ansible-roles/apt/tasks/evolix_public.yml

---

- name: Look for legacy apt keyring
  stat:
    path: /etc/apt/trusted.gpg
  register: _trusted_gpg_keyring
  tags:
    - apt

- name: Evolix embedded GPG key is absent
  apt_key:
    id: "B8612B5D"
    keyring: /etc/apt/trusted.gpg
    state: absent
  when: _trusted_gpg_keyring.stat.exists
  tags:
    - apt

- name: Add Evolix GPG key
  copy:
    src: reg.asc
    dest: "{{ apt_keyring_dir }}/reg.asc"
    force: yes
    mode: "0644"
    owner: root
    group: root
  tags:
    - apt

- name: Evolix public list is installed
  template:
    src: evolix_public.list.j2
    dest: /etc/apt/sources.list.d/evolix_public.list
    force: yes
    mode: "0640"
  register: apt_evolix_public
  tags:
    - apt

- name: Apt update
  apt:
    update_cache: yes
  when: apt_evolix_public is changed
  tags:
    - apt
Extract Evolix public APT sources 2017-05-21 11:00:46 +02:00			`---`

Remove embedded GPG keys only if legacy keyring is present 2021-07-04 22:08:47 +02:00			`- name: Look for legacy apt keyring`
			`stat:`
			`path: /etc/apt/trusted.gpg`
			`register: _trusted_gpg_keyring`
			`tags:`
			`- apt`

rename the tasks for embedded GPG keys 2021-05-06 11:33:19 +02:00			`- name: Evolix embedded GPG key is absent`
Move all trusted GPG keys to file repository 2021-05-03 14:23:13 +02:00			`apt_key:`
			`id: "B8612B5D"`
remove apt keys specifically from embedded database 2021-05-06 13:43:59 +02:00			`keyring: /etc/apt/trusted.gpg`
Move all trusted GPG keys to file repository 2021-05-03 14:23:13 +02:00			`state: absent`
Remove embedded GPG keys only if legacy keyring is present 2021-07-04 22:08:47 +02:00			`when: _trusted_gpg_keyring.stat.exists`
Move all trusted GPG keys to file repository 2021-05-03 14:23:13 +02:00			`tags:`
			`- apt`

Add a Repository GPG key for Evolix public repositories 2017-06-15 10:20:35 +02:00			`- name: Add Evolix GPG key`
evolinux-base: copy GPG key instead of using apt-key 2021-05-01 16:50:38 +02:00			`copy:`
apt: store keys in /etc/apt/trusted.gpg.d in ascii format 2021-05-03 12:02:04 +02:00			`src: reg.asc`
Use proper keyrings directory for APT version Debian 9 → 11 : /etc/apt/trusted.gpg.d Debian 12 : /etc/apt/keyrings 2022-11-02 23:15:17 +01:00			`dest: "{{ apt_keyring_dir }}/reg.asc"`
evolinux-base: use a dearmored signature, stored in the correct location 2021-05-01 17:20:06 +02:00			`force: yes`
apt: fix keyring permissions 2021-05-02 00:34:19 +02:00			`mode: "0644"`
explicit permissions for APT GPG keys 2021-05-26 13:47:34 +02:00			`owner: root`
			`group: root`
tags and whitespaces 2019-06-21 10:18:54 +02:00			`tags:`
			`- apt`
apt-repositories: stretch repositories are different 2017-06-13 12:02:49 +02:00
Extract Evolix public APT sources 2017-05-21 11:00:46 +02:00			`- name: Evolix public list is installed`
			`template:`
			`src: evolix_public.list.j2`
			`dest: /etc/apt/sources.list.d/evolix_public.list`
			`force: yes`
			`mode: "0640"`
apt: use conditionnal instead of handler for update 2017-10-31 15:50:25 +01:00			`register: apt_evolix_public`
apt-repositories: stretch repositories are different 2017-06-13 12:02:49 +02:00			`tags:`
tags and whitespaces 2019-06-21 10:18:54 +02:00			`- apt`
apt-repositories: flush handlers for each task file Each task file can be included separately, so we need to flesh in each one of them 2017-05-23 15:23:08 +02:00
apt: use conditionnal instead of handler for update 2017-10-31 15:50:25 +01:00			`- name: Apt update`
			`apt:`
			`update_cache: yes`
Change "\|changed" with "is changed" 2019-12-31 15:34:48 +01:00			`when: apt_evolix_public is changed`
apt-repositories: stretch repositories are different 2017-06-13 12:02:49 +02:00			`tags:`
tags and whitespaces 2019-06-21 10:18:54 +02:00			`- apt`