bin/: swap seed tools for devops CLIs; add ansible/ module

Replace the placeholder ripgrep/fd/bat/fzf set with devops tooling, keeping
jq: kubectl, helm, k9s, kubectx/kubens, stern, yq, OpenTofu, and terragrunt
— all self-contained, statically linked release binaries in ~/.local/bin,
so they persist across Kasm redeploys with no reinstall.

Switch idempotency from parsing each tool's --version (kubectl/helm/k9s have
no uniform flag) to a version stamp under ~/.local/bin/.versions, and add
fetch_arch_deb() for the amd64/arm64 naming most devops tools use.

Ansible is Python, not a single binary, so it gets its own module: a venv at
~/.local/opt/ansible with its CLIs symlinked into ~/.local/bin. The guard
verifies ansible actually runs (a redeploy can wipe the system python the
venv links to) and rebuilds if not.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-07-08 10:34:01 -04:00
co-authored by Claude Opus 4.8
parent fd88d8bba2
commit ebdc213444
5 changed files with 206 additions and 75 deletions
+11 -4
View File
@@ -30,11 +30,18 @@ Already have a clone? Just run it directly:
- `git/` — sets git `user.name`/`user.email` and configures
`credential.helper store` (plaintext `~/.git-credentials`, 0600) for
HTTPS auth.
- `bin/` — installs userland CLI tools (ripgrep, fd, bat, fzf, jq) as
self-contained release binaries into `~/.local/bin`. No sudo, nothing
- `bin/` — installs userland devops CLIs (jq, kubectl, helm, k9s,
kubectx/kubens, stern, yq, OpenTofu, terragrunt) as self-contained,
statically linked release binaries into `~/.local/bin`. No sudo, nothing
outside `$HOME`, so they persist across Kasm redeploys with no reinstall.
Idempotent: pinned versions already present are skipped. `zsh/zshrc` puts
`~/.local/bin` on `PATH`.
Idempotent: each tool records its version under `~/.local/bin/.versions`
and is skipped when the pinned version is already present. `zsh/zshrc`
puts `~/.local/bin` on `PATH`.
- `ansible/` — installs Ansible into a virtualenv at `~/.local/opt/ansible`
(it's Python, not a single binary) and symlinks its CLIs into
`~/.local/bin`. Persists across redeploys; only rebuilt when the venv is
missing or broken. Building it may install `python3`/`python3-venv` via
the system package manager (the one place this module uses sudo).
- `mcp-config/` — shared MCP gateway config sync for laptops (LiteLLM /
opencode). Independent of `bootstrap.sh`; see its own README.