Update gpg keys first during autoupdate

2025-10-21 10:41:40 +02:00
parent e6307e5881
commit 10708409c2
2 changed files with 5 additions and 2 deletions
--- a/_machines/hera-tasks.yml
+++ b/_machines/hera-tasks.yml
@@ -35,7 +35,10 @@
              exit 0
          fi

-          pacman --sync --refresh --sysupgrade --noprogressbar --noconfirm
+          # Make sure that keys are up to date, otherwise sig checks may fail
+          pacman --sync --noprogressbar --noconfirm --refresh --needed archlinux-keyring
+
+          pacman --sync --noprogressbar --noconfirm --sysupgrade

    - name: Install pacman autoupdate service
      ansible.builtin.copy: