revert: remove 1password (#95)
This commit is contained in:
parent
b85046047f
commit
44bfa32e8f
3 changed files with 0 additions and 81 deletions
|
|
@ -48,16 +48,3 @@ COPY --from=cgr.dev/chainguard/cosign:latest /usr/bin/cosign /usr/bin/cosign
|
|||
RUN curl -Lo ./kind "https://kind.sigs.k8s.io/dl/v0.17.0/kind-$(uname)-amd64"
|
||||
RUN chmod +x ./kind
|
||||
RUN mv ./kind /usr/bin/kind
|
||||
|
||||
# Install 1Password via Tarball
|
||||
RUN curl -sSO https://downloads.1password.com/linux/tar/stable/x86_64/1password-latest.tar.gz && \
|
||||
tar -xf 1password-latest.tar.gz && \
|
||||
rm 1password-latest.tar.gz && \
|
||||
mkdir -p /usr/1Password && \
|
||||
mv 1password-*/* /usr/1Password && \
|
||||
cp -r /usr/1Password/resources/icons/* /usr/share/icons && \
|
||||
sh /usr/libexec/1password-after-install.sh \
|
||||
&& \
|
||||
rm -rf /var/* /tmp/* && \
|
||||
ostree container commit
|
||||
|
||||
|
|
|
|||
|
|
@ -1,58 +0,0 @@
|
|||
#!/bin/sh
|
||||
set -eu
|
||||
|
||||
installFiles() {
|
||||
CWD=$(pwd)
|
||||
cd /usr/1Password/
|
||||
|
||||
# Fill in policy kit file with a list of (the first 10) human users of the system.
|
||||
export POLICY_OWNERS
|
||||
POLICY_OWNERS="$(cut -d: -f1,3 /etc/passwd | grep -E ':[0-9]{4}$' | cut -d: -f1 | head -n 10 | sed 's/^/unix-user:/' | tr '\n' ' ')"
|
||||
eval "cat <<EOF
|
||||
$(cat ./com.1password.1Password.policy.tpl)
|
||||
EOF" > ./com.1password.1Password.policy
|
||||
|
||||
# Install policy kit file for system unlock
|
||||
install -Dm0644 ./com.1password.1Password.policy -t /usr/share/polkit-1/actions/
|
||||
|
||||
# Install examples
|
||||
install -Dm0644 ./resources/custom_allowed_browsers -t /usr/share/doc/1password/examples/
|
||||
|
||||
# chrome-sandbox requires the setuid bit to be specifically set.
|
||||
# See https://github.com/electron/electron/issues/17972
|
||||
chmod 4755 ./chrome-sandbox
|
||||
|
||||
GROUP_NAME="onepassword"
|
||||
|
||||
# Setup the Core App Integration helper binary with the correct permissions and group
|
||||
if [ ! "$(getent group "${GROUP_NAME}")" ]; then
|
||||
groupadd "${GROUP_NAME}"
|
||||
fi
|
||||
|
||||
HELPER_PATH="./1Password-KeyringHelper"
|
||||
BROWSER_SUPPORT_PATH="./1Password-BrowserSupport"
|
||||
|
||||
chgrp "${GROUP_NAME}" $HELPER_PATH
|
||||
# The binary requires setuid so it may interact with the Kernel keyring facilities
|
||||
chmod u+s $HELPER_PATH
|
||||
chmod g+s $HELPER_PATH
|
||||
|
||||
# This gives no extra permissions to the binary. It only hardens it against environmental tampering.
|
||||
chgrp "${GROUP_NAME}" $BROWSER_SUPPORT_PATH
|
||||
chmod g+s $BROWSER_SUPPORT_PATH
|
||||
|
||||
# Restore previous directory
|
||||
cd "$CWD"
|
||||
|
||||
# Register path symlink
|
||||
ln -sf /usr/1Password/1password /usr/bin/1password
|
||||
}
|
||||
|
||||
if [ "$(id -u)" -ne 0 ]; then
|
||||
echo "You must be running as root to run 1Password's post-installation process"
|
||||
exit
|
||||
fi
|
||||
|
||||
installFiles
|
||||
|
||||
exit 0
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
[Desktop Entry]
|
||||
Name=1Password
|
||||
Exec=/usr/1Password/1password %U
|
||||
Terminal=false
|
||||
Type=Application
|
||||
Icon=1password
|
||||
StartupWMClass=1Password
|
||||
Comment=Password manager and secure wallet
|
||||
MimeType=x-scheme-handler/onepassword;
|
||||
Categories=Office;
|
||||
Loading…
Reference in a new issue