startup.sh 2.07 KB
Newer Older
1 2
#! /usr/bin/env bash

3
# Copyright 2018 Artem B. Smirnov
Artem Smirnov's avatar
Artem Smirnov committed
4
# Copyright 2018 Jon Azpiazu
5 6 7
# Copyright 2016 Bryan J. Hong
# Licensed under the Apache License, Version 2.0

Jon Azpiazu's avatar
Jon Azpiazu committed
8 9 10 11
if [[ ! -f /root/.gnupg/gpg.conf ]]; then
  /opt/gpg.conf.sh
fi

Bryan's avatar
Bryan committed
12 13
# If the repository GPG keypair doesn't exist, create it.
if [[ ! -f /opt/aptly/aptly.sec ]] || [[ ! -f /opt/aptly/aptly.pub ]]; then
14 15
  echo "Generating new gpg keys"
  cp -a /dev/urandom /dev/random
Bryan's avatar
Bryan committed
16
  /opt/gpg_batch.sh
17 18
  # If your system doesn't have a lot of entropy this may, take a long time
  # Google how-to create "artificial" entropy if this gets stuck
Bryan's avatar
Bryan committed
19
  gpg --batch --gen-key /opt/gpg_batch
Jon Azpiazu's avatar
Jon Azpiazu committed
20 21
else
  echo "No need to generate new gpg keys"
Bryan's avatar
Bryan committed
22 23
fi

24 25
# Export the GPG Public key
if [[ ! -f /opt/aptly/public/aptly_repo_signing.key ]]; then
Bryan's avatar
Bryan committed
26
  mkdir -p /opt/aptly/public
27 28 29
  gpg --export --armor > /opt/aptly/public/aptly_repo_signing.key
fi

30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50
# Import Ubuntu keyrings if they exist
if [[ -f /usr/share/keyrings/ubuntu-archive-keyring.gpg ]]; then
  gpg --list-keys
  gpg --no-default-keyring                                     \
      --keyring /usr/share/keyrings/ubuntu-archive-keyring.gpg \
      --export |                                               \
  gpg --no-default-keyring                                     \
      --keyring trustedkeys.gpg                                \
      --import
fi

# Import Debian keyrings if they exist
if [[ -f /usr/share/keyrings/debian-archive-keyring.gpg ]]; then
  gpg --list-keys
  gpg --no-default-keyring                                     \
      --keyring /usr/share/keyrings/debian-archive-keyring.gpg \
      --export |                                               \
  gpg --no-default-keyring                                     \
      --keyring trustedkeys.gpg                                \
      --import
fi
Bryan's avatar
Bryan committed
51 52

# Aptly looks in /root/.gnupg for default keyrings
53 54
ln -sf /opt/aptly/aptly.sec /root/.gnupg/secring.gpg
ln -sf /opt/aptly/aptly.pub /root/.gnupg/pubring.gpg
Bryan's avatar
Bryan committed
55 56 57 58

# Generate Nginx Config
/opt/nginx.conf.sh

Syam G K's avatar
Syam G K committed
59 60 61
#Start sshd service
service ssh start

Bryan's avatar
Bryan committed
62 63
# Start Supervisor
/usr/bin/supervisord -n -c /etc/supervisor/supervisord.conf