Updated ansible for debian

data/ansible/deb_packages/gpg-gen-key.yaml

@@ -42,10 +42,3 @@
   become: true
   shell: "sudo gpg --batch --gen-key {{ gpg_home }}/.gnupg/gen-key-script-{{ rootUser }}"
 
-- name: get user armored public key
-  become: true
-  shell: "sudo gpg --armor --output {{ gpg_pubkeyfileexport }} --export {{ gpg_useremail }}"
-
-- name: After export move the key to /var/packages
-  become: true
-  shell: "sudo mv {{ gpg_pubkeyfileexport }} /var/packages"

data/ansible/deb_packages/gpg.yaml

@@ -1,4 +1,8 @@
 ---
+- name: Restart gpg-agent
+  become: true
+  shell: "gpgconf --kill all"
+
 - name: Ensure .gnupg config directory exists with right permissions
   become: true
   file: dest={{ gpg_home }}/.gnupg state=directory mode=0700 owner="{{ rootUser }}"
@@ -11,6 +15,29 @@
   become: yes
   become_user: "{{ rootUser }}"
   register: gpgkeys
+  
+- name: Check expired keys
+  become: yes
+  shell: "gpg --list-keys {{ gpg_realname }} | grep 'expired'"
+  ignore_errors: yes
+  failed_when: false
+  register: gpgExpKeys
+  when:  gpgkeys.stdout_lines|length > 0
+
+- name: Update expired
+  become: yes
+  shell: 'printf "expire\n{{ gpg_expire }}\nsave\n" | gpg --batch --command-fd 0 --status-fd=2 --edit-key {{ gpg_realname }}'
+  when: gpgkeys.stdout_lines|length > 0 and gpgExpKeys.stdout_lines|length > 0
 
 - include: gpg-gen-key.yaml
   when: gpgkeys.stdout_lines|length < 1
+
+- name: get user armored public key
+  become: true
+  shell: "sudo gpg --armor --output {{ gpg_pubkeyfileexport }} --export {{ gpg_useremail }}"
+  when: gpgkeys.stdout_lines|length < 1 or (gpgkeys.stdout_lines|length > 0 and gpgExpKeys.stdout_lines|length > 0)
+
+- name: After export move the key to /var/packages
+  become: true
+  shell: "sudo mv {{ gpg_pubkeyfileexport }} /var/packages"
+  when: gpgkeys.stdout_lines|length < 1 or (gpgkeys.stdout_lines|length > 0 and gpgExpKeys.stdout_lines|length > 0)

data/ansible/rpm_packages/gpg-gen-key.yaml

@@ -35,10 +35,3 @@
   become: true
   shell: "sudo gpg --batch --gen-key {{ gpg_home }}/.gnupg/gen-key-script-{{ rootUser }}"
 
-- name: get user armored public key
-  become: true
-  shell: "sudo gpg --armor --output {{ gpg_pubkeyfileexport }} --export {{ gpg_useremail }}"
-
-- name: After export move the key to /var/packages
-  become: true
-  shell: "sudo mv {{ gpg_pubkeyfileexport }} /var/packages"

data/ansible/rpm_packages/gpg.yaml

@@ -31,3 +31,13 @@
 
 - include: gpg-gen-key.yaml
   when: gpgkeys.stdout_lines|length < 1
+
+- name: get user armored public key
+  become: true
+  shell: "sudo gpg --armor --output {{ gpg_pubkeyfileexport }} --export {{ gpg_useremail }}"
+  when: gpgkeys.stdout_lines|length < 1 or (gpgkeys.stdout_lines|length > 0 and gpgExpKeys.stdout_lines|length > 0)
+
+- name: After export move the key to /var/packages
+  become: true
+  shell: "sudo mv {{ gpg_pubkeyfileexport }} /var/packages"
+  when: gpgkeys.stdout_lines|length < 1 or (gpgkeys.stdout_lines|length > 0 and gpgExpKeys.stdout_lines|length > 0)