temp!

Still having issues with 1password on Debian based distros due to
mismatching `signed-by` keyring. It appears as if `apt_repository:` is
changing the `signed-by` path even though it was explicitly specified in
the `repo:` setting. Instead switch to using `copy:` for complete
control over the `/etc/apt/sources.list.d/1password.list` file.

.gitignore

@@ -1 +1,2 @@
 external
+playbooks/test.yaml

.vim/coc-settings.json

@@ -1,12 +0,0 @@
-{
-  "yaml.schemas": {
-    "https://raw.githubusercontent.com/ansible-community/schemas/main/f/ansible.json#/$defs/playbook": [
-      "./*.yaml"
-    ],
-    "https://raw.githubusercontent.com/ansible-community/schemas/main/f/ansible.json#/$defs/tasks": [
-      "./roles/*/handlers/*.yaml",
-      "./roles/*/tasks/*.yaml",
-      "./tasks.yaml"
-    ]
-  }
-}

WSL.yaml

@@ -1,3 +0,0 @@
----
-- import_playbook: Unix.yaml
-- import_playbook: Windows.yaml

ansible.cfg

@@ -0,0 +1,5 @@
+[defaults]
+collections_path = collections
+library = library
+roles_path = roles
+stdout_callback = yaml

library/win_git.ps1

@@ -0,0 +1,344 @@
+#!powershell
+
+#AnsibleRequires -CSharpUtil Ansible.Basic
+#AnsibleRequires -PowerShell Ansible.ModuleUtils.CommandUtil
+
+$module = [Ansible.Basic.AnsibleModule]::Create($args, @{
+    options = @{
+        dest = @{ type = 'path' }
+        repo = @{ required = $true; aliases = @( 'name' ) }
+        version = @{ default = 'HEAD' }
+        remote = @{ default = 'origin' }
+        executable = @{ default = $null; type = 'path' }
+    }
+    supports_check_mode = $false
+})
+
+$dest = $module.Params.dest
+$repo = $module.Params.repo
+$version = $module.Params.version
+$remote = $module.Params.remote
+$git = $module.Params.executable
+if ( !$git ) {
+    $git = Get-ExecutablePath 'git'
+}
+
+# ================================= Utilities ==================================
+
+function Test-SshAcceptNewHostKey {
+    try {
+        $ssh = Get-ExecutablePath 'ssh'
+    } catch {
+        throw 'Remote host is missing ssh command, so you cannot use acceptnewhostkey option.'
+    }
+    $result = Run-Command "$ssh -o StrictHostKeyChecking=accept-new -V"
+    if ( $result.rc -ne 0 ) {
+        return $false
+    }
+    return $true
+}
+
+function Get-AbsolutePath {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    try {
+        $result = Resolve-Path $path
+    } catch {
+        return $_[0].TargetObject
+    }
+    return $result
+}
+
+function Get-GitDir {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    $git_dir = Join-Path $path '.git'
+    # Check if this .git is a file.
+    if ( [System.IO.File]::Exists($git_dir) ) {
+        # Extract the gitdir: path from the .git file.
+        $groups = Get-Content "$git_dir" | `
+            Select-String '(gitdir:) (.*)' | `
+            ForEach { $_.Matches[0].Groups[1..2] }
+        $ref_prefix = $groups[0]
+        $gitdir = $groups[1]
+        if ( $ref_prefix -ne 'gitdir:' ) {
+            $module.FailJson('The .git file has invalid gitdir reference format.')
+        }
+        # Check if the repo path is absolute.
+        if ( [System.IO.Path]::IsPathRooted($gitdir) ) {
+            $git_dir = $gitdir
+        } else {
+            # Join with the input path to construct an absolute path.
+            $git_dir = Join-Path $path $gitdir
+        }
+        if ( ![System.IO.Directory]::Exists($git_dir) ) {
+            throw "$git_dir is not a directory."
+        }
+    }
+    return $git_dir
+}
+
+function Get-GitSshExecutablePath {
+    if ( $env:GIT_SSH ) {
+        return $env:GIT_SSH
+    }
+    if ( $env:GIT_SSH_COMMAND ) {
+        return $env:GIT_SSH_COMMAND
+    }
+    return Get-ExecutablePath 'ssh'
+}
+
+function Test-GitRemoteBranch {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $repository,
+        [Parameter(Mandatory = $true)] [String] $branch
+    )
+    $command = "`"$git`" ls-remote $repository -h refs/heads/$branch"
+    $result = Run-Command -command $command
+    if ( $result.stdout.Contains($version) ) {
+        return $true
+    }
+    return $false
+}
+
+function Test-GitRemoteTag {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $repository,
+        [Parameter(Mandatory = $true)] [String] $tag
+    )
+    $command = "`"$git`" ls-remote $repository -t refs/tags/$tag"
+    $result = Run-Command -command $command
+    if ( $result.stdout.Contains($version) ) {
+        return $true
+    }
+    return $false
+}
+
+function Test-GitLocalChanges {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" status --porcelain"
+    $result = Run-Command -command $command -working_directory $dest
+    $changes = $result.stdout.Split([System.Environment]::NewLine, `
+            [System.StringSplitOptions]::RemoveEmptyEntries) | `
+        Where-Object { -not $_.StartsWith('??') } | Measure-Object -Line
+    return $changes.Lines -gt 0
+}
+
+function Get-GitRemoteHead {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $repo,
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $version,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $cloning = $false
+    $cwd = $null
+    $tag = $false
+    if ( $remote -eq $repo ) {
+        $cloning = $true
+    } else {
+        $cwd = $dest
+    }
+    if ( $version -eq 'HEAD' ) {
+        if ( $cloning ) {
+            # Cloning the repo, just get the remote's HEAD version.
+            $command = "`"$git`" ls-remote $remote -h HEAD"
+        } else {
+            $head_branch = Get-GitRemoteHeadBranch $module $dest $remote
+            $command = "`"$git`" ls-remote $remote -h refs/heads/$head_branch"
+        }
+    } elseif ( Test-GitRemoteBranch $dest $remote $version ) {
+        $command = "`"$git`" ls-remote $remote -h refs/head/$version"
+    } elseif ( Test-GitRemoteTag $dest $remote $version ) {
+        $tag = $true
+        $command = "`"$git`" ls-remote $remote -t refs/tags/$version*"
+    } else {
+        # Appears to be a sha1, return as-is since it apparently not possible
+        # to check for a specific sha1 on remote.
+        return $version
+    }
+    $result = Run-Command -command $command -working_directory $cwd
+    if ( $result.rc -ne 0 -or $result.stdout.Length -lt 1 ) {
+        throw "Could not determine remote ref for $vesion"
+    }
+    $ref = $result.stdout
+    if ( $tag ) {
+        # Find the dereferenced tag if this is an annotated tag.
+        ForEach ( $tag in $ref.Split([System.Environment]::NewLine) ) {
+            if ( $tag.EndsWith("$version ^{}") ) {
+                $ref = $tag
+            } elseif ( $tag.EndsWith($version) ) {
+                $ref = $tag
+            }
+        }
+    }
+    return $ref.Split()[0]
+}
+
+function Test-GitDetachedHead {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+}
+
+function Get-GitRemoteHeadBranch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $version,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $git_dir = Join-Path $dest '.git'
+    # TODO: Check if the .git is a file. If it is a file, it means that we are
+    # in a submodule structure.
+    $head_file = Join-Path $git_dir 'HEAD'
+    if ( Test-GitDetachedHead $dest ) {
+        $head_file = Join-Path $git_dir 'refs' 'remotes' $remote 'HEAD'
+    }
+}
+
+function Get-GitCurrentSha {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" rev-parse HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    return $result.stdout.Trim()
+}
+
+function Get-GitRemoteUrl {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $command = "`"$git`" ls-remote --get-url $remote"
+    $result = Run-Command -command $command -working_directory $dest
+    if ( $result.rc -ne 0 ) {
+        # There was an issue getting the remote URL, most likely command is not
+        # available in this version of Git.
+        return $null
+    }
+    return $result.stdout.Trim()
+}
+
+function Set-GitRemoteUrl {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $url
+    )
+    # Return if remote URL isn't changing.
+    $remote_url = Get-GitRemoteUrl $dest $remote
+    if ( $remote_url -eq $repo ) {
+        return $false
+    }
+    $command = "`"$git`" remote set-url $remote $url"
+    $result = Run-Command -command $command -working_directory $dest
+    if ( $result.rc -ne 0 ) {
+        $module.FailJson("Failed to set a new url $url for $remote`: $result.stderr")
+    }
+    # Return false if remote_url is null to maintain previous behavior for Git
+    # versions prior to 1.7.5 that lack required functionality.
+    return $remote_url -ne $null
+}
+
+function Invoke-GitClone {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $repo,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $dest_parent = Split-Path -Path $dest -Parent
+    if ( !(Test-Path $dest_parent) ) {
+        New-Item -Path $dest_parent -ItemType Directory
+    }
+    $command = "`"$git`" clone --recursive --origin $remote $repo $dest"
+    if ( $version -ne "HEAD" ) {
+        $command += " --branch $version"
+    }
+    $result = Run-Command -command $command -working_directory $cwd
+    if ( $result.rc -ne 0 ) {
+        $module.FailJson($result.stderr)
+    }
+    # Ensure the newly cloned repository has the correct owner
+    $userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+    $idRef = [System.Security.Principal.NTAccount]::new($userName)
+    Get-Item $dest | foreach { `
+        $_ ; $_ | Get-ChildItem -Force -Recurse `
+    } | foreach { `
+        $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `
+    }
+}
+
+function Invoke-GitFetch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $repo,
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $version,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $command = "`"$git`" fetch --tags $remote"
+    $result = Run-Command -command $command -working_directory $dest
+    if ( $result.rc -ne 0 ) {
+        $module.FailJson("Failed to download remote objects and refs:" + `
+                         "$result.stdout $result.stderr")
+    }
+}
+
+function Invoke-GitCheckout {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $result = Run-Command -command "`"$git`" checkout $version" -working_directory $dest
+    if ( $result.rc -ne 0 ) {
+        $module.FailJson("Failed to checkout version '$version': " + `
+                         "$result.stdout $result.stderr")
+    }
+}
+
+# ================================ Start logic =================================
+
+if ( !$dest ) {
+    $module.FailJson('The destination directory must be specified.')
+}
+$dest = Get-AbsolutePath $dest
+$git_dir = Get-GitDir $dest
+$gitconfig = Join-Path $git_dir 'config'
+
+$module.Result.before = $null
+
+$local_changes = $false
+if ( ($dest -and ![System.IO.File]::Exists($gitconfig)) -or (!$dest -and !$clone) ) {
+    Invoke-GitClone $repo $remote $dest $version
+    $module.Result.changed = $true
+} else {
+    $local_changes = Test-GitLocalChanges $dest
+    $module.Result.before = Get-GitCurrentSha $dest
+    if ( $local_changes ) {
+        $module.FailJson('Local modifications exist in repository.')
+    }
+    # Checkout branch, if $version is HEAD get HEAD branch
+    # Pull
+}
+
+$module.ExitJson()

