new aurrepo

roles/aurrepo/files/pacman.conf

@@ -98,5 +98,4 @@ Include = /etc/pacman.d/mirrorlist
 # tips on creating your own repositories.
 
 [repo]
-SigLevel = Optional TrustAll
 Server = file:///srv/repo

roles/aurrepo/files/repo-gpg.asc

@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2
+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+=U5sQ
+-----END PGP PUBLIC KEY BLOCK-----

roles/aurrepo/tasks/main.yml

@@ -0,0 +1,13 @@
+- name: Write pacman.conf
+  copy: src=pacman.conf dest=/etc/pacman.conf
+- name: Write mirrorlist
+  copy: src=mirrorlist dest=/etc/pacman.d/mirrorlist
+- name: Copy Custom Repo GPG key
+  copy: src=repo-gpg.asc dest=/etc/pacman.d/repo-gpg.asc
+  register: repo_gpg
+- name: Import repo gpg key
+  action: command /usr/bin/pacman-key --add /etc/pacman.d/repo-gpg.asc
+  when: repo_gpg.changed
+- name: Sign repo gpg key
+  action: command /usr/bin/pacman-key --lsign CEEFA661
+  when: repo_gpg.changed

roles/container/tasks/main.yml

@@ -1,8 +1,3 @@
-- name: Write pacman.conf
-  copy: src=pacman.conf dest=/etc/pacman.conf mode=0644
-- name: Write mirrorlist
-  copy: src=mirrorlist dest=/etc/pacman.d/mirrorlist mode=0644
-
 - name: Mask services
   file: src=/dev/null dest=/etc/systemd/system/{{ item }} state=link
   with_items: masked_services

site.yml

@@ -1,11 +1,15 @@
 ---
-- hosts: all
+- hosts: localhost
   roles:
   - common
 - hosts: php
   roles:
-  - php
+  - aurrepo
+  - common
   - container
+  - php
 - hosts: container
   roles:
+  - aurrepo
+  - common
   - container