@Justinvolved

Make a role with this desired configuration

Ensure-PsRepository
    (
        Exists: true,
        InstallationPolicy: trusted,
        SourceLocation: https://www.powershellgallery.com/api/v2,
        Name: PSGallery
    );

Assign the role to the server
Remediate

Et voilà
This should work

Cheers
PhilippeC.

Hello
is the git rafts-based gone ?

OK
I understand I have to manage this at the script level (SHExec ou PSExec).
I hoped I could do it inside Otter Script, something like :

SHExec >>
Some command
>>
(
  OutputLog: $MyOutput
);

Thanks you @atripp

Here is an Inedo example of the Otter 3 PSEnsure.

Create a Powerscript like test-psensure.ps1

<# 
.PARAMETER HotFixID
ID of the HotFix to check, such as "KB4562830"
.AHCONFIGKEY 
$HotFixID
.AHCONFIGTYPE
HotFix
.AHEXECMODE
$ExecutionMode
#>
param ([string]$HotFixID)
if ($ExecutionMode -eq "Collect") {
  return !!((Get-HotFix -Id  $HotFixID) 2> $null)
} else if ($ExecutionMode -eq "Configure") {
  # install Hot Fix ... Which is complex
}

Create an Otter script:

##AH:UseTextMode
PSEnsure Test-PSEnsure
(
    HotFixID: KB4532938
);

In visual mode, you will have :

Hello
Just in case, starting from Ubuntu 22.04, certificates for Debian repositories stored in Proget can be imported using this command

curl -fsSL ${proget}/${feed}/keys/${feed}.asc | sudo gpg --dearmor  -o /etc/apt/keyrings/${feed}.gpg

A source file in /etc/apt/sources.list.d/ will contain

deb [arch=amd64 signed-by=/etc/apt/keyrings/${feed}.gpg] ${proget}/${feed} ${distribution} ${components}  

Best regards
PhilippeC.

For the modules, 2 ways

1. Create a second role which depend on the previous one and use
   Ensure-psmodule function to add the required module

2. You don t need the set psgallery to be trusted if you use the Force in the Ensure-psmodule
   Cf https://docs.inedo.com/docs/otter-reference-operations-powershell-ensure-powershell-module