rene/ansible-pull
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

apt-key is deprecated

Browse Source
This commit is contained in:
Rene Mewissen
2025-10-21 15:47:07 +02:00
parent 21b4dbc2e2
commit 4643606020
1 changed files with 16 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
roles/omada-controller/tasks/main.yml
View File

@@ -19,6 +19,7 @@
name: name:
- "{{ omada_controller_java_package }}" - "{{ omada_controller_java_package }}"
- jsvc - jsvc
- gnupg # Benötigt für gpg --dearmor
- curl - curl
state: present state: present
update_cache: yes update_cache: yes
@@ -31,19 +32,28 @@
name: apt-transport-https name: apt-transport-https
state: present state: present
- name: Add MongoDB GPG key - name: Download MongoDB GPG key
ansible.builtin.apt_key: ansible.builtin.get_url:
url: https://www.mongodb.org/static/pgp/server-6.0.asc url: https://www.mongodb.org/static/pgp/server-6.0.asc
state: present dest: /tmp/mongodb-server-6.0.asc
# Der Schlüssel für MongoDB 6.0 ist 68818C72E52529D4. mode: '0644'
# Kann mit 'apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 68818C72E52529D4' verifiziert werden.
- name: Dearmor MongoDB GPG key and place in /usr/share/keyrings
ansible.builtin.command:
cmd: "gpg --dearmor -o /usr/share/keyrings/mongodb-archive-keyring.gpg /tmp/mongodb-server-6.0.asc"
creates: /usr/share/keyrings/mongodb-archive-keyring.gpg
args:
warn: false # Unterdrückt Warnungen, die gpg ausgeben könnte
# Hinweis: Der Pfad /usr/share/keyrings/ ist der empfohlene Ort für Schlüssel, die mit 'signed-by' verwendet werden.
- name: Add MongoDB repository - name: Add MongoDB repository
ansible.builtin.apt_repository: ansible.builtin.apt_repository:
repo: "deb [ arch=amd64,arm64 ] https://repo.mongodb.org/apt/ubuntu {{ omada_controller_mongodb_repo_release }}/mongodb-org/6.0 multiverse" repo: "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-archive-keyring.gpg ] https://repo.mongodb.org/apt/ubuntu {{ omada_controller_mongodb_repo_release }}/mongodb-org/6.0 multiverse"
state: present state: present
filename: mongodb-org-6.0 filename: mongodb-org-6.0
update_cache: yes update_cache: yes
# Der 'signed-by'-Parameter verweist auf den zuvor dearmored Schlüssel.
# Dies ist die moderne und sichere Methode, GPG-Schlüssel für APT-Repositories zu handhaben.
- name: Install MongoDB server - name: Install MongoDB server
# Der Omada Controller benötigt MongoDB >= 3.0.0. # Der Omada Controller benötigt MongoDB >= 3.0.0.