#!/bin/bash -e
printf 'MINI_BUILDD: %s: %s\n' apt-setup 'Sets up APT for buildrequest (APT keys, optional https, sources and preferences)';
MBD_SCRIPT="$(realpath "${0}")"  # Note: Older versions of realpath (<=wheezy) did not support options, just avoid them
MBD_BASE="${MBD_SCRIPT%/*/*}"

mkdir -p -v "/etc/apt/trusted.gpg.d"
cp -v "${MBD_BASE}/.config/apt_keys" "/etc/apt/trusted.gpg.d/mini-buildd-buildrequest.asc"

if grep 'https://' "${MBD_BASE}/.config/apt_sources.list"; then
  apt-get --quiet --yes --option=APT::Install-Recommends=false --option=Acquire::Languages=none --option=Dpkg::Use-Pty=false --option=Dpkg::Options::=--force-confdef --option=Dpkg::Options::=--force-confnew install ca-certificates apt-transport-https
  if [ -s "${MBD_BASE}/.config/ssl_cert" ]; then
    cp -v "${MBD_BASE}/.config/ssl_cert" /usr/local/share/ca-certificates/mini-buildd-repo.crt
    /usr/sbin/update-ca-certificates
  fi
fi

cp -v "${MBD_BASE}/.config/apt_sources.list" /etc/apt/sources.list
cat /etc/apt/sources.list

cp -v "${MBD_BASE}/.config/apt_preferences" /etc/apt/preferences
cat /etc/apt/preferences