[passenger] enable systemd

roles/abid/molecule/default/molecule.yml

@@ -9,14 +9,22 @@ lint: |
   ansible-lint
 platforms:
   - name: instance
-    image: "quay.io/pulibrary/jammy-ansible:latest"
-    command: ""
+    image: "ghcr.io/pulibrary/pul_containers:jammy_multi"
+    command: "/lib/systemd/systemd"
     volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    tmpfs:
+      - /tmp
+      - /run
+      - /run/lock
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:
   name: ansible
+  config_options:
+    defaults:
+      remote_tmp: /tmp/ansible
   log: true
 verifier:
   name: ansible

roles/approvals/molecule/default/molecule.yml

@@ -9,14 +9,22 @@ lint: |
   ansible-lint
 platforms:
   - name: instance
-    image: "quay.io/pulibrary/jammy-ansible:latest"
-    command: ""
+    image: "ghcr.io/pulibrary/pul_containers:jammy_multi"
+    command: "/lib/systemd/systemd"
     volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    tmpfs:
+      - /tmp
+      - /run
+      - /run/lock
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:
   name: ansible
+  config_options:
+    defaults:
+      remote_tmp: /tmp/ansible
   log: true
 verifier:
   name: ansible

roles/blacklight_app/molecule/default/molecule.yml

@@ -9,14 +9,22 @@ lint: |
   ansible-lint
 platforms:
   - name: instance
-    image: "quay.io/pulibrary/jammy-ansible:latest"
-    command: ""
+    image: "ghcr.io/pulibrary/pul_containers:jammy_multi"
+    command: "/lib/systemd/systemd"
     volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    tmpfs:
+      - /tmp
+      - /run
+      - /run/lock
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:
   name: ansible
+  config_options:
+    defaults:
+      remote_tmp: /tmp/ansible
   log: true
 verifier:
   name: ansible

roles/blacklight_app/tasks/main.yml

@@ -1,5 +1,5 @@
 ---
-- name: blacklight_app | Create the cron job
+- name: Blacklight_app | Create the cron job
   ansible.builtin.cron:
     name: Clean old Blacklight searches and Devise guest user accounts nightly
     hour: "22"

roles/dpul/molecule/default/ansible.cfg

@@ -0,0 +1,2 @@
+[defaults]
+remote_tmp = /tmp/ansible

roles/dpul/molecule/default/molecule.yml

@@ -9,18 +9,23 @@ lint: |
   ansible-lint
 platforms:
   - name: instance
-    image: "quay.io/pulibrary/jammy-ansible:latest"
-    command: ""
+    image: "ghcr.io/pulibrary/pul_containers:jammy_multi"
+    command: "/lib/systemd/systemd"
     volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+      - /tmp/ansible:/tmp/ansible:rw
+    tmpfs:
+      - /tmp
+      - /run
+      - /run/lock
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:
   name: ansible
-  log: true
   config_options:
     defaults:
-      remote_tmp: /tmp
-      local_tmp: /tmp
+      remote_tmp: /tmp/ansible
+  log: true
 verifier:
   name: ansible

roles/dss/molecule/default/converge.yml

@@ -0,0 +1,15 @@
+---
+- name: Converge
+  hosts: all
+  vars:
+    - running_on_server: false
+  become: true
+  pre_tasks:
+    - name: Update cache
+      ansible.builtin.apt:
+        update_cache: true
+        cache_valid_time: 600
+  tasks:
+    - name: "Include dss"
+      ansible.builtin.include_role:
+        name: dss

roles/dss/molecule/default/molecule.yml

@@ -3,30 +3,28 @@ scenario:
   name: default
 driver:
   name: docker
+lint: |
+  set -e
+  yamllint .
+  ansible-lint
 platforms:
   - name: instance
-    image: "quay.io/pulibrary/jammy-ansible:latest"
+    image: "ghcr.io/pulibrary/pul_containers:jammy_multi"
+    command: "/lib/systemd/systemd"
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    tmpfs:
+      - /tmp
+      - /run
+      - /run/lock
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:
   name: ansible
-  playbooks:
-    converge: playbook.yml
+  config_options:
+    defaults:
+      remote_tmp: /tmp/ansible
   log: true
-dependency:
-  name: galaxy
-  enabled: false
-lint:
-  name: yamllint
-  options:
-    config-file: molecule/default/yaml-lint.yml
 verifier:
-  name: testinfra
-  env:
-    PYTHONWARNINGS: "ignore:.*U.*mode is deprecated:DeprecationWarning"
-  lint:
-    name: flake8
-  options:
-    # show which tests where executed in test output
-    v: 1
-  directory: ./tests/
+  name: ansible

roles/dss/molecule/default/verify.yml

@@ -0,0 +1,21 @@
+---
+- name: Verify
+  hosts: all
+  tasks:
+    - name: Dss | check rubygems version
+      ansible.builtin.command: gem --version
+      register: result
+      changed_when: false
+    - name: Dss | assert rubygems version
+      ansible.builtin.assert:
+        that:
+          - result.stdout is match("3.5.13")
+
+    - name: Dss | check bundler version
+      ansible.builtin.command: bundler -v
+      register: result
+      changed_when: false
+    - name: Dss | assert bundler version
+      ansible.builtin.assert:
+        that:
+          - result.stdout is match("Bundler version 2.5.13")

roles/example/molecule/default/molecule.yml

@@ -10,13 +10,21 @@ lint: |
 platforms:
   - name: instance
     image: "ghcr.io/pulibrary/pul_containers:jammy_multi"
-    command: "sleep infinity"
+    command: "/lib/systemd/systemd"
     volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    tmpfs:
+      - /tmp
+      - /run
+      - /run/lock
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:
   name: ansible
+  config_options:
+    defaults:
+      remote_tmp: /tmp/ansible
   log: true
 verifier:
   name: ansible

roles/figgy/molecule/default/molecule.yml

@@ -9,14 +9,22 @@ lint: |
   ansible-lint
 platforms:
   - name: instance
-    image: "quay.io/pulibrary/jammy-ansible:latest"
-    command: ""
+    image: "ghcr.io/pulibrary/pul_containers:jammy_multi"
+    command: "/lib/systemd/systemd"
     volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    tmpfs:
+      - /tmp
+      - /run
+      - /run/lock
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:
   name: ansible
+  config_options:
+    defaults:
+      remote_tmp: /tmp/ansible
   log: true
 verifier:
   name: ansible