Browse Source

Disable gpg verify for tripleo-repos rpm install

Ansible addressed gpg verification for CVE-2020-14365 and we need to
disable the gpg check for the installation of an rpm package from a url.

Change-Id: I736bb62d2118734e567ee00e7ec9554828e56852
tags/0.4.0
Alex Schultz 2 weeks ago
parent
commit
a41a72483a
1 changed files with 2 additions and 0 deletions
  1. +2
    -0
      roles/tripleo_repos/tasks/install.yml

+ 2
- 0
roles/tripleo_repos/tasks/install.yml View File

@@ -29,4 +29,6 @@
yum:
name: "{{ _tripleo_repos_repo_url }}{{ _tripleo_repos_rpm }}"
state: present
# We do not sign the rpm and we are fetching straight from a URL
disable_gpg_check: true
become: true

Loading…
Cancel
Save