Instead of shelling out, I think we should do this as a set of Ansible tasks.  The file, get_url, [unarchive](http://docs.ansible.com/unarchive_module.html) modules should be used so that we can repeatedly run this role but skip tasks that have already been performed.