diff options
| author | Elizabeth Alexander Hunt <me@liz.coffee> | 2026-07-11 13:23:42 -0700 |
|---|---|---|
| committer | Elizabeth Alexander Hunt <me@liz.coffee> | 2026-07-11 13:23:42 -0700 |
| commit | cd742f862f75bbf8cd1eacc42ec6374a97846277 (patch) | |
| tree | fef709b5ff5fb79c88d130d55f90506557c8e7a7 /refresh_keys.sh | |
| parent | 65f13215165cdc7768046235983cdb812bb00a33 (diff) | |
| download | keys-cd742f862f75bbf8cd1eacc42ec6374a97846277.tar.gz keys-cd742f862f75bbf8cd1eacc42ec6374a97846277.zip | |
Update
Diffstat (limited to 'refresh_keys.sh')
| -rwxr-xr-x | refresh_keys.sh | 22 |
1 files changed, 16 insertions, 6 deletions
diff --git a/refresh_keys.sh b/refresh_keys.sh index 5beea89..a9dfd76 100755 --- a/refresh_keys.sh +++ b/refresh_keys.sh @@ -3,19 +3,29 @@ set -e function main() { - echo "DC4323D1738F27358793D6E87BB52F7036FA7C18:6:" | gpg --import-ownertrust && gpg --update-trustdb - cd /tmp rm -rf /tmp/keys || true - git clone https://code.liz.coffee/keys + git clone --quiet https://code.liz.coffee/keys.git/ cd keys - gpg --status-fd 1 --verify authorized_keys.sig | grep -q "VALIDSIG DC4323D1738F27358793D6E87BB52F7036FA7C18" || exit 1 - gpg --decrypt authorized_keys.sig + echo "+ Cloned keys" + + echo "DC4323D1738F27358793D6E87BB52F7036FA7C18:6:" | gpg --quiet --import-ownertrust && gpg --update-trustdb --quiet + echo "+ Trusting key" - sed '/emprespresso/d' ~/.ssh/authorized_keys + gpg --status-fd 1 --verify authorized_keys.sig 2>/dev/null | grep -q VALIDSIG | grep -q "DC4323D1738F27358793D6E87BB52F7036FA7C18" + echo "+ Validated" + gpg --output authorized_keys --decrypt authorized_keys.sig 2>/dev/null + echo "+ Decrypted" + + sed -i '/emprespresso/d' ~/.ssh/authorized_keys + grep -qv "emprespresso" ~/.ssh/authorized_keys # assert + echo "+ Removed emprespresso keys" cat authorized_keys >> ~/.ssh/authorized_keys + echo "+ Appended emprespresso keys" + cd /tmp rm -rf keys + echo "+ Done" } function handle_error() { |
