---
- name: Make sure the folder exists (Debian, Ubuntu)
  ansible.builtin.file:
    path: /usr/local/share/ca-certificates
    state: directory

# Note that the .crt is actually a .pem renamed
- name: Copy the certificate (Debian, Ubuntu)
  ansible.builtin.copy:
    src: "{{ install_root_cert_pem }}"
    dest: "/usr/local/share/ca-certificates/{{ install_root_cert_pem | basename }}.crt"
  register: result

- name: Update CA Trust (Debian, Ubuntu)
  ansible.builtin.command: update-ca-certificates
  when: result is changed