Software picks: automate installing 3rd party software directly from publishers with Red Hat's Ansible

install-brave-browser.yml

---
- hosts: localhost
  connection: local
  become: true
  tasks:

    - name: Verify and add the Brave Release channel package signing key
      ansible.builtin.apt_key:
        id: 0BB75829C2D4E821
        keyring: /usr/share/keyrings/brave-browser-archive-keyring.gpg
        state: present
        url: https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
        validate_certs: true

    - name: Add Brave Release channel deb repository
      ansible.builtin.apt_repository:
        repo: deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg arch=amd64] https://brave-browser-apt-release.s3.brave.com/ stable main
        state: present
        update_cache: true
        validate_certs: true

    - name: Install the latest version of the Brave Browser
      ansible.builtin.apt:
        pkg:
          - brave-browser
        state: present
        update_cache: true

install-signal-desktop.yml

---
- hosts: localhost
  connection: local
  become: true
  tasks:

    - name: Verify and add the Signal package signing key
      ansible.builtin.apt_key:
        id: D980A17457F6FB06
        keyring: /usr/share/keyrings/signal-desktop-keyring.gpg
        state: present
        url: https://updates.signal.org/desktop/apt/keys.asc
        validate_certs: true

    - name: Add Signal Desktop deb repository
      ansible.builtin.apt_repository:
        repo: "deb [arch=amd64 signed-by=/usr/share/keyrings/signal-desktop-keyring.gpg] https://updates.signal.org/desktop/apt xenial main"
        state: present
        update_cache: true
        validate_certs: true

    - name: Install the latest stable version of Signal Desktop
      ansible.builtin.apt:
        pkg:
          - signal-desktop
        state: present
        update_cache: true

install-sublime-merge.yml

---
- hosts: localhost
  connection: local
  become: true
  tasks:

    - name: Ensure apt uses https
      ansible.builtin.apt:
        pkg:
          - apt-transport-https
        state: present
        update_cache: true

    - name: Verify and add the Sublime HQ package signing key
      ansible.builtin.apt_key:
        id: ADAE6AD28A8F901A
        state: present
        url: https://download.sublimetext.com/sublimehq-pub.gpg
        validate_certs: true

    - name: Add Sublime Merge Stable deb repository
      ansible.builtin.apt_repository:
        repo: deb https://download.sublimetext.com/ apt/stable/
        state: present
        update_cache: true
        validate_certs: true

    - name: Install the latest stable version of Sublime Merge
      ansible.builtin.apt:
        pkg:
          - sublime-merge
        state: present
        update_cache: true

install-trash-cli

---
- hosts: localhost
  connection: local
  become: true
  tasks:

    - name: Install the latest stable version of trash-cli
      ansible.builtin.apt:
        pkg:
          - trash-cli
        state: present
        update_cache: true

install-typora.yml

---
- hosts: localhost
  connection: local
  become: true
  tasks:

    - name: Verify and add the Typora package signing key
      ansible.builtin.apt_key:
        id: BA300B7755AFCFAE
        state: present
        url: https://typora.io/linux/public-key.asc
        validate_certs: true

    - name: Add Typora deb repository
      ansible.builtin.apt_repository:
        repo: deb https://typora.io/linux ./
        state: present
        update_cache: true
        validate_certs: true

    - name: Install the latest version of Typora
      ansible.builtin.apt:
        pkg:
          - typora
        state: present
        update_cache: true

install-visual-studio-code.yml

---
- hosts: localhost
  connection: local
  become: true
  tasks:

    - name: Ensure apt uses https
      ansible.builtin.apt:
        pkg:
          - apt-transport-https
        state: present
        update_cache: true

    - name: Verify and add the Microsoft package signing key
      ansible.builtin.apt_key:
        id: EB3E94ADBE1229CF
        keyring: /etc/apt/trusted.gpg.d/packages.microsoft.gpg
        state: present
        url: https://packages.microsoft.com/keys/microsoft.asc
        validate_certs: true

    - name: Add Visual Studio Code deb repository
      ansible.builtin.apt_repository:
        repo: deb [arch=amd64,arm64,armhf signed-by=/etc/apt/trusted.gpg.d/packages.microsoft.gpg] https://packages.microsoft.com/repos/code stable main
        state: present
        update_cache: true
        validate_certs: true

    - name: Install the latest version of Visual Studio Code
      ansible.builtin.apt:
        pkg:
          - code
        state: present
        update_cache: true

install-vivaldi-browser.yml

---
- hosts: localhost
  connection: local
  become: true
  tasks:

    - name: Verify and add the Vivaldi package signing key
      ansible.builtin.apt_key:
        id: 793FEB8BB69735B2
        state: present
        url: http://repo.vivaldi.com/stable/linux_signing_key.pub
        validate_certs: true

    - name: Add Vivaldi stable deb repository
      ansible.builtin.apt_repository:
        repo: "deb http://repo.vivaldi.com/stable/deb/ stable main"
        state: present
        update_cache: true
        validate_certs: true

    - name: Install the latest stable version of Vivaldi
      ansible.builtin.apt:
        pkg:
          - vivaldi-stable
        state: present
        update_cache: true