91 lines
2.8 KiB
Bash
Executable File
91 lines
2.8 KiB
Bash
Executable File
#! /bin/bash
|
|
|
|
echo "-------------------------------------"
|
|
echo "SSH Setup Script"
|
|
echo "-------------------------------------"
|
|
|
|
echo "Extracting login details from enpass"
|
|
LABS=$(enpass-cli -vault="$HOME/.local/share/Enpass/Enpass/Vaults/primary" -json -sort show "Scarif: Labs")
|
|
LABSUN=$(echo "$LABS" | jq -r '.[].login')
|
|
LABSPW=$(echo "$LABS" | jq -r '.[].password')
|
|
|
|
SSHPATH="$HOME/.ssh/id_ed25519" # The path to the SSH key file
|
|
TITLE="$USER@$(cat /etc/hostname)" # The title for the SSH key
|
|
|
|
echo "~~~~~~~~"
|
|
echo "Generating the SSH key if it does not exist"
|
|
[ ! -f $SSHPATH ] && ssh-keygen -t ed25519 -f "$SSHPATH" -N "" -q
|
|
|
|
KEY=$(cat "$SSHPATH.pub")
|
|
|
|
# A method to generate the parameters for creating an SSH key on gitea
|
|
generate_post_data() {
|
|
cat <<EOF
|
|
{
|
|
"key": "$KEY",
|
|
"read_only": false,
|
|
"title": "$TITLE"
|
|
}
|
|
EOF
|
|
}
|
|
|
|
CREDENTIALS="$LABSUN:$LABSPW" # The credentials to pass to the API
|
|
KEYS_URL="https://$CREDENTIALS@labs.scarif.space/api/v1/user/keys"
|
|
|
|
# Get all the existing keys
|
|
KEYS=$(curl -X GET -s -S --url "$KEYS_URL")
|
|
|
|
KEY_EXISTS=$(echo $KEYS | jq --arg TITLE "$TITLE" 'map(.title|ascii_downcase)|contains([$TITLE|ascii_downcase])')
|
|
|
|
echo "~~~~~~~~"
|
|
echo "Checking if the key exists on the server"
|
|
if [[ $KEY_EXISTS == true ]]; then
|
|
echo "Found keys with the same title as this machine."
|
|
# Extract the ids of the keys with the same title as this machine
|
|
MATCH=$(echo "$KEYS" | jq --arg TITLE "$TITLE" 'map(select(.title|ascii_downcase == ($TITLE|ascii_downcase)))[]')
|
|
|
|
if [[ -n "$MATCH" ]]; then
|
|
ID=$(echo "$MATCH" | jq -r '.id')
|
|
EXISTING_KEY=$(echo "$MATCH" | jq -r '.key')
|
|
|
|
if [[ "$KEY" == "$EXISTING_KEY" ]]; then
|
|
echo "Key already exists and is correct. Nothing to do."
|
|
exit 0;
|
|
else
|
|
echo "Key exists but differs. Deleting existing key ID $ID"
|
|
curl -X DELETE \
|
|
-s -S \
|
|
-H "Accept: application/json" \
|
|
-H "Content-Type:application/json" \
|
|
--url "$KEYS_URL/$ID"
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
echo "~~~~~~~~"
|
|
echo "Saving the new key"
|
|
curl -X POST \
|
|
-s -S \
|
|
-H "Accept: application/json" \
|
|
-H "Content-Type:application/json" \
|
|
--data "$(generate_post_data)" \
|
|
--url "$KEYS_URL"
|
|
|
|
HTTP_REPLACE="s/https:\/\/labs\.scarif\.space\//git@labs.scarif.space:/"
|
|
|
|
for dir in "$HOME/.local/nixos"; do
|
|
dir="$HOME/.local/src/$dir"
|
|
if [ -d $dir ]; then
|
|
cd "$dir"
|
|
SSH_URL=$(git remote get-url origin | sed "$HTTP_REPLACE")
|
|
git remote set-url origin "$SSH_URL"
|
|
fi
|
|
done
|
|
|
|
echo "~~~~~~~~"
|
|
echo "Replacing remote URL to use SSH key"
|
|
DOTFILES_SSH_URL=$(git --git-dir "$HOME/.config/dotfiles/.git" --work-tree="$HOME" remote get-url origin | sed "$HTTP_REPLACE")
|
|
git --git-dir "$HOME/.config/dotfiles/.git" --work-tree="$HOME" remote set-url origin "$DOTFILES_SSH_URL"
|
|
|
|
|