mirror of
https://github.com/linuxboot/heads.git
synced 2025-06-24 02:04:08 +00:00
27 lines
1.2 KiB
Bash
Executable File
27 lines
1.2 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e -o pipefail
|
|
. /etc/functions
|
|
|
|
TRACE_FUNC
|
|
|
|
# Post processing of keys
|
|
|
|
# Good system clock is required for GPG to work properly.
|
|
# if system year is less then 2024, prompt user to set correct time
|
|
if [ "$(date +%Y)" -lt 2024 ]; then
|
|
warn "System time is incorrect. Please set the correct time."
|
|
change-time.sh
|
|
fi
|
|
|
|
# Import user's keys
|
|
gpg --import /.gnupg/keys/*.key /.gnupg/keys/*.asc 2>/dev/null || warn "Importing user's keys failed"
|
|
|
|
# Import trusted distro keys allowed for ISO signing
|
|
gpg --homedir=/etc/distro/ --import /etc/distro/keys/* 2>/dev/null || warn "Importing distro keys failed"
|
|
#Set distro keys trust level to ultimate (trust anything that was signed with these keys)
|
|
gpg --homedir=/etc/distro/ --list-keys --fingerprint --with-colons|sed -E -n -e 's/^fpr:::::::::([0-9A-F]+):$/\1:6:/p' |gpg --homedir=/etc/distro/ --import-ownertrust 2>/dev/null || warn "Setting distro keys ultimate trust failed"
|
|
gpg --homedir=/etc/distro/ --update-trust 2>/dev/null || warn "Updating distro keys trust failed"
|
|
|
|
# Add user's keys to the list of trusted keys for ISO signing
|
|
gpg --export | gpg --homedir=/etc/distro/ --import 2>/dev/null || warn "Adding user's keys to distro keys failed"
|