---
- name: prepare directories for installer iso files
  file:
    name: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}"
    state: directory

- name: download installer iso files
  get_url:
    url: "{{ openbsd_installer_url }}/{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/install{{ openbsd_installer_version_short }}.iso"
    dest: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/install{{ openbsd_installer_version_short }}.iso"
    mode: 0644
    force: "{{ openbsd_installer_force_download }}"

- name: download signed sha256 files
  get_url:
    url: "{{ openbsd_installer_url }}/{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/SHA256.sig"
    dest: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/SHA256.sig"
    mode: 0644
    force: "{{ openbsd_installer_force_download }}"

- name: create signing key files
  copy:
    content: "{{ openbsd_installer_signing_keys[openbsd_installer_version] }}"
    dest: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/openbsd-{{ openbsd_installer_version_short }}-base.pub"

- name: verfiy downloaded iso files
  command: "signify-openbsd -Cp ../openbsd-{{ openbsd_installer_version_short }}-base.pub -x SHA256.sig install{{ openbsd_installer_version_short }}.iso"
  args:
    chdir: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}"
  changed_when: false
  register: openbsd_installer_signify_result

- debug:
    var: openbsd_installer_signify_result.stdout_lines