library/win_git.py

@@ -0,0 +1,64 @@
+# -*- coding: utf-8 -*-
+
+# TODO: copyright
+
+DOCUMENTATION = '''
+---
+module: win_git
+author:
+    - "Kenneth Benzie (Benie)"
+short_description: Deploy software (or files) from git checkouts on Windows
+description:
+    - Manage git checkouts of repositories to deploy files or software on Windows.
+options:
+    data:
+        description:
+            - Alternate data to return instead of 'pong'.
+            - If this parameter is set to C(crash), the module will cause an
+              exception.
+        type: str
+        default: pong
+seealso:
+    - module: ansible.builtin.git
+'''
+
+# DOCUMENTATION = r'''
+# ---
+# module: win_ping
+# short_description: A windows version of the classic ping module
+# description:
+#   - Checks management connectivity of a windows host.
+#   - This is NOT ICMP ping, this is just a trivial test module.
+#   - For non-Windows targets, use the M(ansible.builtin.ping) module instead.
+# options:
+#   data:
+#     description:
+#       - Alternate data to return instead of 'pong'.
+#       - If this parameter is set to C(crash), the module will cause an exception.
+#     type: str
+#     default: pong
+# seealso:
+# - module: ansible.builtin.ping
+# author:
+# - Chris Church (@cchurch)
+# '''
+
+EXAMPLES = r'''
+# Test connectivity to a windows host
+# ansible winserver -m ansible.windows.win_ping
+
+- name: Example from an Ansible Playbook
+  ansible.windows.win_ping:
+
+- name: Induce an exception to see what happens
+  ansible.windows.win_ping:
+    data: crash
+'''
+
+RETURN = r'''
+ping:
+    description: Value provided with the data parameter.
+    returned: success
+    type: str
+    sample: pong
+'''

macOS.yaml

@@ -1,7 +0,0 @@
----
-- import_playbook: Unix.yaml
-
-- hosts: localhost
-
-  roles:
-    - role: obsidian

playbooks/1password.yaml

@@ -0,0 +1,4 @@
+---
+- hosts: localhost
+  roles:
+    - 1password

playbooks/Linux.yaml

@@ -0,0 +1,8 @@
+---
+- import_playbook: LinuxCLI.yaml
+- import_playbook: UnixGUI.yaml
+- hosts: localhost
+  roles:
+    - role: kitty
+    - role: xremap
+      when: ansible_os_family == "RedHat"

playbooks/LinuxCLI.yaml

@@ -0,0 +1,6 @@
+---
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  roles:
+    - role: gdb
+    - role: system-info

playbooks/UnixCLI.yaml

@@ -1,34 +1,32 @@
 ---
 - hosts: localhost
-
   roles:
     - role: sudo
       when: ansible_user_id != "root"
+    - role: python
 
