#!/bin/bash -xe
set -o pipefail

# remove local self-signed snakeoil certificate
find "${root:?}"/etc/ssl/certs -maxdepth 1 -lname ssl-cert-snakeoil.pem -delete
rm -f -- \
	ssl/private/ssl-cert-snakeoil.key \
	ssl/certs/ssl-cert-snakeoil.pem

# cleanup some additional things in etc
pushd "${root:?}"/etc
rm -f -- \
	resolv.conf \
	group- \
	gshadow- \
	passwd- \
	shadow-