evolix
/
ansible-roles
17
2
Fork 2
Code Issues 61 Pull Requests 19 Releases 29 Wiki Activity

apt: Add Signed-by on Bookworm updates
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2631|4|2627|4|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/364//ansiblelint">Evolix » ansible-roles » unstable #364</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details 

The generic keyring is used instead of the specific ones for system and
security because /usr/share/keyrings/debian-archive-bookworm-* are not
present (yet) on major upgrades. It’s not ideal, and should be replaced
afterwards.

https://wiki.evolix.org/HowtoDebian/SourcesList#bookworm-12
This commit is contained in:
David Prevot 2023-09-29 15:18:58 +02:00
parent f2c37dddff
commit fef86b0a3f
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
apt/tasks/migrate-to-deb822.yml
View File

@ -30,3 +30,21 @@
ignore_errors: yes
tags:
- apt
- name: Add signed-by when relevant for bookworm
ansible.builtin.lineinfile:
dest: /etc/apt/sources.list.d/system.sources
line: "Signed-by: /usr/share/keyrings/debian-archive-keyring.gpg"
insertafter: "Suites: bookworm bookworm-updates"
state: present
tags:
- apt
- name: Add signed-by when relevant for bookworm-security
ansible.builtin.lineinfile:
dest: /etc/apt/sources.list.d/security.sources
line: "Signed-by: /usr/share/keyrings/debian-archive-keyring.gpg"
insertafter: "Suites: bookworm-security"
state: present
tags:
- apt