fix: add travis CI

.travis.yml

@@ -0,0 +1,31 @@
+os: osx
+
+jobs:
+  include:
+    - name: "XCode 10.1 macOS 10.13.6"
+      osx_image: xcode10.1
+      # swiftlint requires xcode10.2
+      env: BREW_UNINSTALL="postgis gdal swiftlint"
+    - name: "XCode 11.3 macOS 10.14.6"
+      osx_image: xcode11.3
+      env: BREW_UNINSTALL="postgis gdal"
+    - name: "XCode 12 macOS 10.15.6"
+      osx_image: xcode12
+
+install:
+  - brew list
+  - brew install python
+  - (test -n "$BREW_UNINSTALL" && brew uninstall $BREW_UNINSTALL || exit 0)
+  - pip3 install ansible
+
+script:
+  - ansible-playbook macdev.yml --syntax-check
+  - cp host_vars/localhost-ci.yml host_vars/localhost.yml
+  # run the playbook
+  - ansible-playbook macdev.yml -e brew_skip_upgrade=true
+  # run again -> expect no change
+  - >
+    ansible-playbook macdev.yml -e brew_skip_upgrade=true
+    | grep -B1 -A30 -e 'changed=0.*failed=0' -e '^changed'
+    && (echo 'Idempotence test: pass' && exit 0)
+    || (echo 'Idempotence test: fail' && exit 1)

host_vars/localhost-M1example.yaml

@@ -1,8 +1,9 @@
-# this is pretty much my own config for my MacBook Air M1
 ---
 
 # roles
 role_ssh: yes
+role_sys: yes
+role_cfg: yes
 role_ansible: true
 role_pip: yes
 role_brew: yes
@@ -132,4 +133,3 @@ brew_cask_packages:
   #- { name: qdslrdashboard, path: "/Applications/qDslrDashboard.app" }
   - { name: finicky, path: "/Applications/finicky.app" }
   - { name: microsoft-teams, path: "/Applications/Microsoft Teams.app" }
-

