diff options
| author | Elizabeth Alexander Hunt <me@liz.coffee> | 2026-07-11 13:58:49 -0700 |
|---|---|---|
| committer | Elizabeth Alexander Hunt <me@liz.coffee> | 2026-07-11 13:58:49 -0700 |
| commit | 075888f53f0513fc05f10bc2f1cc177878b74e69 (patch) | |
| tree | 3219466e3e8662b2bca7e1ef31d91e9c06bb52b5 | |
| parent | afd2c8f3d1f254c087ba25fbe32544951843a51d (diff) | |
| download | keys-075888f53f0513fc05f10bc2f1cc177878b74e69.tar.gz keys-075888f53f0513fc05f10bc2f1cc177878b74e69.zip | |
Fixes
| -rw-r--r-- | authorized_keys.sig | bin | 1921 -> 1917 bytes | |||
| -rwxr-xr-x | refresh_keys.sh | 11 |
2 files changed, 5 insertions, 6 deletions
diff --git a/authorized_keys.sig b/authorized_keys.sig Binary files differindex 118c2c4..514fb7d 100644 --- a/authorized_keys.sig +++ b/authorized_keys.sig diff --git a/refresh_keys.sh b/refresh_keys.sh index a9dfd76..41dc5b4 100755 --- a/refresh_keys.sh +++ b/refresh_keys.sh @@ -1,6 +1,6 @@ #!/bin/bash -set -e +set -xeo pipefail function main() { cd /tmp @@ -9,16 +9,15 @@ function main() { cd keys echo "+ Cloned keys" - echo "DC4323D1738F27358793D6E87BB52F7036FA7C18:6:" | gpg --quiet --import-ownertrust && gpg --update-trustdb --quiet + echo "DC4323D1738F27358793D6E87BB52F7036FA7C18:6:" | gpg --quiet --import-ownertrust && gpg --update-trustdb --quiet || return 1 echo "+ Trusting key" - gpg --status-fd 1 --verify authorized_keys.sig 2>/dev/null | grep -q VALIDSIG | grep -q "DC4323D1738F27358793D6E87BB52F7036FA7C18" + gpg --status-fd 1 --verify authorized_keys.sig 2>/dev/null | grep VALIDSIG | grep -q "DC4323D1738F27358793D6E87BB52F7036FA7C18" || return 1 echo "+ Validated" - gpg --output authorized_keys --decrypt authorized_keys.sig 2>/dev/null + gpg --output authorized_keys --decrypt authorized_keys.sig 2>/dev/null || return 1 echo "+ Decrypted" - sed -i '/emprespresso/d' ~/.ssh/authorized_keys - grep -qv "emprespresso" ~/.ssh/authorized_keys # assert + sed -i '/emprespresso/d' ~/.ssh/authorized_keys && grep -qv "emprespresso" ~/.ssh/authorized_keys || mkdir -p ~/.ssh && touch ~/.ssh/authorized_keys echo "+ Removed emprespresso keys" cat authorized_keys >> ~/.ssh/authorized_keys echo "+ Appended emprespresso keys" |
