fix(ansible): make --check succeed on a fresh host #8

	---
	name: Molecule

	# Containerised converge + idempotence + verify for the anvil/caddy roles.
	# Heavy (privileged systemd Docker container) — scoped to ansible/ changes and
	# blocking. Mark it a required status check in branch protection once proven.
	on:
	pull_request:
	paths: ['ansible/**']
	push:
	branches: [main]
	paths: ['ansible/**']

	permissions:
	contents: read

	concurrency:
	group: molecule-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	molecule:
	runs-on: ubuntu-latest # Docker is preinstalled
	defaults:
	run:
	working-directory: ansible
	steps:
	- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
	- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.12'
	- name: Install molecule + Ansible
	run: \|
	python -m pip install --upgrade \
	molecule "molecule-plugins[docker]" ansible ansible-lint docker
	- name: Install Galaxy collections
	run: make deps
	- name: molecule test
	run: molecule test

Navigation Menu