finn/omarchy
1
0
Fork 0
mirror of https://github.com/basecamp/omarchy.git synced 2025-07-27 12:19:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Better setup flow and add --remove option

Browse Source
This commit is contained in:
David Heinemeier Hansson
2025-07-17 14:51:59 -07:00
parent 729cd6a3a2
commit 68e77daffa
1 changed files with 25 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
bin/omarchy-fido2-setup
View File

@ -1,34 +1,32 @@
#!/bin/bash #!/bin/bash
yay -S --noconfirm --needed libfido2 pam-u2f if [[ "--remove" == "$1" ]]; then
sudo rm -rf /etc/fido2
# Check if the user doesn't want sudo sudo sed -i '\|^auth[[:space:]]\+sufficient[[:space:]]\+pam_u2f\.so[[:space:]]\+cue[[:space:]]\+authfile=/etc/fido2/fido2$|d' /etc/pam.d/sudo
while [[ $# -gt 0 ]]; do echo -e "\e[32mYou've successfully removed the fido2 device setup.\e[0m"
case $1 in
--no-sudo) exit 0 ;;
*)
echo "Unknown option: $1 \n --no-sudo is the only option"
exit 1
;;
esac
shift
done
tokens=$(fido2-token -L)
if [ -z "$tokens" ]; then
echo -e "\e[31m\nNo fido2 device detected. Plug it in, you may have to unlock it as well\e[0m"
else else
yay -S --noconfirm --needed libfido2 pam-u2f
# Create the pamu2fcfg file tokens=$(fido2-token -L)
if [ ! -f /etc/fido2/fido2 ]; then
sudo mkdir -p /etc/fido2
echo -e "\e[32m\nLet's setup your device, confirm on the device now\n\e[0m"
pamu2fcfg >/tmp/fido2 # This needs to run as the user
sudo mv /tmp/fido2 /etc/fido2/fido2
fi
# Add fido2 auth as an option for sudo if [ -z "$tokens" ]; then
if ! grep -q pam_u2f.so /etc/pam.d/sudo; then echo -e "\e[31m\nNo fido2 device detected. Plug it in, you may have to unlock it as well\e[0m"
sudo sed -i '1i auth sufficient pam_u2f.so cue authfile=/etc/fido2/fido2' /etc/pam.d/sudo else
# Create the pamu2fcfg file
if [ ! -f /etc/fido2/fido2 ]; then
sudo mkdir -p /etc/fido2
echo -e "\e[32m\nLet's setup your device by confirming on the device now.\e[0m"
pamu2fcfg >/tmp/fido2 # This needs to run as the user
sudo mv /tmp/fido2 /etc/fido2/fido2
fi
# Add fido2 auth as an option for sudo
if ! grep -q pam_u2f.so /etc/pam.d/sudo; then
sudo sed -i '1i auth sufficient pam_u2f.so cue authfile=/etc/fido2/fido2' /etc/pam.d/sudo
fi
if ! sudo echo -e "\e[32m\nPerfect! Now you can use your fido2 device for sudo.\e[0m"; then
echo -e "\e[31m\nSomething went wrong. Maybe try again?\e[0m"
fi
fi fi
fi fi