Skip to content

Guard SQ inspect command for RHEL>=10.1 only #14596

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Mab879 merged 1 commit into from
Mar 26, 2026
+16 −1
Merged

Guard SQ inspect command for RHEL>=10.1 only #14596

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/ansible/shared.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,16 @@
failed_when: False
check_mode: no
register: gpg_fingerprints
when: ansible_distribution_version is version('10.1', '>=')

- name: "{{{ rule_title }}}: Read signatures in GPG key"
# According to /usr/share/doc/gnupg2/DETAILS fingerprints are in "fpr" record in field 10
ansible.builtin.command: gpg --show-keys --with-fingerprint --with-colons "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
changed_when: False
register: gpg_fingerprints
failed_when: False
check_mode: no
when: ansible_distribution_version is version('10.1', '<')

- name: "{{{ rule_title }}}: Set Fact - Installed GPG Fingerprints (sq format)"
ansible.builtin.set_fact:
Expand Down
7 changes: 6 additions & 1 deletion linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/bash/shared.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,12 @@ then
# If they are safe, try to obtain fingerprints from the key file
# (to ensure there won't be e.g. CRC error).
{{% if "rhel" in families and major_version_ordinal >= 10 %}}
readarray -t GPG_OUT < <(sq inspect "$REDHAT_RELEASE_KEY" | grep Fingerprint: | cut -d ":" -f 2)
if {{{ bash_os_linux_conditional("rhel", expected_ver="10.1", op=">=") | trim }}}
then
readarray -t GPG_OUT < <(sq inspect "$REDHAT_RELEASE_KEY" | grep Fingerprint: | cut -d ":" -f 2)
else
readarray -t GPG_OUT < <(gpg --show-keys --with-fingerprint --with-colons "$REDHAT_RELEASE_KEY" | grep -A1 "^pub" | grep "^fpr" | cut -d ":" -f 10)
fi
{{% else %}}
readarray -t GPG_OUT < <(gpg --show-keys --with-fingerprint --with-colons "$REDHAT_RELEASE_KEY" | grep -A1 "^pub" | grep "^fpr" | cut -d ":" -f 10)
{{% endif %}}
Expand Down
Loading