sigul / server: modernize playbook

This had a bunch of old rhel7 stuff in it, we are on 9 now and using
gnupg2.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-05-20 11:28:44 -07:00
parent 43baed5a53
commit 07837f83a7

View file

@ -1,12 +1,4 @@
---
- name: Put rhel AH repos on rhel systems
ansible.builtin.copy: src="{{ files }}/common/rhel7ah.repo" dest="/etc/yum.repos.d/rhel7ah.repo"
when: ansible_distribution == 'RedHat'
tags:
- config
- packages
- yumrepos
- name: Install sigul server
ansible.builtin.package: state=present name={{ item }}
with_items:
@ -27,27 +19,10 @@
- name: Enable pcscd
service: name=pcscd state=started enabled=yes
- name: Install rhel7 only packages
ansible.builtin.package: state=present name={{ item }}
with_items:
- gnupg1
when: ansible_distribution_major_version|int == 7 and ansible_distribution == 'RedHat'
tags:
- packages
- name: Install gnupg packages
ansible.builtin.package: state=present name={{ item }}
with_items:
- gnupg
when: ansible_distribution_major_version|int >= 8 and ansible_distribution == 'RedHat'
tags:
- packages
- name: Install gnupg packages
ansible.builtin.package: state=present name={{ item }}
with_items:
- gnupg
when: ansible_distribution_major_version|int >= 29 and ansible_distribution == 'Fedora'
tags:
- packages
@ -57,10 +32,6 @@
tags:
- config
- name: Setup gpg link on rhel7
ansible.builtin.file: state=link src=/usr/bin/gpg1 dest=/usr/bin/gpg
when: ansible_distribution_major_version|int == 7 and ansible_distribution == 'RedHat'
- name: Add polkit rules to allow sigul user to access the smartcard/yubikey
ansible.builtin.copy: src=00-sigul.rules dest=/etc/polkit-1/rules.d/00-sigul.rules
tags: