summaryrefslogtreecommitdiff
path: root/roles/installer/debian/fetch/tasks/verify-kali.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/installer/debian/fetch/tasks/verify-kali.yml')
-rw-r--r--roles/installer/debian/fetch/tasks/verify-kali.yml19
1 files changed, 19 insertions, 0 deletions
diff --git a/roles/installer/debian/fetch/tasks/verify-kali.yml b/roles/installer/debian/fetch/tasks/verify-kali.yml
new file mode 100644
index 00000000..d113a6cb
--- /dev/null
+++ b/roles/installer/debian/fetch/tasks/verify-kali.yml
@@ -0,0 +1,19 @@
+---
+- name: download SHA256SUMS and signature file
+ loop:
+ - SHA256SUMS
+ - SHA256SUMS.gpg
+ get_url:
+ url: "{{ debian_installer_base_url }}/{{ item }}"
+ dest: "{{ debian_installer_target_dir }}/{{ item }}"
+ force: "{{ debian_installer_force_download }}"
+
+- name: verfiy signature of SHA256SUMS.gpg file
+ command: >-
+ gpgv --keyring "{{ installer_keyrings_path | default(installer_base_path+'/keyrings') }}/kali-archive.gpg"
+ "{{ debian_installer_target_dir }}/SHA256SUMS.gpg" "{{ debian_installer_target_dir }}/SHA256SUMS"
+ changed_when: False
+ register: debian_installer_gpg_result
+
+- debug:
+ var: debian_installer_gpg_result.stderr_lines