Add flatpak role for Debian

Ansible facts aren't always enough to determine if a distro is derived
from Ubuntu or not, this is available from `/etc/os-release` when it
contains `ID_LIKE="ubuntu debian"`. This patch uses `/etc/os-release` to
correctly handle Ubuntu installations, e.g. PPA's, for all Ubuntu
derived dirtros rather than just Ubuntu itself.

.gitignore

@@ -1,2 +1,2 @@
 external
-modules/win_git*
+playbooks/test.yaml

ansible.cfg

@@ -1,5 +1,5 @@
 [defaults]
 collections_path = collections
-library = modules
+library = library
 roles_path = roles
 stdout_callback = yaml

library/win_git.ps1

@@ -0,0 +1,232 @@
+#!powershell
+
+#AnsibleRequires -CSharpUtil Ansible.Basic
+#AnsibleRequires -PowerShell Ansible.ModuleUtils.CommandUtil
+
+$module = [Ansible.Basic.AnsibleModule]::Create($args, @{
+    options = @{
+        dest = @{type = 'path'}
+        repo = @{required = $true; aliases = @('name')}
+        version = @{default = 'HEAD'; aliases = @('branch')}
+        remote = @{default = 'origin'}
+        recursive = @{default = $true; type = 'bool'}
+        executable = @{default = $null; type = 'path'}
+    }
+    supports_check_mode = $false
+})
+
+$dest = $module.Params.dest
+$repo = $module.Params.repo
+$version = $module.Params.version
+$remote = $module.Params.remote
+$git = $module.Params.executable
+if (!$git) {
+    $git = Get-ExecutablePath 'git'
+}
+
+# ================================= Utilities ==================================
+
+function Get-AbsolutePath {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    try {
+        $result = Resolve-Path $path
+    } catch {
+        return $_[0].TargetObject
+    }
+    return $result
+}
+
+function Get-GitDir {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    $git_dir = Join-Path $path '.git'
+    # Check if this .git is a file.
+    if ([System.IO.File]::Exists($git_dir)) {
+        # Extract the gitdir: path from the .git file.
+        $groups = Get-Content "$git_dir" | `
+            Select-String '(gitdir:) (.*)' | `
+            ForEach { $_.Matches[0].Groups[1..2] }
+        $ref_prefix = $groups[0]
+        $gitdir = $groups[1]
+        if ($ref_prefix -ne 'gitdir:') {
+            $module.FailJson('The .git file has invalid gitdir reference format.')
+        }
+        # Check if the repo path is absolute.
+        if ([System.IO.Path]::IsPathRooted($gitdir)) {
+            $git_dir = $gitdir
+        } else {
+            # Join with the input path to construct an absolute path.
+            $git_dir = Join-Path $path $gitdir
+        }
+        if (![System.IO.Directory]::Exists($git_dir)) {
+            throw "$git_dir is not a directory."
+        }
+    }
+    return $git_dir
+}
+
+function Test-GitLocalChanges {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" status --porcelain"
+    $result = Run-Command -command $command -working_directory $dest
+    $changes = $result.stdout.Split([System.Environment]::NewLine, `
+            [System.StringSplitOptions]::RemoveEmptyEntries) | `
+        Where-Object { -not $_.StartsWith('??') } | Measure-Object -Line
+    return $changes.Lines -gt 0
+}
+
+function Get-GitRemoteHeadBranch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $command = "`"$git`" symbolic-ref --short refs/remotes/$remote/HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Could not determine the default HEAD branch of remote: $remote" ` +
+                         "$result.stdout $result.stderr")
+    }
+    return $result.stdout.Trim().Replace("$remote/", '')
+}
+
+function Get-GitCurrentSha {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" rev-parse HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    return $result.stdout.Trim()
+}
+
+function Invoke-GitClone {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $repo,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $dest_parent = Split-Path -Path $dest -Parent
+    if (!(Test-Path $dest_parent)) {
+        New-Item -Path $dest_parent -ItemType Directory
+    }
+    $command = "`"$git`" clone --recursive --origin $remote $repo $dest"
+    if ($version -ne "HEAD") {
+        $command += " --branch $version"
+    }
+    $result = Run-Command -command $command -working_directory $cwd
+    if ($result.rc -ne 0) {
+        $module.FailJson($result.stderr)
+    }
+}
+
+function Invoke-GitCheckout {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    if ($version -eq "HEAD") {
+        $branch = Get-GitRemoteHeadBranch $dest $remote
+    } else {
+        $branch = $version
+    }
+    $result = Run-Command -command "`"$git`" checkout $branch" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to checkout version '$version'`n" + $result.stderr)
+    }
+}
+
+function Invoke-GitFetch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $command = "`"$git`" fetch --tags $remote"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to download remote objects and refs:`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitPull {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $result = Run-Command -command "`"$git`" pull $remote $version" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to pull version '$version' from remote '$origin':`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitSubmoduleUpdate {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $result = Run-Command -command "`"$git`" submodule update --init" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to initialized/update submodules:`n" + $result.stderr)
+    }
+}
+
+# ================================ Start logic =================================
+
+if (!$dest) {
+    $module.FailJson('The destination directory must be specified.')
+}
+$dest = Get-AbsolutePath $dest
+$git_dir = Get-GitDir $dest
+$gitconfig = Join-Path $git_dir 'config'
+
+$module.Result.before = $null
+
+if (($dest -and ![System.IO.File]::Exists($gitconfig))) {
+    Invoke-GitClone $repo $remote $dest
+    Invoke-GitCheckout $dest $remote $version
+    $module.Result.changed = $true
+} else {
+    $module.Result.before = Get-GitCurrentSha $dest
+    if (Test-GitLocalChanges $dest) {
+        $module.FailJson('Local modifications exist in repository.')
+    }
+    Invoke-GitFetch $dest $remote $version
+    Invoke-GitCheckout $dest $remote $version
+    Invoke-GitPull $dest $remote $version
+    $module.Result.after = Get-GitCurrentSha $dest
+    if ($module.Result.before -ne $module.Result.after) {
+        $module.Result.changed = $true
+    }
+}
+
+if ($recursive) {
+    Invoke-GitSubmoduleUpdate $dest
+}
+
+# Ensure the repository has the correct owner
+$userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+$idRef = [System.Security.Principal.NTAccount]::new($userName)
+Get-Item $dest | foreach { `
+    $_ ; $_ | Get-ChildItem -Force -Recurse `
+} | foreach { `
+    $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `
+}
+
+$module.ExitJson()

