如何用Ansible检查并启用/etc/apt/sources.list中的deb-src仓库

问题概述 #

需要通过Ansible完成/etc/apt/sources.list中deb-src条目的自动化处理：

• 若deb-src条目不存在则添加
• 若条目存在但被注释则取消注释
• 所有deb-src条目已启用时，直接执行后续任务

当前使用的检查任务无法满足需求：

---
- name: Find
  ansible.builtin.lineinfile:
    path: /etc/apt/sources.list
    line: "deb-src"
  check_mode: yes
  register: result

当前目标文件内容：

#  # Note, this file is written by cloud-init on first boot of an instance
#  # modifications made here will not survive a re-bundle.
#  # if you wish to make changes you can:
#  # a.) add 'apt_preserve_sources_list: true' to /etc/cloud/cloud.cfg
#  # or do the same in user-data
#  # b.) add sources in /etc/apt/sources.list.d
#  # c.) make changes to template file /etc/cloud/templates/sources.list.tmpl

# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.
deb http://azure.archive.ubuntu.com/ubuntu/ focal main restricted
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal main restricted

#  # Major bug fix updates produced after the final release of the
#  # distribution.
deb http://azure.archive.ubuntu.com/ubuntu/ focal-updates main restricted
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal-updates main restricted

#  # N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
#  # team. Also, please note that software in universe WILL NOT receive any
#  # review or updates from the Ubuntu security team.
deb http://azure.archive.ubuntu.com/ubuntu/ focal universe
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal universe
deb http://azure.archive.ubuntu.com/ubuntu/ focal-updates universe
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal-updates universe

#  # N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
#  # team, and may not be under a free licence. Please satisfy yourself as to
#  # your rights to use the software. Also, please note that software in
#  # multiverse WILL NOT receive any review or updates from the Ubuntu
#  # security team.
deb http://azure.archive.ubuntu.com/ubuntu/ focal multiverse
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal multiverse
deb http://azure.archive.ubuntu.com/ubuntu/ focal-updates multiverse
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal-updates multiverse

#  # N.B. software from this repository may not have been tested as
#  # extensively as that contained in the main release, although it includes
#  # newer versions of some applications which may provide useful features.
#  # Also, please note that software in backports WILL NOT receive any review
#  # or updates from the Ubuntu security team.
deb http://azure.archive.ubuntu.com/ubuntu/ focal-backports main restricted universe multiverse
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal-backports main restricted universe multiverse

#  # Uncomment the following two lines to add software from Canonical's
#  # 'partner' repository.
#  # This software is not part of Ubuntu, but is offered by Canonical and the
#  # respective vendors as a service to Ubuntu users.
# deb http://archive.canonical.com/ubuntu focal partner
# deb-src http://archive.canonical.com/ubuntu focal partner

deb http://azure.archive.ubuntu.com/ubuntu/ focal-security main restricted
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal-security main restricted
deb http://azure.archive.ubuntu.com/ubuntu/ focal-security universe
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal-security universe
deb http://azure.archive.ubuntu.com/ubuntu/ focal-security multiverse
# deb-src http://azure.archive.ubuntu.com/ubuntu/ focal-security multiverse

期望效果 #

1. 取消所有包含deb-src的注释行
2. 所有deb-src条目已启用时，不修改文件直接执行后续任务

当前方案的问题 #

• 任务中line: "deb-src"是精确匹配，而实际文件中不存在单独的deb-src行，无法检测到注释的deb-src条目
• 无法完成取消注释或添加缺失条目的核心操作

优化实现方案 #

1. 批量取消已注释的deb-src行 #

使用replace模块通过正则批量处理，高效取消所有注释的deb-src条目：

- name: Uncomment all deb-src lines
  ansible.builtin.replace:
    path: /etc/apt/sources.list
    regexp: '^#\s*(deb-src .+)$'
    replace: '\1'
    register: uncomment_result

• 正则^#\s*(deb-src .+)$匹配以#开头、后接任意空格、再以deb-src开头的完整行
• 替换为去掉注释符的原内容，实现取消注释

2. 检查并添加缺失的deb-src条目 #

先提取所有已启用的deb条目，再为每个条目生成对应的deb-src行并确保其存在：

- name: Get all active deb lines
  ansible.builtin.command: grep -E '^deb\s' /etc/apt/sources.list
  register: deb_lines
  changed_when: false

- name: Add missing deb-src entries
  ansible.builtin.lineinfile:
    path: /etc/apt/sources.list
    line: "{{ item | regex_replace('^deb', 'deb-src') }}"
    state: present
  loop: "{{ deb_lines.stdout_lines }}"
  register: add_result

• 通过grep提取所有未注释的deb条目
• 循环将每个deb条目替换为deb-src格式，用lineinfile确保该行存在（不存在则添加）

3. 判断是否执行后续任务 #

通过两个任务的changed状态判断是否修改了文件，若均未修改则直接执行后续任务：

- name: Run subsequent tasks (no changes needed)
  ansible.builtin.debug:
    msg: "All deb-src entries are enabled, proceeding with next tasks"
  when: not uncomment_result.changed and not add_result.changed

# 这里添加你的后续任务
- name: Example subsequent task
  ansible.builtin.apt:
    update_cache: yes

额外提示 #

注意：目标文件由cloud-init生成，直接修改可能不会在实例重新打包后保留。如需持久化修改，可参考文件内注释：

• 添加apt_preserve_sources_list: true到/etc/cloud/cloud.cfg或用户数据
• 在/etc/apt/sources.list.d目录下添加自定义源文件
• 修改模板文件/etc/cloud/templates/sources.list.tmpl

内容的提问来源于stack exchange，提问作者fr0zt