     - role: zsh
     - role: neovim
     - role: tmux
-    - role: system-info
-      when: '"WSL" not in ansible_kernel'
 
     - role: ag
+    - role: bash
     - role: bat
     - role: curl
+    - role: editline
     - role: fzf
+    - role: gh
     - role: git
+    - role: glab
     - role: htop
     - role: jp
     - role: jq
     - role: readline
     - role: tidy
     - role: tree
+    - role: watch
+    - role: wget
     - role: yq
 
     - role: llvm
     - role: nodejs
-    - role: python
-
-    - role: 1password
-
-    - role: wsl
-      when: '"WSL" in ansible_kernel'

playbooks/UnixGUI.yaml

@@ -0,0 +1,7 @@
+---
+- hosts: localhost
+  roles:
+    - role: 1password
+    - role: fonts
+    - role: obsidian
+    - role: webcatalog

playbooks/WSL.yaml

@@ -0,0 +1,6 @@
+---
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  roles:
+    - role: gdb
+    - role: wsl

playbooks/Windows.yaml

@@ -1,10 +1,8 @@
 ---
 - hosts: windows
 
-  vars:
-    install_cad_apps: false
-
   roles:
+    - role: python
     - role: git
     - role: powershell
     - role: neovim
@@ -14,13 +12,14 @@
     - role: bat
     - role: curl
     - role: fzf
-    - role: tree
+    - role: gh
+    - role: glab
     - role: jq
+    - role: tree
     - role: yq
 
     - role: llvm
     - role: nodejs
-    - role: python
 
     - role: 1password
     - role: autohotkey
@@ -28,8 +27,3 @@
     - role: obsidian
     - role: powertoys
     - role: windows-terminal
-
-    - role: autodesk-fusion360
-      when: install_cad_apps
-    - role: prusaslicer
-      when: install_cad_apps

playbooks/macOS.yaml

@@ -0,0 +1,14 @@
+---
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  roles:
+    - role: system-info
+- import_playbook: UnixGUI.yaml
+- hosts: localhost
+  roles:
+    - role: mas
+
+    - role: iterm
+    - role: magnet
+    - role: microsoft-remote-desktop
+    - role: viscosity

roles/1password/tasks/Debian.yaml

@@ -1,13 +1,24 @@
 ---
+- name: set keyring path
+  set_fact:
+    keyring: /etc/apt/keyrings/1password.asc
+    old_keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+
+- name: remove old keyring
+  become: true
+  file:
+    path: '{{old_keyring}}'
+    state: absent
+
 - name: add apt signing key
   when: '"WSL" not in ansible_kernel'
   become: true
-  apt_key:
+  get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
-    keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
-    state: present
+    dest: '{{keyring}}'
 
-- when: ansible_machine == 'x86_64'
+- name: set compatible architecture
+  when: ansible_machine == 'x86_64'
   set_fact:
     arch: amd64
 
@@ -18,11 +29,11 @@
 - name: add apt repository
   when: '"WSL" not in ansible_kernel'
   become: true
-  apt_repository:
-    repo: >-
-      deb [arch={{arch}}
-      signed-by=/etc/apt/trusted.gpg.d/1password-archive-keyring.gpg]
+  copy:
+    content: >-
+      deb [arch={{arch}} signed-by={{keyring}}]
       https://downloads.1password.com/linux/debian/{{arch}} stable main
+    dest: /etc/apt/sources.list.d/1password.list
 
 - name: install gui package
   when: '"WSL" not in ansible_kernel'

roles/1password/tasks/RedHat.yaml

@@ -0,0 +1,22 @@
+---
+- name: add yum repository key
+  become: true
+  rpm_key:
+    key: https://downloads.1password.com/linux/keys/1password.asc
+
+- name: add yum repository
+  become: true
+  yum_repository:
+    name: 1password
+    description: 1Password Stable Channel
+    baseurl: https://downloads.1password.com/linux/rpm/stable/$basearch
+    enabled: true
+    gpgcheck: true
+    repo_gpgcheck: true
+    gpgkey: ['https://downloads.1password.com/linux/keys/1password.asc']
+
+- name: install yum package
+  become: true
+  yum:
+    name: 1password
+    state: latest

roles/1password/tasks/zsh-completion.yaml

@@ -4,6 +4,11 @@
   register: zsh_completion_script
   changed_when: false
 
+- name: create local zsh site functions directory
+  file:
+    state: directory
+    path: ~/.local/share/zsh/site-functions
+
 - name: create op zsh completion file
   copy:
     content: '{{zsh_completion_script.stdout}}'

roles/ag/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: the_silver_searcher
+    state: latest

roles/autodesk-fusion360/tasks/main.yaml

@@ -1,8 +0,0 @@
----
-- assert:
-    that: ansible_os_family == "Windows"
-
-- name: install chocolatey package
-  win_chocolatey:
-    name: autodesk-fusion360
-    state: latest

roles/bash/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: create ~/.bashrc file
+  template:
+    src: templates/bashrc
+    dest: ~/.bashrc

