From 8e5815c724949435a20d04da88c55e3913bd7c1a Mon Sep 17 00:00:00 2001
From: Valeria Fadeeva <valeria.fadeeva.me@gmail.com>
Date: Wed, 8 Jan 2025 17:41:30 +0500
Subject: [PATCH] Update

---
 settings.conf                                   |  5 +++++
 settings_offline.conf                           |  5 +++++
 settings_online.conf                            |  5 +++++
 ...cess_generate_dnscrypt_cert_dont_chroot.conf | 17 +++++++++++++++++
 4 files changed, 32 insertions(+)
 create mode 100644 src/modules/shellprocess/shellprocess_generate_dnscrypt_cert_dont_chroot.conf

diff --git a/settings.conf b/settings.conf
index ff31336..4c5a1cc 100644
--- a/settings.conf
+++ b/settings.conf
@@ -69,6 +69,10 @@ instances:
   module:   shellprocess
   config:   shellprocess_install_intel_drivers_chrooted.conf
 
+#  - shellprocess@generate_dnscrypt_cert_dont_chroot
+- id:       generate_dnscrypt_cert_dont_chroot
+  module:   shellprocess
+  config:   shellprocess_generate_dnscrypt_cert_dont_chroot.conf
 
 sequence:
 - show:
@@ -103,6 +107,7 @@ sequence:
   - grubcfg
   - bootloader
   - services-systemd
+  - shellprocess@generate_dnscrypt_cert_dont_chroot
   - shellprocess@copy_refind_theme_chrooted
   - shellprocess@install_intel_drivers_chrooted
   - shellprocess@remove_unneeded_nvidia_and_virt_machine_and_packages_chrooted
diff --git a/settings_offline.conf b/settings_offline.conf
index ff31336..4c5a1cc 100644
--- a/settings_offline.conf
+++ b/settings_offline.conf
@@ -69,6 +69,10 @@ instances:
   module:   shellprocess
   config:   shellprocess_install_intel_drivers_chrooted.conf
 
+#  - shellprocess@generate_dnscrypt_cert_dont_chroot
+- id:       generate_dnscrypt_cert_dont_chroot
+  module:   shellprocess
+  config:   shellprocess_generate_dnscrypt_cert_dont_chroot.conf
 
 sequence:
 - show:
@@ -103,6 +107,7 @@ sequence:
   - grubcfg
   - bootloader
   - services-systemd
+  - shellprocess@generate_dnscrypt_cert_dont_chroot
   - shellprocess@copy_refind_theme_chrooted
   - shellprocess@install_intel_drivers_chrooted
   - shellprocess@remove_unneeded_nvidia_and_virt_machine_and_packages_chrooted
diff --git a/settings_online.conf b/settings_online.conf
index d0430e0..e423ec7 100644
--- a/settings_online.conf
+++ b/settings_online.conf
@@ -70,6 +70,10 @@ instances:
   module:   shellprocess
   config:   shellprocess_install_intel_drivers_chrooted.conf
 
+#  - shellprocess@generate_dnscrypt_cert_dont_chroot
+- id:       generate_dnscrypt_cert_dont_chroot
+  module:   shellprocess
+  config:   shellprocess_generate_dnscrypt_cert_dont_chroot.conf
 
 sequence:
 - show:
@@ -105,6 +109,7 @@ sequence:
   - grubcfg
   - bootloader
   - services-systemd
+  - shellprocess@generate_dnscrypt_cert_dont_chroot
   - shellprocess@copy_refind_theme_chrooted
   - shellprocess@install_nvidia_drivers_chrooted
   - shellprocess@install_intel_drivers_chrooted
diff --git a/src/modules/shellprocess/shellprocess_generate_dnscrypt_cert_dont_chroot.conf b/src/modules/shellprocess/shellprocess_generate_dnscrypt_cert_dont_chroot.conf
new file mode 100644
index 0000000..70b08df
--- /dev/null
+++ b/src/modules/shellprocess/shellprocess_generate_dnscrypt_cert_dont_chroot.conf
@@ -0,0 +1,17 @@
+# SPDX-FileCopyrightText: no
+# SPDX-License-Identifier: CC0-1.0
+
+---
+
+i18n:
+  name: "Generate dnscrypt cert"
+  name[ru]: "Создание сертификата для dnscrypt"
+
+dontChroot: true
+
+timeout: 180
+
+script:
+  - "-mkdir -p ${ROOT}/var/lib/dnscrypt-proxy"
+  - '-openssl req -x509 -verbose -batch -subj "/C=/ST=/L=$City/O=/OU=/CN=/emailAddress=" -nodes -newkey rsa:2048 -days 5000 -sha256 -keyout /tmp/localhost.pem -out /tmp/localhost.pem'
+  - "-cp -vf /tmp/localhost.pem ${ROOT}/var/lib/dnscrypt-proxy/localhost.pem"