remove comments from keyfile

roles/base/tasks/users/rene.yml

@@ -16,16 +16,24 @@
     - public_keys/yubikey.pub
 
 - name: users | rene | install private ssh keys
-  blockinfile:
+  block:
-    dest: "/home/rene/.ssh/{{ item.dest }}"
+    - name: users | rene | cat block into keyfile
-    create: true
+      blockinfile:
-    block: |
+        dest: "/home/rene/.ssh/{{ item.dest }}"
-      {{ lookup('file',item.src) }}
+        state: present
-    owner: rene
+        create: true
-    group: rene
+        block: |
-    mode: '0600'
+          {{ lookup('file',item.src) }}
-    marker_begin: ""
+        owner: rene
-    marker_end: ""
+        group: rene
+        mode: '0600'
+        marker_begin: ""
+        marker_end: ""
+    - name: users | rene | remove ansible comments from keyfile
+      lineinfile:
+        path: "home/rene/.ssh/{{ item.dest }}"
+        state: absent
+        line: "#  ANSIBLE MANAGED BLOCK" # not required. The line to insert/replace into the file. Required for C(state=present). If C(backrefs) is set, may contain backreferences that will get expanded with the C(regexp) capture groups if the regexp matches.
   loop:
     - {src: private_keys/gitlab_read_ed25519, dest: gitlab_read_ed25519}
     # - private_keys/id_dsa

roles/base/tasks/users/root.yml

@@ -25,16 +25,24 @@
     - public_keys/backup_ed25519.pub
 
 - name: users | root | install private ssh keys
-  blockinfile:
+  block:
-    dest: "/root/.ssh/{{ item.dest }}"
+    - name: users | root | cat block into keyfile
-    create: true
+      blockinfile:
-    block: |
+        dest: "/root/.ssh/{{ item.dest }}"
-      {{ lookup('file',item.src) }}
+        state: present
-    owner: root
+        create: true
-    group: root
+        block: |
-    mode: '0600'
+          {{ lookup('file',item.src) }}
-    marker_begin: ""
+        owner: root
-    marker_end: ""
+        group: root
+        mode: '0600'
+        marker_begin: ""
+        marker_end: ""
+    - name: users | root | remove ansible comments from keyfile
+      lineinfile:
+        path: "/root/.ssh/{{ item.dest }}"
+        state: absent
+        line: "#  ANSIBLE MANAGED BLOCK"
   loop:
     - {src: private_keys/gitlab_read_ed25519, dest: gitlab_read_ed25519}