library/win_git.py

@@ -0,0 +1,64 @@
+# -*- coding: utf-8 -*-
+
+# TODO: copyright
+
+DOCUMENTATION = '''
+---
+module: win_git
+author:
+    - "Kenneth Benzie (Benie)"
+short_description: Deploy software (or files) from git checkouts on Windows
+description:
+    - Manage git checkouts of repositories to deploy files or software on Windows.
+options:
+    data:
+        description:
+            - Alternate data to return instead of 'pong'.
+            - If this parameter is set to C(crash), the module will cause an
+              exception.
+        type: str
+        default: pong
+seealso:
+    - module: ansible.builtin.git
+'''
+
+# DOCUMENTATION = r'''
+# ---
+# module: win_ping
+# short_description: A windows version of the classic ping module
+# description:
+#   - Checks management connectivity of a windows host.
+#   - This is NOT ICMP ping, this is just a trivial test module.
+#   - For non-Windows targets, use the M(ansible.builtin.ping) module instead.
+# options:
+#   data:
+#     description:
+#       - Alternate data to return instead of 'pong'.
+#       - If this parameter is set to C(crash), the module will cause an exception.
+#     type: str
+#     default: pong
+# seealso:
+# - module: ansible.builtin.ping
+# author:
+# - Chris Church (@cchurch)
+# '''
+
+EXAMPLES = r'''
+# Test connectivity to a windows host
+# ansible winserver -m ansible.windows.win_ping
+
+- name: Example from an Ansible Playbook
+  ansible.windows.win_ping:
+
+- name: Induce an exception to see what happens
+  ansible.windows.win_ping:
+    data: crash
+'''
+
+RETURN = r'''
+ping:
+    description: Value provided with the data parameter.
+    returned: success
+    type: str
+    sample: pong
+'''

playbooks/1password.yaml

@@ -0,0 +1,4 @@
+---
+- hosts: localhost
+  roles:
+    - 1password

playbooks/Linux.yaml

@@ -0,0 +1,8 @@
+---
+- import_playbook: LinuxCLI.yaml
+- import_playbook: UnixGUI.yaml
+- hosts: localhost
+  roles:
+    - role: kitty
+    - role: xremap
+      when: ansible_os_family == "RedHat"

playbooks/LinuxCLI.yaml

@@ -0,0 +1,6 @@
+---
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  roles:
+    - role: gdb
+    - role: system-info

playbooks/UnixCLI.yaml

@@ -8,26 +8,25 @@
     - role: zsh
     - role: neovim
     - role: tmux
-    - role: system-info
-      when: '"WSL" not in ansible_kernel'
 
     - role: ag
+    - role: bash
     - role: bat
     - role: curl
+    - role: editline
     - role: fzf
     - role: gh
     - role: git
+    - role: glab
     - role: htop
     - role: jp
     - role: jq
     - role: readline
     - role: tidy
     - role: tree
-    - role: yq
     - role: watch
+    - role: wget
+    - role: yq
 
     - role: llvm
     - role: nodejs
-
-    - role: wsl
-      when: '"WSL" in ansible_kernel'

playbooks/UnixGUI.yaml

@@ -1,5 +1,7 @@
 ---
-- import_playbook: UnixCLI.yaml
 - hosts: localhost
   roles:
     - role: 1password
+    - role: ferdium
+    - role: fonts
+    - role: obsidian

playbooks/WSL.yaml

@@ -1,3 +1,7 @@
 ---
-- import_playbook: Unix.yaml
+- import_playbook: UnixCLI.yaml
-- import_playbook: Windows.yaml
+- hosts: localhost
+  roles:
+    - role: gdb
+    - role: wsl
+    - role: system-info

playbooks/Windows.yaml

@@ -1,9 +1,6 @@
 ---
 - hosts: windows
 
-  vars:
-    install_cad_apps: false
-
   roles:
     - role: python
     - role: git
@@ -16,6 +13,7 @@
     - role: curl
     - role: fzf
     - role: gh
+    - role: glab
     - role: jq
     - role: tree
     - role: yq
@@ -25,12 +23,9 @@
 
     - role: 1password
     - role: autohotkey
+    - role: ferdium
     - role: firefox
+    - role: fonts
     - role: obsidian
     - role: powertoys
     - role: windows-terminal
-
-    - role: autodesk-fusion360
-      when: install_cad_apps
-    - role: prusaslicer
-      when: install_cad_apps

playbooks/macOS.yaml

@@ -1,13 +1,14 @@
 ---
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  roles:
+    - role: system-info
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
   roles:
-    - role: fonts
     - role: mas
 
     - role: iterm
     - role: magnet
     - role: microsoft-remote-desktop
-    - role: obsidian
     - role: viscosity
-    - role: webcatalog

roles/1password/tasks/Debian.yaml

@@ -1,16 +1,24 @@
 ---
-- set_fact:
+- name: set keyring path
-    keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+  set_fact:
+    keyring: /etc/apt/keyrings/1password.asc
+    old_keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+
+- name: remove old keyring
+  become: true
+  file:
+    path: '{{old_keyring}}'
+    state: absent
 
 - name: add apt signing key
   when: '"WSL" not in ansible_kernel'
   become: true
-  apt_key:
+  get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
-    keyring: '{{keyring}}'
+    dest: '{{keyring}}'
-    state: present
 
-- when: ansible_machine == 'x86_64'
+- name: set compatible architecture
+  when: ansible_machine == 'x86_64'
   set_fact:
     arch: amd64
 
@@ -21,11 +29,16 @@
 - name: add apt repository
   when: '"WSL" not in ansible_kernel'
   become: true
-  apt_repository:
+  copy:
-    repo: >-
+    content: >-
       deb [arch={{arch}} signed-by={{keyring}}]
       https://downloads.1password.com/linux/debian/{{arch}} stable main
-    filename: 1password
+    dest: /etc/apt/sources.list.d/1password.list
+
+- name: apt update
+  become: true
+  apt:
+    update_cache: true
 
 - name: install gui package
   when: '"WSL" not in ansible_kernel'

roles/1password/tasks/RedHat.yaml

@@ -0,0 +1,22 @@
+---
+- name: add yum repository key
+  become: true
+  rpm_key:
+    key: https://downloads.1password.com/linux/keys/1password.asc
+
+- name: add yum repository
+  become: true
+  yum_repository:
+    name: 1password
+    description: 1Password Stable Channel
+    baseurl: https://downloads.1password.com/linux/rpm/stable/$basearch
+    enabled: true
+    gpgcheck: true
+    repo_gpgcheck: true
+    gpgkey: ['https://downloads.1password.com/linux/keys/1password.asc']
+
+- name: install yum package
+  become: true
+  yum:
+    name: 1password
+    state: latest

roles/1password/tasks/Windows.yaml

@@ -11,36 +11,21 @@
     path: '{{app_exe}}'
   register: app_stat
 
-- name: get installed version
-  when: app_stat.stat.exists == True
-  win_command: '{{app_exe}} --version'
-  register: app_version
-  changed_when: false
-
-- when: app_stat.stat.exists == True
-  set_fact:
-    installed_version: '{{app_version.stdout.strip()}}'
-
 - name: download latest installer
+  when: not app_stat.stat.exists
   win_get_url:
     url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
     dest: '{{installer_exe}}'
 
