Alan Orth
51c95e5d4c
Update tarsnap task to use apt signed-by for package signing keys instead of adding keys directly to apt-key.
41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
---
|
|
- name: Check tarsnap apt signing key
|
|
ansible.builtin.stat:
|
|
path: /etc/apt/keyrings/tarsnap-deb-packaging-key.asc
|
|
register: tarsnap_signing_key_stat
|
|
|
|
- name: Download tarsnap apt signing key
|
|
ansible.builtin.get_url:
|
|
url: https://pkg.tarsnap.com/tarsnap-deb-packaging-key.asc
|
|
dest: /etc/apt/keyrings/tarsnap-deb-packaging-key.asc
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
register: download_tarsnap_signing_key
|
|
when: not tarsnap_signing_key_stat.stat.exists
|
|
|
|
- name: Add tarsnap.org repo
|
|
ansible.builtin.template:
|
|
src: tarsnap_sources.list.j2
|
|
dest: /etc/apt/sources.list.d/tarsnap.list
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
register: add_tarsnap_apt_repository
|
|
when: ansible_architecture != 'armv7l'
|
|
|
|
- name: Update apt cache
|
|
ansible.builtin.apt: # noqa no-handler
|
|
update_cache: true
|
|
when:
|
|
(download_tarsnap_signing_key.status_code is defined and download_tarsnap_signing_key.status_code == 200) or
|
|
add_tarsnap_apt_repository is changed
|
|
|
|
- name: Install tarsnap
|
|
ansible.builtin.apt: pkg=tarsnap cache_valid_time=3600
|
|
|
|
- name: Copy tarsnaprc
|
|
ansible.builtin.copy: src=tarsnaprc dest=/root/.tarsnaprc owner=root group=root mode=0600
|
|
|
|
# vim: set sw=2 ts=2:
|