felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(scripts): improve create-gpg-key

Browse source
This commit is contained in:
Felix Schröter 2025-05-18 20:23:46 +02:00
parent 3e711ad998
commit 67fa717ca2
Signed by: felschr
GPG key ID: 671E39E6744C807D
1 changed files with 30 additions and 12 deletions

42
scripts/create-gpg-key
View file

@ -1,21 +1,39 @@
#! /usr/bin/env nix-shell #! /usr/bin/env bash
#! nix-shell -i bash -p bash gnupg
# shellcheck shell=bash # shellcheck shell=bash
set -euo pipefail set -euo pipefail
EMAIL=$0 read -rp 'enter email address: ' email
# create master key echo "$email"
gpg2 --quick-gen-key "Felix Schröter <$EMAIL>" ed25519 sign 1y
# create main key
gpg2 --quick-gen-key "Felix Schröter <$email>" ed25519 sign 1y || true
keyid=$(gpg2 --list-keys --with-colons "$email" | grep "^pub:" | cut -d: -f5)
fpr=$(gpg2 --list-keys --with-colons "$email" | grep "^fpr:" | cut -d: -f10)
# create subkeys # create subkeys
gpg2 --quick-add-key KEYID cv25519 encr 1y gpg2 --quick-add-key "$fpr" cv25519 encr 1y
gpg2 --quick-add-key KEYID ed25519 auth 1y gpg2 --quick-add-key "$fpr" ed25519 auth 1y
gpg2 --quick-add-key KEYID ed25519 sign 1y gpg2 --quick-add-key "$fpr" ed25519 sign 1y
# for signing git commits use the sign subkey echo "created keys:"
# and add the public sign subkey to GitHub/GitLab gpg2 --list-keys --with-subkey-fingerprint "$keyid"
# show info sign=$(gpg2 --list-keys --with-colons "$email" | grep "::s::" -A 1)
gpg2 --list-keys --with-subkey-fingerprint sign_keyid=$(echo "$sign" | grep "^sub:" | cut -d: -f5)
auth=$(gpg2 --list-keys --with-colons "$email" | grep "::a::" -A 1)
auth_keyid=$(echo "$auth" | grep "^sub:" | cut -d: -f5)
pub_sign=$(gpg2 --armor --export "$sign_keyid!")
pub_ssh=$(gpg2 --export-ssh-key "$auth_keyid")
echo "public PGP key with signing subkey:"
echo "$pub_sign"
echo ""
echo "public SSH key for authenticating with git forges:"
echo "$pub_ssh"
echo ""