Apply ansible-lint
This commit is contained in:
178
user.yml
178
user.yml
@@ -1,7 +1,8 @@
|
||||
- name: base user configuration
|
||||
---
|
||||
- name: Base user configuration
|
||||
tags: [user:base]
|
||||
block:
|
||||
- set_fact:
|
||||
- ansible.builtin.set_fact:
|
||||
user_groups:
|
||||
- libvirt
|
||||
- wheel
|
||||
@@ -13,15 +14,15 @@
|
||||
- kvm
|
||||
- video
|
||||
|
||||
- name: create user group
|
||||
group:
|
||||
- name: Create user group
|
||||
ansible.builtin.group:
|
||||
name: "{{ user.name }}"
|
||||
state: present
|
||||
become: true
|
||||
become_user: root
|
||||
|
||||
- name: create user
|
||||
user:
|
||||
- name: Create user
|
||||
ansible.builtin.user:
|
||||
name: "{{ user.name }}"
|
||||
state: present
|
||||
home: "/home/{{ user.name }}"
|
||||
@@ -32,8 +33,8 @@
|
||||
become: true
|
||||
become_user: root
|
||||
|
||||
- name: create systemd directory
|
||||
file:
|
||||
- name: Create systemd directory
|
||||
ansible.builtin.file:
|
||||
state: directory
|
||||
path: "{{ item }}"
|
||||
owner: "{{ user.name }}"
|
||||
@@ -43,22 +44,22 @@
|
||||
- "/home/{{ user.name }}/.config/systemd/"
|
||||
- "/home/{{ user.name }}/.config/systemd/user/"
|
||||
|
||||
- name: create directory for getty autologin
|
||||
file:
|
||||
- name: Create directory for getty autologin
|
||||
ansible.builtin.file:
|
||||
state: directory
|
||||
path: /etc/systemd/system/getty@tty{{ user.vt }}.service.d
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
become: true
|
||||
become_user: root
|
||||
|
||||
- name: enable getty autologin
|
||||
copy:
|
||||
- name: Enable getty autologin
|
||||
ansible.builtin.copy:
|
||||
dest: /etc/systemd/system/getty@tty{{ user.vt }}.service.d/override.conf
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0644'
|
||||
mode: "0644"
|
||||
content: |
|
||||
[Service]
|
||||
ExecStart=
|
||||
@@ -66,16 +67,16 @@
|
||||
become: true
|
||||
become_user: root
|
||||
|
||||
- name: configure dotfiles
|
||||
- name: Configure dotfiles
|
||||
tags:
|
||||
- user:dotfiles
|
||||
block:
|
||||
- name: load dotfile list
|
||||
include_vars:
|
||||
- name: Load dotfile list
|
||||
ansible.builtin.include_vars:
|
||||
file: dotfiles.yml
|
||||
|
||||
- name: get state of empty directories
|
||||
stat:
|
||||
- name: Get state of empty directories
|
||||
ansible.builtin.stat:
|
||||
path: ~/{{ item.name }}
|
||||
register: empty_dir_stat
|
||||
with_items: "{{ empty_directories }}"
|
||||
@@ -83,8 +84,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.name }}"
|
||||
|
||||
- name: remove symlinks
|
||||
file:
|
||||
- name: Remove symlinks
|
||||
ansible.builtin.file:
|
||||
path: "{{ item.stat.path }}"
|
||||
state: absent
|
||||
when: item.stat.exists and item.stat.islnk
|
||||
@@ -92,8 +93,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.item.name }}"
|
||||
|
||||
- name: create empty directories for dotfiles
|
||||
file:
|
||||
- name: Create empty directories for dotfiles
|
||||
ansible.builtin.file:
|
||||
state: directory
|
||||
path: ~/{{ item.name }}
|
||||
mode: "{{ item.mode | default('0755') }}"
|
||||
@@ -101,8 +102,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.name }}"
|
||||
|
||||
- name: link this folder to ~/.dotfiles
|
||||
file:
|
||||
