#!/bin/bash

set +eux


## Certificate DST_Root_CA-X3 expired, it needs to be removed
## from list of available certificates. Debian <10 have the issue.
##
## Fixing: https://www.reddit.com/r/sysadmin/comments/pzags0/lets_encrypts_dst_root_ca_x3_expired_yesterday/
## see also: https://techcrunch.com/2021/09/21/lets-encrypt-root-expiry/?guccounter=1

if grep "^mozilla/DST_Root_CA_X3.crt" /etc/ca-certificates.conf 2>/dev/null 2>&1; then
    sed -ri 's%^(mozilla/DST_Root_CA_X3.crt)%!\1%g' /etc/ca-certificates.conf &&
        update-ca-certificates
fi

## We can now do the ``apt-get update`` safely...

apt-get update
apt-get -y install bash-completion wget bzip2 git-core \
        less tmux mosh \
        sudo git vim file </dev/null

apt-get -y python-software-properties </dev/null ||
    apt-get -y software-properties-common </dev/null


case $(lsb_release -is) in
    Ubuntu)
        apt-get install -y language-pack-en </dev/null
        ;;
    Debian)
        sed -ri 's/^\s*#\s*(en_US\.UTF-?8.*)\s*$/\1/g' /etc/locale.gen
        locale-gen
        ;;
esac