aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/roles/apt_repo/tasks/main.yml
blob: bf9e3ea7413117c108056cd31023dcd73552d3d0 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
- name: Set up repository
  become: true
  vars:
    # For some reason, if the key is in a weird format that requires
    # running `gpg --dearmor`, you must save it with the .gpg extension
    # instead of .asc. You can then completely skip the gpg step. Source:
    # https://stackoverflow.com/q/71585303/514684
    apt_repo_key_path: '{{ apt_repo_keys_dir }}/{{ apt_repo_name }}{{ apt_repo_key_dearmor | ternary(".gpg", ".asc") }}'
  block:
    - name: Create keys directory
      ansible.builtin.file:
        path: '{{ apt_repo_keys_dir }}'
        mode: '755'
        state: directory

    - name: 'Add key: {{ apt_repo_name }}'
      ansible.builtin.get_url:
        url: '{{ apt_repo_key_url }}'
        dest: '{{ apt_repo_key_path }}'
        mode: '644'

    - name: Get host distro
      ansible.builtin.setup:
        gather_subset: [distribution_release]

    - name: 'Add repository: {{ apt_repo_name }}'
      ansible.builtin.apt_repository:
        repo: 'deb [signed-by={{ apt_repo_key_path }}] {{ apt_repo_url }} {{ distro }} {{ apt_repo_component }}'
        filename: '{{ apt_repo_name }}'
      vars:
        distro: '{{ apt_repo_distro | default(ansible_distribution_release) }}'