31 lines
1.1 KiB
Bash
31 lines
1.1 KiB
Bash
#!/bin/sh
|
|
|
|
set -eu
|
|
|
|
unpriv(){
|
|
sudo -u nobody "${@}"
|
|
}
|
|
|
|
download() {
|
|
unpriv curl -s --proxy http://127.0.0.1:8082 "${1}" | sudo tee "${2}" > /dev/null
|
|
}
|
|
|
|
umask 022
|
|
|
|
sudo mkdir -p /etc/qubes-bind-dirs.d
|
|
echo 'binds+=( '\'''/etc/loki''\'' )' | sudo tee /etc/qubes-bind-dirs.d/50_user.conf
|
|
|
|
# Add repositories
|
|
download https://deb.oxen.io/pub.gpg /usr/share/keyrings/oxen.gpg
|
|
echo "deb [signed-by=/usr/share/keyrings/oxen.gpg] https://deb.oxen.io $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/oxen.list
|
|
|
|
download https://repository.mullvad.net/deb/mullvad-keyring.asc /usr/share/keyrings/mullvad-keyring.asc
|
|
echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://repository.mullvad.net/deb/stable $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list
|
|
|
|
# Install packages
|
|
sudo apt update
|
|
sudo apt install -y lokinet mullvad-browser resolvconf
|
|
|
|
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/lokinet-dns-fix.service /etc/systemd/system/lokinet-dns-fix.service
|
|
sudo systemctl enable --now lokinet-dns-fix
|