volker.raschekandCopilot
9ea26dc23f
The trust store import hardcoded the RHEL anchor directory and `update-ca-trust`, although `meta/main.yaml` also declares ArchLinux and Ubuntu as supported platforms. On those distributions the task created a dangling symlink outside any trust source and then failed on the missing binary. Resolve both the anchor path and the update command from a map keyed by `ansible_facts['os_family']`. Debian based systems additionally require the file extension `crt`, because `update-ca-certificates` ignores anchors named otherwise. Note that the role now depends on gathered facts. Co-authored-by: Copilot <copilot@github.com>