Make use of other keyring (#14)

* Make use of other keyring

* Fix repo configuration

.github/workflows/ci.yml

@@ -45,6 +45,7 @@ jobs:
       matrix:
         include:
           - distro: debian10
+            ansible-version: '>=9, <10'
           - distro: debian11
           - distro: debian12
           - distro: ubuntu1804

tasks/repository.yml

@@ -9,19 +9,30 @@
   tags:
     - yarn-repository-install-dependencies
 
-- name: repository | add public key
-  ansible.builtin.apt_key:
-    id: 1646B01B86E50310
-    url: https://dl.yarnpkg.com/debian/pubkey.gpg
-    state: present
+- name: repository | (keyrings) directory | create
+  ansible.builtin.file:
+    path: "{{ yarn_keyring_dst | dirname }}"
+    state: directory
+    owner: root
+    group: root
+    mode: 0755
   tags:
-    - yarn-repository-public-key
+    - yarn-repository-keyrings-directory-create
+
+- name: repository | (keyring) file | download  # noqa command-instead-of-module risky-shell-pipe
+  ansible.builtin.shell: >
+    wget -O- {{ yarn_keyring_src }} | gpg --dearmor | tee {{ yarn_keyring_dst }} > /dev/null
+  args:
+    creates: "{{ yarn_keyring_dst }}"
+  tags:
+    - yarn-repository-keyring-file-download
 
 - name: repository | add
   ansible.builtin.apt_repository:
     repo: "{{ item.type }} {{ item.url }} {{ item.component }}"
-    state: present
+    state: "{{ item.state | default('present') }}"
     update_cache: true
+    mode: 0644
   with_items: "{{ yarn_repositories }}"
   tags:
     - yarn-repository-add

vars/main.yml

@@ -1,13 +1,22 @@
 # vars file
 ---
+yarn_keyring_src: https://dl.yarnpkg.com/debian/pubkey.gpg
+yarn_keyring_dst: /usr/share/keyrings/yarn.gpg
 yarn_repositories:
+  - type: "deb [signed-by={{ yarn_keyring_dst }}]"
+    url: 'https://dl.yarnpkg.com/debian/ stable'
+    component: main
   - type: deb
     url: 'https://dl.yarnpkg.com/debian/ stable'
     component: main
+    state: absent
 
 yarn_dependencies_pre:
   - software-properties-common
   - dirmngr
+  - apt-transport-https
+  - wget
+  - coreutils
 
 yarn_dependencies:
   - yarn