MODULES-4686: gpg keyserver import fails in Debian 9 (Stretch)

[deric]

The command apt-key adv --list-keys on Debian 9 with argument --with-fingerprint prints the fingerprint for the subkeys too.

This patch fixes repeated apt keys imports during each Puppet run on Debian Stretch.

The patch comes from Alex P (alexpr) see discussion on Jira https://tickets.puppetlabs.com/browse/MODULES-4686

[hunner]

Should the apt_key type autorequire the Package['dirmngr'] for these platforms as well?

[deric]

@hunner Yes, that's a good idea. Also define apt::setting isn't best location for ensuring package presence. I've also added Debian 9 as supported system.

[eLvErDe]

For the record:

I backported this patch for puppetlabs/apt 2.4.0 for people still running Puppet 3.

patch_puppet_apt_MODULES-4686_aka_keys_broken_on_stretch_from_upstream_c9800015fa342b9ceb7ef1a0eae27e9c481dcde8_backported_to_2.4.0.txt

It seems to be working fine.

Also if you had a dependency on apt::update like this:
Class['apt::update'] -> Package <| |>
Or
Class['apt::update'] -> Package <| title != 'apt-transport-https' |>

Modify it liks this:
Class['apt::update'] -> Package <| title != 'apt-transport-https' and title != 'dirmngr' |>

Adam.