David Prevot
fef86b0a3f
apt: Add Signed-by on Bookworm updates
...
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2631|4|2627|4|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/364//ansiblelint">Evolix » ansible-roles » unstable #364</a>
gitea/ansible-roles/pipeline/head This commit looks good
The generic keyring is used instead of the specific ones for system and
security because /usr/share/keyrings/debian-archive-bookworm-* are not
present (yet) on major upgrades. It’s not ideal, and should be replaced
afterwards.
https://wiki.evolix.org/HowtoDebian/SourcesList#bookworm-12
2023-09-29 16:09:14 +02:00
David Prevot
35e7f22210
deb822-migration: Don’t keep evolix_public_old.sources on upgrade
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2633|25|2608|16|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/362//ansiblelint">Evolix » ansible-roles » unstable #362</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-09-28 15:59:16 +02:00
Jérémy Lecour
bb41d313a9
apt: Explicit "signed-by" directives for official sources
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2625|5|2620|5|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/325//ansiblelint">Evolix » ansible-roles » unstable #325</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-08-18 16:28:03 +02:00
Jérémy Lecour
67c6167474
apt: Disable NonFreeFirmware warning for VM on Debian 12+
2023-08-18 12:10:00 +02:00
David Prevot
4b4b34e849
Ensure {{ apt_keyring_dir }} directory exists
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2612|29|2583|13|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/305//ansiblelint">Evolix » ansible-roles » unstable #305</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-07-25 10:59:53 +02:00
David Prevot
440a54c21c
Allow script to work on old and not yet usr-merged systems
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2598|3|2595|3|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/298//ansiblelint">Evolix » ansible-roles » unstable #298</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-07-20 16:17:43 +02:00
Jérémy Lecour
00fe225a3c
force: [yes,no] → force [true,false]
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2615|7|2608|177|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/278//ansiblelint">Evolix » ansible-roles » unstable #278</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-06-28 13:25:30 +02:00
David Prevot
9f632100fb
Drop useless spaces
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2785|4|2781|6|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/276//ansiblelint">Evolix » ansible-roles » unstable #276</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-06-23 15:12:05 +02:00
Jérémy Lecour
d3345d2866
apt: move stretch backports to archive.d.o
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2778|4|2774|7|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/247//ansiblelint">Evolix » ansible-roles » unstable #247</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-05-09 10:48:04 +02:00
Jérémy Lecour
ee21973371
Use FQCN
...
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2777|524|2253|2462|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/223//ansiblelint">Evolix » ansible-roles » unstable #223</a>
gitea/ansible-roles/pipeline/head This commit looks good
Fully Qualified Collection Name
2023-03-20 23:33:19 +01:00
Jérémy Lecour
efd6e8d6b3
apt: add wrapper tasks files for backward compatibility
2023-03-20 15:43:34 +01:00
Jérémy Lecour
5974f12b82
evolinux-base: fix conditional precedence
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|4717|4|4713|4|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/219//ansiblelint">Evolix » ansible-roles » unstable #219</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-03-18 18:50:06 +01:00
Jérémy Lecour
6f61a0744c
apt: with Debian, 12 backports are installed but disabled by default
2023-03-18 15:38:05 +01:00
Jérémy Lecour
9358efedfe
apt: fix many stupid mistakes
2023-03-17 22:32:11 +01:00
Jérémy Lecour
367bda528f
apt: use deb822 format on Debian 12
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|4867|51|4816|17|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/216//ansiblelint">Evolix » ansible-roles » unstable #216</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-03-17 20:05:45 +01:00
David Prevot
4c4a08f15e
apt: Add binary key for our repository (for Jessie or less)
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|4833|7|4826|7|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/215//ansiblelint">Evolix » ansible-roles » unstable #215</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-03-17 13:55:48 +01:00
Jérémy Lecour
be03dfcb08
apt: deb822 migration python script is looked relative to shell script
2023-03-16 21:37:04 +01:00
Jérémy Lecour
6f96f6b458
Use proper python Boolean
2023-03-16 14:38:32 +01:00
Jérémy Lecour
fa1935e46c
apt: add tools to migrate sources to deb822 format
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|4783|21|4762|7|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/206//ansiblelint">Evolix » ansible-roles » unstable #206</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-03-15 22:50:00 +01:00
Jérémy Lecour
96a2bbecdd
apt: move-apt-keyrings moved in /usr/share/scripts
2023-03-15 22:49:02 +01:00
David Prevot
d6959c9287
Revert "Use bullseye suite even for bookworm"
...
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|4769|4|4765|5|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/205//ansiblelint">Evolix » ansible-roles » unstable #205</a>
gitea/ansible-roles/pipeline/head This commit looks good
bookworm suite has been enabled on our new repository.
This reverts commit 1fae737ac4
2023-03-14 13:28:36 +01:00
David Prevot
015a1bfec7
Revert "Use HTTPS for our new repository"
...
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|4769|8|4761|6|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/201//ansiblelint">Evolix » ansible-roles » unstable #201</a>
gitea/ansible-roles/pipeline/head This commit looks good
It errors out if ca-certificates is not yet installed
This reverts commit 12a0d8d57e
2023-03-13 11:59:27 +01:00
David Prevot
12a0d8d57e
Use HTTP for our new repository
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|4767|6|4761|7|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/200//ansiblelint">Evolix » ansible-roles » unstable #200</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-03-13 11:18:33 +01:00
David Prevot
1d701b060e
apt: Use pub.evolix.org instead of pub.evolix.net
gitea/ansible-roles/pipeline/head This commit looks good
2023-02-27 18:11:51 +01:00
Jérémy Lecour
17946f7280
apt: add move-apt-keyrings script/tasks
2023-02-27 13:58:01 +01:00
Jérémy Lecour
1fae737ac4
Use bullseye suite even for bookworm
2022-11-06 15:25:17 +01:00
Jérémy Lecour
b36d4c4766
various fixes for Debian 12
2022-11-06 15:25:17 +01:00
Jérémy Lecour
28540247f0
Add signed-by option for additional APT sources
gitea/ansible-roles/pipeline/head This commit looks good
2022-11-02 23:17:08 +01:00
Jérémy Lecour
f531460f49
Use proper keyrings directory for APT version
...
Debian 9 → 11 : /etc/apt/trusted.gpg.d
Debian 12 : /etc/apt/keyrings
2022-11-02 23:16:32 +01:00
Gregory Colpart
269c7242a5
correction du depot security pour Debian 11
continuous-integration/drone/push Build is passing
2022-05-27 23:05:07 +02:00
Jérémy Lecour
d9e95218ce
apt_hold_packages: broadcast message with wall, if present
continuous-integration/drone/push Build was killed
2022-02-24 11:49:12 +01:00
Jérémy Lecour
bff8fcfebb
apt: upgrade packages after all the configuration is done
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-25 18:25:47 +01:00
Jérémy Lecour
ad457dd7ba
apt: use the new security repository for Bullseye
continuous-integration/drone/push Build is passing
2021-08-16 14:12:31 +02:00
Jérémy Lecour
969a5bce7d
apt: remove workaround for Evolix public repositories with Debian 11
continuous-integration/drone/push Build is passing
2021-08-16 13:50:53 +02:00
Jérémy Lecour
29ec7bdcf2
Remove embedded GPG keys only if legacy keyring is present
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2021-07-04 22:08:47 +02:00
Jérémy Lecour
f673ea85d1
Force Debian version to buster for Evolix repository
2021-07-02 21:12:33 +02:00
Jérémy Lecour
2f68ae5339
Preliminary support for Bullseye
2021-07-02 20:58:09 +02:00
Jérémy Lecour
6bfef35729
Add bullseye APT repositories
2021-07-02 20:54:38 +02:00
Jérémy Lecour
0fe0244116
Update Galaxy metadata (company, platforms and galaxy_tags)
2021-06-28 15:26:28 +02:00
Jérémy Lecour
454d4c6d30
explicit permissions for APT GPG keys
continuous-integration/drone/push Build is passing
2021-05-26 13:47:34 +02:00
Jérémy Lecour
4d83f25ae6
fix pipefail option for shell invocations
continuous-integration/drone/push Build is passing
2021-05-18 14:04:54 +02:00
Jérémy Lecour
e65340cb56
Add pipefail option to shell invocations
continuous-integration/drone/push Build is passing
2021-05-13 15:34:27 +02:00
Jérémy Lecour
2ed77c60f0
Improve Ansible syntax
...
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour
58bf79218f
remove apt keys specifically from embedded database
2021-05-06 13:43:59 +02:00
Jérémy Lecour
7d08b0a30a
rename the tasks for embedded GPG keys
continuous-integration/drone/push Build is passing
2021-05-06 11:33:19 +02:00
Jérémy Lecour
b41a2fd04f
fix indentation
continuous-integration/drone/push Build is passing
2021-05-06 11:31:42 +02:00
Jérémy Lecour
83705a48b8
remove key from trusted.gpg only if file is present
continuous-integration/drone/push Build is passing
2021-05-06 10:42:12 +02:00
Jérémy Lecour
5138065059
Use 'loop' syntax instead of 'with_items'
2021-05-04 14:19:18 +02:00
Jérémy Lecour
9cdddd50a8
Move all trusted GPG keys to file repository
continuous-integration/drone/push Build is passing
2021-05-03 14:23:13 +02:00
Jérémy Lecour
a7971abb04
apt: store keys in /etc/apt/trusted.gpg.d in ascii format
2021-05-03 12:02:31 +02:00
Jérémy Lecour