-- name: get installer version
-  win_shell: |
-    (Get-ItemProperty {{installer_exe}}).VersionInfo.ProductVersion
-  register: installer_product_version
-  changed_when: false
-
-# FIXME: The [5:] is to account for a mystery "\e[6 q" prefix, not sure if this
-# is consistent across machines or some other oddity.
-- set_fact:
-    installer_version: '{{installer_product_version.stdout.strip()[5:]}}'
-
 - name: run installer
-  when: installed_version is not defined or installed_version != installer_version
+  when: not app_stat.stat.exists
   win_command: '{{installer_exe}}'
 
+- name: remove installer
+  win_file:
+    path: '{{installer_exe}}'
+    state: absent
+
 - name: create start menu shortcut
   win_shortcut:
     src: '{{app_exe}}'

roles/ag/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: the_silver_searcher
+    state: latest

roles/autodesk-fusion360/tasks/main.yaml

@@ -1,8 +0,0 @@
----
-- assert:
-    that: ansible_os_family == "Windows"
-
-- name: install chocolatey package
-  win_chocolatey:
-    name: autodesk-fusion360
-    state: latest

roles/autohotkey/tasks/main.yaml

@@ -9,10 +9,6 @@
     repo: git@code.infektor.net:config/AutoHotKey.git
     dest: '{{autohotkey_repo_dir}}'
     branch: master
-- win_owner:
-    path: '{{autohotkey_repo_dir}}'
-    user: Benie
-    recurse: true
 
 - name: create scheduled task
   win_scheduled_task:

roles/bash/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: create ~/.bashrc file
+  template:
+    src: templates/bashrc
+    dest: ~/.bashrc

roles/bash/templates/bashrc

@@ -0,0 +1,112 @@
+# If not running interactively, don't do anything
+case $- in
+    *i*) ;;
+      *) return;;
+esac
+
+# don't put duplicate lines or lines starting with space in the history.
+# See bash(1) for more options
+HISTCONTROL=ignoreboth
+
+# append to the history file, don't overwrite it
+shopt -s histappend
+
+# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
+HISTSIZE=1000
+HISTFILESIZE=2000
+
+# check the window size after each command and, if necessary,
+# update the values of LINES and COLUMNS.
+shopt -s checkwinsize
+
+# make less more friendly for non-text input files, see lesspipe(1)
+[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
+
+# enable color support of ls and also add handy aliases
+if [ -x /usr/bin/dircolors ]; then
+  test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
+  alias ls='ls --color=auto'
+  alias dir='dir --color=auto'
+  alias vdir='vdir --color=auto'
+  alias grep='grep --color=auto'
+  alias fgrep='fgrep --color=auto'
+  alias egrep='egrep --color=auto'
+fi
+
+if [ -f ~/.bash_aliases ]; then
+    . ~/.bash_aliases
+fi
+
+# enable programmable completion features (you don't need to enable
+# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
+# sources /etc/bash.bashrc).
+if ! shopt -oq posix; then
+  if [ -f /usr/share/bash-completion/bash_completion ]; then
+    . /usr/share/bash-completion/bash_completion
+  elif [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+  fi
+fi
+
+# Enable vi mode
+set -o vi
+
+function _prompt_first_line {
+  local exit_code=$?
+  if [ "$exit_code" = "0" ]; then
+    exit_code=
+  else
+    # If the last command failed, display its error code at the right
+    case $exit_code in
+      129) exit_code="SIGHUP"     ;;  # 128 + 1
+      130) exit_code="SIGINT"     ;;  # 128 + 2
+      131) exit_code="SIGQUIT"    ;;  # 128 + 3
+      132) exit_code="SIGILL"     ;;  # 128 + 4
+      133) exit_code="SIGTRAP"    ;;  # 128 + 5
+      134) exit_code="SIGABRT"    ;;  # 128 + 6
+      134) exit_code="SIGIOT"     ;;  # 128 + 6
+      135) exit_code="SIGBUS"     ;;  # 128 + 7
+      136) exit_code="SIGFPE"     ;;  # 128 + 8
+      137) exit_code="SIGKILL"    ;;  # 128 + 9
+      138) exit_code="SIGUSR1"    ;;  # 128 + 10
+      139) exit_code="SIGSEGV"    ;;  # 128 + 11
+      140) exit_code="SIGUSR2"    ;;  # 128 + 12
+      141) exit_code="SIGPIPE"    ;;  # 128 + 13
+      142) exit_code="SIGALRM"    ;;  # 128 + 14
+      143) exit_code="SIGTERM"    ;;  # 128 + 15
+      144) exit_code="SIGSTKFLT"  ;;  # 128 + 16
+      145) exit_code="SIGCHLD"    ;;  # 128 + 17
+      146) exit_code="SIGCONT"    ;;  # 128 + 18
+      147) exit_code="SIGSTOP"    ;;  # 128 + 19
+      148) exit_code="SIGTSTP"    ;;  # 128 + 20
+      149) exit_code="SIGTTIN"    ;;  # 128 + 21
+      150) exit_code="SIGTTOU"    ;;  # 128 + 22
+      151) exit_code="SIGURG"     ;;  # 128 + 23
+      152) exit_code="SIGXCPU"    ;;  # 128 + 24
+      153) exit_code="SIGXFSZ"    ;;  # 128 + 25
+      154) exit_code="SIGVTALRM"  ;;  # 128 + 26
+      155) exit_code="SIGPROF"    ;;  # 128 + 27
+      156) exit_code="SIGWINCH"   ;;  # 128 + 28
+      157) exit_code="SIGIO"      ;;  # 128 + 29
+      158) exit_code="SIGPWR"     ;;  # 128 + 30
+      159) exit_code="SIGSYS"     ;;  # 128 + 31
+    esac
+    exit_code=" \e[1m\e[31m$exit_code\e[0m"
+  fi
+  local time=$(date +%H:%M:%S)
+  local dir=$PWD
+  [[ "$dir" =~ ^"$HOME"(/|$) ]] && dir="~${dir#$HOME}"
+  # TODO: virtualenv
+  local grey="\e[38;5;244m"
+  local reset="\e[0m"
+  local blue="\e[38;5;37m"
+  echo -e "$grey$time$reset $blue$dir$reset$exit_code"
+}
+
+PROMPT_COMMAND=_prompt_first_line
+
+yellow="\001\e[38;5;3m\002"
+grey="\001\e[38;5;244m\002"
+reset="\001\e[0m\002"
+
+PS1="$yellow\u$reset@$grey\h$reset "

roles/bat/tasks/Debian.yaml

@@ -4,7 +4,6 @@
         ansible_distribution == "Ubuntu" and
         ansible_distribution_version == "18.04"
       }}'
-- debug: msg={{use_github}}
 
