#!/bin/bash
# Bootstrap Void Linux release GPG keys correctly

set -euo pipefail

GPGDIR="/etc/mirror-gpg"
KEYRING="${GPGDIR}/void.gpg"
mkdir -p "$GPGDIR"
TMPDIR=$(mktemp -d)

echo "[void] Fetching Void release GPG keys..."

# URLs from raw.githubusercontent.com from correct path
curl -sL -o "$TMPDIR/void-releases-20191127.asc" \
    https://raw.githubusercontent.com/void-linux/void-packages/master/common/repo-keyring/void-releases-20191127.pub

curl -sL -o "$TMPDIR/void-releases-20210826.asc" \
    https://raw.githubusercontent.com/void-linux/void-packages/master/common/repo-keyring/void-releases-20210826.pub

echo "[void] Downloaded files:" 
ls -l "$TMPDIR"

echo "[void] Checking file previews:"
for f in "$TMPDIR"/*.asc; do
  head -n5 "$f"
  echo "--------"
done

echo "[void] Importing into keyring..."
gpg --no-default-keyring --keyring "$KEYRING" --import "$TMPDIR"/*.asc || {
  echo "[void] GPG import failed!"
  exit 1
}

rm -rf "$TMPDIR"
echo "[void] Imported Void release keys into $KEYRING"
echo "[void] Final keyring:"
gpg --no-default-keyring --keyring "$KEYRING" --list-keys

exit 0