dev/host_vars/docker.yml

@@ -2,11 +2,6 @@
 allow_reboot: false
 manage_network: false
 
-# Import my GPG key for git signature verification
-root_gpgkeys:
-  - name: kris@lamoureux.io
-    id: FBF673CEEC030F8AECA814E73EDA9C3441EDA925
-
 # docker
 docker_users:
   - vagrant
@@ -15,7 +10,6 @@ docker_users:
 #docker_login_user: myuser
 #docker_login_pass: YOUR_PASSWD
 
-docker_compose_env_nolog: false # dev only setting
 docker_compose_deploy:
   # Traefik
   - name: traefik
@@ -23,8 +17,9 @@ docker_compose_deploy:
     version: 31ee724feebc1d5f91cb17ffd6892c352537f194
     enabled: true
     accept_newhostkey: true # Consider verifying manually instead
-    trusted_keys:
-      - FBF673CEEC030F8AECA814E73EDA9C3441EDA925
+    # Must manually add my public GPG key to root's keyring
+    #trusted_keys:
+    #  - FBF673CEEC030F8AECA814E73EDA9C3441EDA925
     env:
       ENABLE: true
 
@@ -34,8 +29,9 @@ docker_compose_deploy:
     version: 31ee724feebc1d5f91cb17ffd6892c352537f194
     enabled: true
     accept_newhostkey: true # Consider verifying manually instead
-    trusted_keys:
-      - FBF673CEEC030F8AECA814E73EDA9C3441EDA925
+    # Must manually add my public GPG key to root's keyring
+    #trusted_keys:
+    #  - FBF673CEEC030F8AECA814E73EDA9C3441EDA925
     env:
       ENABLE: true
       VERSION: "2.10"

roles/base/tasks/system.yml

@@ -9,30 +9,6 @@
     name: gpg
     state: present
 
-- name: Check for existing GPG keys
-  command: "gpg --list-keys {{ item.id }} 2>/dev/null"
-  register: gpg_check
-  loop: "{{ root_gpgkeys }}"
-  failed_when: false
-  changed_when: false
-  when: root_gpgkeys is defined
-
-- name: Import GPG keys
-  command: "gpg --keyserver {{ item.item.server | default('keys.openpgp.org') }} --recv-key {{ item.item.id }}"
-  register: gpg_check_import
-  loop: "{{ gpg_check.results }}"
-  loop_control:
-    label: "{{ item.item }}"
-  when: root_gpgkeys is defined and item.rc != 0
-
-- name: Check GPG key imports
-  fail:
-    msg: "{{ item.stderr }}"
-  loop: "{{ gpg_check_import.results }}"
-  loop_control:
-    label: "{{ item.item.item }}"
-  when: (item.skipped | default(false) == false) and ('imported' not in item.stderr)
-
 - name: Install NTPsec
   ansible.builtin.apt:
     name: ntpsec