 - when: use_github
   include_tasks: deb.yaml

roles/bat/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: bat
+    state: latest

roles/curl/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: curl
+    state: latest

roles/ferdium/tasks/main.yaml

@@ -0,0 +1,17 @@
+---
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew_cask:
+    name: ferdium
+    state: latest
+
+- when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: ferdium
+    state: latest
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows' and
+        ansible_os_family != 'Darwin'
+  flatpak:
+    name: org.ferdium.Ferdium

roles/flatpak/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: add flathub repository remote
+  become: true
+  flatpak_remote:
+    name: flathub
+    state: present
+    flatpakrepo_url: https://dl.flathub.org/repo/flathub.flatpakrepo

roles/fonts/handlers/main.yaml

@@ -0,0 +1,3 @@
+---
+- name: refresh font cache
+  command: fc-cache

roles/fonts/tasks/Linux.yaml

@@ -0,0 +1,56 @@
+---
+- name: stat version file
+  stat:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_file
+
+- name: slurp version
+  when: version_file.stat.exists
+  slurp:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_slurp
+
+- when: version_file.stat.exists
+  set_fact:
+    version: '{{version_slurp.content | b64decode}}'
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/ryanoasis/nerd-fonts/releases/latest
+  register: latest
+
+- set_fact:
+    needs_installed:
+      '{{ not version_file.stat.exists or version.strip() != latest.json.tag_name }}'
+    asset: '{{ latest.json.assets | to_json | from_json |
+      json_query("[?contains(name, `CascadiaCode.zip`)] | [0]") }}'
+
+- name: create user fonts directory
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts'
+    state: directory
+
+- name: download Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+
+- name: install Caskaydia Cove Nerd Font
+  when: needs_installed
+  unarchive:
+    src: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts'
+  notify: refresh font cache
+
+- name: write version file
+  copy:
+    content: '{{latest.json.tag_name}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+
+- name: remove Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    state: absent

roles/fonts/tasks/Windows.yaml

@@ -0,0 +1,5 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: nerd-fonts-CascadiaCode
+    state: latest

roles/fonts/tasks/main.yaml

@@ -1,2 +1,7 @@
 ---
-- include_tasks: '{{ansible_os_family}}.yaml'
+- when: ansible_os_family == 'Darwin'
+  include_tasks: 'Darwin.yaml'
+- when: ansible_os_family == 'Windows'
+  include_tasks: 'Windows.yaml'
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: 'Linux.yaml'

roles/fzf/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: fzf
+    state: latest

roles/gdb/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: gdb
+    state: latest

roles/gh/tasks/RedHat.yaml

@@ -0,0 +1,12 @@
+---
+- name: add yum repository
+  become: true
+  get_url:
+    url: https://cli.github.com/packages/rpm/gh-cli.repo
+    dest: /etc/yum.repos.d/gh-cli.repo
+
+- name: install dnf package
+  become: true
+  dnf:
+    name: gh
+    state: latest

roles/git/tasks/Windows.yaml

@@ -37,11 +37,6 @@
     dest: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
     version: master
   with_items: '{{git_config_repos}}'
-- win_owner:
-    path: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
-    user: Benie
-    recurse: true
-  with_items: '{{git_config_repos}}'
 
 # - TODO: install pip packages
 #   win_pip:

roles/glab/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: glab
+    state: latest

roles/htop/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: htop
+    state: latest

roles/jp/tasks/RedHat.yaml

@@ -0,0 +1,51 @@
+---
+- name: stat executable
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/jp'
+  register: jp_stat
+
+- name: get installed version
+  when: jp_stat.stat.exists
+  command: jp --version
+  changed_when: false
+  register: jp_version
+
+- name: extract installed version
+  when: jp_stat.stat.exists
+  set_fact:
+    jp_installed_version:
+      '{{jp_version.stdout.strip() | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- name: get latest release
+  uri:
+    url: 'https://api.github.com/repos/jmespath/jp/releases/latest'
+  register: latest
+
+- name: determine if jp needs installed
+  set_fact:
+    jp_needs_installed:
+      '{{not jp_stat.stat.exists or jp_installed_version != latest.json.tag_name}}'
+    arch_dict: {x86_64: amd64, arm64: arm64}
+
+- name: select asset name
+  when: jp_needs_installed
+  set_fact:
+    asset_query:
+      '[?contains(name, `jp-linux-{{arch_dict[ansible_architecture]}}`)] | [0]'
+- name: select asset
+  when: jp_needs_installed
+  set_fact:
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: create directory
+  when: jp_needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/bin'
+    state: directory
+
+- name: install executable
+  when: jp_needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/jp'
+    mode: '0755'

roles/jq/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: jq
+    state: latest

roles/kitty/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: kitty
+    state: latest

roles/kitty/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: kitty
+    state: latest

roles/kitty/tasks/main.yaml

@@ -0,0 +1,7 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: clone config repo
+  git:
+    repo: git@code.infektor.net:config/kitty.git
+    dest: ~/.config/kitty

roles/llvm/tasks/Debian.yaml

@@ -1,5 +1,17 @@
 ---
+- name: slurp /etc/os-release
+  slurp:
+    src: /etc/os-release
+  register: os_release_slurp
+- set_fact:
+    os_release: "{{ os_release_slurp.content |
+        b64decode | trim() | replace('=', ': ') | from_yaml }}"
+
+- include_tasks: Ubuntu.yaml
+  when: "'ID_LIKE' in os_release and os_release.ID_LIKE == 'ubuntu debian'"
+
 - name: install apt packages
+  when: "'ID_LIKE' not in os_release"
   become: true
   apt:
     name:

roles/llvm/tasks/Fedora.yaml

@@ -0,0 +1,10 @@
+---
+- name: install dnf packages
+  become: true
+  dnf:
+    name:
+      - clang
+      - clang-tools-extra
+      - git-clang-format
+      - llvm
+    state: latest

roles/llvm/tasks/Linux Mint.yaml

@@ -1,2 +0,0 @@
----
-- include_tasks: Ubuntu.yaml

roles/llvm/tasks/Pop!_OS.yaml

@@ -1,2 +0,0 @@
----
-- include_tasks: Ubuntu.yaml

roles/llvm/tasks/Ubuntu.yaml

@@ -25,11 +25,44 @@
       'http://apt.llvm.org/{{ubuntu_codename}}/'
     llvm_apt_category:
       'llvm-toolchain-{{ubuntu_codename}}-{{llvm_major_version}}'
+    keyring: '/etc/apt/keyrings/llvm.asc'
+
+- name: remove old keyring
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  apt_key:
+    url: https://apt.llvm.org/llvm-snapshot.gpg.key
+    id: 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421
+    state: absent
+
+- name: remove old upstream deb repository
+  become: true
+  apt_repository:
+    repo: 'deb {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    state: absent
+    filename: llvm
+    update_cache: false
+
+- name: remove old upstream deb-src repository
+  become: true
+  apt_repository:
+    repo: 'deb-src {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    state: absent
+    filename: llvm
+    update_cache: false
+
+- name: add apt repository key
+  become: true
+  get_url:
+    url: https://apt.llvm.org/llvm-snapshot.gpg.key
+    dest: '{{keyring}}'
 
