Try to make systemd unit handling idempotent

user.yml

@@ -39,23 +39,29 @@
     - "/home/{{ user.name }}/.config/systemd/"
     - "/home/{{ user.name }}/.config/systemd/user/"
 
-- set_fact:
+- name: disable undesired services
-    undesired_user_services:
+  tags:
-      - gpg-agent.socket
+    - undesired-services
-      - gpg-agent.sock.service
+  block:
-      - gpg-agent-browser.socket
+    - set_fact:
-      - gpg-agent-ssh.socket
+        undesired_user_services:
-      - gpg-agent-extra.socket
+          - gpg-agent.socket
-      - xdg-user-dirs-update.service
+          - gpg-agent.sock.service
-      - gnome-keyring-daemon.service
+          - gpg-agent-browser.socket
+          - gpg-agent-ssh.socket
+          - gpg-agent-extra.socket
+          - xdg-user-dirs-update.service
+          - gnome-keyring-daemon.service
 
-# systemd needs a login session, machinectl handles that for us
+    # systemd needs a login session, machinectl handles that for us
-- name: stop and mask undesired services
+    - name: stop and mask undesired services
-  command:
+      command:
-    cmd: machinectl --uid {{ user.name }} shell -- .host /usr/bin/env systemctl --user mask --now "{{ item }}"
+        cmd: machinectl --quiet --uid {{ user.name }} shell -- .host /usr/bin/env systemctl --user mask --now "{{ item }}"
-  become: true
+      become: true
-  become_user: root
+      become_user: root
-  loop: "{{ undesired_user_services }}"
+      register: undesired_service_cmd
+      changed_when: undesired_service_cmd.stderr != ""
+      loop: "{{ undesired_user_services }}"
 
 - name: create directory for getty autologin
   file: