lint: .yml -> .yaml

roles/apt_repository/tasks/main.yaml

@@ -0,0 +1,55 @@
+---
+- name: Install dependencies
+  ansible.builtin.apt:
+    name:
+      - apt-transport-https
+      - ca-certificates
+      - gnupg
+    update_cache: true
+
+- name: Initialize repo_options
+  ansible.builtin.set_fact:
+    repo_options: []
+
+- name: Add arch to repo_options
+  ansible.builtin.set_fact:
+    repo_options: "{{ repo_options + ['arch=' + repo_arch] }}"
+  when: repo_arch | length > 0
+
+- name: Ensure /etc/apt/keyrings exists
+  ansible.builtin.file:
+    path: /etc/apt/keyrings
+    state: directory
+    mode: "0755"
+  register: keyrings_exists
+
+- name: Remove legacy repo {{ repo_name }}
+  ansible.builtin.apt_repository:
+    repo: >
+      deb {{ '[' + repo_options | join(' ') + '] ' if repo_options | length > 0 else '' }}{{ repo_url }} {{ repo_suite }} {{ repo_components | join(' ') }}
+    filename: "{{ repo_name }}"
+    state: absent
+
+- name: Set repo key dest variable
+  ansible.builtin.set_fact:
+    repo_key_dest: "/etc/apt/keyrings/{{ repo_name }}.asc"
+
+- name: Get repo signing key
+  ansible.builtin.get_url:
+    url: "{{ repo_key_url }}"
+    dest: "{{ repo_key_dest if not (keyrings_exists.changed and ansible_check_mode) else '/dev/null' }}"
+    mode: "0644"
+  register: repo_key
+  changed_when:
+    - not ansible_check_mode
+    - repo_key.changed
+
+- name: Add signed-by to repo_options
+  ansible.builtin.set_fact:
+    repo_options: "{{ repo_options + ['signed-by=' + repo_key_dest] }}"
+
+- name: Add repo {{ repo_name }}
+  ansible.builtin.apt_repository:
+    repo: "deb [{{ repo_options | join(' ') }}] {{ repo_url }} {{ repo_suite }} {{ repo_components | join(' ') }}"
+    filename: "{{ repo_name }}"
+    mode: "0644"