apt-install.sh

#!/usr/bin/env bash
set -e
set -x

if [ -z "${UBUNTU_CODENAME}" ]; then
  echo "ERROR: missing env UBUNTU_CODENAME" >&2
  exit 1
fi

OUTFILE="/etc/apt/sources.list"
[ -f ${OUTFILE} -a ! -f ${OUTFILE}.original ] && cp -a ${OUTFILE} ${OUTFILE}.original
cat >${OUTFILE} <<EOF
deb http://archive.ubuntu.com/ubuntu ${UBUNTU_CODENAME} main universe
deb http://archive.ubuntu.com/ubuntu ${UBUNTU_CODENAME}-updates main universe
deb http://security.ubuntu.com/ubuntu ${UBUNTU_CODENAME}-security main universe
deb-src http://archive.ubuntu.com/ubuntu ${UBUNTU_CODENAME} main universe
deb-src http://archive.ubuntu.com/ubuntu ${UBUNTU_CODENAME}-updates main universe
deb-src http://security.ubuntu.com/ubuntu ${UBUNTU_CODENAME}-security main universe
EOF
cat >/etc/apt/sources.list.d/virtualbox.list <<EOF
deb http://download.virtualbox.org/virtualbox/debian ${UBUNTU_CODENAME} contrib
EOF
#wget -q https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- | apt-key add -
apt-key add - <<EOF
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=Rv7/
-----END PGP PUBLIC KEY BLOCK-----
EOF
#wget -q https://www.virtualbox.org/download/oracle_vbox.asc -O- | apt-key add -
apt-key add - <<EOF
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.9 (GNU/Linux)
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=19g1
-----END PGP PUBLIC KEY BLOCK-----
EOF
if [ -z "${RSYNC_CACHE_SERVER}" ]; then
  apt update
fi

apt dist-upgrade -y

PACKAGES="
ubuntu-minimal
linux-image-generic
debootstrap gdisk zfs-initramfs mdadm
grub-pc
openssh-server
rsync
git
curl
wget
ubuntu-standard
nullmailer
docker.io
iftop
pv
tmux
build-essential
ucarp
w3m
zsync
fail2ban
shellcheck
python-pygments
vagrant
virtualbox-5.0
"

for i in ${PACKAGES}; do
  case "${i}" in
    linux-image-generic)
      apt install -y --no-install-recommends ${i}
      ;;
    *)
      apt install -y ${i}
      ;;
  esac
done

if [ "${INSTALL_TYPE}" = "desktop" -a ! -f /etc/system-setup ]; then
  cat >/etc/apt/sources.list.d/spotify.list <<EOF
deb http://repository.spotify.com stable non-free
EOF
  # add spotify signing key
  #apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys BBEBDCB318AD50EC6865090613B00F1FD2C19886
  apt-key add - <<EOF
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1

