use keyring and signed-by

ngine-io · Oct 15, 2024 · 02e101d · 02e101d
1 parent 7a71136
commit 02e101d
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -13,17 +13,18 @@
 - name: Import GPG key to apt
   ansible.builtin.get_url:
     url: "{{ tailscale__apt_key_url }}"
-    dest: /etc/apt/trusted.gpg.d/tailscale.gpg
+    dest: /etc/apt/keyrings/tailscale.gpg
     mode: "0644"
     owner: root
+    group: root
   register: result
   until: result is succeeded
   retries: 5
   delay: 2
 
 - name: Add repository
   ansible.builtin.apt_repository:
-    repo: deb {{ tailscale__apt_repository_url }} {{ ansible_distribution_release }} main
+    repo: deb [signed-by=/etc/apt/keyrings/tailscale.gpg] {{ tailscale__apt_repository_url }} {{ ansible_distribution_release }} main
 
 - name: Install from repository
   ansible.builtin.apt: