Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

robosignatory: small fixes

Browse source 
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-02-08 15:35:31 -08:00
parent 100c9b484d
commit ebd01fab62
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/robosignatory/tasks/main.yml
View file

@ -208,7 +208,7 @@
dest: /usr/local/bin/sigul-add-key dest: /usr/local/bin/sigul-add-key
owner: root owner: root
group: root group: root
mode: 0711 mode: 0755
when: env != 'staging' when: env != 'staging'
notify: notify:
- reload systemd - reload systemd

2
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -438,7 +438,7 @@ handlers = ["console"]
from = "f40" from = "f40"
to = "f40" to = "f40"
key = "{{ (env == 'production')|ternary('fedora-41', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-41', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('2e99d6ad1', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('e99d6ad1', 'd300e724') }}"
file_signing_key = "fedora-41-ima" file_signing_key = "fedora-41-ima"
# F40 Mass Rebuild # F40 Mass Rebuild