--- /dev/null
+#!/bin/sh -eu
+# SYNTAX: $user
+tool=$(readlink -e "${0%/*}/..")
+. "$tool"/local/lib.sh
+
+sudo install -d -m 750 -o root -g root \
+ /root/etc \
+ /root/etc/gpg \
+ /root/etc/ssh
+sudo ln -fns etc/gpg /root/.gnupg
+sudo ln -fns etc/ssh /root/.ssh
+getent group sudo |
+while IFS=: read -r group x x users
+ do while test -n "$users" && IFS=, read -r user users <<-EOF
+ $users
+ EOF
+ do eval home="~$user"
+ sudo cat "$home"/etc/ssh/authorized_keys
+ done
+ done |
+sudo install -m 640 -o root -g root /dev/stdin \
+ /root/etc/ssh/authorized_keys
+gpg \
+ --homedir "$tool"/var/pub/openpgp/ \
+ --no-default-keyring \
+ --secret-keyring /dev/null \
+ --export |
+sudo gpg --import -