 - name: add upstream deb repository
   become: true
   apt_repository:
-    repo: 'deb {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    repo: >
+      deb [signed-by={{keyring}}]
+      {{llvm_apt_repo_url}} {{llvm_apt_category}} main
     state: present
     filename: llvm
     update_cache: false
@@ -37,18 +70,13 @@
 - name: add upstream deb-src repository
   become: true
   apt_repository:
-    repo: 'deb-src {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    repo: >
+      deb-src [signed-by={{keyring}}]
+      {{llvm_apt_repo_url}} {{llvm_apt_category}} main
     state: present
     filename: llvm
     update_cache: false
 
-- name: add apt repository key
-  become: true
-  apt_key:
-    url: https://apt.llvm.org/llvm-snapshot.gpg.key
-    id: 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421
-    state: present
-
 - name: update apt cache
   become: true
   apt:

roles/llvm/tasks/main.yaml

@@ -1,5 +1,2 @@
 ---
 - include_tasks: '{{ansible_os_family}}.yaml'
-  when: ansible_os_family in ['Darwin', 'Windows']
-- include_tasks: '{{ansible_distribution}}.yaml'
-  when: ansible_os_family not in ['Darwin', 'Windows']

roles/neovim/tasks/Darwin.yaml

@@ -1,7 +1,11 @@
 ---
 - name: install homebrew packages
   homebrew:
-    name: neovim
+    name:
+      - neovim
     state: latest
 
+- set_fact:
+    neovim_pip_packages: '{{neovim_pip_packages + ["pynvim"]}}'
+
 - include_tasks: Unix.yaml

roles/neovim/tasks/Debian.yaml

@@ -1,7 +1,14 @@
 ---
+- name: slurp /etc/os-release
+  slurp:
+    src: /etc/os-release
+  register: os_release_slurp
+- set_fact:
+    os_release: "{{ os_release_slurp.content |
+        b64decode | trim() | replace('=', ': ') | from_yaml }}"
+
 - name: add neovim stable ppa
-  when: ansible_distribution == 'Ubuntu' and
+  when: "'ID_LIKE' in os_release and os_release.ID_LIKE == 'ubuntu debian'"
-        ansible_distribution_version == '20.04'
   become: true
   apt_repository:
     repo: ppa:neovim-ppa/stable
@@ -10,7 +17,9 @@
 - name: install apt package
   become: true
   apt:
-    name: neovim
+    name:
+      - neovim
+      - python3-neovim
     state: latest
 
 - include_tasks: Unix.yaml

roles/neovim/tasks/RedHat.yaml

@@ -0,0 +1,10 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name:
+      - neovim
+      - python3-neovim
+    state: latest
+
+- include_tasks: Unix.yaml

roles/neovim/tasks/Unix.yaml

@@ -8,8 +8,6 @@
     dest: '{{vim_config_dir}}'
     version: master
 
-# TODO: - name: set repo email
-
 - name: install pip packages
   pip:
     name: '{{neovim_pip_packages}}'

roles/neovim/tasks/Windows-plugins.yaml

@@ -26,6 +26,13 @@
     file_type: directory
   register: found_plugins
 
+- set_fact:
+    backslashes: '\\'
+    forwardslash: '/'
+- set_fact:
+    managed_plugins: "{{managed_plugins | replace(backslashes, forwardslash)}}"
+    found_plugins: "{{found_plugins | replace(backslashes, forwardslash)}}"
+
 - name: remove found plugins which are not in the managed list
   win_file:
     path: '{{item.path}}'

roles/neovim/tasks/Windows.yaml

@@ -13,15 +13,6 @@
     repo: git@code.infektor.net:config/vim.git
     dest: '{{vim_config_dir}}'
     branch: master
-    # clone: false
-    update: true
-- win_owner:
-    path: '{{vim_config_dir}}'
-    user: Benie
-    recurse: true
-
-- assert:
-    that: False
 
 # - TODO: neovim set repo email
 #   win_git_config:
@@ -50,10 +41,18 @@
     src: '{{vim_config_dir}}/tasks.yaml'
     dest: vim_config_tasks.yaml
     flat: true
+  changed_when: false
 
 - when: config_repo_tasks.stat.exists
   include_tasks: vim_config_tasks.yaml
 
+- name: remove fetched tasks
+  file:
+    state: absent
+    path: vim_config_tasks.yaml
+  changed_when: false
+  delegate_to: localhost
+
 - when: ansible_os_family != "Windows" and
         plugin_dir is defined and plugins is defined
   include_tasks: 'Unix-plugins.yaml'

roles/neovim/vars/main.yaml

@@ -3,6 +3,5 @@ neovim_pip_packages:
   - cmake-language-server
   - cmakelint
   - compdb
-  - pynvim
   - vim-vint
   - yamllint

roles/nodejs/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: nodejs
+    state: latest

roles/obsidian/handlers/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: install desktop menu
+  command: >
+    xdg-desktop-menu install --mode user
+      {{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop

roles/obsidian/tasks/Darwin.yaml

@@ -4,8 +4,4 @@
     name: obsidian
     state: latest
 
-- name: clone notes repository
+- include_tasks: Unix.yaml
-  git:
-    repo: git@github.com:kbenzie/notes.git
-    dest: '{{ansible_env.HOME}}/Documents/Notes'
-    version: main

