jail calibre

playbook.yml

@@ -49,6 +49,7 @@
     - { role: radio, tags: ['radio'] }
     - { role: formd, tags: ['formd'] }
     - { role: postgresql, tags: ['postgresql'] }
+    - { role: calibre, tags: ['calibre'] }
   vars_prompt:
     - name: user_password
       prompt: "Enter desired user password"

roles/calibre/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - { role: firejail }

roles/calibre/tasks/main.yml

@@ -0,0 +1,10 @@
+---
+- name: Install calibre
+  pacman: name=calibre state=present
+
+- name: Jail calibre
+  file: src=/usr/bin/firejail
+        dest=/usr/local/bin/calibre
+        state=link
+  tags:
+    - firejail

roles/media/tasks/calibre.yml

@@ -1,5 +0,0 @@
----
-- name: Install calibre
-  pacman: name=calibre state=present
-  tags:
-    - calibre

roles/media/tasks/main.yml

@@ -9,7 +9,6 @@
 - include: gimp.yml
 - include: gthumb.yml
 - include: feh.yml
-- include: calibre.yml
 - include: pianobar.yml
 - include: teiler.yml
 - include: flac2all.yml