Add an apt-keys module

diff --git a/modules/apt-keys/files/db.debian.org.asc b/modules/apt-keys/files/db.debian.org.asc
new file mode 100644 (file)
index 0000000..d388bd3
--- /dev/null
+++ b/modules/apt-keys/files/db.debian.org.asc
@@ -0,0 +1,19 @@
+## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.9 (GNU/Linux)
+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+=4LFD
+-----END PGP PUBLIC KEY BLOCK-----

diff --git a/modules/apt-keys/manifests/init.pp b/modules/apt-keys/manifests/init.pp
new file mode 100644 (file)
index 0000000..666b8f6
--- /dev/null
+++ b/modules/apt-keys/manifests/init.pp
@@ -0,0 +1,21 @@
+class apt-keys {
+    file {
+        "/etc/apt/trusted-keys.d/":
+          ensure  => directory,
+          purge   => true,
+          notify  => Exec["updatekeys"],
+          ;
+
+        "/etc/apt/trusted-keys.d/db.debian.org.asc":
+          source  => "puppet:///apt-keys/db.debian.org.asc",
+          mode    => 664,
+          notify  => Exec["updatekeys"],
+          ;
+    }
+
+    exec { "updatekeys":
+         command => "for keyfile in /etc/apt/trusted-keys.d/*; do apt-key add $keyfile; done",
+         refreshonly => true
+    }
+}
+