From f73c8ff53d234c8a0d855cc9bdd6e9575d3e355a Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Thu, 12 Aug 2021 23:23:04 +0200 Subject: use singed-by= option for source list entries of external repos --- roles/apt-repo/blackmagic/tasks/main.yml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) (limited to 'roles/apt-repo/blackmagic') diff --git a/roles/apt-repo/blackmagic/tasks/main.yml b/roles/apt-repo/blackmagic/tasks/main.yml index 0e14d8fa..0a63a094 100644 --- a/roles/apt-repo/blackmagic/tasks/main.yml +++ b/roles/apt-repo/blackmagic/tasks/main.yml @@ -2,9 +2,15 @@ - name: install repo key copy: src: repo.gpg - dest: /etc/apt/trusted.gpg.d/blackmagic.gpg + dest: /etc/apt/keyrings/blackmagic.gpg register: apt_repo_blackmagic_key +## TODO: remove once all servers have been converted +- name: remove repository key from old location + file: + path: /etc/apt/trusted.gpg.d/blackmagic.gpg + state: absent + - name: configure repo authentication when: @@ -43,7 +49,7 @@ - name: add repository entry copy: content: | - deb https://build.spreadspace.org/ {{ ansible_distribution_release }} blackmagic + deb [signed-by=/etc/apt/keyrings/blackmagic.gpg] https://build.spreadspace.org/ {{ ansible_distribution_release }} blackmagic dest: /etc/apt/sources.list.d/blackmagic.list register: apt_repo_blackmagic_sources -- cgit v1.2.3