From afda85e9ff28a17b1992c21276b55e0a5ea2f999 Mon Sep 17 00:00:00 2001
From: jaydee <jaydee@sectorq.eu>
Date: Tue, 13 Oct 2026 01:20:29 +0200
Subject: [PATCH] build

---
 roles/vault_ssh_keys/tasks/main.yml | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/roles/vault_ssh_keys/tasks/main.yml b/roles/vault_ssh_keys/tasks/main.yml
index 85843f7..428387f 100755
--- a/roles/vault_ssh_keys/tasks/main.yml
+++ b/roles/vault_ssh_keys/tasks/main.yml
@@ -11,19 +11,25 @@
           - unzip
           - gnupg
           - python3-debian
+          - ca-certificates
+          - gpg
         state: present
         update_cache: yes
 
-    - name: Download HashiCorp GPG key
+    - name: Download HashiCorp repository signing key
       ansible.builtin.get_url:
         url: https://apt.releases.hashicorp.com/gpg
-        dest: /tmp/hashicorp.gpg
+        dest: /tmp/hashicorp-archive-keyring.asc
+        owner: root
+        group: root
         mode: '0644'
 
-    - name: Dearmor HashiCorp GPG key
-      ansible.builtin.command:
-        cmd: gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg /tmp/hashicorp.gpg
-      args:
+    - name: Install HashiCorp repository signing key
+      ansible.builtin.shell:
+        cmd: >-
+          gpg --dearmor --yes
+          --output /usr/share/keyrings/hashicorp-archive-keyring.gpg
+          /tmp/hashicorp-archive-keyring.asc
         creates: /usr/share/keyrings/hashicorp-archive-keyring.gpg
 
     - name: Read os-release