class profiles::arch_builder { include ::profiles::repo include ::profiles::sudo exec { '/usr/bin/pacman -Syu --noconfirm': } ensure_packages([ 'base', 'base-devel', 'python', 'python-yaml', # Note that auracle git is NOT in the standard repos, and needs to # be manually bootstraped to work 'auracle-git', ]) $aur_builder = 'aur-builder' $aur_home = '/usr/local/aur' user { $aur_builder: system => true, home => $aur_home, shell => '/usr/bin/nologin', } file { '/etc/sudoers.d/aur_builder': content => "${aur_builder} ALL=(ALL) NOPASSWD: /usr/bin/pacman\n", validate_cmd => '/usr/bin/visudo -cf %', } }