roles/obsidian/tasks/Linux.yaml

@@ -0,0 +1,75 @@
+---
+# TODO: Prefer Flatpak over AppImage if available
+
+- name: stat symlink
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+  register: symlink_file
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/obsidianmd/obsidian-releases/releases/latest
+  register: latest
+
+- set_fact:
+    appimage: 'Obsidian-{{latest.json.name}}.AppImage'
+- set_fact:
+    filepath: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
+    iconpath: 'share/icons/hicolor/512x512/apps/obsidian.png'
+    asset_query: '[?contains(name, `{{appimage}}`)] | [0]'
+- set_fact:
+    needs_installed:
+      '{{not symlink_file.stat.exists or symlink_file.stat.lnk_source != filepath}}'
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: download latest version
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{filepath}}'
+    mode: '0755'
+
+- name: create directories
+  file:
+    path: '{{item}}'
+    state: directory
+  with_items:
+    - '{{ansible_env.HOME}}/.local/bin'
+    - '{{ansible_env.HOME}}/.local/share/icons/hicolor/512x512/apps'
+
+- name: create symlink
+  file:
+    src: '{{filepath}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+    state: link
+
+- name: extract squashfs-root for app icon
+  when: needs_installed
+  command:
+    cmd: '{{ansible_env.HOME}}/.local/bin/Obsidian --appimage-extract'
+    chdir: '/tmp'
+
+- name: copy icon file
+  when: needs_installed
+  copy:
+    src: '/tmp/squashfs-root/usr/{{iconpath}}'
+    dest: '{{ansible_env.HOME}}/.local/{{iconpath}}'
+
+- name: remove squashfs-root directory
+  when: needs_installed
+  file:
+    path: '/tmp/squashfs-root'
+    state: absent
+
+- name: create desktop file
+  template:
+    src: obsidian.desktop.j2
+    dest: '{{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop'
+  notify: install desktop menu
+
+- name: remove old appimage
+  when: needs_installed and symlink_file.stat.exists
+  file:
+    path: '{{symlink_file.stat.lnk_source}}'
+    state: absent
+
+- include_tasks: Unix.yaml

roles/obsidian/tasks/Unix.yaml

@@ -0,0 +1,6 @@
+---
+- name: clone notes repository
+  git:
+    repo: git@github.com:kbenzie/notes.git
+    dest: '{{ansible_env.HOME}}/Documents/Notes'
+    version: main

roles/obsidian/tasks/Windows.yaml

@@ -12,7 +12,3 @@
     repo: git@github.com:kbenzie/notes.git
     dest: '{{obsidian_notes_repo}}'
     branch: main
-- win_owner:
-    path: '{{obsidian_notes_repo}}'
-    user: Benie
-    recurse: true

roles/obsidian/tasks/main.yaml

@@ -1,2 +1,5 @@
 ---
 - include_tasks: '{{ansible_os_family}}.yaml'
+  when: ansible_os_family == "Darwin" or ansible_os_family == "Windows"
+- include_tasks: 'Linux.yaml'
+  when: ansible_os_family != "Darwin" and ansible_os_family != "Windows"

roles/obsidian/templates/obsidian.desktop.j2

@@ -0,0 +1,11 @@
+[Desktop Entry]
+Name=Obsidian
+Exec={{ansible_env.HOME}}/.local/bin/Obsidian
+Terminal=false
+Type=Application
+Icon={{ansible_env.HOME}}/.local/{{iconpath}}
+StartupWMClass=Obsidian
+X-AppImage-Version={{latest.json.name}}
+Comment=Private and flexible note‑taking app that adapts to the way you think. 
+MimeType=x-scheme-handler/obsidian;
+Categories=Utility;

roles/powershell/tasks/main.yaml

@@ -5,13 +5,9 @@
 
 - name: clone config repos
   win_git:
-    repo: git@code.infektor.net:config/WindowsPowerShell.git
+    repo: https://code.infektor.net/config/WindowsPowerShell.git
     dest: '{{powershell_config_dir}}'
     branch: master
-- win_owner:
-    path: '{{powershell_config_dir}}'
-    user: Benie
-    recurse: true
 
 - name: install chocolatey package
   win_chocolatey:

roles/prusaslicer/tasks/main.yaml

@@ -1,14 +0,0 @@
----
-- assert:
-    that: ansible_os_family == "Windows"
-
-- name: install chocolatey package
-  win_chocolatey:
-    name: prusaslicer
-    state: latest
-
-- name: create start menu shortcut
-  win_shortcut:
-    src: '{{ansible_env.ProgramData}}/chocolatey/bin/prusa-slicer.exe'
-    dest: '{{ansible_env.ProgramData}}/Microsoft/Windows/Start Menu/Programs/PrusaSlicer.lnk'
-    icon: '{{ansible_env.ProgramData}}/chocolatey/bin/prusa-slicer.exe,0'

roles/python/tasks/Debian.yaml

@@ -8,3 +8,4 @@
       - python3-pip
       - python3-venv
       - python3-virtualenv
+    state: latest

roles/python/tasks/RedHat.yaml

@@ -0,0 +1,9 @@
+---
+- name: install yum packages
+  become: true
+  yum:
+    name:
+      - python3
+      - python3-pip
+      - python3-virtualenv
+    state: latest

roles/sudo/vars/RedHat.yaml

@@ -0,0 +1,3 @@
+---
+sudo_owner: root
+sudo_group: wheel

roles/system-info/handlers/main.yaml

@@ -0,0 +1,7 @@
+---
+- name: restart system-info
+  systemd:
+    name: system-info
+    scope: user
+    daemon_reload: true
+    state: restarted

roles/system-info/tasks/Debian.yaml

@@ -3,23 +3,10 @@
   become: true
   apt:
     name:
+      - acpi
       - gawk
+      - lm-sensors
       - sysstat
     state: latest
 
-- name: create systemd user unit directory
+- include_tasks: Linux.yaml
-  file:
-    state: directory
-    dest: ~/.config/systemd/user
-
-- name: install system-info systemd unit
-  copy:
-    src: ~/.config/tmux/system-info/system-info.service
-    dest: ~/.config/systemd/user/system-info.service
-
-- name: enable system-info service
-  systemd:
-    name: system-info
-    scope: user
-    enabled: true
-    state: started

roles/system-info/tasks/Linux.yaml

@@ -0,0 +1,28 @@
+---
+- name: create systemd user unit directory
+  file:
+    state: directory
+    dest: ~/.config/systemd/user
+
+- set_fact:
+    SYSTEM_INFO_SCRIPT_DIR: '{{ansible_env.HOME}}/.config/tmux/system-info'
+
+- when: '"WSL" not in ansible_kernel'
+  set_fact:
+    SYSTEM_INFO_SCRIPT: '{{SYSTEM_INFO_SCRIPT_DIR}}/system-info-Linux.sh'
+- when: '"WSL" in ansible_kernel'
+  set_fact:
+    SYSTEM_INFO_SCRIPT: '{{SYSTEM_INFO_SCRIPT_DIR}}/system-info-WSL.sh'
+
+- name: install system-info systemd unit
+  template:
+    src: templates/system-info.service.j2
+    dest: ~/.config/systemd/user/system-info.service
+  notify: restart system-info
+
+- name: enable system-info service
+  systemd:
+    name: system-info
+    scope: user
+    enabled: true
+    state: started

roles/system-info/tasks/RedHat.yaml

@@ -0,0 +1,11 @@
+---
+- name: install dnf packages
+  become: true
+  dnf:
+    name:
+      - acpi
+      - lm_sensors
+      - sysstat
+    state: latest
+
+- include_tasks: Linux.yaml

roles/system-info/tasks/Windows.yaml

@@ -30,29 +30,29 @@
     start_when_available: true
     wake_to_run: false
 
-- name: create system-info-WSL.sh scheduled task
+# - name: create system-info-WSL.sh scheduled task
-  win_scheduled_task:
+#   win_scheduled_task:
-    path: Benie
+#     path: Benie
-    name: system-info-WSL.sh
+#     name: system-info-WSL.sh
-    state: present
+#     state: present
-    enable: true
+#     enable: true
-    triggers:
+#     triggers:
-      - type: logon
+#       - type: logon
-        enabled: true
+#         enabled: true
-      - type: registration
+#       - type: registration
-        enabled: true
+#         enabled: true
-    actions:
+#     actions:
-      - path: '{{wsl_exe}}'
+#       - path: '{{wsl_exe}}'
-        arguments: '-d Debian -e /home/benie/.config/tmux/system-info/system-info-WSL.sh'
+#         arguments: '-d Debian -e /home/benie/.config/tmux/system-info/system-info-WSL.sh'
-    disallow_start_if_on_batteries: false
+#     disallow_start_if_on_batteries: false
-    stop_if_going_on_batteries: false
+#     stop_if_going_on_batteries: false
-    execution_time_limit: PT0S
+#     execution_time_limit: PT0S
-    logon_type: password
+#     logon_type: password
-    username: '{{ansible_user}}'
+#     username: '{{ansible_user}}'
-    password: '{{ansible_password}}'
+#     password: '{{ansible_password}}'
-    multiple_instances: 3
+#     multiple_instances: 3
-    run_level: limited
+#     run_level: limited
-    start_when_available: true
+#     start_when_available: true
-    wake_to_run: false
+#     wake_to_run: false
 
 # - TODO: configure firewall

roles/system-info/templates/system-info.service.j2

@@ -0,0 +1,9 @@
+[Unit]
+Description=System Info
+
+[Service]
+ExecStart={{SYSTEM_INFO_SCRIPT}}
+Environment=LC_ALL=C.UTF-8
+
+[Install]
+WantedBy=default.target

roles/tidy/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: tidy
+    state: latest

roles/tmux/tasks/RedHat.yaml

@@ -0,0 +1,10 @@
+---
+- name: install yum packages
+  become: true
+  yum:
+    name:
+      - tmux
+      - sysstat
+      - urlview
+      - xsel
+    state: latest

roles/tree/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: tree
+    state: latest

roles/webcatalog/handlers/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: install desktop menu
+  command: >
+    xdg-desktop-menu install --mode user
+      {{ansible_env.HOME}}/.local/share/applications/webcatalog-webcatalog.desktop

roles/webcatalog/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew_cask:
+    name: webcatalog
+    state: latest

roles/webcatalog/tasks/Linux.yaml

@@ -0,0 +1,74 @@
+---
+- name: stat symlink
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/WebCatalog'
+  register: symlink_file
+
+- name: get releases
+  uri:
+    url: https://raw.githubusercontent.com/kbenzie/webcatalog-release-scraper/main/webcatalog-releases.json
+    return_content: true
+  register: releases_raw
+
+- set_fact:
+    releases: '{{releases_raw.content | from_json}}'
+- set_fact:
+    appimage: 'WebCatalog-{{releases[0].version}}.AppImage'
+- set_fact:
+    filepath: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
+    iconpath: 'share/icons/hicolor/512x512/apps/webcatalog.png'
+
+- set_fact:
+    needs_installed:
+      '{{not symlink_file.stat.exists or symlink_file.stat.lnk_source != filepath}}'
+
+- name: download latest version
+  when: needs_installed
+  get_url:
+    url: 'https://cdn-2.webcatalog.io/webcatalog/{{appimage}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
+    mode: '0755'
+
+- name: create directories
+  file:
+    path: '{{item}}'
+    state: directory
+  with_items:
+    - '{{ansible_env.HOME}}/.local/bin'
+    - '{{ansible_env.HOME}}/.local/share/icons/hicolor/512x512/apps'
+
+- name: create symlink
+  file:
+    src: '{{filepath}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/WebCatalog'
+    state: link
+
+- name: extract squashfs-root for app icon
+  when: needs_installed
+  command:
+    cmd: '{{ansible_env.HOME}}/.local/bin/WebCatalog --appimage-extract'
+    chdir: '/tmp'
+
+- name: copy icon file
+  when: needs_installed
+  copy:
+    src: '/tmp/squashfs-root/usr/{{iconpath}}'
+    dest: '{{ansible_env.HOME}}/.local/{{iconpath}}'
+
+- name: remove squashfs-root directory
+  when: needs_installed
+  file:
+    path: '/tmp/squashfs-root'
+    state: absent
+
+- name: create desktop file
+  template:
+    src: webcatalog.desktop.j2
+    dest: '{{ansible_env.HOME}}/.local/share/applications/webcatalog-webcatalog.desktop'
+  notify: install desktop menu
+
+- name: remove old appimage
+  when: needs_installed and symlink_file.stat.exists
+  file:
+    path: '{{symlink_file.stat.lnk_source}}'
+    state: absent

roles/webcatalog/tasks/main.yaml

@@ -1,8 +1,7 @@
 ---
-- assert:
+- when: ansible_os_family == 'Darwin'
-    that: ansible_os_family == "Darwin"
+  include_tasks: 'Darwin.yaml'
-
+- when: ansible_os_family == 'Windows'
-- name: install homebrew package
+  include_tasks: 'Windows.yaml'
-  homebrew_cask:
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
-    name: webcatalog
+  include_tasks: 'Linux.yaml'
-    state: latest

roles/webcatalog/templates/webcatalog.desktop.j2

@@ -0,0 +1,11 @@
+[Desktop Entry]
+Name=WebCatalog
+Exec={{ansible_env.HOME}}/.local/bin/WebCatalog
+Terminal=false
+Type=Application
+Icon=webcatalog
+StartupWMClass=WebCatalog
+X-AppImage-Version={{releases[0].version}}
+Comment=Turn Any Websites Into Real Desktop Apps
+MimeType=x-scheme-handler/webcatalog;
+Categories=Utility;

roles/wget/tasks/Debian.yaml

@@ -1,5 +1,6 @@
 ---
 - name: install apt package
+  become: true
   apt:
     name: wget
     state: latest

roles/wget/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: wget
+    state: latest

roles/wsl/handlers/main.yaml

@@ -0,0 +1,7 @@
+---
+- name: restart systemd-binfmt
+  become: true
+  systemd:
+    name: systemd-binfmt
+    enabled: true
+    state: restarted

roles/wsl/tasks/main.yaml

@@ -1,4 +1,10 @@
 ---
+- name: create wsl.conf
+  become: true
+  template:
+    src: templates/wsl.conf.j2
+    dest: /etc/wsl.conf
+
 - name: install apt packages
   become: true
   apt:
@@ -17,30 +23,18 @@
     src: templates/hosts.j2
     dest: /etc/ansible/hosts
 
+- name: create binfmt_misc config file
+  become: true
+  template:
+    src: templates/binfmt_misc.j2
+    dest: /usr/lib/binfmt.d/WSLInterop.conf
+  notify: restart systemd-binfmt
+
 - name: create external directory
   file:
     dest: external
     state: directory
 
-- name: clone ansible win_git module
-  git:
-    repo: https://github.com/tivrobo/ansible-win_git.git
-    dest: external/ansible-win_git
-    version: master
-
-- name: create ansible modules directory
-  file:
-    dest: ~/.ansible/plugins/modules
-    state: directory
-
-- name: copy win_git files to ansible modules directory
-  copy:
-    src: '~/.config/local/external/ansible-win_git/{{item}}'
-    dest: '~/.config/local/modules/{{item}}'
-  with_items:
-    - win_git.ps1
-    - win_git.py
-
 - name: read /etc/resolv.conf file contents
   set_fact:
     resolv_conf: '{{lookup("ansible.builtin.file", "/etc/resolv.conf")}}'

roles/wsl/templates/binfmt_misc.j2

@@ -0,0 +1 @@
+:WSLInterop:M::MZ::/init:PF

roles/wsl/templates/wsl.conf.j2

@@ -0,0 +1,5 @@
+[boot]
+systemd = true
+
+[network]
+generateHosts = false

roles/xremap/handlers/main.yaml

@@ -0,0 +1,7 @@
+---
+- name: restart xremap
+  systemd:
+    name: xremap
+    scope: user
+    daemon_reload: true
+    state: restarted

roles/xremap/tasks/main.yaml

@@ -0,0 +1,123 @@
+---
+- assert:
+    that: ansible_env.XDG_CURRENT_DESKTOP == "GNOME" and
+          ansible_env.XDG_SESSION_TYPE == "wayland"
+
+- set_fact:
+    install_dir: '{{ansible_env.HOME}}/.local/bin'
+    config_dir: '{{ansible_env.HOME}}/.config/xremap'
+- set_fact:
+    executable_path: '{{install_dir}}/xremap'
+
+- name: stat executable
+  stat:
+    path: '{{executable_path}}'
+  register: executable
+
+- name: get installed version
+  when: executable.stat.exists
+  command: '{{executable_path}} --version'
+  register: version_command
+  changed_when: false
+
+- name: extract version from command output
+  when: executable.stat.exists
+  set_fact:
+    installed_version:
+      'v{{version_command.stdout.strip() | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/k0kubun/xremap/releases/latest
+  register: latest
+
+- name: determine if install needed
+  set_fact:
+    needs_installed:
+      '{{not executable.stat.exists or installed_version != latest.json.name}}'
+
+- name: construct asset query
+  set_fact:
+    asset_query: >
+      [?contains(name, `xremap-linux-{{ansible_architecture}}-{{
+                     ansible_env.XDG_CURRENT_DESKTOP | lower}}.zip`)] | [0]
+- name: get release asset
+  set_fact:
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: create directories
+  file:
+    path: '{{item}}'
+    state: directory
+  with_items:
+    - '{{install_dir}}'
+    - '{{config_dir}}'
+
+- name: download release archive
+  when: needs_installed
+  become: true
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{install_dir}}/xremap.zip'
+
+- name: extract release archive
+  when: needs_installed
+  become: true
+  unarchive:
+    src: '{{install_dir}}/xremap.zip'
+    dest: '{{install_dir}}'
+
+- name: remove release archive
+  when: needs_installed
+  become: true
+  file:
+    path: '{{install_dir}}/xremap.zip'
+    state: absent
+
+- name: add user to input group
+  become: true
+  user:
+    name: '{{ansible_user_id}}'
+    append: true
+    groups: input
+
+# TODO: This works for on Fedora, author uses it on Ubuntu so I assume Debian
+# will work too. Arch and other distros are potentially different see the docs
+# https://github.com/k0kubun/xremap
+- name: add udev rule for input access
+  become: true
+  copy:
+    content: |
+      KERNEL=="uinput", GROUP="input", TAG+="uaccess"
+    dest: /etc/udev/rules.d/input.rules
+
+- name: clone config repo
+  git:
+    repo: git@code.infektor.net:config/xremap.git
+    dest: '{{config_dir}}'
+  notify: restart xremap
+
+- name: install xremap systemd unit
+  template:
+    src: xremap.service.j2
+    dest: ~/.config/systemd/user/xremap.service
+  notify: restart xremap
+
+- name: enable xremap service
+  systemd:
+    name: xremap
+    scope: user
+    enabled: true
+    state: started
+
+- name: check if extension is installed
+  command: gnome-extensions show xremap@k0kubun.com
+  changed_when: false
+  failed_when: false
+  register: extension
+
+- when: extension.rc != 0
+  debug:
+    msg: 'install gnome extension then reboot:
+        https://extensions.gnome.org/extension/5060/xremap'
+  changed_when: true

roles/xremap/templates/xremap.service.j2

@@ -0,0 +1,10 @@
+[Unit]
+Description=macOS Key Remapping
+
+[Service]
+Type=simple
+ExecStart={{executable_path}} {{config_dir}}/macOS.yaml
+Restart=on-failure
+
+[Install]
+WantedBy=default.target

roles/yq/tasks/RedHat.yaml

@@ -0,0 +1,51 @@
+---
+- name: stat executable
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/yq'
+  register: yq_stat
+
+- name: get installed version
+  when: yq_stat.stat.exists
+  command: yq --version
+  changed_when: false
+  register: yq_version
+
+- name: extract installed version
+  when: yq_stat.stat.exists
+  set_fact:
+    yq_installed_version:
+      '{{yq_version.stdout.strip() | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- name: get latest release
+  uri:
+    url: 'https://api.github.com/repos/mikefarah/yq/releases/latest'
+  register: latest
+
+- name: determine if yq needs installed
+  set_fact:
+    yq_needs_installed:
+      '{{not yq_stat.stat.exists or yq_installed_version != latest.json.tag_name}}'
+    arch_dict: {x86_64: amd64, arm64: arm64}
+
+- name: select asset name
+  when: yq_needs_installed
+  set_fact:
+    asset_query:
+      '[?contains(name, `yq_linux_{{arch_dict[ansible_architecture]}}`)] | [0]'
+- name: select asset
+  when: yq_needs_installed
+  set_fact:
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: create directory
+  when: yq_needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/bin'
+    state: directory
+
+- name: install executable
+  when: yq_needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/yq'
+    mode: '0755'

roles/zsh/tasks/RedHat.yaml

@@ -0,0 +1,8 @@
+---
+- name: install yum packages
+  become: true
+  yum:
+    name:
+      - zsh
+      - pinentry-tty
+    state: latest