summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--files/common/keyrings/info.txt11
-rw-r--r--files/common/keyrings/raspberrypi-downloads.gpg (renamed from files/common/keyrings/raspios.gpg)bin2530 -> 2530 bytes
-rw-r--r--roles/raspios/image/tasks/fetch.yml2
3 files changed, 11 insertions, 2 deletions
diff --git a/files/common/keyrings/info.txt b/files/common/keyrings/info.txt
index a6355595..4684d40f 100644
--- a/files/common/keyrings/info.txt
+++ b/files/common/keyrings/info.txt
@@ -20,7 +20,16 @@ Openwrt
-------
See: https://openwrt.org/docs/guide-user/security/signatures
-or
+or
git clone https://git.openwrt.org/keyring.git
gpg --no-options --trust-model always --no-default-keyring --secret-keyring /dev/null --keyring ./openwrt-<yy.mm>.gpg --import < (follow download link)
+
+
+
+Raspios
+-------
+
+get key from Raspi Forums??? (sadly there seems to be no official site where keys get published...)
+
+gpg --no-options --trust-model always --no-default-keyring --secret-keyring /dev/null --keyring ./raspberrypi-downloads.gpg --recv-keys <key-id-from-above>
diff --git a/files/common/keyrings/raspios.gpg b/files/common/keyrings/raspberrypi-downloads.gpg
index fb800c19..fb800c19 100644
--- a/files/common/keyrings/raspios.gpg
+++ b/files/common/keyrings/raspberrypi-downloads.gpg
Binary files differ
diff --git a/roles/raspios/image/tasks/fetch.yml b/roles/raspios/image/tasks/fetch.yml
index 5060bdfe..b9294415 100644
--- a/roles/raspios/image/tasks/fetch.yml
+++ b/roles/raspios/image/tasks/fetch.yml
@@ -37,7 +37,7 @@
- name: check OpenPGP signature
command: >-
- gpgv --keyring "{{ global_files_dir }}/common/keyrings/raspios.gpg"
+ gpgv --keyring "{{ global_files_dir }}/common/keyrings/raspberrypi-downloads.gpg"
"{{ raspios_download_dir }}/{{ raspios_download_image_base_name }}.sig" "{{ raspios_download_dir }}/{{ raspios_download_image_base_name }}"
changed_when: False
register: raspios_image_gpg_result