Harden Rocky storage and sharing configuration

2026-09-28 03:03:49 +00:00 · 2026-09-15 22:05:48 +02:00
parent 2ab5ba6818
commit c899bb7192
7 changed files with 127 additions and 79 deletions
--- a/ansible/roles/packages_rocky/tasks/main.yml
+++ b/ansible/roles/packages_rocky/tasks/main.yml
@@ -27,6 +27,14 @@
    name: epel-release
    state: present

+- name: Import official OpenZFS EL9+ signing key
+  tags: [packages, storage]
+  ansible.builtin.rpm_key:
+    state: present
+    key: "{{ rocky_openzfs_gpg_key_url }}"
+    fingerprint: "{{ rocky_openzfs_gpg_key_fingerprint }}"
+  when: rocky_manage_openzfs_repo | bool
+
 - name: Install official OpenZFS repository package
  tags: [packages, storage]
  ansible.builtin.dnf: