---

- name: Create Secure Boot output directories
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
  with_items:
    - "{{ netbootxyz_root }}/ipxe/secureboot-x86_64"
    - "{{ netbootxyz_root }}/ipxe/secureboot-arm64"

- name: Download iPXE Secure Boot archive
  ansible.builtin.get_url:
    url: "{{ ipxe_secureboot_archive_url }}"
    dest: "/tmp/ipxeboot.tar.gz"

- name: Extract iPXE Secure Boot archive
  ansible.builtin.unarchive:
    src: "/tmp/ipxeboot.tar.gz"
    dest: "/tmp"
    remote_src: true

- name: Copy x86_64 Secure Boot binaries to output directory
  ansible.builtin.copy:
    src: "/tmp/ipxeboot/x86_64-sb/{{ item }}"
    dest: "{{ netbootxyz_root }}/ipxe/secureboot-x86_64/{{ item }}"
    remote_src: true
  with_items:
    - ipxe.efi
    - ipxe-shim.efi
    - shimx64.efi
    - snponly.efi
    - snponly-shim.efi

- name: Copy ARM64 Secure Boot binaries to output directory
  ansible.builtin.copy:
    src: "/tmp/ipxeboot/arm64-sb/{{ item }}"
    dest: "{{ netbootxyz_root }}/ipxe/secureboot-arm64/{{ item }}"
    remote_src: true
  with_items:
    - ipxe.efi
    - ipxe-shim.efi
    - shimaa64.efi
    - snponly.efi
    - snponly-shim.efi
  when: generate_disks_arm | default(false) | bool

- name: Template autoexec.ipxe for x86_64 Secure Boot
  ansible.builtin.template:
    src: "disks/autoexec.ipxe.j2"
    dest: "{{ netbootxyz_root }}/ipxe/secureboot-x86_64/autoexec.ipxe"

- name: Template autoexec.ipxe for ARM64 Secure Boot
  ansible.builtin.template:
    src: "disks/autoexec.ipxe.j2"
    dest: "{{ netbootxyz_root }}/ipxe/secureboot-arm64/autoexec.ipxe"
  when: generate_disks_arm | default(false) | bool

- name: Clean up Secure Boot archive
  ansible.builtin.file:
    path: "{{ item }}"
    state: absent
  with_items:
    - "/tmp/ipxeboot.tar.gz"
    - "/tmp/ipxeboot"