set -eu

if [[ -z "${SHIELD_API:-}" ]]; then

echo >&2 "SHIELD_API not set in environment."

echo >&2

echo >&2 "Please set this to the full URL of your SHIELD core"

exit 1

mkdir -p /etc/shield

if [[ ! -f /etc/shield/ssh.key ]]; then

ssh-keygen -m PEM -t rsa -f /etc/shield/ssh.key -N ''

rm -f /etc/shield/ssh.key.pub

echo "waiting for SHIELD Core to spin up on ${SHIELD_API}..."

count=240

while ! curl -Ls ${SHIELD_API}/v2/info 2>/dev/null | grep -q '"api"'; do

sleep 1

count=$(( count - 1 ))

if [[ $count == 0 ]]; then

echo >&2 "failed to find SHIELD core after 4 minutes; giving up."

exit 2

fi

curl "${SHIELD_API}/v1/meta/pubkey" >> /etc/shield/authorized_keys

cat > /etc/shield/agent.conf <<EOF

export PATH=$PATH:/shield/bin

exec /shield/bin/shield-agent --config "/etc/shield/agent.conf" "$@"

exit 1