diff --git a/roles/python/tasks/main.yml b/roles/python/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..3a904113f44e2fb16bb4bdc91b5aeab19a9fc41d
--- /dev/null
+++ b/roles/python/tasks/main.yml
@@ -0,0 +1,27 @@
+# $DATE is host time, which we force set on the target machine.
+# Allows downloading stuff without TLS errors
+- name: Pacman keyring + Python installation
+  delegate_to: localhost
+  ansible.builtin.shell: |
+    DATE=$(date "+%F %T")
+    expect <<EOD
+        set timeout 600
+        spawn sshpass -p alarm ssh \
+          -o UserKnownHostsFile=/dev/null \
+          -o StrictHostKeyChecking=no \
+          -o PubkeyAuthentication=false \
+          alarm@{{ ansible_host }}
+        expect "$ "
+        send "su\r"
+        expect "Password: "
+        send "root\r"
+        expect "alarm alarm]# "
+        send -- "date --set=\"$DATE\"\; "
+        send -- "pacman-key --init\; "
+        send -- "pacman-key --populate archlinuxarm\; "
+        send -- "pacman -q --noconfirm -Sy python\r"
+        expect "alarm alarm]# "
+        interact
+    EOD
+  register: cmd_reg
+- debug: msg="{{ cmd_reg.stdout }}"