roles/bash/templates/bashrc

@@ -0,0 +1,112 @@
+# If not running interactively, don't do anything
+case $- in
+    *i*) ;;
+      *) return;;
+esac
+
+# don't put duplicate lines or lines starting with space in the history.
+# See bash(1) for more options
+HISTCONTROL=ignoreboth
+
+# append to the history file, don't overwrite it
+shopt -s histappend
+
+# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
+HISTSIZE=1000
+HISTFILESIZE=2000
+
+# check the window size after each command and, if necessary,
+# update the values of LINES and COLUMNS.
+shopt -s checkwinsize
+
+# make less more friendly for non-text input files, see lesspipe(1)
+[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
+
+# enable color support of ls and also add handy aliases
+if [ -x /usr/bin/dircolors ]; then
+  test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
+  alias ls='ls --color=auto'
+  alias dir='dir --color=auto'
+  alias vdir='vdir --color=auto'
+  alias grep='grep --color=auto'
+  alias fgrep='fgrep --color=auto'
+  alias egrep='egrep --color=auto'
+fi
+
+if [ -f ~/.bash_aliases ]; then
+    . ~/.bash_aliases
+fi
+
+# enable programmable completion features (you don't need to enable
+# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
+# sources /etc/bash.bashrc).
+if ! shopt -oq posix; then
+  if [ -f /usr/share/bash-completion/bash_completion ]; then
+    . /usr/share/bash-completion/bash_completion
+  elif [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+  fi
+fi
+
+# Enable vi mode
+set -o vi
+
+function _prompt_first_line {
+  local exit_code=$?
+  if [ "$exit_code" = "0" ]; then
+    exit_code=
+  else
+    # If the last command failed, display its error code at the right
+    case $exit_code in
+      129) exit_code="SIGHUP"     ;;  # 128 + 1
+      130) exit_code="SIGINT"     ;;  # 128 + 2
+      131) exit_code="SIGQUIT"    ;;  # 128 + 3
+      132) exit_code="SIGILL"     ;;  # 128 + 4
+      133) exit_code="SIGTRAP"    ;;  # 128 + 5
+      134) exit_code="SIGABRT"    ;;  # 128 + 6
+      134) exit_code="SIGIOT"     ;;  # 128 + 6
+      135) exit_code="SIGBUS"     ;;  # 128 + 7
+      136) exit_code="SIGFPE"     ;;  # 128 + 8
+      137) exit_code="SIGKILL"    ;;  # 128 + 9
+      138) exit_code="SIGUSR1"    ;;  # 128 + 10
+      139) exit_code="SIGSEGV"    ;;  # 128 + 11
+      140) exit_code="SIGUSR2"    ;;  # 128 + 12
+      141) exit_code="SIGPIPE"    ;;  # 128 + 13
+      142) exit_code="SIGALRM"    ;;  # 128 + 14
+      143) exit_code="SIGTERM"    ;;  # 128 + 15
+      144) exit_code="SIGSTKFLT"  ;;  # 128 + 16
+      145) exit_code="SIGCHLD"    ;;  # 128 + 17
+      146) exit_code="SIGCONT"    ;;  # 128 + 18
+      147) exit_code="SIGSTOP"    ;;  # 128 + 19
+      148) exit_code="SIGTSTP"    ;;  # 128 + 20
+      149) exit_code="SIGTTIN"    ;;  # 128 + 21
+      150) exit_code="SIGTTOU"    ;;  # 128 + 22
+      151) exit_code="SIGURG"     ;;  # 128 + 23
+      152) exit_code="SIGXCPU"    ;;  # 128 + 24
+      153) exit_code="SIGXFSZ"    ;;  # 128 + 25
+      154) exit_code="SIGVTALRM"  ;;  # 128 + 26
+      155) exit_code="SIGPROF"    ;;  # 128 + 27
+      156) exit_code="SIGWINCH"   ;;  # 128 + 28
+      157) exit_code="SIGIO"      ;;  # 128 + 29
+      158) exit_code="SIGPWR"     ;;  # 128 + 30
+      159) exit_code="SIGSYS"     ;;  # 128 + 31
+    esac
+    exit_code=" \e[1m\e[31m$exit_code\e[0m"
+  fi
+  local time=$(date +%H:%M:%S)
+  local dir=$PWD
+  [[ "$dir" =~ ^"$HOME"(/|$) ]] && dir="~${dir#$HOME}"
+  # TODO: virtualenv
+  local grey="\e[38;5;244m"
+  local reset="\e[0m"
+  local blue="\e[38;5;37m"
+  echo -e "$grey$time$reset $blue$dir$reset$exit_code"
+}
+
+PROMPT_COMMAND=_prompt_first_line
+
+yellow="\001\e[38;5;3m\002"
+grey="\001\e[38;5;244m\002"
+reset="\001\e[0m\002"
+
+PS1="$yellow\u$reset@$grey\h$reset "

roles/bat/tasks/Debian.yaml

@@ -4,7 +4,6 @@
         ansible_distribution == "Ubuntu" and
         ansible_distribution_version == "18.04"
       }}'
-- debug: msg={{use_github}}
 
 - when: use_github
   include_tasks: deb.yaml

roles/bat/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: bat
+    state: latest

roles/curl/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: curl
+    state: latest

roles/editline/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: create .editrc config file
+  template:
+    src: editrc
+    dest: '{{ansible_env.HOME}}/.editrc'

roles/editline/templates/editrc

@@ -0,0 +1,3 @@
+# Enable vi mode
+lldb:bind -v
+lldb:bind ^I lldb_complete

roles/fonts/handlers/main.yaml

@@ -0,0 +1,3 @@
+---
+- name: refresh font cache
+  command: fc-cache

roles/fonts/tasks/Darwin.yaml

@@ -0,0 +1,9 @@
+---
+- name: enable homebrew tap
+  homebrew_tap:
+    name: homebrew/cask-fonts
+
+- name: install Caskaydia Cove Nerd Font
+  homebrew_cask:
+    name: font-caskaydia-cove-nerd-font
+    state: latest

roles/fonts/tasks/Linux.yaml

@@ -0,0 +1,56 @@
+---
+- name: stat version file
+  stat:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_file
+
+- name: slurp version
+  when: version_file.stat.exists
+  slurp:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_slurp
+
+- when: version_file.stat.exists
+  set_fact:
+    version: '{{version_slurp.content | b64decode}}'
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/ryanoasis/nerd-fonts/releases/latest
+  register: latest
+
+- set_fact:
+    needs_installed:
+      '{{ not version_file.stat.exists or version.strip() != latest.json.tag_name }}'
+    asset: '{{ latest.json.assets | to_json | from_json |
+      json_query("[?contains(name, `CascadiaCode.zip`)] | [0]") }}'
+
+- name: create user fonts directory
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts'
+    state: directory
+
+- name: download Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+
+- name: install Caskaydia Cove Nerd Font
+  when: needs_installed
+  unarchive:
+    src: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts'
+  notify: refresh font cache
+
+- name: write version file
+  copy:
+    content: '{{latest.json.tag_name}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+
+- name: remove Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    state: absent

roles/fonts/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- when: ansible_os_family == 'Darwin'
+  include_tasks: 'Darwin.yaml'
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: 'Linux.yaml'

roles/fzf/tasks/Debian-apt.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: fzf
+    state: latest

roles/fzf/tasks/Debian.yaml

@@ -1,6 +1,8 @@
 ---
-- name: install apt package
-  become: true
-  apt:
-    name: fzf
-    state: latest
+- when: ansible_distribution == 'Ubuntu' and
+        ansible_distribution_version is version('22.04', '<=')
+  include_tasks: Debian-old.yaml
+
+- when: not (ansible_distribution == 'Ubuntu' and
+             ansible_distribution_version is version('22.04', '<='))
+  include_tasks: Debian-apt.yaml

roles/fzf/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: fzf
+    state: latest

roles/gdb/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: gdb
+    state: latest

roles/gh/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: gh
+    state: latest

roles/gh/tasks/Debian.yaml

@@ -0,0 +1,37 @@
+---
+- set_fact:
+    arch_map:
+      aarch64: arm64
+      armv6l: armhf
+      armv7l: armhf
+      i386: i386
+      x86_64: amd64
+- set_fact:
+    arch: '{{ [ansible_architecture] | map("extract", arch_map) | first }}'
+
+- name: download apt repository key
+  become: true
+  get_url:
+    url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
+    dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
+    mode: 0644
+
+- name: add apt repository list
+  become: true
+  apt_repository:
+    filename: github-cli
+    repo: 'deb [arch={{arch}} signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main'
+    state: present
+
+- name: install apt package
+  become: true
+  apt:
+    name: gh
+    state: latest
+    update_cache: true
+  register: gh_apt
+
+- name: install zsh completions
+  when: gh_apt.changed
+  become: true
+  shell: gh completion -s zsh > /usr/local/share/zsh/site-functions/_gh

roles/gh/tasks/RedHat.yaml

@@ -0,0 +1,12 @@
+---
+- name: add yum repository
+  become: true
+  get_url:
+    url: https://cli.github.com/packages/rpm/gh-cli.repo
+    dest: /etc/yum.repos.d/gh-cli.repo
+
+- name: install dnf package
+  become: true
+  dnf:
+    name: gh
+    state: latest

roles/gh/tasks/Windows.yaml

@@ -1,8 +1,5 @@
 ---
-- assert:
-    that: ansible_os_family == "Windows"
-
 - name: install chocolatey package
   win_chocolatey:
-    name: prusaslicer
+    name: gh
     state: latest

roles/gh/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/git/tasks/Windows.yaml

@@ -31,17 +31,17 @@
 - include_tasks: Windows-installer.yaml
   when: git_run_installer
 
-- name: clone config repos
-  win_git:
-    repo: '{{item.repo}}'
-    dest: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
-    version: master
-  with_items: '{{git_config_repos}}'
-- win_owner:
-    path: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
-    user: Benie
-    recurse: true
-  with_items: '{{git_config_repos}}'
+# - name: clone config repos
+#   win_git:
+#     repo: '{{item.repo}}'
+#     dest: '{{ansible_env.USERPROFILE}}\.config\{{item.name}}'
+#     version: master
+#   with_items: '{{git_config_repos}}'
+# - win_owner:
+#     path: '{{ansible_env.USERPROFILE}}\.config\{{item.name}}'
+#     user: Benie
+#     recurse: true
+#   with_items: '{{git_config_repos}}'
 
 # - TODO: install pip packages
 #   win_pip:

roles/git/tasks/unix.yaml

@@ -18,8 +18,4 @@
     extra_args: --user
     state: latest
 
-- name: create symbolic links
-  file:
-    state: link
-    src: ~/.config/git/_git-changes
-    dest: ~/.local/share/zsh/site-functions/_git-changes
+- include_tasks: ~/.config/git/tasks.yaml

roles/glab/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: glab
+    state: latest

roles/glab/tasks/Debian.yaml

@@ -0,0 +1,67 @@
+---
+- set_fact:
+    glab: /usr/bin/glab
+- name: stat the executable
+  stat:
+    path: '{{glab}}'
+  register: stat_glab
+
+- name: get instlal version
+  when: stat_glab.stat.exists
+  command: '{{glab}} --version'
+  register: glab_version_output
+  changed_when: false
+
+- when: stat_glab.stat.exists
+  set_fact:
+    glab_version: '{{glab_version_output.stdout | replace("glab version ", "v")}}'
+
+- set_fact:
+    gitlab_api: 'https://gitlab.com/api/v4'
+    project_id: 'gitlab-org%2Fcli'
+
+- name: get list of gitlab releases
+  uri:
+    url:
+      '{{gitlab_api}}/projects/{{project_id}}/releases'
+  register: releases
+
+- set_fact:
+    latest: '{{releases.json[0]}}'
+    latest_version: '{{releases.json[0].tag_name}}'
+    query: >
+      [?contains(name, `glab`)] |
+      [?contains(name, `Linux`)] |
+      [?contains(name, `{{ansible_machine}}.deb`)] | [0]
+- set_fact:
+    asset: '{{latest.assets.links|json_query(query)}}'
+
+- name: create download directory
+  when: glab_version is not defined or glab_version != latest_version
+  tempfile:
+    state: directory
+    suffix: glab
+  register: tempdir
+
+- name: download .deb file
+  when: glab_version is not defined or glab_version != latest_version
+  get_url:
+    url: '{{asset.url}}'
+    dest: '{{tempdir.path}}/glab.deb'
+
+- name: install .deb file
+  when: glab_version is not defined or glab_version != latest_version
+  become: true
+  apt:
+    deb: '{{tempdir.path}}/glab.deb'
+
+- name: remove download directory
+  when: glab_version is not defined or glab_version != latest_version
+  file:
+    state: absent
+    path: '{{tempdir.path}}'
+
+- name: install zsh completions
+  when: glab_version is not defined or glab_version != latest_version
+  command:
+    glab completion -s zsh > ~/.local/share/zsh/site-functions/_glab

roles/glab/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: glab
+    state: latest

roles/glab/tasks/Windows.yaml

@@ -0,0 +1,5 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: glab
+    state: latest

roles/glab/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/htop/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: htop
+    state: latest

roles/iterm/tasks/main.yaml

@@ -0,0 +1,10 @@
+---
+- assert:
+    that: ansible_os_family == "Darwin"
+
+- name: install homebrew package
+  homebrew_cask:
+    name: iterm2
+    state: latest
+
+# TODO: Configure stuff, somehow?

roles/jp/tasks/Darwin.yaml

@@ -4,9 +4,12 @@
     url: https://api.github.com/repos/jmespath/jp/releases/latest
   register: latest
 
-# TODO: Support arm64
 - set_fact:
-    asset_query: '[?contains(name, `jp-darwin-amd64`)] | [0]'
+    arch: '{{ [ansible_architecture] |
+      map("extract", { "arm64": "arm64", "x86_64": "amd64" }) | first }}'
+
+- set_fact:
+    asset_query: '[?contains(name, `jp-darwin-{{arch}}`)] | [0]'
     assets: '{{latest.json.assets}}'
     latest_version: '{{latest.json.tag_name}}'
     jp_exe: '{{ansible_env.HOME}}/.local/bin/jp'
@@ -14,7 +17,7 @@
 - name: check if already installed
   stat:
     path: '{{jp_exe}}'
-  register: jp_exe
+  register: jp_stat
 
 - name: get installed version
   when: jp_stat.stat.exists == True

roles/jp/tasks/RedHat.yaml

@@ -0,0 +1,51 @@
+---
+- name: stat executable
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/jp'
+  register: jp_stat
+
+- name: get installed version
+  when: jp_stat.stat.exists
+  command: jp --version
+  changed_when: false
+  register: jp_version
+
+- name: extract installed version
+  when: jp_stat.stat.exists
+  set_fact:
+    jp_installed_version:
+      '{{jp_version.stdout.strip() | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- name: get latest release
+  uri:
+    url: 'https://api.github.com/repos/jmespath/jp/releases/latest'
+  register: latest
+
+- name: determine if jp needs installed
+  set_fact:
+    jp_needs_installed:
+      '{{not jp_stat.stat.exists or jp_installed_version != latest.json.tag_name}}'
+    arch_dict: {x86_64: amd64, arm64: arm64}
+
+- name: select asset name
+  when: jp_needs_installed
+  set_fact:
+    asset_query:
+      '[?contains(name, `jp-linux-{{arch_dict[ansible_architecture]}}`)] | [0]'
+- name: select asset
+  when: jp_needs_installed
+  set_fact:
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: create directory
+  when: jp_needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/bin'
+    state: directory
+
+- name: install executable
+  when: jp_needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/jp'
+    mode: '0755'

roles/jq/tasks/Debian.yaml

@@ -1,5 +1,6 @@
 ---
 - name: install apt package
+  become: true
   apt:
     name: jq
     state: latest

roles/jq/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: jq
+    state: latest

roles/kitty/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: kitty
+    state: latest

roles/kitty/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: kitty
+    state: latest

roles/kitty/tasks/main.yaml

@@ -0,0 +1,7 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: clone config repo
+  git:
+    repo: git@code.infektor.net:config/kitty.git
+    dest: ~/.config/kitty

roles/llvm/tasks/Fedora.yaml

@@ -0,0 +1,10 @@
+---
+- name: install dnf packages
+  become: true
+  dnf:
+    name:
+      - clang
+      - clang-tools-extra
+      - git-clang-format
+      - llvm
+    state: latest

roles/llvm/tasks/Linux Mint.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: Ubuntu.yaml

roles/llvm/tasks/Pop!_OS.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: Ubuntu.yaml

roles/llvm/tasks/Ubuntu.yaml

@@ -4,19 +4,65 @@
     url: https://api.github.com/repos/llvm/llvm-project/releases/latest
   register: llvm_latest
 
