mirror of https://github.com/ansible/ansible.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
104 lines
2.5 KiB
YAML
104 lines
2.5 KiB
YAML
---
|
|
- name: download EPEL GPG key
|
|
get_url:
|
|
url: https://download.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7
|
|
dest: /tmp/RPM-GPG-KEY-EPEL-7
|
|
|
|
- name: download sl rpm
|
|
get_url:
|
|
url: https://download.fedoraproject.org/pub/epel/7/x86_64/s/sl-5.02-1.el7.x86_64.rpm
|
|
dest: /tmp/sl.rpm
|
|
|
|
- name: download Mono key
|
|
get_url:
|
|
url: http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x3FA7E0328081BFF6A14DA29AA6A19B38D3D831EF
|
|
dest: /tmp/mono.gpg
|
|
|
|
- name: remove EPEL GPG key from keyring
|
|
rpm_key:
|
|
state: absent
|
|
key: /tmp/RPM-GPG-KEY-EPEL-7
|
|
|
|
- name: check GPG signature of sl. Should fail
|
|
shell: "rpm --checksig /tmp/sl.rpm"
|
|
register: sl_check
|
|
ignore_errors: yes
|
|
|
|
- name: confirm that signature check failed
|
|
assert:
|
|
that:
|
|
- "'MISSING KEYS' in sl_check.stdout"
|
|
- "sl_check.failed"
|
|
|
|
- name: remove EPEL GPG key from keyring (idempotent)
|
|
rpm_key:
|
|
state: absent
|
|
key: /tmp/RPM-GPG-KEY-EPEL-7
|
|
register: idempotent_test
|
|
|
|
- name: check idempontence
|
|
assert:
|
|
that: "not idempotent_test.changed"
|
|
|
|
- name: add EPEL GPG key to key ring
|
|
rpm_key:
|
|
state: present
|
|
key: /tmp/RPM-GPG-KEY-EPEL-7
|
|
|
|
- name: add EPEL GPG key to key ring (idempotent)
|
|
rpm_key:
|
|
state: present
|
|
key: /tmp/RPM-GPG-KEY-EPEL-7
|
|
|
|
- name: add Mono gpg key
|
|
rpm_key:
|
|
state: present
|
|
key: /tmp/mono.gpg
|
|
|
|
- name: add Mono gpg key
|
|
rpm_key:
|
|
state: present
|
|
key: /tmp/mono.gpg
|
|
register: mono_indempotence
|
|
|
|
- name: verify idempotence
|
|
assert:
|
|
that: "not mono_indempotence.changed"
|
|
|
|
- name: check GPG signature of sl. Should return okay
|
|
shell: "rpm --checksig /tmp/sl.rpm"
|
|
register: sl_check
|
|
|
|
- name: confirm that signature check succeeded
|
|
assert:
|
|
that: "'rsa sha1 (md5) pgp md5 OK' in sl_check.stdout"
|
|
|
|
- name: remove GPG key from url
|
|
rpm_key:
|
|
state: absent
|
|
key: https://download.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7
|
|
|
|
- name: Confirm key is missing
|
|
shell: "rpm --checksig /tmp/sl.rpm"
|
|
register: sl_check
|
|
ignore_errors: yes
|
|
|
|
- name: confirm that signature check failed
|
|
assert:
|
|
that:
|
|
- "'MISSING KEYS' in sl_check.stdout"
|
|
- "sl_check.failed"
|
|
|
|
- name: add GPG key from url
|
|
rpm_key:
|
|
state: present
|
|
key: https://download.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7
|
|
|
|
- name: check GPG signature of sl. Should return okay
|
|
shell: "rpm --checksig /tmp/sl.rpm"
|
|
register: sl_check
|
|
|
|
- name: confirm that signature check succeeded
|
|
assert:
|
|
that: "'rsa sha1 (md5) pgp md5 OK' in sl_check.stdout"
|