gistfile1.txt

- name: Create temporary directory
  tempfile:
    prefix: ansible-tmp-
    state: directory
  register: vault_unseal__mktemp

- name: Check vault unseal package checksum file
  stat:
    path: "{{vault_unseal__mktemp.path }}/{{ vault_unseal_shasums }}"
  register: vault_unseal__checksum

- name: Get vault unseal package checksum file
  get_url:
    url: "{{ vault_unseal_checksum_file_url }}"
    dest: "{{vault_unseal__mktemp.path }}/{{ vault_unseal_shasums }}"
  when: not vault_unseal__checksum.stat.exists | bool

- name: Get vault unseal package checksum
  shell: "grep {{ vault_unseal_pkg }} {{vault_unseal__mktemp.path }}/{{ vault_unseal_shasums }}"
  register: vault_unseal__sha256

- name: Check vault unseal package file
  stat:
    path: "{{vault_unseal__mktemp.path }}/{{ vault_unseal_pkg }}"
  register: vault_unseal__package

- name: "Download vault unseal ({{ vault_unseal_gzip_url }})"
  get_url:
    url: "{{ vault_unseal_gzip_url }}"
    dest: "{{vault_unseal__mktemp.path }}/{{ vault_unseal_pkg }}"
    checksum: "sha256:{{ vault_unseal__sha256.stdout.split(' ')|first }}"
    timeout: "60"
  when: not vault_unseal__package.stat.exists | bool

- name: Unarchive vault unseal and install binary
  become: true
  unarchive:
    remote_src: true
    src: "{{vault_unseal__mktemp.path }}/{{ vault_unseal_pkg }}"
    dest: "{{ vault_unseal_bin_path }}"
    mode: "0755"
  notify: Restart vault unseal

- name: Cleanup
  file:
    path: "{{ vault__mktemp.path }}"
    state: absent
  when: vault_unseal__mktemp.path is defined