18761: address review comments

[arvados-formula.git] / arvados / repo / install.sls

diff --git a/arvados/repo/install.sls b/arvados/repo/install.sls
index 41df68bbad873d0d0c6b925e76dcfd8975a477d9..c22bbbc6a47ec9602441030e78aeb213d5915081 100644 (file)
--- a/arvados/repo/install.sls
+++ b/arvados/repo/install.sls
@@ -7,19 +7,32 @@
 
 {%- if arvados.use_upstream_repo %}
   {%- if grains.get('os_family') == 'Debian' %}
+    {%- set distro = grains.get('lsb_distrib_codename') %}
+
     {%- if arvados.release == 'testing' %}
-      {%- set release = grains.get('lsb_distrib_codename') ~ '-testing' %}
+      {%- set release = distro ~ '-testing' %}
     {%- elif arvados.release == 'development' %}
-      {%- set release = grains.get('lsb_distrib_codename') ~ '-dev' %}
+      {%- set release = distro ~ '-dev' %}
     {%- else %}
-      {%- set release = grains.get('lsb_distrib_codename') %}
+      {%- set release = distro %}
     {%- endif %}
+
+arvados-repo-install-pkgrepo-keyring-managed:
+  file.managed:
+    - name: {{ arvados.repo.keyring_file }}
+    - source:
+      - {{ arvados.repo.keyring_source }}
+    - source_hash: sha256={{ arvados.repo.keyring_source_hash }}
+    - require_in:
+      - pkgrepo: arvados-repo-install-pkgrepo-managed
+
 arvados-repo-install-pkgrepo-managed:
   pkgrepo.managed:
     - humanname: {{ arvados.repo.humanname }}
-    - name: deb {{ arvados.repo.url_base }}/{{ release }} {{ release }} main
+    - name: >-
+        deb [signed-by={{ arvados.repo.keyring_file }} arch=amd64]
+        {{ arvados.repo.url_base }}/{{ distro }} {{ release }} main
     - file: {{ arvados.repo.file }}
-    - key_url: {{ arvados.repo.key_url }}
 
   {%- elif grains.get('os_family') == 'RedHat' %}
     {%- if arvados.release == 'testing' %}