1 files changed, 75 insertions, 0 deletions
diff --git a/add-git-user b/add-git-user
new file mode 100755
index 0000000..1f5eec1
--- /dev/null
+++ b/add-git-user
@@ -0,0 +1,75 @@
+#!/bin/sh
+
+### Add a Git user to the system  
+
+### Copyright (C) 2015 Rafael Laboissiere
+###
+### This program is free software; you can redistribute it and/or modify it under
+### the terms of the GNU General Public License as published by the Free Software
+### Foundation; either version 3 of the License, or (at your option) any later
+### version.
+###
+### This program is distributed in the hope that it will be useful, but WITHOUT
+### ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+### FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+### details.
+###
+### You should have received a copy of the GNU General Public License along with
+### this program; if not, see <http://www.gnu.org/licenses/>.
+
+### Get the program name
+prog=${0##*/}
+
+### Ensure that at least one argument is given
+if [ $# != 1 ] ; then
+    echo "Usage: $prog name" 1>&2
+    exit 1
+fi
+
+### Get the specified user name
+user=$1
+
+### Generate a temporary file with configuration for adduser
+tmp=$(tempfile)
+
+### Cleanup function
+cleanup(){
+    rm -f $tmp
+}
+trap "cleanup" 1 2 3 13 15
+
+### Create the temporary configuration file
+home=/var/git
+cat > $tmp <<EOF
+DHOME=$home
+DSHELL=/usr/bin/git-shell
+FIRST_UID=2000
+FIRST_GID=2000
+SKEL=
+EOF
+
+### Add the new user to the system
+adduser --conf $tmp --disabled-password --disabled-login --gecos "" $user
+
+### Create the no-interactive-login script
+homedir=$home/$user
+gitshdir=$homedir/git-shell-commands
+mkdir -p $gitshdir
+nolog=$gitshdir/no-interactive-login
+cat > $nolog <<EOF
+#!/bin/sh
+printf '\\n%s\\n' "Hi \$USER! You've successfully authenticated, but I do not"
+printf '%s\\n\\n' "provide interactive shell access."
+exit 128
+EOF
+chmod +x $nolog
+chown -R $user:$user $gitshdir
+
+### Initialize the SSH directory
+sshdir=$homedir/.ssh
+mkdir --mode=700 $sshdir
+touch $sshdir/authorized_keys
+chown -R $user:$user $sshdir
+
+### Exit gracefully
+cleanup