+- name: read /etc/os-release
+  slurp:
+    src: /etc/os-release
+  register: os_release_b64
+- name: extract UBUNTU_CODENAME=<name> to support dirivitive distros
+  set_fact:
+    ubuntu_codename: >-
+      {{
+          os_release_b64.content | b64decode |
+          regex_search('UBUNTU_CODENAME=.*') |
+          replace('UBUNTU_CODENAME=', '')
+      }}
+
 - set_fact:
     llvm_major_version:
       '{{llvm_latest.json.tag_name[8:llvm_latest.json.tag_name.find(".")]}}'
 - set_fact:
     llvm_apt_repo_url:
-      'http://apt.llvm.org/{{ansible_distribution_release}}/'
+      'http://apt.llvm.org/{{ubuntu_codename}}/'
     llvm_apt_category:
-      'llvm-toolchain-{{ansible_distribution_release}}-{{llvm_major_version}}'
+      'llvm-toolchain-{{ubuntu_codename}}-{{llvm_major_version}}'
+    keyring: '/etc/apt/keyrings/llvm.asc'
+
+- name: remove old keyring
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  apt_key:
+    url: https://apt.llvm.org/llvm-snapshot.gpg.key
+    id: 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421
+    state: absent
+
+- name: remove old upstream deb repository
+  become: true
+  apt_repository:
+    repo: 'deb {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    state: absent
+    filename: llvm
+    update_cache: false
+
+- name: remove old upstream deb-src repository
+  become: true
+  apt_repository:
+    repo: 'deb-src {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    state: absent
+    filename: llvm
+    update_cache: false
+
+- name: add apt repository key
+  become: true
+  get_url:
+    url: https://apt.llvm.org/llvm-snapshot.gpg.key
+    dest: '{{keyring}}'
 
 - name: add upstream deb repository
   become: true
   apt_repository:
-    repo: 'deb {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    repo: >
+      deb [signed-by={{keyring}}]
+      {{llvm_apt_repo_url}} {{llvm_apt_category}} main
     state: present
     filename: llvm
     update_cache: false
@@ -24,18 +70,13 @@
 - name: add upstream deb-src repository
   become: true
   apt_repository:
-    repo: 'deb-src {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    repo: >
+      deb-src [signed-by={{keyring}}]
+      {{llvm_apt_repo_url}} {{llvm_apt_category}} main
     state: present
     filename: llvm
     update_cache: false
 
-- name: add apt repository key
-  become: true
-  apt_key:
-    url: https://apt.llvm.org/llvm-snapshot.gpg.key
-    id: 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421
-    state: present
-
 - name: update apt cache
   become: true
   apt:

roles/magnet/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install app store package
+  mas:
+    id: 441258766
+    state: latest

roles/mas/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install homebrew package
+  homebrew:
+    name: mas
+    state: latest

roles/microsoft-remote-desktop/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == "Darwin"
+
+- name: install homebrew cask
+  homebrew_cask:
+    name: microsoft-remote-desktop
+    state: latest

roles/neovim/tasks/Darwin.yaml

@@ -1,7 +1,11 @@
 ---
 - name: install homebrew packages
   homebrew:
-    name: neovim
+    name:
+      - neovim
     state: latest
 
+- set_fact:
+    neovim_pip_packages: '{{neovim_pip_packages + ["pynvim"]}}'
+
 - include_tasks: Unix.yaml

roles/neovim/tasks/Debian.yaml

@@ -1,8 +1,18 @@
 ---
+- name: add neovim stable ppa
+  when: ansible_distribution == 'Ubuntu' and
+        ansible_distribution_version == '20.04'
+  become: true
+  apt_repository:
+    repo: ppa:neovim-ppa/stable
+    update_cache: true
+
 - name: install apt package
   become: true
   apt:
-    name: neovim
+    name:
+      - neovim
+      - python3-neovim
     state: latest
 
 - include_tasks: Unix.yaml

roles/neovim/tasks/RedHat.yaml

@@ -0,0 +1,10 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name:
+      - neovim
+      - python3-neovim
+    state: latest
+
+- include_tasks: Unix.yaml

roles/neovim/tasks/Unix.yaml

@@ -8,8 +8,6 @@
     dest: '{{vim_config_dir}}'
     version: master
 
-# TODO: - name: set repo email
-
 - name: install pip packages
   pip:
     name: '{{neovim_pip_packages}}'

roles/neovim/tasks/Windows.yaml

@@ -8,20 +8,17 @@
 - set_fact:
     vim_config_dir: '{{ansible_env.LOCALAPPDATA}}\nvim'
 
-- name: clone config repo
-  win_git:
-    repo: git@code.infektor.net:config/vim.git
-    dest: '{{vim_config_dir}}'
-    branch: master
-    # clone: false
-    update: true
-- win_owner:
-    path: '{{vim_config_dir}}'
-    user: Benie
-    recurse: true
-
-- assert:
-    that: False
+# - name: clone config repo
+#   win_git:
+#     repo: git@code.infektor.net:config/vim.git
+#     dest: '{{vim_config_dir}}'
+#     branch: master
+#     # clone: false
+#     update: true
+# - win_owner:
+#     path: '{{vim_config_dir}}'
+#     user: Benie
+#     recurse: true
 
 # - TODO: neovim set repo email
 #   win_git_config:

roles/neovim/vars/main.yaml

@@ -3,6 +3,5 @@ neovim_pip_packages:
   - cmake-language-server
   - cmakelint
   - compdb
-  - pynvim
   - vim-vint
   - yamllint

roles/nodejs/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install yum package
+  become: true
+  yum:
+    name: nodejs
+    state: latest

roles/obsidian/handlers/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: install desktop menu
+  command: >
+    xdg-desktop-menu install --mode user
+      {{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop

roles/obsidian/tasks/Darwin.yaml

@@ -1,11 +1,7 @@
 ---
 - name: install homebrew package
-  homebrew:
+  homebrew_cask:
     name: obsidian
     state: latest
 