- name: Link this folder to ~/.dotfiles
|
||||
ansible.builtin.file:
|
||||
state: link
|
||||
force: true
|
||||
follow: false
|
||||
@@ -113,8 +114,8 @@
|
||||
become: true
|
||||
become_user: root
|
||||
|
||||
- name: get state of copy targets
|
||||
stat:
|
||||
- name: Get state of copy targets
|
||||
ansible.builtin.stat:
|
||||
path: ~/{{ item.to }}
|
||||
register: copy_stat
|
||||
when: not item.template|default(false)
|
||||
@@ -123,8 +124,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.to }}"
|
||||
|
||||
- name: remove invalid copy target (symlinks)
|
||||
file:
|
||||
- name: Remove invalid copy target (symlinks)
|
||||
ansible.builtin.file:
|
||||
path: "{{ item.stat.path }}"
|
||||
state: absent
|
||||
when:
|
||||
@@ -135,10 +136,10 @@
|
||||
loop_control:
|
||||
label: "{{ item.item.from }}"
|
||||
|
||||
- name: make sure target directories exist
|
||||
file:
|
||||
- name: Make sure target directories exist
|
||||
ansible.builtin.file:
|
||||
state: directory
|
||||
path: "{{ (['/home', user.name, item.to]|join('/')) | dirname }}"
|
||||
path: "{{ (['/home', user.name, item.to] | join('/')) | dirname }}"
|
||||
owner: "{{ user.name }}"
|
||||
group: "{{ user.name }}"
|
||||
with_items: "{{ dotfiles }}"
|
||||
@@ -147,8 +148,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.to }}"
|
||||
|
||||
- name: copy dotfiles
|
||||
copy:
|
||||
- name: Copy dotfiles
|
||||
ansible.builtin.copy:
|
||||
dest: "/home/{{ user.name }}/{{ item.to }}"
|
||||
src: /var/lib/dotfiles/{{ item.from }}
|
||||
owner: "{{ user.name }}"
|
||||
@@ -160,8 +161,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.to }}"
|
||||
|
||||
- name: copy directories
|
||||
synchronize:
|
||||
- name: Copy directories
|
||||
ansible.posix.synchronize:
|
||||
dest: "/home/{{ user.name }}/{{ item.to }}/"
|
||||
src: /var/lib/dotfiles/{{ item.from }}/
|
||||
archive: false
|
||||
@@ -180,8 +181,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.to }}"
|
||||
|
||||
- name: apply directory permissions
|
||||
file:
|
||||
- name: Apply directory permissions
|
||||
ansible.builtin.file:
|
||||
dest: "/home/{{ user.name }}/{{ item.to }}/"
|
||||
owner: "{{ user.name }}"
|
||||
group: "{{ user.name }}"
|
||||
@@ -193,8 +194,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.to }}"
|
||||
|
||||
- name: get state of template targets
|
||||
stat:
|
||||
- name: Get state of template targets
|
||||
ansible.builtin.stat:
|
||||
path: ~/{{ item.to }}
|
||||
register: template_stat
|
||||
when: item.template|default(false)
|
||||
@@ -203,8 +204,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.to }}"
|
||||
|
||||
- name: remove invalid template target (directory or symlink)
|
||||
file:
|
||||
- name: Remove invalid template target (directory or symlink)
|
||||
ansible.builtin.file:
|
||||
path: "{{ item.stat.path }}"
|
||||
state: absent
|
||||
when:
|
||||
@@ -215,8 +216,8 @@
|
||||
loop_control:
|
||||
label: "{{ item.item.to }}"
|
||||
|
||||
- name: deploy dotfiles templates
|
||||
template:
|
||||
- name: Deploy dotfiles templates
|
||||
ansible.builtin.template:
|
||||
src: /var/lib/dotfiles/{{ item.from }}.j2
|
||||
dest: "/home/{{ user.name }}/{{ item.to }}"
|
||||
owner: "{{ user.name }}"
|
||||
@@ -229,35 +230,35 @@
|
||||
loop_control:
|
