Update bootstrap SHA

.github/workflows/lint.yaml

@@ -38,3 +38,12 @@ jobs:
         run: GO111MODULE=on go install mvdan.cc/sh/v3/cmd/shfmt@latest
       - name: Check formatting
         run: shfmt -f . | grep -v meta/dotbot | xargs shfmt -s -d
+  correct-sha256:
+    name: SHA256 in README is correct
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run Update SHA script
+        run: bin/update-bootstrap-sha
+      - name: Check that there is no diff
+        run: git diff --exit-code

README.md

@@ -36,8 +36,24 @@ $ cd ~/repos/dotfiles
 ./install-profile mac
 ```
 
-## Testing
+## Developing and Testing
 
+If you update the `bootstrap/bootstrap.sh` file, you must also run
+
+```bash
+bin/update-bootstrap-sha
+```
+
+To run all lints and tests:
 ```bash
-$ ./test.sh
+bin/test
 ```
+
+
+TODOS:
+* How to diff brewfiles
+* ssh config?
+* Get resident keys?
+  * `ssh-keygen -K`
+* Describe way of identifying untracked brew packages
+  * `brew bundle --verbose cleanup --file=homebrew/Brewfile.personal`

bin/update-bootstrap-sha

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+SCRIPT_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &> /dev/null && pwd)
+BOOTSTRAP_SHA=$(sha256sum "${SCRIPT_DIR}/../bootstrap/bootstrap.sh" | awk '{ print $1 }')
+# shellcheck disable=SC2016
+sed -i '' -e 's/\(sha256 checksum: `\)\(.*\)\(`\)/\1'"${BOOTSTRAP_SHA}"'\3/g' "${SCRIPT_DIR}/../README.md"

bootstrap/macos.sh

@@ -23,6 +23,7 @@ setup_macos_dock() {
 }
 
 setup_macos_preferences() {
+    # TODO: FIX/Add to this
     osascript -e 'tell application "System Preferences" to quit'
 
     # Trackpad: enable tap to click for this user and for the login screen

homebrew/Brewfile.base

@@ -17,8 +17,11 @@ brew "zlib"
 # Yubikey/GPG
 brew "gnupg"
 brew "hopenpgp-tools"
+brew "libfido2"
+brew "openssh"
 brew "pinentry-mac"
 brew "ykman"
+brew "ykpers"
 cask "yubico-authenticator"
 cask "yubico-yubikey-manager"