-- name: clone notes repository
-  git:
-    repo: git@github.com:kbenzie/notes.git
-    dest: '{{ansible_env.HOME}}/Documents/Notes'
-    branch: main
+- include_tasks: Unix.yaml

roles/obsidian/tasks/Linux.yaml

@@ -0,0 +1,75 @@
+---
+# TODO: Prefer Flatpak over AppImage if available
+
+- name: stat symlink
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+  register: symlink_file
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/obsidianmd/obsidian-releases/releases/latest
+  register: latest
+
+- set_fact:
+    appimage: 'Obsidian-{{latest.json.name}}.AppImage'
+- set_fact:
+    filepath: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
+    iconpath: 'share/icons/hicolor/512x512/apps/obsidian.png'
+    asset_query: '[?contains(name, `{{appimage}}`)] | [0]'
+- set_fact:
+    needs_installed:
+      '{{not symlink_file.stat.exists or symlink_file.stat.lnk_source != filepath}}'
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: download latest version
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{filepath}}'
+    mode: '0755'
+
+- name: create directories
+  file:
+    path: '{{item}}'
+    state: directory
+  with_items:
+    - '{{ansible_env.HOME}}/.local/bin'
+    - '{{ansible_env.HOME}}/.local/share/icons/hicolor/512x512/apps'
+
+- name: create symlink
+  file:
+    src: '{{filepath}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+    state: link
+
+- name: extract squashfs-root for app icon
+  when: needs_installed
+  command:
+    cmd: '{{ansible_env.HOME}}/.local/bin/Obsidian --appimage-extract'
+    chdir: '/tmp'
+
+- name: copy icon file
+  when: needs_installed
+  copy:
+    src: '/tmp/squashfs-root/usr/{{iconpath}}'
+    dest: '{{ansible_env.HOME}}/.local/{{iconpath}}'
+
+- name: remove squashfs-root directory
+  when: needs_installed
+  file:
+    path: '/tmp/squashfs-root'
+    state: absent
+
+- name: create desktop file
+  template:
+    src: obsidian.desktop.j2
+    dest: '{{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop'
+  notify: install desktop menu
+
+- name: remove old appimage
+  when: needs_installed and symlink_file.stat.exists
+  file:
+    path: '{{symlink_file.stat.lnk_source}}'
+    state: absent
+
+- include_tasks: Unix.yaml

roles/obsidian/tasks/Unix.yaml

@@ -0,0 +1,6 @@
+---
+- name: clone notes repository
+  git:
+    repo: git@github.com:kbenzie/notes.git
+    dest: '{{ansible_env.HOME}}/Documents/Notes'
+    version: main

roles/obsidian/tasks/main.yaml

@@ -1,2 +1,5 @@
 ---
 - include_tasks: '{{ansible_os_family}}.yaml'
+  when: ansible_os_family == "Darwin" or ansible_os_family == "Windows"
+- include_tasks: 'Linux.yaml'
+  when: ansible_os_family != "Darwin" and ansible_os_family != "Windows"

roles/obsidian/templates/obsidian.desktop.j2

@@ -0,0 +1,11 @@
+[Desktop Entry]
+Name=Obsidian
+Exec={{ansible_env.HOME}}/.local/bin/Obsidian
+Terminal=false
+Type=Application
+Icon=obsidian
+StartupWMClass=Obsidian
+X-AppImage-Version={{latest.json.name}}
+Comment=Private and flexible note‑taking app that adapts to the way you think. 
+MimeType=x-scheme-handler/obsidian;
+Categories=Utility;

roles/python/tasks/Debian.yaml

@@ -8,3 +8,4 @@
       - python3-pip
       - python3-venv
       - python3-virtualenv
+    state: latest

roles/python/tasks/RedHat.yaml

@@ -0,0 +1,9 @@
+---
+- name: install yum packages
+  become: true
+  yum:
+    name:
+      - python3
+      - python3-pip
+      - python3-virtualenv
+    state: latest

roles/python/tasks/Unix.yaml

@@ -6,20 +6,18 @@
 
 # TODO: set repo email
 
-- name: install pip packages
-  pip:
-    name: '{{python_pip_packages}}'
-    state: latest
-    extra_args: --user
-
-- name: create directories
+- name: create config directories
   file:
     state: directory
-    dest: '{{item}}'
+    path: '{{item}}'
   with_items:
+    - ~/.config
     - ~/.config/ipython/profile_default
     - ~/.config/pip
 
+# Ensure that pip.conf exists before ever installing pip packages since
+# Debian has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip
+# install --user` unless configured otherwise.
 - name: create symbolic links
   file:
     state: link
@@ -34,3 +32,17 @@
       dest: ~/.config/ipython/profile_default/ipython_config.py
     - src: ~/.config/python/pip.conf
       dest: ~/.config/pip/pip.conf
+
+- name: install pip packages
+  pip:
+    name: '{{python_pip_packages}}'
+    state: latest
+    extra_args: --user
+
+- name: create directories
+  file:
+    state: directory
+    dest: '{{item}}'
+  with_items:
+    - ~/.config/ipython/profile_default
+    - ~/.config/pip

roles/python/tasks/main.yaml

@@ -1,5 +1,5 @@
 ---
 - include_tasks: '{{ansible_os_family}}.yaml'
 
-- include_tasks: 'unix.yaml'
+- include_tasks: 'Unix.yaml'
   when: ansible_os_family != "Windows"

roles/python/vars/main.yaml

@@ -5,6 +5,7 @@ python_pip_packages:
   - ipdb
   - ipython
   - isort
+  - jmespath
   - pylint
   - python-gist
   - yapf

roles/sudo/tasks/main.yaml

@@ -2,11 +2,13 @@
 - assert:
     that: ansible_user_id != "root"
 
+- include_vars: '{{ansible_os_family}}.yaml'
+
 - name: create /etc/sudoers.d/{user} config file
   become: true
   template:
     src: sudoers
     dest: '/etc/sudoers.d/{{ansible_user_id}}'
-    owner: root
-    group: root
+    owner: '{{sudo_owner}}'
+    group: '{{sudo_group}}'
     mode: '0440'

roles/sudo/vars/Darwin.yaml

@@ -0,0 +1,3 @@
+---
+sudo_owner: root
+sudo_group: wheel

roles/sudo/vars/Debian.yaml

@@ -0,0 +1,3 @@
+---
+sudo_owner: root
+sudo_group: root

roles/sudo/vars/RedHat.yaml

@@ -0,0 +1,3 @@
+---
+sudo_owner: root
+sudo_group: wheel

roles/system-info/handlers/main.yaml

@@ -0,0 +1,7 @@
+---
+- name: restart system-info
+  systemd:
+    name: system-info
+    scope: user
+    daemon_reload: true
+    state: restarted

roles/system-info/tasks/Debian.yaml

@@ -3,23 +3,10 @@
   become: true
   apt:
     name:
+      - acpi
       - gawk
+      - lm-sensors
       - sysstat
     state: latest
 
