summaryrefslogtreecommitdiff
path: root/roles/installer/openbsd/fetch/tasks/main.yml
blob: 0ab9070c74a1a44c18614634b66c054dd11f09a7 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
---
- name: prepare directories for installer iso files
  file:
    name: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}"
    state: directory

- name: download installer iso files
  get_url:
    url: "{{ openbsd_installer_url }}/{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/install{{ openbsd_installer_version_short }}.iso"
    dest: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/install{{ openbsd_installer_version_short }}.iso"
    mode: 0644
    force: "{{ openbsd_installer_force_download }}"

- name: download signed sha256 files
  get_url:
    url: "{{ openbsd_installer_url }}/{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/SHA256.sig"
    dest: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}/SHA256.sig"
    mode: 0644
    force: "{{ openbsd_installer_force_download }}"

- name: create signing key files
  copy:
    content: "{{ openbsd_installer_signing_keys[openbsd_installer_version] }}"
    dest: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/openbsd-{{ openbsd_installer_version_short }}-base.pub"

- name: verfiy downloaded iso files
  command: "signify-openbsd -Cp ../openbsd-{{ openbsd_installer_version_short }}-base.pub -x SHA256.sig install{{ openbsd_installer_version_short }}.iso"
  args:
    chdir: "{{ installer_base_path }}/openbsd-{{ openbsd_installer_version }}/{{ openbsd_installer_arch }}"
  changed_when: false
  register: openbsd_installer_signify_result

- debug:
    var: openbsd_installer_signify_result.stdout_lines