From f97f618d0cc4a2cc2cb79bacb6186cfdeb469b01 Mon Sep 17 00:00:00 2001 From: Sven-Hendrik Haase <svenstaro@gmail.com> Date: Mon, 20 Jan 2025 14:58:01 +0100 Subject: [PATCH] aurweb: Skip commit validation if we are not on prod This makes it so that you don't need to be in the list of trusted GPG keys `aurweb_pgp_keys` in order to start a test instance for the AUR. I think `aurweb_pgp_keys` should only be for people wanting to deploy this to production. --- roles/aurweb/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/aurweb/tasks/main.yml b/roles/aurweb/tasks/main.yml index 5576bd83d..af669fd57 100644 --- a/roles/aurweb/tasks/main.yml +++ b/roles/aurweb/tasks/main.yml @@ -63,7 +63,7 @@ repo={{ aurweb_repository }} dest="{{ aurweb_dir }}" version={{ aurweb_version }} - verify_commit=true + verify_commit="{{ aurweb_environment_type == 'prod' }}" gpg_allowlist='{{ aurweb_pgp_keys }}' become: true become_user: "{{ aurweb_user }}" @@ -85,7 +85,7 @@ repo={{ aurweb_repository }} dest="{{ aurweb_dir }}" version={{ aurweb_version }} - verify_commit=true + verify_commit="{{ aurweb_environment_type == 'prod' }}" gpg_allowlist='{{ aurweb_pgp_keys }}' become: true become_user: "{{ aurweb_user }}" -- GitLab