From 5af25bcccf65685b9565f4dbff7d19b051ce1085 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Mon, 27 Oct 2025 12:54:07 -0500
Subject: [PATCH] r/dch-yum: Trust GPG key

We need to explicitly add the GPG signing key for the _dch_ repository
to the system trust store, otherwise, _dnf-automatic_ will fail, as it
cannot implicitly add new keys during an update.
---
 roles/dch-yum/tasks/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/dch-yum/tasks/main.yml b/roles/dch-yum/tasks/main.yml
index ea32b48..adb5c2e 100644
--- a/roles/dch-yum/tasks/main.yml
+++ b/roles/dch-yum/tasks/main.yml
@@ -7,3 +7,10 @@
     mode: u=rw,go=r
   tags:
   - repo
+
+- name: ensure dch rpm gpg key is trusted
+  rpm_key:
+    key: https://files.pyrocufflink.blue/yum/dch/gnupg.pub
+    state: present
+  tags:
+  - rpm-key