tool=$(readlink -e "${0%/*}/..")
. "$tool"/local/lib.sh
+user=$1; shift
"$tool"/local/user-configure
-user=$1
"$tool"/local/adduser "$user" --disabled-password
eval home="~$user"
sudo adduser "$user" sudo
sudo install -m 640 -o root -g root \
"$tool"/var/pub/ssh/"$user".key \
"$home"/etc/ssh/authorized_keys
-gpg \
- --homedir "$tool"/var/pub/openpgp/ \
- --no-default-keyring \
- --secret-keyring /dev/null \
- --export |
+"$tool"/local/gpg-local --export |
sudo -u "$user" gpg --import -
"$tool"/local/initramfs-configure
"$tool"/local/user-root-configure