Refactor molecule testing to run a scenario per distro

3 files changed, 98 insertions, 0 deletions

diff --git a/molecule/debian/Dockerfile.j2 b/molecule/debian/Dockerfile.j2
new file mode 100644
index 00000000..aa620c58
--- /dev/null
+++ b/molecule/debian/Dockerfile.j2
@@ -0,0 +1,25 @@
+# Based on the amazing work of geerlingguy <3
+# FROM docker.io/geerlingguy/docker-debian12-ansible
+FROM docker.io/library/debian:bookworm
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+ENV container docker
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+        systemd python3 avahi-daemon iproute2 ifupdown \
+    && rm -Rf /var/lib/apt/lists/* \
+    && rm -Rf /usr/share/doc \
+    && rm -Rf /usr/share/man \
+    && apt-get clean
+
+RUN rm -f /lib/systemd/system/multi-user.target.wants/getty.target
+
+# Mimic Raspberry OS default boot (for testing)
+RUN systemctl enable avahi-daemon \
+    && touch /etc/locale.gen
+
+VOLUME ["/sys/fs/cgroup", "/tmp", "/run", "/opt"]
+
+CMD ["/lib/systemd/systemd"]
diff --git a/molecule/debian/converge.yml b/molecule/debian/converge.yml
new file mode 100644
index 00000000..af91e143
--- /dev/null
+++ b/molecule/debian/converge.yml
@@ -0,0 +1,33 @@
+---
+- name: Converge
+  hosts: debian
+  gather_facts: true
+  vars:
+    ansible_become_method: su
+    user_public_keys:
+      - "ssh-ed25519 AAAA...fMo"
+      - "ssh-rsa AAAA...4I3"
+    user_groups: ["wheel", "test_group"]
+    locales:
+      - "en_US.UTF-8 UTF-8"
+    timezone: "GMT"
+
+    python_global_version: "3.13"
+    python_versions:
+      - "3.13"
+  roles:
+    - role: "hostname"
+    - role: "network"
+    - role: "user"
+    - role: "ssh"
+    - role: "password_policy"
+    - role: "locales"
+    - role: "timezone"
+    - role: "wireguard"
+    - role: "wireguard_gateway"
+    - role: "homebrew"
+    - role: "python"
+    - role: "go"
+    - role: "docker"
+    - role: "podman"
+    - role: "ansible"
diff --git a/molecule/debian/molecule.yml b/molecule/debian/molecule.yml
new file mode 100644
index 00000000..e549997a
--- /dev/null
+++ b/molecule/debian/molecule.yml
@@ -0,0 +1,40 @@
+---
+role_name_check: 1
+dependency:
+  name: galaxy
+  options:
+    ignore-errors: true
+driver:
+  name: podman
+platforms:
+  - name: debian
+    dockerfile: Dockerfile.j2
+    platform: "linux/amd64"
+    pre_build_image: false
+    privileged: true
+    command: ${MOLECULE_COMMAND:-"/lib/systemd/systemd"}
+    tmpfs:
+      "/tmp": "rw"
+      "/run": "rw,exec"
+    volumes:
+      - "/sys/fs/cgroup:/sys/fs/cgroup:rw"
+    cgroupns_mode: host
+
+provisioner:
+  name: ansible
+  inventory:
+    links:
+      host_vars: "../../host_vars/"
+      group_vars: "../../group_vars/"
+  env:
+    ANSIBLE_ROLES_PATH: "../../roles"
+  config_options:
+    defaults:
+      callback_result_format: yaml
+      interpreter_python: /usr/bin/python3
+    ssh_connection:
+      pipelining: true
+  playbooks:
+    converge: converge.yml
+verifier:
+  name: ansible