Move git install to common.

playbooks/roles/common/tasks/main.yml

@@ -37,6 +37,7 @@
   - rsyslog
   - screen
   - tree
+  - git
   tags:
   - pre_install
   - update

playbooks/roles/edxapp/tasks/main.yml

@@ -28,12 +28,23 @@
   - lms-env
   - update
 
-# Check out edx-platform repo to $app_base_dir
-- name: install git and its recommends
-  apt: pkg=git state=present install_recommends=yes 
+# Install ssh keys for ubuntu account to be able to check out from edx-platform
+# Temprory behavior, not needed after June 1. Perhaps still useful as a recipe.
+# {{ secure_dir }} is relative to the top-level playbooks dir so there is some
+
+- name: install read-only ssh key for edx-platform repo (private)
+  copy: src={{ secure_dir }}/files/git-identity dest=/etc/git-identity force=yes owner=ubuntu group=adm mode=600
   tags:
   - lms
   - cms
+  - update
+
+- name: upload ssh script
+  copy: src=git_ssh.sh dest=/tmp/git_ssh.sh force=yes owner=root group=adm mode=750
+  tags:
+  - lms
+  - cms
+  - update
 
 - name: install a bunch of system packages on which LMS and CMS rely
   apt: pkg={{item}} state=present

playbooks/roles/edxapp/vars/main.yml

@@ -73,7 +73,6 @@ lms_debian_pkgs:
   - gcc
   - gfortran
   - ghostscript
-  - git
   - github-cli
   - graphviz
   - graphviz-dev