6de7cd99cb
This makes the beginning of all files the same and a little simpler.
`${0%/*}` turns "/home/user/repository/bin/blackbox_edit" into
"/home/user/repository/bin", exactly like basename but without eating a
process.
Because other scripts needed `$blackbox_home` I made this into a
standardard variable that's always available.
This also loads _stack_lib.sh always because _blackbox_common.sh
requires it.
54 lines
1.5 KiB
Bash
Executable File
54 lines
1.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
#
|
|
# blackbox_addadmin -- Add an admin to the system
|
|
#
|
|
|
|
# Example:
|
|
# blackbox_addadmin tal@example.com
|
|
#
|
|
|
|
set -e
|
|
source "${0%/*}/_blackbox_common.sh"
|
|
|
|
fail_if_not_in_repo
|
|
|
|
KEYNAME="$1"
|
|
: "${KEYNAME:?ERROR: First argument must be a keyname (email address)}" ;
|
|
|
|
# Add the email address to the BB_ADMINS file. Remove any duplicates.
|
|
# The file must exist for sort to act as we expect.
|
|
touch "$BB_ADMINS"
|
|
sort -fdu -o "$BB_ADMINS" <(echo "$1") "$BB_ADMINS"
|
|
|
|
|
|
# Add the user's key to the keychain.
|
|
|
|
# Extract it:
|
|
make_self_deleting_tempfile pubkeyfile
|
|
|
|
# The second argument, if present, is the directory to find the GPG keys to be imported.
|
|
if [[ -z $2 ]]; then
|
|
gpg --export -a "$KEYNAME" >"$pubkeyfile"
|
|
else
|
|
# TODO(tlim): This could probably be done with GNUPGHOME
|
|
# but that affects all commands; we just want it to affect the key export.
|
|
gpg --homedir="$2" --export -a "$KEYNAME" >"$pubkeyfile"
|
|
fi
|
|
|
|
if [[ $(wc -l < "$pubkeyfile") = 0 ]]; then
|
|
fail_out "GPG key '$KEYNAME' not found. Please create it with: gpg --gen-key"
|
|
exit 1
|
|
fi
|
|
|
|
# Import it:
|
|
gpg --no-permission-warning --homedir="$KEYRINGDIR" --import "$pubkeyfile"
|
|
pubring_path=$(get_pubring_path)
|
|
vcs_add "$pubring_path" "$KEYRINGDIR/trustdb.gpg" "$BB_ADMINS"
|
|
|
|
# Make a suggestion:
|
|
echo
|
|
echo
|
|
echo 'NEXT STEP: You need to manually check these in:'
|
|
echo ' ' $VCS_TYPE commit -m\'NEW ADMIN: $KEYNAME\' "$BLACKBOXDATA/$(basename ${pubring_path})" "$BLACKBOXDATA/trustdb.gpg" "$BLACKBOXDATA/$BB_ADMINS_FILE"
|