#!/bin/sh -eu
# SYNTAX: $user
tool=$(readlink -e "${0%/*}/..")
. "$tool"/local/lib.sh

user=$1; shift
"$tool"/local/user-configure
"$tool"/local/adduser "$user" --disabled-password
eval home="~$user"
sudo adduser "$user" sudo
sudo install -m 640 -o root -g root \
 "$tool"/var/pub/ssh/"$user".key \
 "$home"/etc/ssh/authorized_keys
"$tool"/local/gpg-local --export |
sudo -u "$user" gpg --import -
"$tool"/local/initramfs-configure
"$tool"/local/user-root-configure