From 32dcaee33824464d33bcadff78d3c2958d79e959 Mon Sep 17 00:00:00 2001
From: Ahmed Abdelhalim <pm@a14m.dev>
Date: Sat, 8 Nov 2025 23:36:18 +0100
Subject: Add gpg public key import to gpg role

---
 roles/gpg/tasks/main.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'roles/gpg/tasks/main.yml')

diff --git a/roles/gpg/tasks/main.yml b/roles/gpg/tasks/main.yml
index c16ec636..6419d88d 100644
--- a/roles/gpg/tasks/main.yml
+++ b/roles/gpg/tasks/main.yml
@@ -7,3 +7,15 @@
   ansible.builtin.package:
     name: "{{ gpg_packages }}"
     state: "present"
+
+- name: "Import GPG public keys"
+  ansible.builtin.shell: |
+    set -euo pipefail
+    echo "{{ item }}" | gpg --import
+  args:
+    executable: /bin/bash
+  loop: "{{ gpg_public_keys }}"
+  when: gpg_public_keys is defined
+  register: gpg_import_result
+  changed_when: "'imported' in gpg_import_result.stderr"
+  failed_when: gpg_import_result.rc != 0 and 'already in secret keyring' not in gpg_import_result.stderr
-- 
cgit v1.2.3