From 5bda75100a638405769764373be32a6115874d12 Mon Sep 17 00:00:00 2001 From: Georg Pfuetzenreuter Date: Sun, 22 Jan 2023 20:44:39 +0100 Subject: Manage LC repository + ca-certificates manage - home:crameleon:LibertaCasa repository - ca-certificates-syscid in common SUSE state. Signed-off-by: Georg Pfuetzenreuter --- salt/common/suse.sls | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) (limited to 'salt') diff --git a/salt/common/suse.sls b/salt/common/suse.sls index 0cfce32..984c25a 100644 --- a/salt/common/suse.sls +++ b/salt/common/suse.sls @@ -2,3 +2,37 @@ include: - profile.seccheck - profile.zypp - profile.node_exporter + +{#- to-do: move this to some formula or macro -#} +{%- set osfullname = grains['osfullname'] -%} +{#- this SLES clause likely only works in BCI -#} +{%- if osfullname == 'Leap' or osfullname == 'SLES' -%} +{%- set repoos = grains['osrelease'] -%} +{%- elif osfullname == 'openSUSE Tumbleweed' -%} +{%- set repoos = 'openSUSE_Tumbleweed' -%} +{%- else -%} +{%- do salt.log.error('Unsupported operating system.') -%} +{%- endif -%} +{%- set repobase = 'https://download.opensuse.org/repositories/home:/crameleon:/LibertaCasa/' ~ repoos -%} +{%- set repokey = repobase ~ '/repodata/repomd.xml.key' %} + +libertacasa_rpm_key: + cmd.run: + - name: rpm --import {{ repokey }} + - unless: rpm -q --quiet gpg-pubkey-f8722274-5f7a4d7b + +libertacasa_rpm_repository: + pkgrepo.managed: + - name: 'LibertaCasa' + - baseurl: {{ repobase }} + - comments: + - 'Managed by Salt' + - gpgcheck: 1 + - gpgkey: {{ repokey }} + - require: + - cmd: libertacasa_rpm_key + +ca-certificates-syscid: + pkg.installed: + - require: + - pkgrepo: libertacasa_rpm_repository -- cgit v1.2.3