---
- name: install base deps for HashiCorp repo
  ansible.builtin.apt:
    update_cache: true
    name:
      - ca-certificates # чтобы качать по HTTPS
      - curl # чтобы скачать packer/плагины
      - gnupg
      - lsb-release
      - unzip # packer часто в zip
    state: present

- name: ensure keyrings dir exists
  ansible.builtin.file:
    path: /usr/share/keyrings
    state: directory
    mode: "0755"

- name: add HashiCorp GPG key (dearmored)
  ansible.builtin.shell: |
    set -euo pipefail
    curl -fsSL https://apt.releases.hashicorp.com/gpg \
      | gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
  args:
    executable: /bin/bash
    creates: /usr/share/keyrings/hashicorp-archive-keyring.gpg

- name: add HashiCorp APT repository
  ansible.builtin.copy:
    dest: /etc/apt/sources.list.d/hashicorp.list
    mode: "0644"
    content: |
      deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com {{ ansible_distribution_release }} main

- name: install packer
  ansible.builtin.apt:
    update_cache: true
    name: packer
    state: present

- name: check packer version
  ansible.builtin.command: packer version
  register: packer_version
  changed_when: false

- name: print packer version
  ansible.builtin.debug:
    var: packer_version.stdout