Now that I think about it, I should've reproduced it with just shell script and didn't involve ansible, when asking the question. Things are more or less clear now. The only thing I'd like to confirm if this makes for a good way of automatically confirming importing repo key? yum makecache -y --disablerepo=* --enablerepo=passenger Regards, Yuri