Norman Ziegner
209ba1dabf
* ci: disable injecting facts as own vars in the main namespace Signed-off-by: Norman Ziegner <[email protected]> * Consistently access facts via the ansible_facts.* namespace Signed-off-by: Norman Ziegner <[email protected]> --------- Signed-off-by: Norman Ziegner <[email protected]>
69 lines
1.5 KiB
YAML
69 lines
1.5 KiB
YAML
---
|
|
dependency:
|
|
name: galaxy
|
|
options:
|
|
role-file: molecule/os_hardening_vm/requirements.yml
|
|
driver:
|
|
name: vagrant
|
|
provider:
|
|
name: libvirt
|
|
platforms:
|
|
# we need to name every instance differently to start multiple VMs on the same host (parallelization)
|
|
# since we also need to use different OS users to run the tests because of how molecule operates,
|
|
# the VM names must be predictable by OS user (to clean up canceled runs)
|
|
- name: ${USER}
|
|
box: ${MOLECULE_DISTRO}
|
|
memory: 1024
|
|
cpus: 2
|
|
provisioner:
|
|
name: ansible
|
|
options:
|
|
diff: true
|
|
env:
|
|
ANSIBLE_PIPELINING: "True"
|
|
config_options:
|
|
defaults:
|
|
interpreter_python: auto_silent
|
|
callbacks_enabled: profile_tasks, timer
|
|
# Workaround for https://github.com/ansible-community/molecule-plugins/issues/301
|
|
library: "${MOLECULE_PROJECT_DIRECTORY}/plugins/modules:/usr/share/ansible:${MOLECULE_VAGRANT_PLUGIN_DIR}"
|
|
inject_facts_as_vars: false
|
|
verifier:
|
|
name: ansible
|
|
env:
|
|
ANSIBLE_PIPELINING: "True"
|
|
|
|
scenario:
|
|
create_sequence:
|
|
- dependency
|
|
- create
|
|
- prepare
|
|
check_sequence:
|
|
- dependency
|
|
- verify ../shared/prerequisites.yml
|
|
- destroy
|
|
- create
|
|
- prepare
|
|
- converge
|
|
- check
|
|
- destroy
|
|
converge_sequence:
|
|
- dependency
|
|
- create
|
|
- prepare
|
|
- converge
|
|
destroy_sequence:
|
|
- destroy
|
|
test_sequence:
|
|
- dependency
|
|
- verify ../shared/prerequisites.yml
|
|
- destroy
|
|
- syntax
|
|
- create
|
|
- prepare
|
|
- check
|
|
- converge
|
|
- idempotence
|
|
- verify
|
|
- destroy
|