From: Ken Dreyer <kdreyer@redhat.com>
Date: Tue, 12 Feb 2019 23:37:52 +0000 (-0700)
Subject: add GPG checking for RHEL 8
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=f48da0ed598e5da557530939f915d5d997a73c49;p=ceph-cm-ansible.git

add GPG checking for RHEL 8

The RHEL 8 beta is GPG-signed, so we might as well verify signatures.
---

diff --git a/roles/common/vars/redhat_8.yml b/roles/common/vars/redhat_8.yml
index 69989f83..d9aca4c8 100644
--- a/roles/common/vars/redhat_8.yml
+++ b/roles/common/vars/redhat_8.yml
@@ -11,9 +11,11 @@ beta_repos:
     name: "RHEL {{ ansible_distribution_version }} BaseOS (RPMs)"
     baseurl: "https://downloads.redhat.com/redhat/rhel/rhel-8-beta/baseos/x86_64/"
     enabled: 1
-    gpgcheck: 0
+    gpgcheck: 1
+    gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
   rhel-beta-appstream:
     name: "RHEL {{ ansible_distribution_version }} AppStream (RPMs)"
     baseurl: "https://downloads.redhat.com/redhat/rhel/rhel-8-beta/appstream/x86_64/"
     enabled: 1
-    gpgcheck: 0
+    gpgcheck: 1
+    gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release