commit bc173b7da9d24e4e5a25fde4aa814ea0f702525d parent 969f9703e96928efb0e625111cf1ab296b199d4f Author: Chris Roberts <chris.roberts@learningunix.net> Date: Mon, 22 Jun 2026 09:52:26 -0500 added gpg role Diffstat:
| A | roles/gpg/meta/main.yml | | | 6 | ++++++ |
| A | roles/gpg/tasks/main.yml | | | 25 | +++++++++++++++++++++++++ |
| M | site.yml | | | 2 | ++ |
3 files changed, 33 insertions(+), 0 deletions(-)
diff --git a/roles/gpg/meta/main.yml b/roles/gpg/meta/main.yml @@ -0,0 +1,6 @@ +--- +galaxy_info: + author: cjr + description: Import GPG keys from private git repo + license: BSD-3-Clause + min_ansible_version: "2.1" diff --git a/roles/gpg/tasks/main.yml b/roles/gpg/tasks/main.yml @@ -0,0 +1,25 @@ +--- +- name: Clone GPG keys repo + ansible.builtin.git: + repo: cjr@git:/home/cjr/git/keys + dest: "{{ ansible_facts['user_dir'] }}/.gpg-keys" + update: true + version: main + +- name: Import GPG public key + ansible.builtin.command: + cmd: gpg --import {{ ansible_facts['user_dir'] }}/.gpg-keys/public-key.asc + register: gpg_import_public + changed_when: "'imported' in gpg_import_public.stderr" + +- name: Import GPG secret key + ansible.builtin.command: + cmd: gpg --import {{ ansible_facts['user_dir'] }}/.gpg-keys/secret-key.asc + register: gpg_import_secret + changed_when: "'imported' in gpg_import_secret.stderr" + no_log: true + +- name: Remove cloned GPG keys + ansible.builtin.file: + path: "{{ ansible_facts['user_dir'] }}/.gpg-keys" + state: absent diff --git a/site.yml b/site.yml @@ -23,6 +23,8 @@ connection: local roles: + - role: gpg + tags: gpg - role: ssh tags: ssh - role: pass