||||
label: "{{ item.to }}"
|
||||
|
||||
- name: remove dotfiles
|
||||
file:
|
||||
- name: Remove dotfiles
|
||||
ansible.builtin.file:
|
||||
state: absent
|
||||
path: "/home/{{ user.name }}/{{ item }}"
|
||||
loop: "{{ dotfiles_remove }}"
|
||||
|
||||
- name: create directories
|
||||
file:
|
||||
- name: Create directories
|
||||
ansible.builtin.file:
|
||||
state: directory
|
||||
path: "{{ item }}"
|
||||
with_items:
|
||||
- ~/tmp
|
||||
|
||||
- name: stat ~/bin
|
||||
stat:
|
||||
- name: Stat ~/bin
|
||||
ansible.builtin.stat:
|
||||
path: "/home/{{ user.name }}/bin"
|
||||
register: bin_stat
|
||||
check_mode: false
|
||||
|
||||
- name: remove ~/bin if not a link
|
||||
file:
|
||||
- name: Remove ~/bin if not a link
|
||||
ansible.builtin.file:
|
||||
state: absent
|
||||
path: "/home/{{ user.name }}/bin"
|
||||
when:
|
||||
- bin_stat.stat.exists
|
||||
- not bin_stat.stat.islnk
|
||||
|
||||
- name: link bin directory
|
||||
file:
|
||||
- name: Link bin directory
|
||||
ansible.builtin.file:
|
||||
state: link
|
||||
force: true
|
||||
follow: false
|
||||
@@ -266,32 +267,32 @@
|
||||
owner: "{{ user.name }}"
|
||||
group: "{{ user.name }}"
|
||||
|
||||
- name: vim
|
||||
- name: Vim
|
||||
tags:
|
||||
- user:vim
|
||||
block:
|
||||
- name: install vim plugins
|
||||
command: nvim --headless +PlugInstall +qall
|
||||
- name: Install vim plugins
|
||||
ansible.builtin.command: nvim --headless +PlugInstall +qall
|
||||
register: vim_plugin_install
|
||||
changed_when: vim_plugin_install.stderr != ""
|
||||
|
||||
- name: update vim plugins
|
||||
command: nvim --headless +PlugUpdate +qall
|
||||
- name: Update vim plugins
|
||||
ansible.builtin.command: nvim --headless +PlugUpdate +qall
|
||||
register: vim_plugin_update
|
||||
changed_when: vim_plugin_update.stderr != ""
|
||||
|
||||
- name: firefox
|
||||
- name: Firefox
|
||||
tags:
|
||||
- user:firefox
|
||||
block:
|
||||
- name: create firefox directories
|
||||
- name: Create firefox directories
|
||||
firefox_profile:
|
||||
name: "{{ item.key }}"
|
||||
loop: "{{ user.firefox_profiles | dict2items }}"
|
||||
check_mode: false
|
||||
register: firefox_profile_names
|
||||
|
||||
- set_fact:
|
||||
- ansible.builtin.set_fact:
|
||||
firefox_preferences:
|
||||
browser.aboutConfig.showWarning: false
|
||||
extensions.pocket.enabled: false
|
||||
@@ -341,25 +342,25 @@
|
||||
# remove ad tracking garbage
|
||||
dom.private-attribution.submission.enabled: false
|
||||
|
||||
- include_role:
|
||||
- ansible.builtin.include_role:
|
||||
name: firefox
|
||||
vars:
|
||||
firefox_profiles: "{{ {item.key: item.value} | combine({item.key: {'preferences': firefox_preferences}}, recursive=True) }}"
|
||||
loop: "{{ user.firefox_profiles | dict2items }}"
|
||||
when: not ansible_check_mode
|
||||
|
||||
- name: firefox - create chrome directory
|
||||
file:
|
||||
- name: Firefox - create chrome directory
|
||||
ansible.builtin.file:
|
||||
path: "{{ item.profile_path }}/chrome/"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
with_items: "{{ firefox_profile_names.results }}"
|
||||
when: not ansible_check_mode
|
||||
loop_control:
|
||||
label: "{{ item.profile_path }}"
|
||||
|
||||
- name: firefox - configure firefox custom css
|
||||
copy:
|
||||
