.gitea/workflows/linode.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   Explore-terraform-molecule-Gitea-Action:
     env:
-      ANSIBLE_ROLES_PATH: '/workspace/seasharp/ansible-role_podman_netbird'
+      ANSIBLE_ROLES_PATH: '/workspace/seasharp/ansible-role_podman-host'
 #      ANSIBLE_REMOTE_TMP: '/root/.ansible/tmp/'
       EQIT_VPC: '136994'
       EQIT_VPC_SUBNET: '131754'
@@ -25,39 +25,9 @@ jobs:
           chmod a+r /etc/apt/sources.list.d/opentofu.list
           apt-get update
           apt-get install -y tofu
-
       - name: Update ssh config
         run: |
           umask 077
           mkdir .ssh
           echo -e "Host git.libre.audio\n  Port 2222" >> ~/.ssh/config
-
-      - name: tofu Checkout
-        uses: actions/checkout@v4
-        with:
-          repository: 'seasharp/eqit_tofu-plan'
-          path: 'tofu'
-          ssh-key: |-
-            -----BEGIN OPENSSH PRIVATE KEY-----
-            b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
-            QyNTUxOQAAACDYtU5hAnmHZ68PDgogVQfq5vEsAVnM/fEnv6vt5d4jPwAAAJiuquVvrqrl
-            bwAAAAtzc2gtZWQyNTUxOQAAACDYtU5hAnmHZ68PDgogVQfq5vEsAVnM/fEnv6vt5d4jPw
-            AAAEAgtCS7S50mz7uxA5ucR2UILvkvsqTum10668gpWJmXqdi1TmECeYdnrw8OCiBVB+rm
-            8SwBWcz98Se/q+3l3iM/AAAAEW0wMHRAbWlzZXJ2ZXIubGFuAQIDBA==
-            -----END OPENSSH PRIVATE KEY-----
-          ssh-known-hosts: |
-            git.libre.audio ssh-ed25519 
-            [git.libre.audio]:2222 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFLiDhNN7aPdGUt8gvvAftF5Oo3xwsy/JcT9gcX00BDW
-
-      - name: Project Checkout
-        uses: actions/checkout@v4
-        with:
-          path: 'podman_netbird'
-
-      - name: Set up Python
-        uses: actions/setup-python@v2
-        
-      - name: Molecule test
-        run: |
-          cd podman_netbird/extensions
-          molecule test
+          cat ~/.ssh/config

extensions/molecule/default/converge.yml

@@ -1,26 +0,0 @@
----
-- name: Fail if molecule group is missing
-  hosts: localhost
-  tasks:
-    - name: Print some info
-      ansible.builtin.debug:
-        msg: "{{ groups }}"
-
-    - name: Assert group existence
-      ansible.builtin.assert:
-        that: "'molecule' in groups"
-        fail_msg: |
-          molecule group was not found inside inventory groups: {{ groups }}
-
-- name: Converge
-  hosts: molecule
-  # We disable gather facts because it would fail due to our container not
-  # having python installed. This will not prevent use from running 'raw'
-  # commands. Most molecule users are expected to use containers that already
-  # have python installed in order to avoid notable delays installing it.
-  tasks:
-    - name: Apply podman_netbird Role
-      include_role:
-        name: podman_netbird
-#      ansible.builtin.assert:
-#        that: result.stdout | regex_search("^Linux")

