ansible install restic tasks (for debian & ubuntu)

install-restic.yaml

---
# requires the variable `restic_version` (only tested with `0.11.0`)
- name: Install installation requirements
  apt:
    name:
      - gnupg
    state: present
    update_cache: yes

- name: Download checksum files
  get_url:
    url: "https://github.com/restic/restic/releases/download/v{{ restic_version }}/{{ item }}"
    dest: "/tmp/{{ item }}"
    mode: "0644"
  loop:
    - "SHA256SUMS"
    - "SHA256SUMS.asc"

- name: Download restic binary
  get_url:
    url: "https://github.com/restic/restic/releases/download/v{{ restic_version }}/restic_{{ restic_version }}_linux_amd64.bz2"
    dest: "/tmp/restic_{{ restic_version }}_linux_amd64.bz2"
    mode: "0644"
  register: restic_archive

- name: Unarchive restic
  when: restic_archive.changed
  shell: |
    set -ex
    cd /tmp
    gpg --keyserver pool.sks-keyservers.net --recv-keys {{ restic_signkey_id }}
    gpg --verify SHA256SUMS.asc SHA256SUMS
    sha256sum --ignore-missing -c SHA256SUMS
    bzip2 -dc /tmp/restic_{{ restic_version }}_linux_amd64.bz2 > /usr/local/bin/restic
    chmod +x /usr/local/bin/restic
    /usr/local/bin/restic version