From fb8c6d3bc28bcb6a0704c83d42c883719ef0220a Mon Sep 17 00:00:00 2001 From: Konano Date: Tue, 5 Dec 2023 01:19:10 +0800 Subject: [PATCH] add gpg & sources.list.d (yarn, mongodb, nginx) --- files/sources.list.d/nginx.list | 5 ----- init_priv.sh | 23 +++++++++++++++++++++++ 2 files changed, 23 insertions(+), 5 deletions(-) delete mode 100644 files/sources.list.d/nginx.list diff --git a/files/sources.list.d/nginx.list b/files/sources.list.d/nginx.list deleted file mode 100644 index 59d1fda..0000000 --- a/files/sources.list.d/nginx.list +++ /dev/null @@ -1,5 +0,0 @@ -deb https://nginx.org/packages/ubuntu/ focal nginx -deb-src https://nginx.org/packages/ubuntu/ focal nginx - -# sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys ABF5BD827BD9BF62 -# sudo apt-key export ABF5BD827BD9BF62 | sudo gpg --dearmour -o /etc/apt/trusted.gpg.d/nginx.gpg \ No newline at end of file diff --git a/init_priv.sh b/init_priv.sh index b08fee3..b6a338a 100755 --- a/init_priv.sh +++ b/init_priv.sh @@ -164,6 +164,29 @@ configure_docker() { fi } +configure_yarn() { + echo "Incomplete"; return + + curl -fsSL https://dl.yarnpkg.com/debian/pubkey.gpg | sudo gpg --dearmor -o /usr/share/keyrings/yarn.gpg + echo "deb [signed-by=/usr/share/keyrings/yarn.gpg] https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list > /dev/null +} + +configure_mongodb() { + echo "Incomplete"; return + + version=7.0 + curl -fsSL https://pgp.mongodb.com/server-$version.asc | sudo gpg --dearmor -o /usr/share/keyrings/mongodb-server-$version.gpg + echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/mongodb-server-$version.gpg] https://repo.mongodb.org/apt/ubuntu $(lsb_release -cs)/mongodb-org/$version multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-$version.list > /dev/null +} + +configure_nginx() { + echo "Incomplete"; return + + curl -fsSL https://nginx.org/keys/nginx_signing.key | sudo gpg --dearmor -o /usr/share/keyrings/nginx.gpg + echo "deb [signed-by=/usr/share/keyrings/nginx.gpg] https://nginx.org/packages/ubuntu/ $(lsb_release -cs) nginx" | sudo tee /etc/apt/sources.list.d/nginx.list > /dev/null + echo "deb-src [signed-by=/usr/share/keyrings/nginx.gpg] https://nginx.org/packages/ubuntu/ $(lsb_release -cs) nginx" | sudo tee -a /etc/apt/sources.list.d/nginx.list > /dev/null +} + configure_fail2ban() { [ -f /etc/fail2ban/jail.local ] && return