#!/bin/sh -eu
# SYNTAX: $user
tool=$(readlink -e "${0%/*}/..")
. "$tool"/local/lib.sh

"$tool"/local/user-configure
user=$1
"$tool"/local/adduser "$user" --disabled-password
eval home="~$user"
sudo adduser "$user" sudo
sudo install -m 640 -o root -g root \
 "$tool"/var/pub/ssh/"$user".key \
 "$home"/etc/ssh/authorized_keys
gpg \
 --homedir "$tool"/var/pub/openpgp/ \
 --no-default-keyring \
 --secret-keyring /dev/null \
 --export |
sudo -u "$user" gpg --import -
"$tool"/local/initramfs-configure
"$tool"/local/user-root-configure