mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5
93b47a5bee
Replaces the raw package modules at 76 call sites with package_install, moves each role's distribution mapping into its own meta/packages.yml, and turns the inventory PACKAGES variable from source-keyed literal names into a list of declared package ids. The lint that forbids the raw modules is enabled here, because the migration burns it down from 76 offenders to zero. Removes sys-aur, sys-aur-install and sys-package. The AUR build user, the passwordless pacman rule and the inventory-driven install are part of the plan the action plugin executes, so the roles no longer carry them. Declaring the mappings surfaced breakage the raw modules had hidden: on Debian the `which` binary comes from debianutils, jrnl is in no Debian or Ubuntu suite, chromium-browser is absent from Debian stable, JDK 11 is unobtainable on RedHat, wireguard had no RedHat branch at all, qbittorrent was built from the AUR although Arch ships it in extra, and desk-docker installed a Docker variant that conflicts with the one sys-svc-container installs. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
22 lines
615 B
YAML
22 lines
615 B
YAML
---
|
|
- name: 📦 Install Chromium browser
|
|
package_install:
|
|
id: chromium
|
|
|
|
- name: 📂 Include dependency 'desk-keepassxc'
|
|
include_role:
|
|
name: desk-keepassxc
|
|
when: run_once_desk_keepassxc is not defined
|
|
|
|
- name: ✅ Ensure Chromium policies directory exists
|
|
file:
|
|
path: /etc/chromium/policies/managed
|
|
state: directory
|
|
mode: "0755"
|
|
|
|
- name: 📋 Copy the extensions policy file for Chromium
|
|
template: # nocheck: stack-host-template (per-host workstation chromium policy)
|
|
src: extensions_policy.json.j2
|
|
dest: /etc/chromium/policies/managed/extensions_policy.json
|
|
mode: "0644"
|