main.yml

---
# file: tsm-client/tasks/main.yml

- name: ensure apt https transport is available
  apt: name=apt-transport-https state=installed
  when: tsm_repo|truncate(5, True, '') == "https"
  tags:
    - tsm
    - repos
    - packages

- name: ensure repo key is in keyring
  apt_key: data="{{ lookup('file', tsm_repo_pubkey) }}" state=present
  tags:
    - tsm
    - repos

- name: ensure repo is activated
  apt_repository: repo="deb [arch=amd64] {{ tsm_repo }}" state=present
  notify:
    - update apt cache
  tags:
    - tsm
    - repos

- meta: flush_handlers

- name: ensure the tsm packages are installed 
  apt: name={{ item }} state=installed
  with_items:
    - gskssl64
    - gskcrypt64
    - tivsm-ba
    - tivsm-api64
  tags:
    - tsm
    - packages

- name: ensure there is a log directory
  file: state=directory path=/var/log/dsm owner=root group=root mode=0750
  tags:
    - tsm
    - config

- name: ensure special dsmc script is in place
  copy: src=dsmc dest=/usr/local/bin/dsmc mode=0755 owner=root group=root
  tags:
    - tsm
    - config

- name: ensure tls anchor certificate is configured
  command: dsmcert -add -server "T-TeleSec GlobalRoot Class 2" -file /etc/ssl/certs/T-TeleSec_GlobalRoot_Class_2.pem
  args:
    creates: IBM/SpectrumProtect/certs/dsmcert.sth
  tags:
    - tsm
    - config