robosignatory: small fixes

Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-02-08 15:35:31 -08:00
parent 100c9b484d
commit ebd01fab62
2 changed files with 2 additions and 2 deletions

View file

@ -208,7 +208,7 @@
dest: /usr/local/bin/sigul-add-key
owner: root
group: root
mode: 0711
mode: 0755
when: env != 'staging'
notify:
- reload systemd

View file

@ -438,7 +438,7 @@ handlers = ["console"]
from = "f40"
to = "f40"
key = "{{ (env == 'production')|ternary('fedora-41', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('2e99d6ad1', 'd300e724') }}"
keyid = "{{ (env == 'production')|ternary('e99d6ad1', 'd300e724') }}"
file_signing_key = "fedora-41-ima"
# F40 Mass Rebuild