---
- block:
    - name: Install required packages
      package:
        name: "{{ item }}"
        state: present
      loop: "{{ cacerts_packages_extra + cacerts_packages }}"

    - name: Ensure ca path at '{{ __cacerts_ca_trust_source }}' exists
      file:
        path: "{{ __cacerts_ca_trust_source }}"
        state: directory

    - name: Install custom ca certs
      copy:
        src: "{{ item.path }}"
        dest: "{{ __cacerts_ca_trust_source }}/{{ item.name }}"
        owner: root
        group: root
        mode: 0640
      register: __ca_add
      loop: "{{ cacerts_ca_certs }}"
      loop_control:
        label: "{{ item.name }}"

    - name: Update cert index
      command: "{{ __cacerts_ca_update_command }}"
      changed_when: __ca_add.changed
  become: True
  become_user: root