zcash-gitian/roles/gitian/tasks/keys.yml

26 lines
889 B
YAML

---
- name: Download Zcash developer public keys from website.
become: yes
get_url:
url: "https://z.cash/gpg-pubkeys/{{ item.name }}.asc"
dest: "/tmp/{{ item.id }}.asc"
owner: "{{ gitian_user }}"
group: "{{ gitian_user }}"
mode: "0644"
with_items: "{{ zcash_developer_pubkeys }}"
- name: Import Zcash developer public keys.
command: "gpg --import /tmp/{{ item.id }}.asc"
become_user: "{{ gitian_user }}"
with_items: "{{ zcash_developer_pubkeys }}"
- name: Set Zcash developer public keys to ultimately trusted.
shell: >
gpg --list-keys --with-colons --with-fingerprint `gpg --list-keys
--with-colons | grep "pub:f:.*:-:" |
sed -r -e 's/pub:f:[0-9]+:[0-9]+:([A-F0-9]+):.*/0x\1/'` | grep "^fpr:" |
sed -r -e 's/fpr:::::::::([0-9A-F]+):/\1:6:/' | gpg --import-ownertrust
become_user: "{{ gitian_user }}"
args:
executable: /bin/bash