- name: Firefox - configure firefox custom css
|
||||
ansible.builtin.copy:
|
||||
dest: "{{ item.profile_path }}/chrome/userChrome.css"
|
||||
content: |
|
||||
#TabsToolbar {
|
||||
@@ -378,12 +379,12 @@
|
||||
loop_control:
|
||||
label: "{{ item.profile_path }}"
|
||||
|
||||
- name: handle user units
|
||||
- name: Handle user units
|
||||
tags:
|
||||
- user:units
|
||||
block:
|
||||
- name: link user service files
|
||||
file:
|
||||
- name: Link user service files
|
||||
ansible.builtin.file:
|
||||
state: link
|
||||
force: true
|
||||
follow: false
|
||||
@@ -393,12 +394,12 @@
|
||||
group: "{{ user.name }}"
|
||||
with_fileglob: /var/lib/dotfiles/services/*
|
||||
|
||||
- name: handle autostart units
|
||||
- name: Handle autostart units
|
||||
tags:
|
||||
- user:autostart
|
||||
block:
|
||||
- name: create systemd user directory
|
||||
file:
|
||||
- name: Create systemd user directory
|
||||
ansible.builtin.file:
|
||||
state: directory
|
||||
path: ~/{{ item }}
|
||||
loop:
|
||||
@@ -406,8 +407,8 @@
|
||||
- .config/systemd/
|
||||
- .config/systemd/user/
|
||||
|
||||
- name: link autostart service files
|
||||
file:
|
||||
- name: Link autostart service files
|
||||
ansible.builtin.file:
|
||||
state: link
|
||||
force: true
|
||||
follow: false
|
||||
@@ -417,21 +418,21 @@
|
||||
group: "{{ user.name }}"
|
||||
with_fileglob: /var/lib/dotfiles/autostart/services/*
|
||||
|
||||
- name: get state of autostart.target
|
||||
stat:
|
||||
- name: Get state of autostart.target
|
||||
ansible.builtin.stat:
|
||||
path: "/home/{{ user.name }}/.config/systemd/user/autostart.target"
|
||||
register: autostart_target_stat
|
||||
|
||||
- name: remove invalid autostart.target
|
||||
file:
|
||||
- name: Remove invalid autostart.target
|
||||
ansible.builtin.file:
|
||||
path: "/home/{{ user.name }}/.config/systemd/user/autostart.target"
|
||||
state: absent
|
||||
when:
|
||||
- autostart_target_stat.stat.exists
|
||||
- not autostart_target_stat.stat.isreg
|
||||
|
||||
- name: deploy autostart.target
|
||||
template:
|
||||
- name: Deploy autostart.target
|
||||
ansible.builtin.template:
|
||||
src: ./autostart/autostart.target.j2
|
||||
dest: "/home/{{ user.name }}/.config/systemd/user/autostart.target"
|
||||
owner: "{{ user.name }}"
|
||||
@@ -439,20 +440,19 @@
|
||||
force: true
|
||||
follow: false
|
||||
|
||||
- name: gpg
|
||||
- name: Gpg
|
||||
tags:
|
||||
- user:gpg
|
||||
when: user.gpg_key is defined
|
||||
block:
|
||||
- name: import gpg key
|
||||
command: gpg --import ./gpgkeys/{{ user.gpg_key.email }}.gpg.asc
|
||||
- name: Import gpg key
|
||||
ansible.builtin.command: gpg --import ./gpgkeys/{{ user.gpg_key.email }}.gpg.asc
|
||||
register: gpg_import_output
|
||||
changed_when: not ("unchanged" in gpg_import_output.stderr)
|
||||
|
||||
- name: trust gpg key
|
||||
shell: "gpg --import-ownertrust <<< {{ user.gpg_key.fingerprint }}:6"
|
||||
- name: Trust gpg key
|
||||
ansible.builtin.shell: "gpg --import-ownertrust <<< {{ user.gpg_key.fingerprint }}:6"
|
||||
args:
|
||||
executable: /bin/bash # required for <<<
|
||||
register: gpg_trust_output
|
||||
changed_when: gpg_trust_output.stderr_lines|length > 0
|
||||
|
||||
when: user.gpg_key is defined
|
||||
|
||||
Reference in New Issue
Block a user