Repair Seriatim ownership and permission drift

tasks/build.yml

@@ -30,6 +30,14 @@
     checksum_algorithm: sha256
   register: seriatim_installed_binary_stat
 
+- name: Require a regular installed Seriatim binary path
+  ansible.builtin.assert:
+    that:
+      - not seriatim_installed_binary_stat.stat.exists or seriatim_installed_binary_stat.stat.isreg
+    fail_msg: >-
+      Seriatim binary path exists but is not a regular file:
+      {{ seriatim_binary_path }}. Move the unexpected object before rerunning the role.
+
 - name: Inspect Seriatim build input state
   ansible.builtin.stat:
     path: "{{ seriatim_build_state_dir }}/build-inputs.json"
@@ -203,3 +211,31 @@
         path: "{{ seriatim_build_tempdir.path }}"
         state: absent
       when: seriatim_build_tempdir.path is defined
+
+- name: Converge installed Seriatim binary metadata
+  ansible.builtin.file:
+    path: "{{ seriatim_binary_path }}"
+    state: file
+    owner: root
+    group: root
+    mode: "0755"
+
+- name: Converge Seriatim build state directory metadata
+  ansible.builtin.file:
+    path: "{{ seriatim_build_state_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: "0755"
+
+- name: Converge Seriatim build state file metadata
+  ansible.builtin.file:
+    path: "{{ seriatim_build_state_dir }}/{{ item }}"
+    state: file
+    owner: root
+    group: root
+    mode: "0644"
+  loop:
+    - build-inputs.json
+    - fingerprint.sha256
+    - binary.sha256