2016-11-25 01:37:46 +01:00
|
|
|
---
|
|
|
|
# Permits to apply per-site signed fixes automatically
|
|
|
|
#
|
|
|
|
# Prepare a script file, then crypt it with the Domain Administrator password:
|
|
|
|
# gpg -r info@bglug.it --symmetric --encrypt script.sh > script.sh.gpg
|
|
|
|
#
|
|
|
|
# Put the script within the server directory /var/lib/nethserver/ibay/ks/fixes
|
|
|
|
#
|
|
|
|
# List the file within domain.yml:
|
|
|
|
# apply_fixes:
|
|
|
|
# - script.sh.gpg
|
|
|
|
#
|
|
|
|
# Please see roles/prereq/files/samba-downgrade_20161124.sh as a template.
|
|
|
|
#
|
|
|
|
|
|
|
|
- name: Applying local signed fixes
|
|
|
|
shell: "/usr/bin/curl -sSL http://{{ ansible_local.domain.serverfqdn }}/ks/fixes/{{ item }} | /usr/bin/gpg --passphrase {{ domainadminpasswd }} --decrypt | sudo /bin/bash"
|
2019-11-18 23:47:10 +01:00
|
|
|
args:
|
|
|
|
warn: false
|
2016-11-25 01:37:46 +01:00
|
|
|
with_items: "{{ ansible_local.domain.apply_fixes|default([]) }}"
|