roles/gpg/tasks/main.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

---
- name: "Include OS-specific variables"
  ansible.builtin.include_vars: "{{ ansible_facts['os_family'] | lower }}.yml"

- name: "Ensure gpg is installed"
  become: true
  ansible.builtin.package:
    name: "{{ gpg_packages }}"
    state: "present"

- name: "Import GPG public keys"
  ansible.builtin.shell: |
    set -euo pipefail
    echo "{{ item }}" | gpg --import
  args:
    executable: /bin/bash
  loop: "{{ gpg_public_keys }}"
  when: gpg_public_keys is defined
  register: gpg_import_result
  changed_when: "'imported' in gpg_import_result.stderr"
  failed_when: gpg_import_result.rc != 0 and 'already in secret keyring' not in gpg_import_result.stderr
  no_log: true

- name: "Enable smart-card reader daemon"
  become: true
  ansible.builtin.systemd_service:
    name: "pcscd.socket"
    enabled: true