host_vars/localhost-ci.yml

@@ -0,0 +1,100 @@
+---
+
+# roles
+role_ssh: yes
+# role_sys requires sudo
+role_sys: no
+role_cfg: no
+role_ansible: yes
+role_pip: no
+role_brew: yes
+role_app: no
+
+## system configuration (requires sudo)
+system:
+#  # set ComputerName, HostName and NetBIOS Name
+#  hostname: example
+  # sudo systemsetup -help
+  systemsetup:
+#    - { key: "-setrestartfreeze", value: "on" }
+#    - { key: "-setcomputersleep", value: "10" }
+#    - { key: "-setdisplaysleep", value: "5" }
+  loginwindow:
+#    - { key: "AdminHostInfo", value: "HostName" } # shows host name and info on login screen
+#    - { key: "GuestEnabled", value: "0" }
+  generic:
+#    - { domain: "/Library/Preferences/com.apple.loginwindow", key: "AdminHostInfo", type: string, value: "HostName" }
+#    - { domain: "/Library/Preferences/com.apple.loginwindow", key: "GuestEnabled", type: bool, value: 0 }
+  timemachine:
+#    destination: "smb://timemachine/macbackups"
+#    exclusions:
+#      - /Users/myuser/Library/Containers/com.docker.docker
+
+## user configuration (must be run per user)
+config:
+  # domain = NSGlobalDomain
+  global:
+#    - { key: "InitialKeyRepeat", type: int, value: 15 }
+#    - { key: "KeyRepeat", type: int, value: 1 }
+  generic:
+#    - { domain: "com.apple.desktopservices", key: "DSDontWriteNetworkStores", type: bool, value: 1 }
+  # domain = com.apple.finder
+  finder:
+    # available views: `icnv`, `clmv`, `Flwv`, `Nlsv`
+    - { key: "FXPreferredViewStyle", type: string, value: "Nlsv" }
+  # domain = com.apple.dock
+  dock:
+    # https://github.com/mathiasbynens/dotfiles/blob/c886e139233320e29fd882960ba3dd388d57afd7/.macos#L356
+#    - { key: "magnification", type: int, value: 1 }
+#    - { key: "tilesize", type: int, value: 32 }
+#    - { key: "largesize", type: int, value: 128 }
+#    - { key: "autohide", type: int, value: 1 }
+    # hot corners: tl = top-left, br = bottom-right
+#    - { key: "wvous-tl-corner", type: int, value: 5 }
+#    - { key: "wvous-tl-modifier", type: int, value: 0 }
+#    - { key: "wvous-tr-corner", type: int, value: 11 }
+#    - { key: "wvous-tr-modifier", type: int, value: 0 }
+#    - { key: "wvous-bl-corner", type: int, value: 3 }
+#    - { key: "wvous-bl-modifier", type: int, value: 0 }
+#    - { key: "wvous-br-corner", type: int, value: 2 }
+#    - { key: "wvous-br-modifier", type: int, value: 0 }
+
+## user files and templates:
+# overwrite: replace file on target, if it exists
+# source=(interactive|login): source file for "interactive" session = .bashrc/.zshrc or "login" session = .profile/.zprofile
+
+# files you want to copy to the target
+files:
+#  - { name: "gitconfig-example", path: "$HOME/.gitconfig-example", overwrite: true }
+
+# templates you want to copy to the target
+templates:
+#  - { name: "bashrc-example", path: "$HOME/.bashrc-example", overwrite: true }
+#  - { name: "bash_aliases-example", path: "$HOME/.bash_aliases-example", overwrite: true, source: "interactive" }
+
+# instead of copying a file or template, you can define aliases one by one
+shell_aliases:
+  - { name: "updatemac", cmd: "(cd ~/YOUR_MACDEV_DIRECTORY; {{ 'echo \"password for sudo:\"; sudo echo;' if role_sys }} ansible-playbook macdev.yml)" }
+
+ansible_collections:
+  - { name: community.general }
+  # see https://docs.ansible.com/ansible/latest/user_guide/collections_using.html#install-multiple-collections-with-a-requirements-file
+  #- { name: community.docker, version: "=1.9.0" }
+  #- { name: community.kubernetes, source: "" }
+
+brew_packages:
+  - { name: pwgen, path: "{{ brew_bin }}/pwgen" }
+  - { name: jq, path: "{{ brew_bin }}/jq" }
+
+brew_cask_packages:
+  - { name: iterm2, path: /Applications/iTerm.app }
+
+pip_packages:
+  - { name: yamale, path: "{{pip_bin}}/yamale" }
+
+# supports .zip and .dmg
+app_packages: []
+  # - { name: iTerm2, app: "iTerm", url: https://iterm2.com/downloads/stable/iTerm2-3_3_2.zip } # brew install iterm2
+  # - { name: Atom, app: "Atom", url: https://github.com/atom/atom/releases/download/v1.40.1/atom-mac.zip } # brew install atom
+  # - { name: Chrome, app: "Google Chrome", url: https://dl.google.com/chrome/mac/stable/GCEA/googlechrome.dmg } # brew install google-chrome
+

roles/ssh/tasks/main.yml

@@ -3,8 +3,16 @@
 - name: SSH directory permissions
   file: path=$HOME/.ssh owner={{ ansible_user_id }} group={{ user_group }} mode=0700
 
+- name: Check for SSH private key
+  stat: path=$HOME/.ssh/id_rsa
+  register: ssh_private
 - name: SSH private key permissions
   file: path=$HOME/.ssh/id_rsa owner={{ ansible_user_id }} group={{ user_group }} mode=0600
+  when: ssh_private.stat.exists
 
+- name: Check for SSH public key
+  stat: path=$HOME/.ssh/id_rsa.pub
+  register: ssh_public
 - name: SSH public key permission
   file: path=$HOME/.ssh/id_rsa.pub owner={{ ansible_user_id }} group={{ user_group }} mode=0644
+  when: ssh_public.stat.exists