fix ssh issue, various minor improvements

[distro-setup] / filesystem / etc / profile.d / environment.sh

#!/bin/sh
if [ -f $HOME/path-add-function ]; then
  . $HOME/path-add-function
  path-add /usr/sbin /usr/local/sbin /a/exe /a/opt/bin
  # if usr merge, dont need it
  if [[ ! -L /sbin ]]; then
    path-add /sbin
  fi
  path-add --end $HOME/.cabal/bin
  path-add --end /snap/bin


  # ~/.local is newer, eg ruby 3.0+
  for p in $HOME/.gem/ruby/*/bin $HOME/.local/share/gem/ruby/*/bin; do
    path-add --ifexists --end $p
  done

  if [ -r /etc/alternatives/java_sdk ]; then
    export JAVA_HOME=/etc/alternatives/java_sdk
    path-add /etc/alternatives/java_sdk
  fi

  export GUIX_PROFILE=/root/.config/guix/current
  if [ -f $GUIX_PROFILE/etc/profile ]; then
    . $GUIX_PROFILE/etc/profile
  fi
  path-add $HOME/.guix-profile/bin
  export GUIX_LOCPATH=$HOME/.guix-profile/lib/locale

fi


export EDITOR="emacsclient"
# this makes emacsclient file/-c start a server instance if none is running,
# instead of some alternate editor logic
export ALTERNATE_EDITOR=""

export PITHOSFLY_SAVE_DIR=/a/pandora_rips4

# makes subsequent syscalls to localtime use cached timezone,
# so basically restart the comp if you change time zones,
# and avoid a few syscalls, which makes a tiny tiny perf difference.
# I also set this in
# /a/c/filesystem/etc/systemd/system.conf.d/tz.conf
# https://blog.packagecloud.io/eng/2017/02/21/set-environment-variable-save-thousands-of-system-calls/
export TZ=:/etc/localtime

# ubuntu starts gpg agent automatically with  /etc/X11/Xsession.d/90gpg-agent.
# fedora doesn't, which left me to figure this out, and google was no help.
# fedora documentation is often quite bad :(
# This is mostly copied from that file.
# Main difference is that we eval the result of starting gpg-agent,
# while that file executes it through xsession specific var.
# Also make sourcing the pidfile make more sense.
# End result should be the same afaik.
# for gpg-agent to work when calling gpg from the command line,
# we need an environment variable that is setup via the eval.
# which is why we do this upon login, so it can propogate
# It is also written to the file $HOME/.gnupg/gpg-agent-info-$(hostname)
# I'm not aware if that is ever used, but just fyi.
# I also added the bit about xmessaging the stderr,
# because I'd like to know if the command fails
if [ -f /etc/fedora-release ]; then
  : ${GNUPGHOME=$HOME/.gnupg}

  GPGAGENT=/usr/bin/gpg-agent
  PID_FILE="$GNUPGHOME/gpg-agent-info-$(hostname)"

  if ! $GPGAGENT 2>/dev/null; then
    temp="$(mktemp)"
    eval "$($GPGAGENT --homedir /p/do-not-delete --daemon --sh --write-env-file=$PID_FILE 2>$temp)"
    temperr="$(cat "$temp")"
    [ -n "$temperr" ] && xmessage "gpg-agent stderr: $temperr"
  elif [ -r "$PID_FILE" ]; then
    . "$PID_FILE"
    export GPG_AGENT_INFO
  fi
fi

# 2020: and broken again. see /usr/lib/systemd/user-environment-generators/90gpg-agent.
# 2022: not sure exactly what this fixed, but gpg seems to work now without it.
#export GPG_AGENT_INFO=$XDG_RUNTIME_DIR/gnupg/S.gpg-agent:0:1

# and now trisquel9 + mate + i3 has broken ssh agent. I've had to fix
# ssh or gpg agent like 10 times in different distros, and once again, i
# randomly figured out this hack because there is no documentation.  ssh
# agent is started by a systemd service, which runs a wrapper script,
# which adds env vars with some dbus thing.  This is too much of a pita
# to make work in ash/posix. I could just export the agent relevant
# vars, but it seems like its better to just get whatever is missing,
# but not override existing things because theres stuff like PWD. This
# doesn't set SSH_AGENT_PID, but apparently its not needed anymore.
# Note: what a huge pita to write this in posix shell.
# update: disabled this hackery since I'm not using it in t11
# if test "$EUID" && [ "$EUID" != 0 ]; then
#   _sysenv=$(mktemp)
#   _sysenvnames=$(mktemp)
#   _unsetnames=$(mktemp)
#   if systemctl --user show-environment >$_sysenv 2>/dev/null; then
#     grep -o '^[^=]*' $_sysenv | sort > $_sysenvnames
#     env -0 | grep -zo '^[^=]*' | xargs -0 printf "%s\n" | sort | \
  #       comm --nocheck-order -13 - $_sysenvnames >$_unsetnames
#     while read -r unsetname; do
#       while read -r sysenv; do
#         case "$sysenv" in
#           "$unsetname"*) eval export "$sysenv" ;;
#         esac
#       done < $_sysenv
#     done < $_unsetnames
#     rm -f $_tmpf
#   fi
# fi


# i use the x11 prompt for ssh key use which doesnt work
# within an ssh session (perhaps there is some way).
# Anyways, there is usually no need for an agent to
# do a 1-off ssh from a remote machine.
if ! test "$SSH_CLIENT"; then
  # and it seems that if we log into mate, it screws up the systemd env var anyways.
  for _file in $(pgrep -a '^ssh-agent$' | sed -r 's/.*-a *([^ ]+).*/\1/'); do
    if test -O "$_file"; then
      export SSH_AUTH_SOCK="$_file"
      break
    fi
  done

  # in t11, user ssh-agent once again stopped working, it isn't started anymore
  # by i3. So, enough is enough, I just made a service that will try to
  # start it all the time for the user. If the var isn't set by the above,
  # just set them to the values I know are in the service.
  if ! test "$SSH_AUTH_SOCK"; then
    if [ "$EUID" = 0 ]; then
      export SSH_AUTH_SOCK=/run/openssh_agent
    elif [ "$EUID" = 1000 ]; then
      export SSH_AUTH_SOCK=$HOME/openssh_agent
    fi
  fi
fi

# background:
# ubuntu has 002 for non-system users, debian has 022.  002 makes groups
# be rw instead of r.
#
# I think the actual setting is somewhere in the pam settings, I haven't
# bothered to figure that out.
#
# ubuntu is more user friendly when using multiple users. However,
# it also makes it so if you create a file as a regular user then move
# it to become a system file, it's got slightly wrong permissions, and
# sometimes thing break. Also, copying files between ubuntu and debian
# makes things inconsistent. So stick with 022 umask always.
#
# One security concern is where some unixes put every user in a same
# group, so if you copy files there with exact perms, that is probably
# not what you want. I don't use a system like that, so I don't
# care.
umask 022
# this is how we could test for non-system user

#if test "$(id -u)" -ge 1000; then : fi