#!/bin/sh
# bashclub-base: Hinweis, solange der bashclub-Schlüssel (MOK) fehlt (nur UEFI)
BRAND_NAME='bashclub OS'
BRAND_ACCENT='38;5;208' BRAND_ERROR='1;31' BRAND_SSH_HINT=yes
BRAND_LOGO_1='╭───────╮' BRAND_LOGO_2='│@R@  @A@>@R@_   @A@│' BRAND_LOGO_3='╰───────╯'
[ -r /usr/share/bashclub/branding.sh ] && . /usr/share/bashclub/branding.sh
a=$(printf '\033[%sm' "$BRAND_ACCENT") e=$(printf '\033[%sm' "$BRAND_ERROR") r=$(printf '\033[0m')
if [ -d /sys/firmware/efi ] && [ -f /usr/share/bashclub/mok.der ] && mokutil --test-key /usr/share/bashclub/mok.der 2>/dev/null | grep -q 'is not enrolled'; then
printf '   %s┌%s┐%s\n' "$a" '── Secure Boot ───────────────────────────────────────────────────────────' "$r"
printf '   %s│%s %s %s│%s\n' "$a" "$r" 'De bashclub-sleutel is niet ingeschreven. Wordt Secure Boot             ' "$a" "$r"
printf '   %s│%s %s %s│%s\n' "$a" "$r" 'ingeschakeld, dan start het systeem niet meer:  sudo bashclub-mok-enroll' "$a" "$r"
printf '   %s└%s┘%s\n\n' "$a" '──────────────────────────────────────────────────────────────────────────' "$r"
fi
