update

ansible/files/polkit/ykman-user.rules

@@ -0,0 +1,6 @@
+polkit.addRule(function(action, subject) {
+  var actions = ["org.debian.pcsc-lite.access_pcsc", "org.debian.pcsc-lite.access_card"];
+  if (actions.indexOf(action.id) !== -1 && subject.active && subject.isInGroup("ykusers")) {
+    return polkit.Result.YES;
+  }
+});

ansible/roles/packages/tasks/defaults.yml

@@ -1,15 +1,15 @@
 - name: install apt
   include_tasks: "./scripts/install_apt.yml"
 
+- name: install nix
+  include_tasks: "./scripts/install_nix.yml"
+
 - name: install brew
   include_tasks: "./scripts/install_brew.yml"
 
 - name: install pacman
   include_tasks: "./scripts/install_pacman.yml"
 
-  #- name: install go
-  #  include_tasks: "./scripts/install_go.yml"
-
 - name: install go apps
   include_tasks: "./scripts/install_goapps.yml"
 

ansible/roles/packages/vars/Pop!_OS-24.04.yml

@@ -32,6 +32,16 @@ required_packages_apt:
   - qemu-utils 
   - libvirt-daemon 
   - virt-manager
+  - pcscd
+  - libpcsclite-dev
+  - libfido2-1 
+  - libfido2-dev 
+  - libfido2-doc 
+  - fido2-tools
+  - pcsc-tools
+  - libpam-yubico 
+  - yubikey-personalization 
+  - yubikey-manager
   #- htop
   #- curl
   #- xsel
@@ -65,8 +75,6 @@ flatpak_remote:
   - {name: 'flathub', url: "https://dl.flathub.org/repo/flathub.flatpakrepo"}
 
 required_packages_flatpak:
-  - io.gitlab.librewolf-community
-  - me.proton.Pass
   - me.proton.Mail
   - com.protonvpn.www
   - org.remmina.Remmina
@@ -79,6 +87,7 @@ required_packages_flatpak:
   - fr.handbrake.ghb
   - com.spotify.Client
   - org.signal.Signal
+  - com.yubico.yubioath
 
 #go_version_target: "go version go1.23.4 linux/amd64"
 #go_tarball: "go1.23.5.linux-amd64.tar.gz"
@@ -93,7 +102,9 @@ go_apps:
 
 systemd_service:
   - libvirtd.service
+  - pcscd.service
    
 user_groups:
   - video
   - sudo
+  - ykusers

ansible/roles/update/tasks/main.yml

@@ -1,7 +1,18 @@
-- name: Update Pacman
-  community.general.pacman:
-    update_cache: true
-    upgrade: true
+#- name: Update Pacman
+#  community.general.pacman:
+#    update_cache: true
+#    upgrade: true
+
+- name: Upgrade Packages
+  package:
+    update_cache: yes
+    upgrade: safe 
+  become: yes
+
+- name: Update Nix Packages
+  become_user: user
+  shell:
+    cmd: nix-env -iA nixpkgs.myPackages
 
 - name: Update Homebrew and Apps
   become_user: user
@@ -9,16 +20,8 @@
     update_homebrew: true
     upgrade_all: true
 
-- name: Get list of installed Flatpak packages
-  ansible.builtin.command: flatpak list --app --columns=application
-  register: flatpak_list
-  changed_when: false
-
-- name: Remove header line from flatpak_list
-  set_fact:
-    flatpak_list: "{{ flatpak_list.stdout_lines[1:] }}"
-
-- name: Update Flatpak packages
-  community.general.flatpak:
-    name: "{{ flatpak_list }}"
-    state: latest
+- name: Update all Flatpak packages
+  become_user: user
+  ansible.builtin.command: flatpak update -y
+  register: flatpak_update
+  changed_when: "'Nothing to do' not in flatpak_update.stdout"

ansible/scripts/configure_groups.yml

@@ -1,4 +1,11 @@
-- name: adding existing user '{{ user }}' to group sudo
+- name: Ensure groups exists
+  group:
+    name: '{{ item }}'
+    state: present
+  with_items: "{{ user_groups }}"
+  when: user_groups is defined   
+
+- name: adding existing user '{{ user }}' to groups
   user:
     groups: '{{ item }}'
     name: user

ansible/scripts/install-udev-rules.yml

@@ -8,7 +8,7 @@
 - name: Copy each .service file to systemd directory
   copy:
     src: "{{ item.path }}"
-    dest: "/etc/udev/rules.d" 
+    dest: "/usr/lib/udev/rules.d/" 
     owner: root
     group: root
     mode: '0644'

ansible/scripts/install_flatpak.yml

@@ -3,7 +3,7 @@
     name: "{{ item.name }}"
     state: present
     flatpakrepo_url: "{{ item.url }}"
-    method: system
+    method: user
   with_items:  "{{ flatpak_remote }}"      
   when: flatpak_remote is defined   
 

ansible/scripts/install_nix.yml

@@ -0,0 +1,4 @@
+- name: Install Nix Packages
+  become_user: user
+  shell:
+    cmd: nix-env -iA nixpkgs.myPackages