system/tasks/AUR_builder.yml

- name: Upgrade arch-keyring
  community.general.pacman:
    state: latest # noqa package-latest
    name: archlinux-keyring
    force: true
    update_cache: true
  become: true

- name: Install base-devel package
  community.general.pacman:
    state: present # not required. choices: absent;latest;present. Desired state of the package.
    name:
      - base-devel # not required. Name or list of names of the packages to install, upgrade, or remove.
      - fakeroot
      - make

  become: true

- name: Create aur_builder user
  ansible.builtin.user:
    name: aur_builder
    group: wheel
  become: true

- name: Allow aur_builder to run pacman as root
  ansible.builtin.lineinfile:
    path: /etc/sudoers.d/11-install-aur_builder
    line: "aur_builder ALL=(ALL) NOPASSWD: /usr/bin/pacman"
    create: true
    validate: "visudo -cf %s"
    mode: 0600
  become: true

- name: Install yay
  aur:
    state: present
    name: yay
    use: makepkg
    skip_pgp_check: true
  become: true
  become_user: aur_builder