diff --git a/templates/usr/share/lxc/templates/lxc-debops.j2 b/templates/usr/share/lxc/templates/lxc-debops.j2 index 9444792..095b101 100755 --- a/templates/usr/share/lxc/templates/lxc-debops.j2 +++ b/templates/usr/share/lxc/templates/lxc-debops.j2 @@ -75,7 +75,7 @@ EOF {% if lxc_template_salt is defined and lxc_template_salt %} # Configure Salt APT repository echo "{{ lxc_template_salt_upstream_repository }}" >> $rootfs/etc/apt/sources.list - wget -q -O- "{{ lxc_template_salt_apt_key_url }}" | chroot $rootfs apt-key add - + chroot $rootfs apt-key adv --keyserver "{{ lxc_default_gpg_keyserver }}" --recv-keys "{{ lxc_template_salt_apt_key_fingerprint }}" chroot $rootfs apt-get update # Install Salt packages diff --git a/vars/main.yml b/vars/main.yml index 382baf1..f6ded8f 100644 --- a/vars/main.yml +++ b/vars/main.yml @@ -32,7 +32,12 @@ lxc_kernel_mail_body: | # ---- Salt integration ---- # SaltStack Debian repository GPG key -lxc_template_salt_apt_key_url: 'http://debian.saltstack.com/debian-salt-team-joehealy.gpg.key' +lxc_template_salt_apt_key_fingerprint: '102E2FE7D5141DBD12B260FCB09E40B0F2AE6AB9' + +lxc_default_gpg_keyserver: '{{ ansible_local.core.keyserver + if (ansible_local|d() and ansible_local.core|d() and + ansible_local.core.keyserver|d()) + else "hkp://pool.sks-keyservers.net" }}' # SaltStack Debian APT repository lxc_template_salt_upstream_repository: 'deb http://debian.saltstack.com/debian {{ ansible_distribution_release.split("/")[0] }}-saltstack main'