- name: get latest release info
  ansible.builtin.uri:
    url: "https://data.forgejo.org/api/v1/repos/forgejo/runner/releases/latest"
    return_content: true
  register: forgejo_runner__latest_release_info

- name: set latest version
  ansible.builtin.set_fact:
    forgejo_runner__latest_version: "{{ forgejo_runner__latest_release_info.json.name | replace('v', '') }}"

- name: set latest version forgejo-runner binary path
  ansible.builtin.set_fact:
    forgejo_runner__latest_version_binary_path: "/usr/local/bin/forgejo-runner-{{ forgejo_runner__latest_version }}"

- name: check if latest version forgejo-runner binary is installed already
  ansible.builtin.stat:
    path: "{{ forgejo_runner__latest_version_binary_path }}"
  register: forgejo_runner_latest_version_binary_stat

- name: download and install latest version, if not already present
  when: not forgejo_runner_latest_version_binary_stat.stat.exists
  block:
    - name: set download url
      ansible.builtin.set_fact:
        forgejo_runner__download_url: "https://code.forgejo.org/forgejo/runner/releases/download/v{{ forgejo_runner__latest_version }}/forgejo-runner-{{ forgejo_runner__latest_version }}-linux-amd64"

    - name: temporary directory for download
      ansible.builtin.tempfile:
        state: directory
        suffix: forgejo_runner_download
      become: true
      register: forgejo_runner__download_tempdir

    - name: download the forgejo-runner binary
      ansible.builtin.get_url:
        url: "{{ forgejo_runner__download_url }}"
        dest: "{{ forgejo_runner__download_tempdir.path }}/forgejo-runner"
        owner: root
        group: root
        mode: "0755"
      become: true

    - name: download the signature
      ansible.builtin.get_url:
        url: "{{ forgejo_runner__download_url }}.asc"
        dest: "{{ forgejo_runner__download_tempdir.path }}/forgejo-runner.asc"
        owner: root
        group: root
        mode: "0644"
      become: true

    - name: copy key for verification
      ansible.builtin.copy:
        src: "EB114F5E6C0DC2BCDD183550A4B61A2DC5923710.asc"
        dest: "{{ forgejo_runner__download_tempdir.path }}/forgejo-runner-key.asc"
        owner: root
        group: root
        mode: "0644"
      become: true

    - name: ensure sq (Sequoia-PGP) is installed
      ansible.builtin.apt:
        name: sq
      become: true

    - name: verify signature
      ansible.builtin.command:
        cmd: /usr/bin/sq verify --signer-file ./forgejo-runner-key.asc --signature-file forgejo-runner.asc --signatures 1 forgejo-runner
        chdir: "{{ forgejo_runner__download_tempdir.path }}"
      become: true
      changed_when: false

    - name: install forgejo-runner binary of this latest version
      ansible.builtin.copy:
        remote_src: true
        src: "{{ forgejo_runner__download_tempdir.path }}/forgejo-runner"
        dest: "{{ forgejo_runner__latest_version_binary_path }}"
        owner: root
        group: root
        mode: "0755"
      become: true

    - name: ensure symlink points to binary of this latest version
      ansible.builtin.file:
        src: "{{ forgejo_runner__latest_version_binary_path }}"
        dest: "/usr/local/bin/forgejo-runner"
        state: link
        owner: root
        group: root
      become: true
  always:
    - name: delete temporary download directory
      ansible.builtin.file:
        path: "{{ forgejo_runner__download_tempdir.path }}"
        state: absent
      become: true