RedHat9.yaml

---
# Workaround for GPG-KEY in SHA1 https://www.redhat.com/en/blog/rhel-security-sha-1-package-signatures-distrusted-rhel-9
apm-server::settings:
  exec_prerequisites:
    allow_sha1:
      command: '/usr/bin/update-crypto-policies --set DEFAULT:SHA1'
      unless: 'dnf info apm-server'
  exec_postinstall:
    disallow_sha1:
      command: '/usr/bin/update-crypto-policies --set DEFAULT'
      onlyif: '/usr/bin/update-crypto-policies --show | grep SHA1'

# Version 4 format
  preinstall:
    exec:
      allow_sha1:
        command: "/usr/bin/update-crypto-policies --set DEFAULT:SHA1"
        unless: dnf info apm-server
  postinstall:
    exec:
      disallow_sha1:
        command: "/usr/bin/update-crypto-policies --set DEFAULT"
        onlyif: "/usr/bin/update-crypto-policies --show | grep SHA1"