zypper_repository module should have a fingerprint option

[ansible]

zypper_repository module should have a fingerprint option

[mpdehaan]

Hi, in the future I would like to point out you can send security related reports to "[email protected]"

See http://www.ansible.com/security

However, in this case, it seems what you have filed is not a security bug, but a request to tell ansible to auto-accept keys. That's fine, I'm going to update the bug report caption to indicate this.

[gregdek]

@xb Thanks for submitting this feature idea.

@matze Pinging you to bring this feature request to your attention. Please note that you are under no particular obligation to add this feature.

We encourage all Ansible community members to submit pull requests to satisfy feature requests. Consult the module guidelines (http://docs.ansible.com/ansible/developing_modules.html) for more information.

[gregdek]

[module: packaging/os/zypper.py]

[matze]

The problem is that zypper does not provide a programmatic way of accepting a certain key (fingerprint). We could parse the output of zypper ref look for the key and compare that to the given key and then write the answer to stdin. However, I am not very fond of this idea …

[robinro]

I agree with @matze that implementing this would require a lot of fiddling with zypper output.

A simple solution would be to autoimport gpg keys when adding the repo. You could run zypper --gpg-auto-import-keys ref as a handler.
Implementing this in the module might be a good idea.

[ansibot]

@matze, ping. This issue is still waiting on your response.
click here for bot help