mQINBFVm7dMBEADGcdfhx/pjGtiVhsyXH4r8TrFgsGyHEsOWaYeU2JL1tEi+YI1q
jpExb2TeTReDTiGEFFMWgPTS0y5HQGm+2P3XGv0pShvgg9A6FWZmZmT+tymA2zvN
rdpmKdhScZ52StPLFz9wsmXHG4DIKVuzgzuV4YxJ1i2wFtoVp8zT9ORu1BxLZ0IB
wTvLRbaQGZ8DwXVAHak9cK91Ujj6gJ1MJPohZLHH2BjrOjEl/I36jFUjK0AadznN
zo08lLAi94qjtheJtuJD3IEOAlCkaknz6vbEFpszLGlLD7GENMzJk46ObuJuvW5R
2PkOU2U8jS0GaUD9Ou/SIdJ6vIdvjSs/ettc2wwdnbSdadvjovIfvEBRsEVMpRG+
42B+DZpJbS9pCb8sxTJtnUy1YViZmG0++FhPGGPGzQYhC/Mz07lsx5PkC7Kka2FC
Nmhauxw5deO43Ck181oQVdbt/VxmChzchUJ6N6/uOV5JKm7B9UnDNyqUYv6goeLv
FnT9ag+FCxiroTrq+dINr6d+XT/cI9WtSagfmhcekwhyfcCgYsFemAOckRifjEGF
MksQlnWkGwWNoKe91KBxjgaJaazSbZRk0dFPSSmfKWaxuTwkR74pbaueyijnQJgH
AjfCyzQe9miN9DitON5l6T2gVAN3Jn1QQmV7tt5GB7amcHf5/b0oYmmRPQARAQAB
tD5TcG90aWZ5IFB1YmxpYyBSZXBvc2l0b3J5IFNpZ25pbmcgS2V5IDxvcGVyYXRp
b25zQHNwb3RpZnkuY29tPokBHAQQAQIABgUCVW3SWAAKCRAILM7flFWPWUk5B/wO
qqD9/2Do9PyPucfUs/rrP4+M8iJLpv8U+bX/qHryTTWfpk3YuKL4+c8saHySK4HL
Gyxd3mdo1XMF351KrxLQvWMSSPbIRV9cSqZROOVn2ya+3xpWk6t1omLzxtBBMOC4
B5qAfWhog7ioAmzQNY5NUz5mqXVP5WbgR/G+GOszzuQUgeu1Xxxzir3JqWQ0g8mp
3EtX7dB76zxkkuTYbeVDPOvtJPn/38d3oSLUI1QJnL8pjREHeE8fO5mWncJmyZNh
kYd+rfnPk+W0ZkTr59QBIEOGMTmATtNh+x1mo5e2dW91Oj4jEWipMUouLGqbo/gJ
uHFMt8RWBmy+zFYUEPYHiQI+BBMBAgAoAhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIe
AQIXgAUCVWg3sAUJBK3QLQAKCRATsA8f0sGYhl6hEACJ1CrYjaflKKR2Znuh0g0g
M89NAwO8AA4+SpkWHagdGLo7OV/rGB3mlwD4mhaa8CbEnBT/za3jFnT19KsYQWiT
21oOX/eo47ITbAspjDZTiXLinyAcOJn+q/EFkelROzbVaxZHi6SN5kCEd8KAew8h
2jZf8wWqaYVyMPNSqotUhin6YjWsu57BGixVThoMmxx3udsGAiYqt8buAANWbkUp
hrvtJuNCKkGym7psnS4Q5EnHPfvbYii9iAfBswX6nZQlehva7aToN73elYL3opCA
rAxKAFx70bpGxb7T16KjKzkKS0a4iQ7xdbBGylb+AE/RhICa+RM5tma2YnB3pZvF
M/n0BNeYReCgvxkl1rqrB1KxmFHfGqjLkb2YAZ5RYnP3gEt+nbEWxL8FO0Bhakn1
RB3NqTC2oiQAUfh+66yUawUNkHRHlGAEzZAxvpfnf0hSJp734lyQZJs+zqXUAXa2
UmEZ6se62PgZRQIz5IbAVxSiGz4xIZs1yS36N2vZ34LFJa9o/HVk5OfpqZM0zjWw
QIQN2b4OBizL5r4h2Mi5BHUEyYMsDZn+txoJjPPYLolRlf31sqi5MJE+cbOAXSn8
PC9k4i+hrbfqFzts47+6xgCH3aXbhUkJh1CH/0/qEXfTPYTyayijm4rdvSBczzEO
RWGT5E38oV9h1eUqp4nVPg==
=/qip
-----END PGP PUBLIC KEY BLOCK-----
EOF
  cat >/etc/apt/sources.list.d/atlassian-hipchat4.list <<EOF
deb https://atlassian.artifactoryonline.com/atlassian/hipchat-apt-client ${UBUNTU_CODENAME} main
EOF
  #wget -q https://atlassian.artifactoryonline.com/atlassian/api/gpg/key/public -O- | apt-key add -
  apt-key add - <<EOF
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
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=M8x+
-----END PGP PUBLIC KEY BLOCK-----
EOF
  if [ -z "${RSYNC_CACHE_SERVER}" ]; then
    apt update
  fi
  PACKAGES="
dbus
xubuntu-desktop
network-manager-openconnect-gnome
xsel
gimp
inkscape
audacity
filezilla
chromium-browser
spotify-client
hipchat4
libxcb-xtest0
"
  for i in ${PACKAGES}; do
    case "${i}" in
      *)
        apt install -y ${i}
        ;;
    esac
  done
fi