Merge "Use the UBI8 image for testing" into stable/train

_skeleton_role_/molecule/default/molecule.yml

@@ -1,39 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
+    registry:
+      url: registry.access.redhat.com
     dockerfile: Dockerfile
-    pkg_extras: python-setuptools
+    pkg_extras: python*-setuptools
+    privileged: true
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    dockerfile: Dockerfile
-    pkg_extras: python*-setuptools
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

_skeleton_role_/molecule/default/verify.yml

@@ -1,15 +0,0 @@
----
-# Copyright 2020 Red Hat, Inc.
-# All Rights Reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License"); you may
-# not use this file except in compliance with the License. You may obtain
-# a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
-# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
-# License for the specific language governing permissions and limitations
-# under the License.

ansible-test-env.rc

@@ -1,9 +1,14 @@
 export TRIPLEO_VALIDATIONS_WORKPATH="$(dirname $(readlink -f ${BASH_SOURCE[0]}))"
 export ANSIBLE_STDOUT_CALLBACK=debug
 export ANSIBLE_CALLBACK_PLUGINS="${TRIPLEO_VALIDATIONS_WORKPATH}/callback_plugins"
-export ANSIBLE_LIBRARY="${TRIPLEO_VALIDATIONS_WORKPATH}/library"
+
+ANSIBLE_LIBRARY="${TRIPLEO_VALIDATIONS_WORKPATH}/library"
+export ANSIBLE_LIBRARY="${ANSIBLE_LIBRARY}:${TRIPLEO_VALIDATIONS_WORKPATH}/roles/roles.galaxy/validations-common/validations_common/library"
 export ANSIBLE_LOOKUP_PLUGINS="${TRIPLEO_VALIDATIONS_WORKPATH}/lookup_plugins"
+
 export ANSIBLE_ROLES_PATH="${TRIPLEO_VALIDATIONS_WORKPATH}/roles"
+export ANSIBLE_ROLES_PATH="${ANSIBLE_ROLES_PATH}:${TRIPLEO_VALIDATIONS_WORKPATH}/roles/roles.galaxy/tripleo-ansible/tripleo_ansible/roles"
+
 export ANSIBLE_INVENTORY="${TRIPLEO_VALIDATIONS_WORKPATH}/tests/hosts.ini"
 export ANSIBLE_RETRY_FILES_ENABLED="0"
 export ANSIBLE_LOAD_CALLBACK_PLUGINS="1"

bindep.txt

@@ -18,6 +18,17 @@ gcc-c++           [platform:rpm]
 git               [platform:rpm]
 libffi-devel      [platform:rpm]
 openssl-devel     [platform:rpm]
+
+libxml2-dev       [platform:dpkg platform:apk]
+libxml2-devel     [platform:rpm]
+libxslt-devel     [platform:rpm]
+libxslt1-dev      [platform:dpkg]
+libxslt-dev       [platform:apk]
+
+# RH Mechanisms
+python-rhsm-certificates [platform: redhat]
+
+podman            [platform:rpm]
 python-devel      [platform:rpm !platform:rhel-8 !platform:centos-8]
 python3-devel     [platform:rpm !platform:rhel-7 !platform:centos-7]
 PyYAML            [platform:rpm !platform:rhel-8 !platform:centos-8]

doc/source/readme.rst

@@ -513,3 +513,106 @@ Finally add a role documentation file at
 a title, a literal include of the defaults yaml and a literal include of
 the molecule playbook, or playbooks, used to test the role, which is noted
 as an "example" playbook.
+
+Local testing of new roles
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Local testing of new roles can be done in any number of ways, however,
+the easiest way is via the script `run-local-test` on a *CentOS 8* machaine.
+This script will setup the local work environment to execute tests mimicking
+what Zuul does.
+
+.. warning::
+
+    This script makes the assumption the executing user has the
+    ability to escalate privileges and will modify the local system.
+
+To use this script execute the following command.
+
+.. code-block:: console
+
+    $ ./scripts/run-local-test ${NEWROLENAME}
+
+When using the `run-local-test` script, the TRIPLEO_JOB_ANSIBLE_ARGS
+environment variable can be used to pass arbitrary Ansible arguments.
+For example, the following shows how to use `--skip-tags` when testing
+a role with tags.
+
+.. code-block:: console
+
+    $ export TRIPLEO_JOB_ANSIBLE_ARGS="--skip-tags tag_one,tag_two"
+    $ ./scripts/run-local-test ${ROLENAME}
+
+Role based testing with molecule can be executed directly from within
+the role directory.
+
+.. note::
+
+    All tests require Podman for container based testing. If Podman
+    is not available on the local workstation it will need to be
+    installed prior to executing most molecule based tests.
+
+
+.. note::
+
+    The script `bindep-install`, in the **scripts** path, is
+    available and will install all system dependencies.
+
+
+.. note::
+
+    Some roles depend on some packages which are available only through the EPEL
+    repositories. So, please ensure you have installed them on your CentOS 8 host
+    before running molecule tests.
+
+
+Before running basic molecule tests, it is recommended to install all
+of the python dependencies in a virtual environment.
+
+.. code-block:: console
+
+    $ python -m virtualenv --system-site-packages "${HOME}/test-python"
+    $ ${HOME}/test-python/bin/pip install -r requirements.txt \
+                                          -r test-requirements.txt \
+                                          -r molecule-requirements.txt
+    $ source ${HOME}/test-python/bin/activate
+
+
+Now, it is important to install validations-common and tripleo-ansible as
+dependencies.
+
+.. code-block:: console
+
+    $ cd tripleo-validations/
+    $ for REPO in validations-common tripleo-ansible; do
+        git clone https://opendev.org/openstack/${REPO} roles/roles.galaxy/${REPO}
+      done
+
+
+To run a basic molecule test, simply source the `ansible-test-env.rc`
+file from the project root, and then execute the following commands.
+
+.. code-block:: console
+
+    (test-python) $ cd roles/${NEWROLENAME}/
+    (test-python) $ molecule test --all
+
+
+If a role has more than one scenario, a specific scenario can be
+specified on the command line. Running specific scenarios will
+help provide developer feedback faster. To pass-in a scenario use
+the `--scenario-name` flag with the name of the desired scenario.
+
+.. code-block:: console
+
+    (test-python) $ cd tripleo-validations/roles/${NEWROLENAME}/
+    (test-python) $ molecule test --scenario-name ${EXTRA_SCENARIO_NAME}
+
+
+When debugging molecule tests its sometimes useful to use the
+`--debug` flag. This flag will provide extra verbose output about
+test being executed and running the environment.
+
+.. code-block:: console
+
+    (test-python) $ molecule --debug test

molecule-requirements.txt

@@ -1,7 +1,6 @@
 # this is required for the molecule jobs
 ansi2html
 ansible
-docker
 # https://github.com/sqlalchemy/dogpile.cache/issues/178
 dogpile.cache>=0.6.5,<0.9.1  # MIT
 jinja2>=2.8.0,<3

role-addition.yml

@@ -49,7 +49,7 @@
           ---
           {% set items = molecule_yaml['content'] | b64decode | from_yaml %}
           {% set job_index = [] %}
-          {% set new_job_name = "tripleo-validations-centos-7-molecule-" ~ _role_name %}
+          {% set new_job_name = "tripleo-validations-centos-8-molecule-" ~ _role_name %}
           {% for item in items %}
           {%   if 'project-template' in item %}
           {%     if item['project-template']['name'] == "tripleo-validations-molecule-jobs" %}
@@ -69,7 +69,7 @@
           {% if (job_index | length) < 1 %}
           {%   set new_job = {
                   "name": new_job_name,
-                  "parent": "tripleo-validations-centos-7-base",
+                  "parent": "tripleo-validations-centos-8-base",
                   "files": [
                     "^tripleo_validations/roles/" ~ _role_name ~ "/.*"
                   ],

roles/ceilometerdb_size/molecule/default/molecule.yml

@@ -1,37 +1,39 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools ruby python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/ceph/molecule/ceph-ansible-installed/molecule.yml

@@ -1,39 +1,42 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
+    registry:
+      url: registry.access.redhat.com
     dockerfile: Dockerfile
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    dockerfile: Dockerfile
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
+        vars:
+          ansible_user: root
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   name: ceph-ansible-installed

roles/ceph/molecule/ceph-ansible-installed/prepare.yml

@@ -24,6 +24,6 @@
       yum_repository:
         name: tripleo-centos-ceph-nautilus
         description: ceph-nautilus repository
-        baseurl: http://mirror.centos.org/centos/7/storage/x86_64/ceph-nautilus/
+        baseurl: http://mirror.centos.org/centos/8/storage/x86_64/ceph-nautilus/
         gpgcheck: false
         enabled: true

roles/ceph/molecule/default/molecule.yml

@@ -1,33 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
-    easy_install:
+      url: registry.access.redhat.com
-      - pip
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
+    volumes:
+      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/check_network_gateway/molecule/default/Dockerfile

