Use robertdebock/molecule-action

.github/workflows/main.yml

@@ -10,6 +10,29 @@ on:
   workflow_dispatch:
 
 jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v2
+        with:
+          path: "${{ github.repository }}"
+      - name: molecule
+        uses: robertdebock/molecule-action@2.6.16
+        with:
+          command: lint
+  test:
+    needs:
+      - lint
+    runs-on:  ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        config:
+          - image: centos
+            tag: latest
+          - image: debian
+            tag: latest
   molecule:
     runs-on: ubuntu-latest
     steps:
@@ -21,3 +44,6 @@ jobs:
 
       - name: molecule
         uses: robertdebock/molecule-action@2.6.17
+        with:
+          image: ${{ matrix.config.image }}
+          tag: ${{ matrix.config.tag }}

molecule/debian/converge.yml

@@ -1,9 +0,0 @@
----
-- name: Converge
-  hosts: localhost
-  connection: local
-  roles:
-    - role: ipr-cnrs.nftables
-      nft_debug: true
-      # can't remove iptables on an instance with docker
-      nft_old_pkg_manage: false

molecule/debian/molecule.yml

@@ -1,15 +0,0 @@
----
-dependency:
-  name: galaxy
-driver:
-  name: docker
-platforms:
-  - name: instance
-    image: jrei/systemd-debian:latest
-    privileged: true
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-provisioner:
-  name: ansible
-verifier:
-  name: ansible

molecule/debian/verify.yml

@@ -1,10 +0,0 @@
----
-# This is an example playbook to execute Ansible tests.
-
-- name: Verify
-  hosts: all
-  gather_facts: false
-  tasks:
-  - name: Example assertion
-    assert:
-      that: true

molecule/default/converge.yml

@@ -2,6 +2,8 @@
 - name: Converge
   hosts: localhost
   connection: local
+  become: yes
+  gather_facts: yes
   roles:
     - role: ipr-cnrs.nftables
       nft_debug: true

molecule/default/molecule.yml

@@ -1,11 +1,15 @@
 ---
 dependency:
   name: galaxy
+lint: |
+  set -e
+  yamllint .
+  ansible-lint
 driver:
   name: docker
 platforms:
-  - name: instance
+  - name: "nftables-${image:-debian}-${tag:-latest}"
-    image: centos/systemd:latest
+    image: "${image:-debian}:${tag:-latest}"
     privileged: true
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:ro