summaryrefslogtreecommitdiffstatshomepage
path: root/scripts/canonical-system.sh
diff options
context:
space:
mode:
authorsommerfeld <sommerfeld@sommerfeld.dev>2026-09-17 15:05:36 +0100
committersommerfeld <sommerfeld@sommerfeld.dev>2026-09-17 15:05:36 +0100
commitaff435a0fb3a56b1d7b738c7dede363440884b3a (patch)
tree07acb41d37760aa169ee42dbeb69da3621cc7489 /scripts/canonical-system.sh
parenta7f74c1fa4b89c5829f5896842eb7248c820704c (diff)
downloaddotfiles-aff435a0fb3a56b1d7b738c7dede363440884b3a.tar.gz
dotfiles-aff435a0fb3a56b1d7b738c7dede363440884b3a.tar.bz2
dotfiles-aff435a0fb3a56b1d7b738c7dede363440884b3a.zip
Add the Canonical laptop profile and setup workflows
Diffstat (limited to 'scripts/canonical-system.sh')
-rw-r--r--scripts/canonical-system.sh18
1 files changed, 18 insertions, 0 deletions
diff --git a/scripts/canonical-system.sh b/scripts/canonical-system.sh
new file mode 100644
index 0000000..e6f0825
--- /dev/null
+++ b/scripts/canonical-system.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")/.."
+source just-lib.sh
+[[ $(_machine_role) == canonical ]]
+[[ $(
+ # shellcheck disable=SC1091
+ . /etc/os-release
+ echo "$ID"
+) == ubuntu ]]
+# Parse before replacing the installed profile.
+sudo apparmor_parser --skip-kernel-load --skip-cache canonical/apparmor/dotfiles-nix
+sudo install -m 644 canonical/apparmor/dotfiles-nix /etc/apparmor.d/dotfiles-nix
+sudo apparmor_parser --replace /etc/apparmor.d/dotfiles-nix
+sudo snap connect thunderbird:gpg-keys
+systemctl --user daemon-reload
+systemctl --user enable --now gpg-agent.socket gpg-agent-ssh.socket podman.socket
+echo 'Existing GPG agent processes keep their executable until the next login.'