--- - name: Create build directory file: path: "/home/build" state: directory mode: "0700" owner: nobody - name: Install aur packages block: - name: Allow nobody user to run pacman community.general.sudoers: name: allow-nobody-pacman user: nobody commands: - /usr/sbin/pacman # noexec: true # required by makepkg state: present - name: Install packages include_tasks: ./build_package.yml vars: package: "{{ item }}" loop: "{{ aur_packages + aur_extra }} " always: - name: Disallow nobody user to run pacman community.general.sudoers: name: allow-nobody-pacman user: nobody commands: - /usr/sbin/pacman noexec: true state: absent