Bellsoft-Java on Debian with proper GPG key management - Ansible role

bellsoft.yaml

- name: Download BellSoft official GPG key
  ansible.builtin.get_url:
    url: https://download.bell-sw.com/pki/GPG-KEY-bellsoft
    dest: /etc/apt/keyrings/bellsoft.asc
    mode: '0644'
  when: ansible_os_family == "Debian"

- name: Add Bellsoft repo (Debian)
  ansible.builtin.apt_repository:
    repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/bellsoft.asc] https://apt.bell-sw.com/ stable main"
    state: present
    filename: bellsoft
    update_cache: true
  when: ansible_os_family == "Debian"

- name: Update repositories and install BellSoft Java 21
  ansible.builtin.apt:
    update_cache: yes
    name: bellsoft-java21
    state: present
  when: ansible_os_family == "Debian"

- name: Update alternatives for java
  community.general.alternatives:
    name: java
    path: /usr/lib/jvm/bellsoft-java21-amd64/bin/java
  when: ansible_os_family == "Debian"

- name: Update alternatives for javac
  community.general.alternatives:
    name: javac
    path: /usr/lib/jvm/bellsoft-java21-amd64/bin/javac
  when: ansible_os_family == "Debian"

- name: Update alternatives for jar
  community.general.alternatives:
    name: jar
    path: /usr/lib/jvm/bellsoft-java21-amd64/bin/jar
  when: ansible_os_family == "Debian"

- name: Update alternatives for keytool
  community.general.alternatives:
    name: keytool
    path: /usr/lib/jvm/bellsoft-java21-amd64/bin/keytool
  when: ansible_os_family == "Debian"