- name: configure sudoers lineinfile: path: /etc/sudoers line: "{{ user.name }} ALL=(ALL) NOPASSWD:ALL" regexp: "^{{ user.name }}\\s+" become: true become_user: root - name: set shell user: name: "{{ user.name }}" shell: /usr/bin/zsh become: true become_user: root - set_fact: user_groups: - adm - cdrom - sudo - dip - plugdev - lpadmin - sambashare - docker - libvirt when: distro == 'ubuntu' tags: [always] - set_fact: user_groups: - libvirt - wheel - vboxusers - wireshark - docker when: distro == 'fedora' tags: [always] - set_fact: user_groups: - libvirt - wheel - vboxusers - wireshark - docker - sudonopw - games when: distro == 'archlinux' tags: [always] - set_fact: user_group_name: "{{ user.group|default(user.name) }}" tags: [always] - name: create user group group: name: "{{ user_group_name }}" state: present become: true become_user: root - name: set groups user: name: "{{ user.name }}" groups: "{{ [user_group_name, 'dotfiles'] + user_groups }}" become: true become_user: root - name: disable and mask systemd user units systemd: name: "{{ item }}" enabled: false masked: true scope: user with_items: - gpg-agent.service - gpg-agent.socket - gpg-agent-browser.socket - gpg-agent-ssh.socket tags: [test] - name: create directory for getty autologin file: state: directory path: /etc/systemd/system/getty@tty{{ user.vt }}.service.d owner: root group: root mode: '0755' become: true become_user: root - name: enable getty autologin copy: dest: /etc/systemd/system/getty@tty{{ user.vt }}.service.d/override.conf owner: root group: root mode: '0644' content: | [Service] ExecStart= ExecStart=-/sbin/agetty --autologin {{ user.name }} --noclear %I $TERM become: true become_user: root - block: - name: load dotfile list include_vars: file: dotfiles.yml - name: get state of empty directories stat: path: ~/{{ item.name }} register: empty_dir_stat with_items: "{{ empty_directories }}" check_mode: false - name: remove sysmlinks file: path: "{{ item.stat.path }}" state: absent when: item.stat.exists and item.stat.islnk with_items: "{{ empty_dir_stat.results }}" - name: create empty directories for dotfiles file: state: directory path: ~/{{ item.name }} mode: "{{ item.mode | default('0755') }}" with_items: "{{ empty_directories }}" - name: link this folder to ~/.dotfiles file: state: link force: true follow: false owner: "{{ user.name }}" group: "{{ user_group_name }}" path: "/home/{{ user.name }}/.dotfiles" src: "{{ playbook_dir }}" become: true become_user: root - name: get state of copy targets stat: path: ~/{{ item.to }} register: copy_stat when: not item.template|default(false) with_items: "{{ dotfiles }}" check_mode: false - name: remove invalid copy target (directories) file: path: "{{ item.stat.path }}" state: absent when: - not item.skipped is defined or not item.skipped - item.stat.exists - item.stat.isdir with_items: "{{ copy_stat.results }}" - name: make sure target directories exist file: state: directory path: "{{ (['/home', user.name, item.to]|join('/')) | dirname }}" owner: "{{ user.name }}" group: "{{ user_group_name }}" with_items: "{{ dotfiles }}" become: true become_user: root - name: link dotfiles file: state: link force: true follow: false path: "/home/{{ user.name }}/{{ item.to }}" src: /var/lib/dotfiles/{{ item.from }} owner: "{{ user.name }}" group: "{{ user_group_name }}" when: not item.template|default(false) with_items: "{{ dotfiles }}" become: true become_user: root - name: get state of template targets stat: path: ~/{{ item.to }} register: template_stat when: item.template|default(false) with_items: "{{ dotfiles }}" check_mode: false - name: remove invalid template target (directory or symlink) file: path: "{{ item.stat.path }}" state: absent when: - not item.skipped is defined or not item.skipped - item.stat.exists - not item.stat.isreg with_items: "{{ template_stat.results }}" - name: deploy dotfiles templates template: src: /home/{{ user.name }}/.dotfiles/{{ item.from }}.j2 dest: "/home/{{ user.name }}/{{ item.to }}" owner: "{{ user.name }}" group: "{{ user_group_name }}" force: true become: true become_user: root when: item.template|default(false) with_items: "{{ dotfiles }}" - name: create directories file: state: directory path: "{{ item }}" with_items: - ~/.var/lib - ~/.var/log - ~/.var/run - ~/.usr/lib - name: stat ~/bin stat: path: "/home/{{ user.name }}/bin" register: bin_stat check_mode: false - name: remove ~/bin if not a link file: state: absent path: "/home/{{ user.name }}/bin" when: - bin_stat.stat.exists - not bin_stat.stat.islnk - name: create ~/.opt and ~/.optbin file: path: "{{ item }}" state: directory with_items: - ~/.opt/ - ~/.optbin/ - name: symlink opt programs file: state: link force: true follow: false path: "/home/{{ user.name }}/.optbin/{{ item.name }}" src: "/home/{{ user.name }}/.opt/{{ item.optpath }}" owner: "{{ user.name }}" group: "{{ user_group_name }}" with_items: - name: terraform optpath: terraform - name: hugo optpath: hugo - name: drone optpath: drone - name: link bin directory file: state: link force: true follow: false path: "/home/{{ user.name }}/bin" src: /var/lib/dotfiles/bin owner: "{{ user.name }}" group: "{{ user_group_name }}" tags: - dotfiles - name: create intermediate directories for vim-plug file: path: "{{ item }}" state: directory with_items: - ~/.local/ - ~/.local/share/ - ~/.local/share/nvim/ - ~/.local/share/nvim/site/ - ~/.local/share/nvim/site/autoload/ - ~/.vim/ - ~/.vim/autoload - block: - name: install vim-plug copy: src: contrib/vim-plug/plug.vim dest: ~/.vim/autoload/plug.vim owner: "{{ user.name }}" group: "{{ user_group_name }}" mode: "0644" - name: symlink vim-plug for neovim file: state: link path: ~/.local/share/nvim/site/autoload/plug.vim src: ~/.vim/autoload/plug.vim force: true - name: install vim plugins command: /usr/bin/nvim -f -E -s -c "source ~/.vimrc" +PlugInstall +qall register: vim_plugins_stdout check_mode: false changed_when: vim_plugins_stdout.stdout_lines|length != 0 - name: compile youcompleteme shell: | cd ~/.local/share/nvim/plugged/YouCompleteMe/ python3 ./install.py # --go-completer args: creates: ~/.local/share/nvim/plugged/YouCompleteMe/third_party/ycmd/ycm_core.so when: vim_plugins_stdout.stdout_lines|length != 0 or true - block: - name: firefox - create chrome directory file: path: ~/.mozilla/firefox/{{ item.name }}/chrome/ state: directory mode: '0755' with_items: "{{ user.firefox_profiles }}" when: user.firefox_profiles is defined tags: - firefox - name: firefox - configure firefox custom css copy: dest: ~/.mozilla/firefox/{{ item.name }}/chrome/userChrome.css content: | #TabsToolbar { visibility: collapse !important; } #titlebar { visibility: collapse !important; } #sidebar-header { visibility: collapse !important; } #sidebar { width: 400px !important; } when: item.manage_css with_items: "{{ user.firefox_profiles | default([]) }}" tags: - firefox - block: - name: set portfolio performance version set_fact: portfolio_performace_version: "0.47.0" - name: look of current installation stat: path: /home/{{ user.name }}/.opt/portfolio-performance-{{ portfolio_performace_version }} register: stat_portfolio_performance_installation - name: create temporary directory tempfile: state: directory register: tempdir - block: - name: download portfolio performance get_url: url: https://github.com/buchen/portfolio/releases/download/{{ portfolio_performace_version }}/PortfolioPerformance-{{ portfolio_performace_version }}-linux.gtk.x86_64.tar.gz dest: "{{ tempdir.path }}/PortfolioPerformance.{{ portfolio_performace_version }}.tar.gz" - name: create destination directory file: state: directory path: "{{ tempdir.path }}/PortfolioPerformance" when: not stat_portfolio_performance_installation.stat.exists - name: unpack portfolio performance unarchive: src: "{{ tempdir.path }}/PortfolioPerformance.{{ portfolio_performace_version }}.tar.gz" owner: "{{ user.name }}" group: "{{ user_group_name }}" mode: '0755' dest: "{{ tempdir.path }}/PortfolioPerformance" remote_src: true - name: install portfolio performance synchronize: src: "{{ tempdir.path }}/PortfolioPerformance" dest: /home/{{ user.name }}/.opt/portfolio-performance-{{ portfolio_performace_version }} recursive: true checksum: true delete: true when: not stat_portfolio_performance_installation.stat.exists - name: link portfolio performance file: src: /home/{{ user.name }}/.opt/portfolio-performance-{{ portfolio_performace_version }}/PortfolioPerformance/portfolio/PortfolioPerformance dest: /home/{{ user.name }}/.optbin/portfolio-performance owner: "{{ user.name }}" group: "{{ user_group_name }}" state: link force: true tags: - portfolio-performance - block: - name: set kubectl version set_fact: kubectl_version: v1.20.0 - name: get current stable version uri: url: https://storage.googleapis.com/kubernetes-release/release/stable.txt return_content: true register: kubectl_stable_version_api check_mode: false - set_fact: kubectl_stable_version: "{{ kubectl_stable_version_api.content|trim }}" - set_fact: kubectl_outdated: "{{ kubectl_version != kubectl_stable_version }}" - name: warn if not on stable version debug: msg: "installing kubectl {{ kubectl_version }}, stable version would be {{ kubectl_stable_version }}" changed_when: kubectl_outdated is sameas true when: kubectl_outdated is sameas true - name: get kubectl get_url: url: https://storage.googleapis.com/kubernetes-release/release/{{ kubectl_version }}/bin/linux/amd64/kubectl dest: /home/{{ user.name }}/.opt/kubectl-{{ kubectl_version }} owner: "{{ user.name }}" group: "{{ user_group_name }}" mode: '0755' - name: link kubectl file: src: /home/{{ user.name }}/.opt/kubectl-{{ kubectl_version }} dest: /home/{{ user.name }}/.optbin/kubectl state: link tags: - kubectl