-- name: create systemd user unit directory
-  file:
-    state: directory
-    dest: ~/.config/systemd/user
-
-- name: install system-info systemd unit
-  copy:
-    src: ~/.config/tmux/system-info/system-info.service
-    dest: ~/.config/systemd/user/system-info.service
-
-- name: enable system-info service
-  systemd:
-    name: system-info
-    scope: user
-    enabled: true
-    state: started
+- include_tasks: Linux.yaml

roles/system-info/tasks/Linux.yaml

@@ -0,0 +1,28 @@
+---
+- name: create systemd user unit directory
+  file:
+    state: directory
+    dest: ~/.config/systemd/user
+
+- set_fact:
+    SYSTEM_INFO_SCRIPT_DIR: '{{ansible_env.HOME}}/.config/tmux/system-info'
+
+- when: '"WSL" not in ansible_kernel'
+  set_fact:
+    SYSTEM_INFO_SCRIPT: '{{SYSTEM_INFO_SCRIPT_DIR}}/system-info-Linux.sh'
+- when: '"WSL" in ansible_kernel'
+  set_fact:
+    SYSTEM_INFO_SCRIPT: '{{SYSTEM_INFO_SCRIPT_DIR}}/system-info-WSL.sh'
+
+- name: install system-info systemd unit
+  template:
+    src: templates/system-info.service.j2
+    dest: ~/.config/systemd/user/system-info.service
+  notify: restart system-info
+
+- name: enable system-info service
+  systemd:
+    name: system-info
+    scope: user
+    enabled: true
+    state: started

roles/system-info/tasks/RedHat.yaml

@@ -0,0 +1,11 @@
+---
+- name: install dnf packages
+  become: true
+  dnf:
+    name:
+      - acpi
+      - lm_sensors
+      - sysstat
+    state: latest
+
+- include_tasks: Linux.yaml

roles/system-info/tasks/Windows.yaml

@@ -30,29 +30,29 @@
     start_when_available: true
     wake_to_run: false
 
-- name: create system-info-WSL.sh scheduled task
-  win_scheduled_task:
-    path: Benie
-    name: system-info-WSL.sh
-    state: present
-    enable: true
-    triggers:
-      - type: logon
-        enabled: true
-      - type: registration
-        enabled: true
-    actions:
-      - path: '{{wsl_exe}}'
-        arguments: '-d Debian -e /home/benie/.config/tmux/system-info/system-info-WSL.sh'
-    disallow_start_if_on_batteries: false
-    stop_if_going_on_batteries: false
-    execution_time_limit: PT0S
-    logon_type: password
-    username: '{{ansible_user}}'
-    password: '{{ansible_password}}'
-    multiple_instances: 3
-    run_level: limited
-    start_when_available: true
-    wake_to_run: false
+# - name: create system-info-WSL.sh scheduled task
+#   win_scheduled_task:
+#     path: Benie
+#     name: system-info-WSL.sh
+#     state: present
+#     enable: true
+#     triggers:
+#       - type: logon
+#         enabled: true
+#       - type: registration
+#         enabled: true
+#     actions:
+#       - path: '{{wsl_exe}}'
+#         arguments: '-d Debian -e /home/benie/.config/tmux/system-info/system-info-WSL.sh'
+#     disallow_start_if_on_batteries: false
+#     stop_if_going_on_batteries: false
+#     execution_time_limit: PT0S
+#     logon_type: password
+#     username: '{{ansible_user}}'
+#     password: '{{ansible_password}}'
+#     multiple_instances: 3
+#     run_level: limited
+#     start_when_available: true
+#     wake_to_run: false
 
 # - TODO: configure firewall

roles/system-info/templates/system-info.service.j2

@@ -0,0 +1,9 @@
+[Unit]
+Description=System Info
+
+[Service]
+ExecStart={{SYSTEM_INFO_SCRIPT}}
+Environment=LC_ALL=C.UTF-8
+
+[Install]
+WantedBy=default.target

roles/tidy/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: tidy
+    state: latest

roles/tmux/tasks/Archlinux.yaml

@@ -3,6 +3,21 @@
   pacman:
     name:
       - tmux
-      - xclip
       - urlscan
     state: latest
+
+- name: install pacman package
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  pacman:
+    name: xsel
+    state: latest
+
+- name: remove pacman package
+  when: '"WSL" in ansible_kernel'
+  become: true
+  pacman:
+    name:
+      - xclip
+      - xsel
+    state: absent

roles/tmux/tasks/Darwin.yaml

@@ -3,7 +3,34 @@
   homebrew:
     name:
       - tmux
-      - osx-cpu-temp
       - reattach-to-user-namespace
       - urlview
     state: latest
+
+- name: check terminal info description exists
+  command: /usr/bin/infocmp -x tmux-256color
+  changed_when: false
+  failed_when: false
+  register: terminfo_exists
+
+- name: download latest terminfo description
+  when: terminfo_exists.rc == 1
+  get_url:
+    url: https://gist.githubusercontent.com/nicm/ea9cf3c93f22e0246ec858122d9abea1/raw/37ae29fc86e88b48dbc8a674478ad3e7a009f357/tmux-256color
+    dest: ~/tmux-256color
+
+- name: compile terminal info
+  when: terminfo_exists.rc == 1
+  command: /usr/bin/tic -x ~/tmux-256color
+
+- name: cleanup downloaded terminfo description
+  when: terminfo_exists.rc == 1
+  file:
+    path: ~/tmux-256color
+    state: absent
+
+- name: check terminal info description exists
+  when: terminfo_exists.rc == 1
+  command: /usr/bin/infocmp -x tmux-256color
+  changed_when: false
+  register: terminfo_exists

roles/tmux/tasks/Debian.yaml

@@ -1,12 +1,26 @@
 ---
 - name: install apt packages
   become: true
-  package:
+  apt:
     name:
       - tmux
       - gawk
-      - jq
       - sysstat
       - urlview
-      - xclip
     state: latest
+
+- name: install apt package
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  apt:
+    name: xsel
+    state: latest
+
+- name: remove apt package
+  when: '"WSL" in ansible_kernel'
+  become: true
+  apt:
+    name:
+      - xclip
+      - xsel
+    state: absent

roles/tmux/tasks/Fedora.yaml

@@ -3,8 +3,22 @@
   dnf:
     name:
       - tmux
-      - xclip
       - urlscan
       - sysstat
-      - jq
     state: latest
+
+- name: install dnf package
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  dnf:
+    name: xsel
+    state: latest
+
+- name: remove dnf package
+  when: '"WSL" in ansible_kernel'
+  become: true
+  dnf:
+    name:
+      - xclip
+      - xsel
+    state: absent

roles/tmux/tasks/RedHat.yaml

@@ -0,0 +1,10 @@
+---
+- name: install yum packages
+  become: true
+  yum:
+    name:
+      - tmux
+      - sysstat
+      - urlview
+      - xsel
+    state: latest

roles/tree/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: tree
+    state: latest

roles/viscosity/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == "Darwin"
+
+- name: install homebrew package
+  homebrew_cask:
+    name: viscosity
+    state: latest