infra/ansible/roles/packages_fedora/tasks/main.yml

---
- name: Copy Fedora dotfiles
  tags: [dotfiles, dotfiles:common]
  ansible.builtin.copy:
    src: "{{ playbook_dir }}/../dotfiles/fedora/{{ item.src }}"
    dest: "{{ effective_user_home }}/{{ item.dest }}"
    owner: "{{ effective_username }}"
    group: "{{ effective_user_group }}"
    mode: "{{ item.mode }}"
  loop: "{{ fedora_dotfiles | default([]) }}"
  loop_control:
    label: "{{ item.dest }}"

- name: Configure Docker repository on Fedora
  tags: [packages]
  ansible.builtin.yum_repository:
    name: docker-ce-stable
    description: Docker CE Stable - $basearch
    baseurl: "https://download.docker.com/linux/fedora/$releasever/$basearch/stable"
    enabled: true
    gpgcheck: true
    gpgkey: https://download.docker.com/linux/fedora/gpg
    state: present
  when:
    - "'workstation_dev_fedora' in group_names"
    - fedora_manage_docker_repo | default(false)

- name: Install COPR support on Fedora WSL
  tags: [packages, mise]
  ansible.builtin.dnf:
    name: dnf-plugins-core
    state: present
  when: "'workstation_dev_wsl' in group_names"

- name: Configure Mise COPR repository on Fedora WSL
  tags: [packages, mise]
  community.general.copr:
    name: jdxcode/mise
    state: enabled
  when: "'workstation_dev_wsl' in group_names"

- name: Install distribution signing keys for Fedora desktop codecs
  tags: [packages, heic]
  ansible.builtin.dnf:
    name: distribution-gpg-keys
    state: present
  when: "'graphical_desktop' in group_names"

- name: Import RPM Fusion Free signing key for Fedora desktop codecs
  tags: [packages, heic]
  ansible.builtin.rpm_key:
    key: /usr/share/distribution-gpg-keys/rpmfusion/RPM-GPG-KEY-rpmfusion-free-fedora-2020
    fingerprint: E9A491A3DE247814E7E067EAE06F8ECDD651FF2E
    state: present
  when: "'graphical_desktop' in group_names"

- name: Enable RPM Fusion Free for Fedora desktop codecs
  tags: [packages, heic]
  ansible.builtin.dnf:
    name: "https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-{{ ansible_facts['distribution_major_version'] }}.noarch.rpm"
    state: present
  when: "'graphical_desktop' in group_names"

- name: Refresh dnf package metadata
  tags: [packages]
  ansible.builtin.dnf:
    update_cache: true

- name: Install HEIC decoder on Fedora desktops
  tags: [packages, heic]
  ansible.builtin.dnf:
    name: libheif-freeworld
    state: present
    update_cache: true
  when: "'graphical_desktop' in group_names"

- name: Install packages on Fedora
  tags: [packages]
  ansible.builtin.dnf:
    name: >-
      {{
        (
          (common_packages | default([]))
        + (fedora_packages_base | default([]))
        + (
            (fedora_docker_packages | default([]))
            if 'workstation_dev_fedora' in group_names
            else []
          )
        + (profile_packages | default([]))
        + (
            (fedora_desktop_packages | default([]))
            if 'graphical_desktop' in group_names
            else []
          )
        + (
            (fedora_emacs_packages | default([]))
            if (
              emacs_enabled | default(false) | bool
            )
            else []
          )
        + (
            (fedora_dev_packages | default([]))
            if 'workstation_dev_fedora' in group_names
            else []
          )
        + (
            (workstation_dev_wsl_packages | default([]))
            if 'workstation_dev_wsl' in group_names
            else []
          )
        + (host_packages | default([]))
        )
        | difference(fedora_excluded_packages | default([]))
        | unique
      }}
    state: present

- name: Remove excluded Fedora packages
  tags: [packages]
  ansible.builtin.dnf:
    name: "{{ fedora_removed_packages | default([]) }}"
    state: absent
  when: (fedora_removed_packages | default([])) | length > 0

- name: Add user to docker group
  tags: [packages]
  ansible.builtin.user:
    name: "{{ effective_username }}"
    groups: docker
    append: true
  when:
    - "'workstation_dev_fedora' in group_names"
    - (fedora_docker_packages | default([])) | length > 0

- name: Install shared AI coding agents on Fedora
  tags: [packages, npm, ai_agents]
  community.general.npm:
    name: "{{ item.value.npm_package }}"
    global: true
    state: latest
  loop: "{{ ai_agents | dict2items | selectattr('value.npm_package', 'defined') | list }}"
  when:
    - item.value.install_enabled | bool
    - "'workstation_dev_fedora' not in group_names"
  loop_control:
    label: "{{ item.key }}"

- name: Uninstall shared AI coding agents on Fedora
  tags: [packages, npm, ai_agents]
  community.general.npm:
    name: "{{ item.value.npm_package }}"
    global: true
    state: absent
  loop: "{{ ai_agents | dict2items | selectattr('value.npm_package', 'defined') | list }}"
  when:
    - item.value.uninstall_enabled | bool
    - "'workstation_dev_fedora' not in group_names"
  loop_control:
    label: "{{ item.key }}"

- name: Validate ChatGPT desktop architecture on Fedora
  tags: [packages, chatgpt]
  ansible.builtin.assert:
    that:
      - ansible_facts['architecture'] in chatgpt_desktop_supported_architectures
      - ansible_facts['distribution_major_version'] in chatgpt_desktop_supported_fedora_versions
    fail_msg: >-
      ChatGPT desktop supports Fedora {{ chatgpt_desktop_supported_fedora_versions | join(' and ') }}
      on x86_64 or aarch64; detected Fedora {{ ansible_facts['distribution_major_version'] }}
      on {{ ansible_facts['architecture'] }}.
  when: chatgpt_desktop_enabled | bool

- name: Install ChatGPT desktop RPM signing key
  tags: [packages, chatgpt]
  ansible.builtin.copy:
    src: "{{ chatgpt_desktop_rpm_gpg_key }}"
    dest: "/etc/pki/rpm-gpg/{{ chatgpt_desktop_rpm_gpg_key }}"
    owner: root
    group: root
    mode: "0644"
  when: chatgpt_desktop_enabled | bool

- name: Import ChatGPT desktop RPM signing key
  tags: [packages, chatgpt]
  ansible.builtin.rpm_key:
    state: present
    key: "/etc/pki/rpm-gpg/{{ chatgpt_desktop_rpm_gpg_key }}"
  when: chatgpt_desktop_enabled | bool

- name: Configure ChatGPT desktop RPM repository
  tags: [packages, chatgpt]
  ansible.builtin.yum_repository:
    name: openai-chatgpt
    description: ChatGPT
    baseurl: "{{ chatgpt_desktop_rpm_repository }}"
    enabled: true
    gpgcheck: true
    repo_gpgcheck: true
    gpgkey: "file:///etc/pki/rpm-gpg/{{ chatgpt_desktop_rpm_gpg_key }}"
    state: present
  when: chatgpt_desktop_enabled | bool

- name: Install ChatGPT desktop on selected Fedora hosts
  tags: [packages, chatgpt]
  ansible.builtin.dnf:
    name: chatgpt
    state: latest
    update_cache: true
  when: chatgpt_desktop_enabled | bool

- name: Define Fedora Flatpak applications
  tags: [packages]
  ansible.builtin.set_fact:
    packages_fedora_flatpak_packages: >-
      {{
        (
          (fedora_flatpak_packages | default([]))
          + (host_flatpak_packages | default([]))
        )
        | unique
      }}

- name: Ensure Flathub remote is configured on Fedora
  tags: [packages]
  community.general.flatpak_remote:
    name: "{{ fedora_flatpak_remote_name | default('flathub') }}"
    state: present
    flatpakrepo_url: "{{ fedora_flatpak_remote_url | default('https://dl.flathub.org/repo/flathub.flatpakrepo') }}"
  when: (packages_fedora_flatpak_packages | default([])) | length > 0

- name: Install Fedora Flatpak applications
  tags: [packages]
  community.general.flatpak:
    name: "{{ packages_fedora_flatpak_packages }}"
    state: present
    remote: "{{ fedora_flatpak_remote_name | default('flathub') }}"
    method: system
  when: (packages_fedora_flatpak_packages | default([])) | length > 0

- name: Ensure Fedora Nerd Fonts base directory exists
  tags: [packages, fonts]
  ansible.builtin.file:
    path: /usr/local/share/fonts/nerd-fonts
    state: directory
    owner: root
    group: root
    mode: "0755"
  when: (fedora_nerd_fonts | default([])) | length > 0

- name: Ensure Fedora per-font Nerd Fonts directories exist
  tags: [packages, fonts]
  ansible.builtin.file:
    path: "/usr/local/share/fonts/nerd-fonts/{{ item }}"
    state: directory
    owner: root
    group: root
    mode: "0755"
  loop: "{{ fedora_nerd_fonts | default([]) }}"

- name: Download Fedora Nerd Font archives
  tags: [packages, fonts]
  ansible.builtin.get_url:
    url: "https://github.com/ryanoasis/nerd-fonts/releases/download/{{ fedora_nerd_fonts_version }}/{{ item }}.zip"
    dest: "/usr/local/share/fonts/nerd-fonts/{{ item }}.zip"
    owner: root
    group: root
    mode: "0644"
  loop: "{{ fedora_nerd_fonts | default([]) }}"
  loop_control:
    label: "{{ item }}"

- name: Extract Fedora Nerd Font archives
  tags: [packages, fonts]
  ansible.builtin.unarchive:
    src: "/usr/local/share/fonts/nerd-fonts/{{ item }}.zip"
    dest: "/usr/local/share/fonts/nerd-fonts/{{ item }}"
    remote_src: true
    owner: root
    group: root
  loop: "{{ fedora_nerd_fonts | default([]) }}"
  loop_control:
    label: "{{ item }}"
  register: fedora_nerd_fonts_extract

- name: Refresh system font cache after installing Fedora Nerd Fonts
  tags: [packages, fonts]
  ansible.builtin.command: fc-cache -f
  changed_when: false
  when: fedora_nerd_fonts_extract is changed