Skip to content

Instantly share code, notes, and snippets.

@KellerFuchs
Last active September 23, 2018 19:54
Show Gist options
  • Save KellerFuchs/d60a46c4722e2d60eee7004f8b3d1f41 to your computer and use it in GitHub Desktop.
Save KellerFuchs/d60a46c4722e2d60eee7004f8b3d1f41 to your computer and use it in GitHub Desktop.
Reproducing testcase for apt_key bug
/.vagrant
/log
*.retry
[defaults]
inventory = ./.vagrant/provisioners/ansible/inventory
log_path = ./log
nocows=1
gathering = smart
var_compression_level = 9
[ssh_connection]
pipelining = True
ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s
---
- hosts: default
become: yes
pre_tasks:
- name: Setup a pre-existing keyring
copy:
src: deb.torproject.org-keyring.gpg
dest: /etc/apt/trusted.gpg.d/
tasks:
- # This is the buggy call:
# it will fail to update deb.torproject.org-keyring.gpg even though
# tor.asc contains a new signing subkey for the reposirory key.
apt_key:
data: "{{ lookup('file', 'tor.asc') }}"
id: A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
keyring: /etc/apt/trusted.gpg.d/deb.torproject.org-keyring.gpg
- # Setup the repote repository
# Fails due to the previous task failing to update the keyring
apt_repository:
repo: deb https://deb.torproject.org/torproject.org stretch main
state: present
filename: tor
- # Now, apt update fails
apt:
update_cache: yes
-----BEGIN PGP PUBLIC KEY BLOCK-----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=Kjcs
-----END PGP PUBLIC KEY BLOCK-----
Vagrant.configure("2") do |config|
config.vm.box = "debian/contrib-testing64"
config.ssh.insert_key = false
config.vm.provision "ansible" do |ansible|
ansible.playbook = "test.yml"
end
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment