AT_EXIT+="${AT_EXIT:+$'\n'}"

AT_EXIT+="${*?}"

# shellcheck disable=SC2064

trap "${AT_EXIT}" EXIT

# Might as well ask for password up-front, right?

echo "Checking for \`sudo\` access which may request your password."

sudo -v

# Keep-alive: update existing sudo time stamp if set, otherwise do nothing.

while true; do

sudo -n true

sleep 60

kill -0 "$$" || exit

done 2>/dev/null &

# ref. https://github.com/reitermarkus/dotfiles/blob/master/.sh#L85-L116

(

builtin read -r -s -p "Password: " </dev/tty

builtin echo "add-generic-password -U -s 'dotfiles' -a '${USER}' -w '${REPLY}'"

) | /usr/bin/security -i

printf "\n"

at_exit "

echo -e '\033[0;31mRemoving password from Keychain …\033[0m'

/usr/bin/security delete-generic-password -s 'dotfiles' -a '${USER}'

"

SUDO_ASKPASS="$(/usr/bin/mktemp)"

at_exit "

echo -e '\033[0;31mDeleting SUDO_ASKPASS script …\033[0m'

/bin/rm -f '${SUDO_ASKPASS}'

"

{

echo "#!/bin/sh"

echo "/usr/bin/security find-generic-password -s 'dotfiles' -a '${USER}' -w"

} >"${SUDO_ASKPASS}"

/bin/chmod +x "${SUDO_ASKPASS}"

export SUDO_ASKPASS

if ! /usr/bin/sudo -A -kv 2>/dev/null; then

echo -e '\033[0;31mIncorrect password.\033[0m' 1>&2

exit 1

fi

local ostype

ostype="$(get_os_type)"

if [ "${ostype}" == "Darwin" ]; then

keepalive_sudo_macos

elif [ "${ostype}" == "Linux" ]; then

keepalive_sudo_linux

else

echo "Invalid OS type: ${ostype}" >&2

exit 1

fi

function is_homebrew_exists() {

command -v brew &>/dev/null

}

# Instal Homebrew if needed.

if ! is_homebrew_exists; then

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

fi

# Setup Homebrew envvars.

if [[ $(arch) == "arm64" ]]; then

eval "$(/opt/homebrew/bin/brew shellenv)"

elif [[ $(arch) == "i386" ]]; then

eval "$(/usr/local/bin/brew shellenv)"

else

echo "Invalid CPU arch: $(arch)" >&2

exit 1

fi

local ostype

ostype="$(get_os_type)"

if [ "${ostype}" == "Darwin" ]; then

initialize_os_macos

elif [ "${ostype}" == "Linux" ]; then

initialize_os_linux

else

echo "Invalid OS type: ${ostype}" >&2

exit 1

fi

# download the chezmoi binary from the URL

sh -c "$(curl -fsLS get.chezmoi.io)"

local chezmoi_cmd

chezmoi_cmd="./bin/chezmoi"

if is_ci_or_not_tty; then

no_tty_option="--no-tty" # /dev/tty is not available (especially in the CI)

else

no_tty_option="" # /dev/tty is available OR not in the CI

fi

# run `chezmoi init` to setup the source directory,

# generate the config file, and optionally update the destination directory

# to match the target state.

"${chezmoi_cmd}" init "${DOTFILES_REPO_URL}" \

--force \

--branch "${BRANCH_NAME}" \

--use-builtin-git true \

${no_tty_option}

# the `age` command requires a tty, but there is no tty in the github actions.

# Therefore, it is currnetly difficult to decrypt the files encrypted with `age` in this workflow.

# I decided to temporarily remove the encrypted target files from chezmoi's control.

if is_ci_or_not_tty; then

find "$(${chezmoi_cmd} source-path)" -type f -name "encrypted_*" -exec rm -fv {} +

fi

# Add to PATH for installing the necessary binary files under `$HOME/.local/bin`.

export PATH="${PATH}:${HOME}/.local/bin"

if [[ -n "${DOTFILES_GITHUB_PAT}" ]]; then

export DOTFILES_GITHUB_PAT

fi

# run `chezmoi apply` to ensure that target... are in the target state,

# updating them if necessary.

"${chezmoi_cmd}" apply ${no_tty_option}

# purge the binary of the chezmoi cmd

rm -fv "${chezmoi_cmd}"

if ! is_ci_or_not_tty; then

# - /dev/tty of the github workflow is not available.

# - We can use password-less sudo in the github workflow.

# Therefore, skip the sudo keep alive function.

keepalive_sudo

fi

run_chezmoi

local system

system=$(chezmoi data | jq -r '.system')

echo "${system}"

local system

system=$(get_system_from_chezmoi)

# exec shell as login shell (to reload the .zprofile or .profile)

if [ "${system}" == "client" ]; then

/bin/zsh --login

elif [ "${system}" == "server" ]; then

/bin/bash --login

else

echo "Invalid system: ${system}; expected \`client\` or \`server\`" >&2

exit 1

fi

# Restart shell if specified "bash -c $(curl -L {URL})"

# not restart:

# curl -L {URL} | bash

if [ -p /dev/stdin ]; then

echo "Now continue with Rebooting your shell"

else

echo "Restarting your shell..."

restart_shell_system

fi

echo "$DOTFILES_LOGO"

initialize_os_env

initialize_dotfiles

# restart_shell # Disabled because the at_exit function does not work properly.