netboot.xyz/roles/netbootxyz/tasks/generate_signatures.yml

---
  - name: Gather list of source files
    command: ls {{ netbootxyz_root }}
    register: source_files
    tags:
      - skip_ansible_lint

  - name: Create directories for signatures
    file:
      path: "{{ item }}"
      state: directory
    with_items:
      - "{{ sigs_dir }}"

  - name: Generate signatures for source files
    shell: |
      openssl cms -sign -binary -noattr -in {{ netbootxyz_root }}/{{ item }} \
      -signer {{ codesign_cert_location }} -inkey {{ codesign_key_location }} -certfile {{ cert_file_location }} -outform DER \
      -out {{ sigs_dir }}/{{ item }}.sig
    args:
      chdir: "{{ cert_dir }}"
      warn: false
    with_items:
      - "{{ source_files.stdout_lines }}"
    tags:
    - skip_ansible_lint