#!/bin/bash
scriptRoot=$(realpath "${BASH_SOURCE%/*}")

# Elevate script
if [ ! "$UID" -eq 0 ]
then
    sudo bash "$BASH_SOURCE"
    bash "$scriptRoot/sign-modules.sh"
else
    # Create context directory
    workingDirectory="$(pwd)"
    contextRoot="$(mktemp -d)"
    packageName="shim.rpm"
    cd "$contextRoot"

    # Install Prerequisites
    apt install -y wget rpm2cpio

    # Download and Extract Package
    wget https://kojipkgs.fedoraproject.org//vol/fedora_koji_archive02/packages/shim-signed/15/2/x86_64/shim-x64-15-2.x86_64.rpm -O "$packageName"
    rpm2archive "$packageName"
    tar -xvzf "$packageName.tgz"
    rm -f "$packageName" "$packageName.tgz"

    # Initialize variables
    src="./boot/efi/EFI/fedora"
    esp=/boot/efi
    defaultBootDir=$esp/EFI/BOOT
    microsoftBootDir=$esp/EFI/Microsoft/Boot

    systemdDirName=/EFI/systemd
    systemdFullName=$esp$systemdDirName
    systemdFile=$systemdFullName/systemd-bootx64.efi

    # Set up files
    cp $systemdFile $defaultBootDir/BOOTx64.efi
    mv $defaultBootDir/BOOTx64.efi $defaultBootDir/grubx64.efi
    cp "$src/shimx64.efi" $defaultBootDir/BOOTx64.efi
    cp "$src/mmx64.efi" $defaultBootDir

    # Add boot entries
    efibootmgr --unicode --disk /dev/nvme0n1 --part 0 --create --label "Shim" --loader /EFI/BOOT/BOOTx64.efi

    # Configure systemd-boot
    {
        echo "timeout 4"
    } >> /boot/efi/loader/loader.conf

    {
        echo "title MokManager"
        echo "efi   /EFI/BOOT/mmx64.efi"
    } > /boot/efi/loader/entries/MokManager.conf

    # Install surface MOK
    apt install -y linux-surface-secureboot-mok

    # Install MOK Key
    keyDir="/var/lib/shim-signed/mok"
    mkdir -p "$keyDir"
    cp "$scriptRoot/openssl.cnf" "$keyDir/openssl.cnf"

    openssl req -config "$keyDir/openssl.cnf" \
        -new -x509 -newkey rsa:2048 \
        -nodes -days 36500 -outform DER \
        -keyout "$keyDir/MOK.priv" \
        -out "$keyDir/MOK.der"

    mokutil --import "$keyDir/MOK.der"

    # Remove context directory
    cd $workingDirectory
    rm -rf $contextRoot
fi