#!/bin/sh
set -e

# remove stuff that we do not need
dnf remove -y mdadm mlocate nano rsyslog sssd telnet trousers rxvt-unicode abrt plymouth linux-atm-libs quota realmd selinux-policy || true

# install stuff that we do want
dnf install -y iwl6000g2a-firmware NetworkManager-wifi \
    sudo ecryptfs-utils vim-enhanced iwl6000g2a-firmware \
    xorg-x11-server-Xorg xorg-x11-drv-libinput xorg-x11-drv-intel \
    dejavu-sans-fonts dejavu-serif-fonts dejavu-sans-mono-fonts \
    xorg-x11-server-utils xorg-x11-utils xbacklight \
    i3 i3lock lxdm wmctrl dunst pcmanfm gvfs-mtp \
    pavucontrol pulseaudio-utils alsa-plugins-pulseaudio \
    gstreamer1-plugin-mpg123 gstreamer1-plugins-good \
    qemu-kvm qemu-img openvpn mutt weechat pidgin-otr \
    simple-scan sane-backends sane-backends-drivers-scanners \
    pandoc texlive-beamer texlive-latex-bin texlive-collection-fontsrecommended \
    texlive-hyphen-german texlive-hyphen-english texlive-fancyhdr texlive-dinbrief \
    texlive-german \
    gnome-terminal firefox network-manager-applet evince shotwell rhythmbox \
    offlineimap gnome-keyring pinentry-gnome3 \
    postfix duplicity systemd-container gnome-disk-utility powertop \
    git gtimelog libappindicator-gtk3 \
    schroot mock \

# codecs
dnf install -y http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm
dnf install -y gstreamer1-{libav,plugins-{ugly,bad-free}} --setopt=strict=0

# restore /etc git branch
if [ ! -d /etc/.git ]; then
    [ -e /backup-etc ] || git clone git+ssh://martin@piware.de/home/martin/backup/`hostname`-etc-fedora/ /backup-etc
    cp -av /backup-etc/* /etc/
    cp -av /backup-etc/.git/ /etc/
    rm -rf /backup-etc
fi


# other setup
grep -q lib/mock /etc/fstab || cat << EOF >> /etc/fstab

tmpfs /var/tmp tmpfs defaults 0 0
tmpfs /var/lib/mock tmpfs defaults 0 0
#/proc /ubuntu/proc none bind 0 0
#/sys /ubuntu/sys none bind 0 0
#/dev /ubuntu/dev none rbind 0 0
#/home /ubuntu/home none rbind 0 0
#/srv /ubuntu/srv none bind 0 0
#/tmp /ubuntu/tmp none bind 0 0
EOF

# have schroot use tmpfs
if [ ! -L /var/lib/schroot/unpack ]; then
    rmdir /var/lib/schroot/unpack
    ln -s /tmp /var/lib/schroot/unpack
fi

# root's ssh stuff
if [ ! -d /root/.ssh ] && [ -d /home/martin/.ssh ]; then
    mkdir -p /root/.ssh
    chmod 700 /root/.ssh
    cp /home/martin/.ssh/id_rsa* /home/martin/.ssh/known_hosts /home/martin/.ssh/config /root/.ssh/
fi

# disable SELinux to unbreak ecryptfs
sed -i '/^SELINUX=/ s/=.*$/=disabled/' /etc/selinux/config
setenforce 0 || true

rm -f /etc/systemd/system/default.target
systemctl set-default graphical.target

systemctl enable --now postfix

# Red Hat VPN certs and connections
rpm -i ~martin/Dokumente/Arbeit/RedHat/redhat-internal*.rpm

# create user
groupadd --gid 1000 martin
useradd --comment "Martin Pitt" --uid 1000 --gid 1000 --groups wheel,ecryptfs,mock martin
passwd martin

# crontabs
crontab -u martin - <<EOF
# m h  dom mon dow   command
05 * * * * \$HOME/bin/backup >/dev/null
EOF