Do not install post-quantum GPG keys
At the moment rpm_key fails to process PQC GPG keys while attempting to check if gpg is installed [1]. Thus, rpm_key needs to start running sequoia instead of gnupg to verify PQ keys. Until then, we avoid importing PQC keys. [1] https://github.com/ansible/ansible/blob/69afa45880c9c03009b178632dccc7c0ffc5b5fa/lib/ansible/modules/rpm_key.py#L240 Change-Id: If176d905411869b55ff1751659f5e46963c9f037 Signed-off-by: Dmitriy Rabotyagov <dmitriy.rabotyagov@cleura.com>
This commit is contained in:
@@ -6,7 +6,11 @@ set -e -x
|
||||
{% include 'templates/prep-scripts/_container_sys_setup.sh.j2' %}
|
||||
|
||||
if [[ -d "/etc/pki/rpm-gpg" ]]; then
|
||||
rpm --import /etc/pki/rpm-gpg/* || true
|
||||
for key in /etc/pki/rpm-gpg/*; do
|
||||
if [[ "${key}" != *-PQC ]]; then
|
||||
rpm --import "${key}" || true
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
# The containers do not need the LXC repository (only hosts need it).
|
||||
|
||||
Reference in New Issue
Block a user