commit 64113f1216ea97f83b2abecd98a3764256f7f8cc
author Petr Michalec <epcim@apealive.net> Thu Jun 07 08:16:44 2018 +0200
committer GitHub <noreply@github.com> Thu Jun 07 08:16:44 2018 +0200
tree 83b04bb1b8f4db2654a475eeee037dd4eded9334
parent 7752d48fac70ed7fce4083f981e77c8b6d13d361
parent 9673a18fbaa148afc2912cef334bc220cf09d3ba

Merge pull request #150 from horakmar/repo-key-via-proxy

Workaround for fetching repo keys via proxy.

linux/system/repo.sls

diff --git a/linux/system/repo.sls b/linux/system/repo.sls
index ace6dab..b734498 100644
--- a/linux/system/repo.sls
+++ b/linux/system/repo.sls
@@ -85,7 +85,7 @@
 
 linux_repo_{{ name }}_key:
   cmd.wait:
-    - name: "echo '{{ repo.key }}' | apt-key add -"
+    - name: "echo -e '{{ repo.key|replace('\n', '\\n') }}' | apt-key add -"
     - watch:
       - file: default_repo_list
 
@@ -93,7 +93,7 @@
 
 linux_repo_{{ name }}_key:
   cmd.wait:
-    - name: "curl -s {{ repo.key_url }} | apt-key add -"
+    - name: "curl -sL {{ repo.key_url }} | apt-key add -"
     - watch:
       - file: default_repo_list
 
@@ -121,9 +121,6 @@
   {%- if repo.key_server is defined %}
   - keyserver: {{ repo.key_server }}
   {%- endif %}
-  {%- if repo.key_url is defined %}
-  - key_url: {{ repo.key_url }}
-  {%- endif %}
   - consolidate: {{ repo.get('consolidate', False) }}
   - clean_file: {{ repo.get('clean_file', False) }}
   - refresh_db: {{ repo.get('refresh_db', True) }}
@@ -140,6 +137,26 @@
   {%- endif %}
   {%- endif %}
 
+{%- if repo.get('key') %}
+
+linux_repo_{{ name }}_key:
+  cmd.run:
+    - name: "echo -e '{{ repo.key|replace('\n', '\\n') }}' | apt-key add -"
+    - unless: "apt-key finger --with-colons | grep -qF $(echo -e '{{ repo.key|replace('\n', '\\n') }}' | gpg --with-fingerprint --with-colons | grep -E '^fpr')"
+    - require_in:
+      - pkgrepo: linux_repo_{{ name }}
+
+{%- elif repo.key_url|default(False) %}
+
+linux_repo_{{ name }}_key:
+  cmd.run:
+    - name: "curl -sL {{ repo.key_url }} | apt-key add -"
+    - unless: "apt-key finger --with-colons | grep -qF $(curl -sL {{ repo.key_url }} | gpg --with-fingerprint --with-colons | grep -E '^fpr')"
+    - require_in:
+      - pkgrepo: linux_repo_{{ name }}
+
+{%- endif %}
+
 {%- else %}
 
 linux_repo_{{ name }}_absent: