ja
1ae898a9af
Add all tools from infra.standards.md §4 and global Skills requirements: - CLI utilities: zoxide, fzf, gum, dust, bottom, scrot, shellcheck, shfmt - Git CLIs: github-cli, tea, glab - Python: ruff, uv - DevOps: terraform, docker suite, podman, cmake - Security: cosign, syft, trivy, certbot, dive - Docs: typst, pandoc, wp-cli - CalDAV: khal, vdirsyncer - 3D/CAD: openscad, freecad, f3d - Node.js global: @marp-team/marp-cli - Python pipx: semgrep, huggingface_hub[cli]
128 lines
2.6 KiB
YAML
128 lines
2.6 KiB
YAML
---
|
|
- name: Ensure core workstation development tools are installed
|
|
community.general.pacman:
|
|
name:
|
|
# Build essentials
|
|
- git
|
|
- base-devel
|
|
# CLI tools (infra.standards.md §4)
|
|
- ripgrep
|
|
- ripgrep-all
|
|
- fd
|
|
- jq
|
|
- bat
|
|
- eza
|
|
- zoxide
|
|
- fzf
|
|
- gum
|
|
- dust
|
|
- bottom
|
|
- scrot
|
|
- shellcheck
|
|
- shfmt
|
|
# Git providers CLI
|
|
- github-cli
|
|
- tea
|
|
- glab
|
|
# Python toolchain
|
|
- ruff
|
|
- uv
|
|
# DevOps & IaC
|
|
- ansible
|
|
- terraform
|
|
- docker
|
|
- docker-buildx
|
|
- docker-compose
|
|
- podman
|
|
- cmake
|
|
# Security & supply chain
|
|
- cosign
|
|
- syft
|
|
- trivy
|
|
- certbot
|
|
# Container inspection
|
|
- dive
|
|
# Email CLI
|
|
- himalaya
|
|
# Document toolchain (markdown-to-pdf skill)
|
|
- typst
|
|
- pandoc
|
|
# WordPress CLI
|
|
- wp-cli
|
|
# C/C++ toolchain (cpp skill)
|
|
- clang
|
|
# CalDAV tools (caldav-webcal skill)
|
|
- khal
|
|
- vdirsyncer
|
|
# 3D/CAD tools (openscad, freecad, f3d skills)
|
|
- openscad
|
|
- freecad
|
|
- f3d
|
|
# Terminal
|
|
- kitty
|
|
state: present
|
|
|
|
- name: Ensure Node.js global CLI tools are installed
|
|
become: true
|
|
become_user: "{{ system_user }}"
|
|
command: pnpm add -g @marp-team/marp-cli
|
|
changed_when: false
|
|
tags: [nodejs, marp]
|
|
|
|
- name: Ensure Python CLI tools are installed via pipx
|
|
become: true
|
|
become_user: "{{ system_user }}"
|
|
command: "pipx install {{ item }}"
|
|
loop:
|
|
- semgrep
|
|
- huggingface_hub[cli]
|
|
changed_when: false
|
|
tags: [python, pipx]
|
|
|
|
- name: Ensure redundant and non-core software is removed
|
|
community.general.pacman:
|
|
name:
|
|
- firefox-developer-edition
|
|
- audacity
|
|
- kdenlive
|
|
- obs-studio
|
|
- shotcut
|
|
- qgis
|
|
- tipp10
|
|
- xournalpp
|
|
- bleachbit
|
|
- reiserfsprogs
|
|
- dmraid
|
|
- onlyoffice-desktopeditors
|
|
- virt-manager
|
|
- guvcview
|
|
- helvum
|
|
- qpwgraph
|
|
- glmark2
|
|
- act-git
|
|
- oha
|
|
- unetbootin
|
|
- ventoy
|
|
state: absent
|
|
|
|
- name: Ensure legacy editor packages are removed
|
|
community.general.pacman:
|
|
name:
|
|
- code
|
|
- code-oss
|
|
- code-marketplace
|
|
state: absent
|
|
|
|
- name: Configure Chrome flags for WebGPU
|
|
copy:
|
|
dest: "/home/{{ system_user }}/.config/chrome-flags.conf"
|
|
content: |
|
|
--enable-unsafe-webgpu
|
|
--enable-vulkan
|
|
--enable-features=Vulkan
|
|
--ignore-gpu-blocklist
|
|
owner: "{{ system_user }}"
|
|
group: "{{ system_user }}"
|
|
mode: '0644'
|
|
tags: [chrome, webgpu]
|