3eceba5749
This converts the reprepro configuration from our existing puppet to Ansible. This takes a more direct approach; the templating done by the puppet version started simple but over the years grew several different options to handle various use-cases. This means you not only had to understand the rather obscure reprepro configuration, but then *also* figure out how to translate that from our puppet template layers. Here the configuration files are kept directly (they were copied from the existing mirror-update.openstack.org) and deployed with some light wrapper tasks in reprepro/tasks/utils which avoids most duplication. Note the initial cron jobs are left disabled so we can run some manual testing before letting it go automatically. Change-Id: I96a9ff1efbf51c4164621028b7a3a1e2e1077d5c
18 lines
537 B
YAML
18 lines
537 B
YAML
- name: Set Debian security config dir
|
|
set_fact:
|
|
_string_name: 'Debian Security'
|
|
_dir: 'debian-security'
|
|
_volume: 'mirror.debian-security'
|
|
_keys:
|
|
- { key_id: 'EDA0D2388AE22BA9', file: 'debian-stretch-security.asc' }
|
|
- { key_id: '4DFAB270CAA96DFA', file: 'debian-buster-security.asc' }
|
|
|
|
- name: Deploy debian-security keys
|
|
include_tasks: utils/keys.yaml
|
|
|
|
- name: Copy debian-security config
|
|
include_tasks: utils/copy-config.yaml
|
|
|
|
- name: Install Debian security cron job
|
|
include_tasks: utils/cron.yaml
|