set up native messenger for tridactyl.
65 # version='ef9f02d0da258f68d7faf8898707f6d83d90d07a'
66 # curl -fsSl "https://raw.githubusercontent.com/tridactyl/tridactyl/${version}/native/install.sh" | bash
68 # Set up further non-public parts of infrastructure.
69 cd "${target_dir_secrets}"
70 script -c 'gpg --import secret_keys.asc' /dev/null
71 path_borgscript="${config_tree_prefix}//borg.sh"
74 borgkeys_dir=~/.config/borg/keys
75 borgrepos_file=~/.borgrepos
76 tar xf borg_keyfiles.tar
77 mkdir -p "${borgkeys_dir}"
78 mv borg_keyfiles/* "${borgkeys_dir}"
79 # Sync org dir via borgbackup. For this we need the borgbackup servers
80 # in our .ssh/known_hosts file.
81 cat "${borgrepos_file}" | while read line; do
82 first_char=$(echo "${line}" | cut -c1)
83 if [ "${first_char}" = "#" ]; then
86 server=$(echo "${line}" | sed 's/.*@//')
87 ssh-keyscan "${server}" >> "${ssh_dir}"/known_hosts
89 BORG_PASSPHRASE="${SECRETS_PASS}" "${path_borgscript}" orgpull
91 # .authinfo may not be present on every secrets drive yet
92 authinfo_file=.authinfo
93 if [ -f "${authinfo_file}" ]; then
94 cp "${authinfo_file}" ~
98 maildir=~/mail/maildir
99 # # Set up e-mail system. Note that we only do mbsync if the imap pass file
100 # # is found. It may not be present on every secrets drive yet, so we have to
101 # # deal with the possibility of it being absent at this point.
102 mkdir -p "${maildir}" # expected by mbsync/isync
103 if [ -f "${HOME}/${authinfo_file}" ]; then
108 # # Final note on how to integrate tridactyl.
109 # echo "TODO: As tridactyl user, don't forget to do :source on the first Firefox run, wait a little while (Tridactyl needs to walk through all commands in the .tridactylrc) and then re-start."