extensions/molecule/default/create.yml

@@ -1,119 +0,0 @@
----
-- name: Create
-  hosts: localhost
-  connection: local
-  gather_facts: false
-  vars:
-    molecule_inventory:
-      all:
-        hosts: {}
-        molecule: {}
-
-  tasks:
-    - name: Create a container
-      community.docker.docker_container:
-        name: "{{ item.name }}"
-        image: "{{ item.image }}"
-        state: started
-        command: "{{ item.command }}"
-        log_driver: json-file
-      register: result
-      loop: "{{ molecule_yml.platforms }}"
-
-    - name: Print some info
-      ansible.builtin.debug:
-        msg: "{{ result.results }}"
-
-    - name: Fail if container is not running
-      when: >
-        item.container.State.ExitCode != 0 or
-        not item.container.State.Running
-      ansible.builtin.include_tasks:
-        file: tasks/create-fail.yml
-      loop: "{{ result.results }}"
-      loop_control:
-        label: "{{ item.container.Name }}"
-
-    - name: Add container to molecule_inventory
-      vars:
-        inventory_partial_yaml: |
-          all:
-            children:
-              molecule:
-                hosts:
-                  "{{ item.name }}":
-                    ansible_connection: community.docker.docker
-                    service_users:
-                      - name: eqadmin
-                        services:
-                          - netbird
-                          - service2
-      ansible.builtin.set_fact:
-        molecule_inventory: >
-          {{ molecule_inventory | combine(inventory_partial_yaml | from_yaml, recursive=true) }}
-      loop: "{{ molecule_yml.platforms }}"
-      loop_control:
-        label: "{{ item.name }}"
-
-    - name: Dump molecule_inventory
-      ansible.builtin.copy:
-        content: |
-          {{ molecule_inventory | to_yaml }}
-        dest: "{{ molecule_ephemeral_directory }}/inventory/molecule_inventory.yml"
-        mode: "0600"
-
-    - name: Force inventory refresh
-      ansible.builtin.meta: refresh_inventory
-
-    - name: Fail if molecule group is missing
-      ansible.builtin.assert:
-        that: "'molecule' in groups"
-        fail_msg: |
-          molecule group was not found inside inventory groups: {{ groups }}
-      run_once: true # noqa: run-once[task]
-
-# we want to avoid errors like "Failed to create temporary directory"
-- name: Validate that inventory was refreshed
-  hosts: molecule
-  gather_facts: false
-  tasks:
-    - name: Check uname
-      ansible.builtin.raw: uname -a
-      register: result
-      changed_when: false
-
-    - name: Display uname info
-      ansible.builtin.debug:
-        msg: "{{ result.stdout }}"
-
-- name: Verify container properties
-  hosts: molecule
-  gather_facts: false
-
-  tasks:
-    - name: Prerequisite packages
-      ansible.builtin.dnf:
-        name: ['openssh-server', 'python3-policycoreutils', 'python3-firewall', 'cronie']
-        state: present
-
-- name: Apply prerequisite roles
-  hosts: molecule
-  gather_facts: true
-
-  tasks:
-    - name: Apply podman-host Role
-      include_role:
-        name: podman-host
-
-    - name: Apply repo-epel Role
-      include_role:
-        name: geerlingguy.repo-epel
-
-    - name: Apply certbot Role
-      include_role:
-        name: geerlingguy.certbot
-
-    - name: Register certbot
-      command:
-        cmd: "certbot register --agree-tos --email admin@libre.audio"
-        creates: "/etc/letsencrypt/renewal-hooks/"

extensions/molecule/default/destroy.yml

@@ -1,20 +0,0 @@
----
-- name: Destroy molecule containers
-  hosts: molecule
-  gather_facts: false
-  tasks:
-    - name: Stop and remove container
-      delegate_to: localhost
-      community.docker.docker_container:
-        name: "{{ inventory_hostname }}"
-        state: absent
-        auto_remove: true
-
-- name: Remove dynamic molecule inventory
-  hosts: localhost
-  gather_facts: false
-  tasks:
-    - name: Remove dynamic inventory file
-      ansible.builtin.file:
-        path: "{{ molecule_ephemeral_directory }}/inventory/molecule_inventory.yml"
-        state: absent

extensions/molecule/default/molecule.yml

@@ -1,21 +0,0 @@
----
-dependency:
-  name: galaxy
-driver:
-  options:
-    managed: false
-    login_cmd_template: "docker exec -it {instance} bash"
-    ansible_connection_options:
-      ansible_connection: docker
-platforms:
-  - name: instance
-    image: "geerlingguy/docker-${MOLECULE_DISTRO:-rockylinux9}-ansible:latest"
-    command: ${MOLECULE_DOCKER_COMMAND:-"sleep infinity"}
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    cgroupns_mode: host
-    privileged: true
-    pre_build_image: true
-    # you might want to add your own variables here based on what provisioning
-    # you are doing like:
-    # image: quay.io/centos/centos:stream8

extensions/molecule/default/requirements.yml

@@ -1,8 +0,0 @@
-roles:
-  - equilibrateit.podman-host
-  - geerlingguy.repo-epel
-  - geerlingguy.certbot
-collections:
-  - community.general
-  - community.docker
-  - ansible.posix

extensions/molecule/default/tasks/create-fail.yml

@@ -1,13 +0,0 @@
-- name: Retrieve container log
-  ansible.builtin.command:
-    cmd: >-
-      {% raw %}
-      docker logs
-      {% endraw %}
-      {{ item.stdout_lines[0] }}
-  changed_when: false
-  register: logfile_cmd
-
-- name: Display container log
-  ansible.builtin.fail:
-    msg: "{{ logfile_cmd.stderr }}"