#!/usr/bin/env bash

key="$1"
url="$2"
f=$(basename "$url")

gpg  --recv-keys --keyserver keyserver.ubuntu.com "$key"
# Trust public key without a interactive prompt
gpg --list-keys --fingerprint --with-colons |
  sed -E -n -e 's/^fpr:::::::::([0-9A-F]+):$/\1:6:/p' |
  gpg --import-ownertrust
curl -sSL "$url" -o "$f"
curl -sSL "$url.asc" -o "$f.asc"
gpg --verify "$f.asc"
tar xzf "$f"
rm "$f"
