heads/initrd/bin/key-init

#!/bin/ash
set -e -o pipefail
. /etc/functions

# Post processing of keys

# Import user's keys
gpg --import /.gnupg/keys/*.key 2>/dev/null || true

#Import trustdb if it exists
if [ -s /.gnupg/keys/otrust.txt ]; then
  gpg --import-ownertrust /.gnupg/keys/otrust.txt
fi

# Import trusted distro keys allowed for ISO signing
gpg --homedir=/etc/distro/ --import /etc/distro/keys/* 2>/dev/null || true
# Add user's keys to the list of trusted keys for ISO signing
gpg --export | gpg --homedir=/etc/distro/ --import 2>/dev/null || true