X-Git-Url: https://git.realraum.at/?a=blobdiff_plain;f=ansible%2Froles%2Fopenwrt-image%2Ftasks%2Ffetch.yml;h=f68c87db28812de6b850399f9381711aa26de03b;hb=a4afa06c56a7c8e50f9ef94bb2cc1d8bba47a5b6;hp=4b5b1c8aed4557f1ddcc5250bc46f441d36df1c7;hpb=3ca11d4bcb124eee97b958149c34201bdf83677c;p=noc.git

diff --git a/ansible/roles/openwrt-image/tasks/fetch.yml b/ansible/roles/openwrt-image/tasks/fetch.yml
index 4b5b1c8..f68c87d 100644
--- a/ansible/roles/openwrt-image/tasks/fetch.yml
+++ b/ansible/roles/openwrt-image/tasks/fetch.yml
@@ -21,7 +21,11 @@
         dest: "{{ openwrt_download_dir }}/{{ openwrt_tarball_basename }}.sha256.asc"
 
     - name: Check OpenPGP signature
-      command: gpg --verify "{{ openwrt_download_dir }}/{{ openwrt_tarball_basename }}.sha256.asc"
+      command: >-
+        gpg2 --no-options --no-default-keyring --secret-keyring /dev/null
+             --verify --keyring "{{ role_path }}/openwrt-keyring.gpg"
+             --trust-model always
+             "{{ openwrt_download_dir }}/{{ openwrt_tarball_basename }}.sha256.asc"
       changed_when: False
 
     - name: Extract SHA256 hash of the imagebuilder archive