---
- name: "Install openjdk"
  hosts: target
  tasks:
    - name: "Update apt"
      apt:
        update_cache: yes
      when: ansible_distribution == "Ubuntu"

    - name: "Install openjdk package"
      apt:
        pkg: "{{ item }}"
        state: present
      with_items:
        - openjdk-8-jdk-headless
        - ca-certificates-java
      when: ansible_distribution == "Ubuntu"

    - name: "Update yum cache"
      yum:
        update_cache: yes
      when: ansible_distribution == "RedHat" or ansible_distribution == "CentOS"

    - name: "Install openjdk package"
      yum:
        name: "{{ item }}"
        state: present
      with_items:
        - openjdk
      when: ansible_distribution == "RedHat" or ansible_distribution == "CentOS"

    - name: "Install icedtea package"
      portage:
        name: "{{ item }}"
        state: present
      with_items:
        - dev-java/icedtea:8
      when: ansible_distribution == "Gentoo"

    - name: "Set icedtea-8 as default java"
      shell: java-config -S icedtea-8
      when: ansible_distribution == "Gentoo"

    - name: "/dev/urandom fix"
      lineinfile:
        dest: "/etc/java-8-openjdk/security/java.security"
        regexp: "{{ item.regexp }}"
        line: "{{ item.line }}"
      with_items:
        - { regexp: '^securerandom.source=file:/dev/random.*$', line: "securerandom.source=file:/dev/urandom" }
      when: ansible_distribution == "Ubuntu"

    - name: "/dev/urandom fix"
      lineinfile:
        dest: "/etc/java-config-2/current-system-vm/jre/lib/security/java.security"
        regexp: "{{ item.regexp }}"
        line: "{{ item.line }}"
      with_items:
        - { regexp: '^securerandom.source=file:/dev/random.*$', line: "securerandom.source=file:/dev/urandom" }
      when: ansible_distribution == "Gentoo"

    - name: "Ensure java root certs are packaged"
      shell: update-ca-certificates