bootstrap.yaml

#!/usr/bin/env ansible-playbook
---
- name: "Bootstrap Ansible dependencies"
  hosts: localhost

  tasks:
  - name: "Allow the invoking user to run sudo without a password"
    ansible.builtin.lineinfile:
      path: "/etc/sudoers.d/10-nopasswd-{{ bootstrap_user }}"
      line: "{{ bootstrap_user }} ALL=(ALL:ALL) NOPASSWD: ALL"
      create: true
      mode: "0440"
      validate: "visudo -cf %s"
    become: true
    vars:
      bootstrap_user: "{{ ansible_facts['env']['SUDO_USER'] | default(ansible_facts['user_id']) }}"

  - name: "Create the AUR builder group"
    ansible.builtin.group:
      name: "{{ aur_builder_user }}"
    become: true

  - name: "Create the AUR builder user"
    ansible.builtin.user:
      name: "{{ aur_builder_user }}"
      create_home: true
      group: "{{ aur_builder_user }}"
    become: true

  - name: "Allow the AUR builder user to run pacman without a password"
    ansible.builtin.lineinfile:
      path: "/etc/sudoers.d/11-install-{{ aur_builder_user }}"
      line: "{{ aur_builder_user }} ALL=(ALL) NOPASSWD: /usr/bin/pacman"
      create: true
      mode: "0440"
      validate: "visudo -cf %s"
    become: true

  - name: "Disable debug packages in makepkg builds"
    ansible.builtin.copy:
      dest: /etc/makepkg.conf.d/nodebug.conf
      content: |
        OPTIONS=(strip docs !libtool !staticlibs emptydirs zipman purge !debug lto)
      owner: root
      group: root
      mode: "0644"
    become: true

  - name: "Install AUR build prerequisites"
    community.general.pacman:
      name:
      - base-devel # Basic tools to build Arch Linux packages
      - git # The fast distributed version control system
      state: present
    become: true

  - name: "Install Yay"
    kewlfft.aur.aur:
      name: yay # Yet another yogurt. Pacman wrapper and AUR helper written in go
      use: makepkg
      state: present
    become: true
    become_user: "{{ aur_builder_user }}"

  - name: "Install Paru"
    kewlfft.aur.aur:
      name: paru-git # Feature packed AUR helper
      state: present
    become: true
    become_user: "{{ aur_builder_user }}"