lxc-php: fix APT keyring path inside containers

This commit is contained in:
Jérémy Lecour 2023-09-21 15:47:23 +02:00 committed by Jérémy Lecour
parent cc9d0c59d3
commit b5550d2ce2
Signed by: jlecour
SSH key fingerprint: SHA256:h+5LgHRKwN9lS0SsdVR5yZPeFlJE4Mt+8UtL4CcP8dY
5 changed files with 10 additions and 8 deletions

View file

@ -16,6 +16,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
* apt: disable `NonFreeFirmware` warning for VM on Debian 12+
* apt: explicit `signed-by` directives for official sources
* bind: add reload-zone helper
* certbot: deploy-hook for proftpd
* docker-host: added var for user namespace setting
* dovecot: add Munin plugins dovecot1 and dovecot_stats (patched)
* dovecot: fix old_stats plugin for Dovecot 2.3
@ -51,7 +52,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
* mysql: improve shell syntax for mysql_skip script
* nagios-nrpe: set default check_load --per-cpu for BSD
* pgbouncer: minor fixes
* postfix (packmail or when postfix_slow_transport_include is True): change `minimal_backoff_time` from 2h to 15m (see HowtoPostfix)
* postfix (packmail or when postfix_slow_transport_include is True): change `miniprofmal_backoff_time` from 2h to 15m (see HowtoPostfix)
* postfix (packmail) : optimize Amavis integration
* postfix: disable sending mails via IPv6
* postfix: new spam.sh update script that avoids reloading if files did not change.
@ -67,6 +68,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
* evolinux-base, evolinux-users: Fix files mode under `/etc/ssh/sshd_config.d`
* evolinux-base: fix file extension
* fail2ban: fix cron `fail2ban_dbpurge` (should be bash instead of sh)
* lxc-php: fix APT keyring path inside containers
* nagios-nrpe: `check_ssl_local` now has an output that nrpe can understand when it isn't OK
* nagios-nrpe: remount `/usr` **after** installing the packages
* nginx: set default server directive in default vhost

View file

@ -27,9 +27,9 @@
- "deb [signed-by={{ lxc_apt_keyring_dir }}/sury.gpg] https://packages.sury.org/php/ bullseye main"
- "deb [signed-by={{ lxc_apt_keyring_dir }}/pub_evolix.asc] http://pub.evolix.org/evolix bullseye-php80 main"
- name: "Ensure {{ lxc_rootfs }}{{ apt_keyring_dir }} directory exists"
- name: "Ensure {{ lxc_rootfs }}{{ lxc_apt_keyring_dir }} directory exists"
file:
path: "{{ lxc_rootfs }}{{ apt_keyring_dir }}"
path: "{{ lxc_rootfs }}{{ lxc_apt_keyring_dir }}"
state: directory
mode: "755"
owner: root

View file

@ -26,9 +26,9 @@
- "deb [signed-by={{ lxc_apt_keyring_dir }}/sury.gpg] https://packages.sury.org/php/ bullseye main"
- "deb [signed-by={{ lxc_apt_keyring_dir }}/pub_evolix.asc] http://pub.evolix.org/evolix bullseye-php81 main"
- name: "Ensure {{ lxc_rootfs }}{{ apt_keyring_dir }} directory exists"
- name: "Ensure {{ lxc_rootfs }}{{ lxc_apt_keyring_dir }} directory exists"
file:
path: "{{ lxc_rootfs }}{{ apt_keyring_dir }}"
path: "{{ lxc_rootfs }}{{ lxc_apt_keyring_dir }}"
state: directory
mode: "755"
owner: root

View file

@ -28,9 +28,9 @@
force: true
mode: "0644"
- name: "Ensure {{ lxc_rootfs }}{{ apt_keyring_dir }} directory exists"
- name: "Ensure {{ lxc_rootfs }}{{ lxc_apt_keyring_dir }} directory exists"
file:
path: "{{ lxc_rootfs }}{{ apt_keyring_dir }}"
path: "{{ lxc_rootfs }}{{ lxc_apt_keyring_dir }}"
state: directory
mode: "755"
owner: root

View file

@ -4,5 +4,5 @@ Types: deb
URIs: https://packages.sury.org/php/
Suites: {{ ansible_distribution_release }}
Components: main
Signed-by: {{ apt_keyring_dir }}/sury.gpg
Signed-by: {{ lxc_apt_keyring_dir }}/sury.gpg
Enabled: yes