profile/home/bin/update-profile

49 lines
1.2 KiB
Bash
Executable File

#!/bin/sh -e
if [ ! -d ~/.local/profile-git ]; then
mkdir -p ~/.local/profile-git
git clone --recursive https://git.icedream.tech/icedream/profile.git ~/.local/profile-git
fi
(
cd ~/.local/profile-git
echo "Fetching updates for profile..."
git fetch -p
# Synchronizing valid GPG keys
echo "Preparing for update verification..."
export GNUPGHOME="$HOME/.local/profile-data/gnupg"
mkdir -p "${GNUPGHOME}"
chmod 700 "${GNUPGHOME}"
gpg --fingerprint
gpg --recv-keys \
B5108C5A158A6608AD3361DA1573F6D8EFE4D0CF \
04ADEF85EA6AEC6F75941E84468BBEEBB9EC6AEA
echo "Verifying updates..."
git rev-list --format=oneline HEAD..origin | while IFS= read -r line; do
sha="$(echo "$line" | awk '{print $1}')"
title="$(echo "$line" | cut -f 1 -d ' ' --complement)"
printf "$title\r "
if ! git verify-commit "$sha" >/dev/null 2>&1; then
echo "✘"
echo "Found incorrectly signed commit, NOT applying. Contact the maintainer on the issue tracker."
exit 1
fi
echo "✔"
done
echo "All commits passed, now applying updates..."
git rebase origin
echo "Running package installation..."
cd packages
./packages.sh
echo "Running profile installation..."
cd ..
./install.sh
)