arch-repo-builder/build.sh

37 lines
1 KiB
Bash
Raw Normal View History

#!/bin/bash
set -euxo pipefail
required_packages=(
base-devel
curl
git
)
luzifer_pkg_key="6F73A4F39CDF652E3F944142085AA223D0391BF9"
keyserver="hkp://keyserver.ubuntu.com"
# Update system to latest state and install required packages
pacman -Sy
pacman -S --noconfirm --needed "${required_packages[@]}"
# Add new build user and allow it to `sudo`
useradd -m -u 1000 builder
echo "builder ALL=(ALL) NOPASSWD: ALL" >/etc/sudoers.d/builder
# Configure keyserver for builder user
mkdir ~builder/.gnupg
echo "keyserver ${keyserver}" >~builder/.gnupg/gpg.conf
chown -R builder ~builder/.gnupg
# Install
pacman-key --init
pacman-key --keyserver "${keyserver}" -r "${luzifer_pkg_key}"
pacman-key --lsign-key "${luzifer_pkg_key}"
# Install dumb-init and gosu
curl -sSfLo /usr/local/bin/dumb-init "https://github.com/Yelp/dumb-init/releases/download/v1.2.1/dumb-init_1.2.1_amd64"
curl -sSfLo /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/1.11/gosu-amd64"
chmod 0755 \
/usr/local/bin/dumb-init \
/usr/local/bin/gosu