install magic-wormhole

playbook.yml

@@ -61,6 +61,7 @@
     - { role: aws, tags: ['aws'] }
     - { role: parcimonie, tags: ['parcimonie'], when: "tor is defined" }
     - { role: localtime, tags: ['localtime'], when: "localtime is defined"  }
+    - { role: wormhole, tags: ['wormhole'] }
   vars_prompt:
     - name: user_password
       prompt: "Enter desired user password"

roles/wormhole/files/firejail/wormhole.profile

@@ -0,0 +1,5 @@
+include /usr/local/etc/firejail/generic.profile
+
+private-dev
+# Specify a non-existent file so that we get an empty /etc
+private-etc rmx7nq4ujgyogn

roles/wormhole/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - { role: firejail }

roles/wormhole/tasks/main.yml

@@ -0,0 +1,19 @@
+---
+- name: Install magic-wormhole
+  aur: name=magic-wormhole user={{ user.name }}
+  tags:
+    - aur
+
+- name: Jail magic-wormhole
+  file: src=/usr/bin/firejail
+        dest=/usr/local/bin/wormhole
+        state=link
+  tags:
+    - firejail
+
+- name: Push magic-wormhole firejail profile
+  copy: src=firejail/wormhole.profile dest=/usr/local/etc/firejail/wormhole.profile
+  notify:
+    - activate firejail profiles
+  tags:
+    - firejail