updating desktop setup

roles/desktop/files/stumpwm-gnome.desktop

@@ -0,0 +1,11 @@
+# -*- mode: conf -*-
+
+[Desktop Entry]
+Comment=Improved dynamic tiling window manager, registers with gnome session manager.
+Exec=stumpwm-gnome
+Name=stumpwm-gnome
+Type=Application
+X-GNOME-Autostart-Notify=false
+X-GNOME-Autostart-Phase=WindowManager
+X-GNOME-Provides=windowmanager
+X-GNOME-WMName=stumpwm

roles/desktop/files/sudoers

@@ -0,0 +1,55 @@
+#
+# This file MUST be edited with the 'visudo' command as root.
+#
+# Please consider adding local content in /etc/sudoers.d/ instead of
+# directly modifying this file.
+#
+# See the man page for details on how to write a sudoers file.
+#
+Defaults	env_reset
+Defaults	mail_badpass
+Defaults	secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
+Defaults	use_pty
+Defaults	!lecture
+
+# This preserves proxy settings from user environments of root
+# equivalent users (group sudo)
+Defaults:%sudo env_keep += "http_proxy https_proxy ftp_proxy all_proxy no_proxy"
+
+# This allows running arbitrary commands, but so does ALL, and it means
+# different sudoers have their choice of editor respected.
+Defaults:%sudo env_keep += "EDITOR"
+
+# Completely harmless preservation of a user preference.
+Defaults:%sudo env_keep += "GREP_COLOR"
+
+# While you shouldn't normally run git as root, you need to with etckeeper
+#Defaults:%sudo env_keep += "GIT_AUTHOR_* GIT_COMMITTER_*"
+
+# Per-user preferences; root won't have sensible values for them.
+#Defaults:%sudo env_keep += "EMAIL DEBEMAIL DEBFULLNAME"
+
+# "sudo scp" or "sudo rsync" should be able to use your SSH agent.
+Defaults:%sudo env_keep += "SSH_AGENT_PID SSH_AUTH_SOCK"
+
+# Ditto for GPG agent
+#Defaults:%sudo env_keep += "GPG_AGENT_INFO"
+
+# Host alias specification
+
+# User alias specification
+
+# Cmnd alias specification
+
+# User privilege specification
+root	ALL=(ALL:ALL) ALL
+
+# Members of the admin group may gain root privileges
+%admin ALL=(ALL) ALL
+
+# Allow members of group sudo to execute any command
+%sudo	ALL=(ALL:ALL) NOPASSWD: ALL
+
+# See sudoers(5) for more information on "@include" directives:
+
+@includedir /etc/sudoers.d

roles/desktop/tasks/main.yml

@@ -17,12 +17,22 @@
 
       BACKSPACE="guess"
 
+- name: enable passwordless sudo for desktop users
+  become: true
+  ansible.builtin.copy:
+    src: "{{ role_path }}/files/sudoers"
+    dest: /etc/sudoers
+    mode: 0440
+    owner: root
+    group: root
+
 - name: set up common desktop tools
   become: true
   ansible.builtin.apt: name={{ item }} state=present
   with_items:
     - acpitool
     - emacs
+    - mate-terminal
     - vim-gtk
 
 - name: set up desktop environments
@@ -33,6 +43,15 @@
     - i3lock
     - stumpwm
 
+- name: install StumpWM gnome session
+  become: true
+  ansible.builtin.copy:
+    src: "{{ role_path }}/files/stumpwm-gnome.desktop"
+    dest: /usr/share/xsessions/stumpwm-gnome.desktop
+    mode: 0644
+    owner: root
+    group: root
+
 - name: set up xprogs
   become: true
   ansible.builtin.apt: name={{ item }} state=present
@@ -43,4 +62,11 @@
     - firefox
     - gparted
     - scrot
+    - thunar
+    - thunar-archive-plugin
+    - thunar-font-manager
+    - thunar-gtkhash
+    - thunar-vcs-plugin
+    - thunar-volman
     - vlc
+    - xfce4-places-plugin