117 lines
4.7 KiB
YAML
117 lines
4.7 KiB
YAML
---
|
|
# The ZSH installation instructions are sourced from this blog:
|
|
# https://harshithashok.com/tools/oh-my-zsh-with-starship/
|
|
- name: Create the user
|
|
when: user_username is not undefined # Skip when no user is provided, we'll asume we're targetting the Ansible user.
|
|
block:
|
|
- name: Create a new user
|
|
become: true
|
|
ansible.builtin.user:
|
|
append: true
|
|
groups:
|
|
- users
|
|
name: "{{ user_username }}"
|
|
# Salt is necessary, see: https://stackoverflow.com/questions/56869949/ansible-user-module-always-shows-changed
|
|
password: "{{ user_password | password_hash('sha512', password_salt) }}"
|
|
- name: Ensure .ssh directory exists in user home
|
|
become: true
|
|
become_user: "{{ user_username }}"
|
|
ansible.builtin.file:
|
|
path: "/home/{{ user_username }}/.ssh"
|
|
state: directory
|
|
mode: "0700"
|
|
# We're assuming that the ansible user has its authorized keys setup before running the playbook and that all created users using this
|
|
# rule want the same machines to be able to access them.
|
|
- name: Copy over authorized keys from the main ansible user
|
|
become: true
|
|
ansible.builtin.copy:
|
|
remote_src: true
|
|
src: "/home/{{ ansible_facts['user_id'] }}/.ssh/authorized_keys"
|
|
dest: "/home/{{ user_username }}/.ssh/"
|
|
owner: "{{ user_username }}"
|
|
group: "{{ user_username }}"
|
|
mode: "0600"
|
|
- name: Set fact for defining the user which should run the next modules
|
|
ansible.builtin.set_fact:
|
|
target_user: "{{ ansible_facts['user_id'] if user_username is undefined else user_username }}"
|
|
# The "lingering" property seems to be important to Podman, otherwise errors are thrown as mentioned here:
|
|
# https://superuser.com/questions/1788594/podman-the-cgroupv2-manager-is-set-to-systemd-but-there-is-no-systemd-user-sess
|
|
- name: "Check if lingering is enabled (user: {{ target_user }})"
|
|
ansible.builtin.command:
|
|
cmd: "loginctl show-user {{ target_user }} --property=Linger"
|
|
register: linger_check
|
|
changed_when: false
|
|
failed_when: false
|
|
- name: "Enable systemd \"lingering\" (user: {{ target_user }})"
|
|
become: true
|
|
ansible.builtin.command:
|
|
cmd: "loginctl enable-linger {{ target_user }}"
|
|
when: linger_check.rc != 0
|
|
changed_when: true
|
|
- name: Ensuring ZSH is installed
|
|
become: true
|
|
ansible.builtin.apt:
|
|
pkg:
|
|
- acl # Needed to prevent this error: https://stackoverflow.com/questions/46352173/ansible-failed-to-set-permissions-on-the-temporary
|
|
- zsh
|
|
state: present
|
|
- name: Install Oh My ZSH # noqa: command-instead-of-module ignore error since we're removing the script after install.
|
|
become: true
|
|
become_user: "{{ target_user }}"
|
|
ansible.builtin.shell: |
|
|
wget https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh
|
|
chmod u+x install.sh
|
|
./install.sh --unattended
|
|
rm install.sh
|
|
args:
|
|
executable: /bin/bash
|
|
creates: ~/.oh-my-zsh
|
|
- name: Install Starship # noqa: command-instead-of-module ignore error since we're removing the script after install.
|
|
become: true
|
|
ansible.builtin.shell: |
|
|
wget https://starship.rs/install.sh
|
|
chmod u+x install.sh
|
|
./install.sh --yes
|
|
rm install.sh
|
|
args:
|
|
executable: /bin/bash
|
|
creates: /usr/local/bin/starship
|
|
- name: Install zsh-autosuggestions # noqa: command-instead-of-module ignore error since we're removing the script after install.
|
|
become: true
|
|
become_user: "{{ target_user }}"
|
|
ansible.builtin.command:
|
|
cmd: git clone https://github.com/zsh-users/zsh-autosuggestions ~/.oh-my-zsh/custom/plugins/zsh-autosuggestions
|
|
creates: ~/.oh-my-zsh/custom/plugins/zsh-autosuggestions
|
|
- name: Clear "ZSH_THEME" in ~/.zshrc
|
|
become: true
|
|
become_user: "{{ target_user }}"
|
|
ansible.builtin.lineinfile:
|
|
path: ~/.zshrc
|
|
regexp: '^ZSH_THEME="[^"]+"$'
|
|
line: ZSH_THEME=""
|
|
- name: Add the zsh-autosuggestions plugin in ~/.zshrc
|
|
become: true
|
|
become_user: "{{ target_user }}"
|
|
ansible.builtin.lineinfile:
|
|
path: ~/.zshrc
|
|
regexp: '^plugins=\((.*)(?<!zsh-autosuggestions)\)$'
|
|
line: 'plugins=(\1 zsh-autosuggestions)'
|
|
backrefs: true
|
|
# For some reason snap isn't properly configured and its bin directory isn't added to the $PATH variable.
|
|
# This probably has something to do with the hardening rules, instead we'll fix it here.
|
|
- name: Add Starship config and Snapcraft to ~/.zshrc
|
|
become: true
|
|
become_user: "{{ target_user }}"
|
|
ansible.builtin.blockinfile:
|
|
path: ~/.zshrc
|
|
block: |-
|
|
# Add Snapcraft to $PATH
|
|
export PATH=$PATH:/snap/bin
|
|
|
|
# Starship
|
|
eval "$(starship init zsh)"
|
|
- name: Change the default shell of the current user
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: "{{ target_user }}"
|
|
shell: /usr/bin/zsh
|