@@ -22,7 +22,7 @@ FROM {{ item.image }}
 {% endif %}
 
 RUN if [ $(command -v apt-get) ]; then apt-get update && apt-get install -y python sudo bash ca-certificates && apt-get clean; \
-    elif [ $(command -v dnf) ]; then dnf makecache && dnf --assumeyes install sudo python*-devel python*-dnf bash {{ item.pkg_extras | default('') }} && dnf clean all; \
+    elif [ $(command -v dnf) ]; then dnf makecache && dnf --assumeyes install sudo python*-devel python*-dnf bash https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm {{ item.pkg_extras | default('') }} && dnf clean all; \
     elif [ $(command -v yum) ]; then yum makecache fast && yum install -y python sudo yum-plugin-ovl python-setuptools bash {{ item.pkg_extras | default('') }} && sed -i 's/plugins=0/plugins=1/g' /etc/yum.conf && yum clean all; \
     elif [ $(command -v zypper) ]; then zypper refresh && zypper install -y python sudo bash python-xml {{ item.pkg_extras | default('') }} && zypper clean -a; \
     elif [ $(command -v apk) ]; then apk update && apk add --no-cache python sudo bash ca-certificates {{ item.pkg_extras | default('') }}; \

roles/check_network_gateway/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr epel-release ruby PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*setuptools python*-PyYAML iputils
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby epel-release iputils python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/check_rhsm_version/molecule/default/molecule.yml

@@ -1,29 +1,41 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos8
+  - name: ubi8
-    hostname: centos8
+    hostname: ubi8
-    image: centos:8
+    image: ubi8/ubi-init
+    registry:
+      url: registry.access.redhat.com
     dockerfile: Dockerfile
+    privileged: true
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - host
 
 provisioner:
   name: ansible
-  options:
+  inventory:
-    vvv: true
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_ROLES_PATH: "${ANSIBLE_ROLES_PATH}:${HOME}/zuul-jobs/roles"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/check_rhsm_version/molecule/rhsm_mismatch/molecule.yml

@@ -1,29 +1,43 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos8
+  - name: ubi8
-    hostname: centos8
+    hostname: ubi8
-    image: centos:8
+    image: ubi8/ubi-init
+    registry:
+      url: registry.access.redhat.com
     dockerfile: Dockerfile
+    override_command: true
+    command: /sbin/init
+    privileged: true
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - host
 
 provisioner:
   name: ansible
-  options:
+  inventory:
-    vvv: true
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_ROLES_PATH: "${ANSIBLE_ROLES_PATH}:${HOME}/zuul-jobs/roles"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/collect_flavors_and_verify_profiles/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/container_status/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
-    easy_install:
+      url: registry.access.redhat.com
-      - pip
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/controller_token/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/controller_ulimits/molecule/default/converge.yml

@@ -19,20 +19,34 @@
   hosts: all
   gather_facts: false
 
-  vars:
-    nofiles_min: 102400
-    nproc_min: 204800
-
   tasks:
     - block:
         - include_role:
             name: controller_ulimits
+          vars:
+            nofiles_min: 102400
+            nproc_min: 512
       rescue:
         - name: Clear host errors
           meta: clear_host_errors
 
         - debug:
-            msg: The validation works! End the playbook run
+            msg: The validation works for detecting nofiles_min!
+
+    - block:
+        - include_role:
+            name: controller_ulimits
+          vars:
+            nofiles_min: 512
+            nproc_min: 204800
+      rescue:
+        - name: Clear host errors
+          meta: clear_host_errors
+
+        - debug:
+            msg: >-
+              The validation works for detecting noproc_min!
+              End of playbook run.
 
         - name: End play
           meta: end_play

roles/controller_ulimits/molecule/default/molecule.yml

@@ -1,39 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    ulimits: &ulimits
+    hostname: ubi8
-      - nofile:512:512
+    image: ubi8/ubi-init
-      - nproc:512:512
+    registry:
-    hostname: centos7
+      url: registry.access.redhat.com
-    image: centos:7
+    dockerfile: Dockerfile
-    pkg_extras: python-setuptools
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
-      - pip
-    environment: &env
-      http_proxy: "{{ lookup('env', 'http_proxy') }}"
-      https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
-  - name: centos8
-    ulimits: *ulimits
-    hostname: centos8
-    image: centos:8
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      <<: *env
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
+    environment: &env
+      http_proxy: "{{ lookup('env', 'http_proxy') }}"
+      https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - nofile=512:512
+      - nproc=512:512
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/ctlplane_ip_range/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
+    privileged: true
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby epel-release python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/ctlplane_ip_range/molecule/default/prepare.yml

@@ -20,6 +20,11 @@
   gather_facts: false
 
   tasks:
+    - name: install python netaddr library
+      package:
+        name: python*-netaddr
+        state: installed
+
     - name: install hiera
       package:
         name: hiera

roles/dhcp_validations/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/healthcheck_service_status/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/image_serve/molecule/default/molecule.yml

@@ -1,48 +1,45 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
+    image: ubi8/ubi-init
+    registry:
+      url: registry.access.redhat.com
     etc_hosts:
       undercloud.ctlplane.mydomain.tld: "127.0.0.1"
-    image: centos:7
+    dockerfile: Dockerfile
     override_command: true
     command: /sbin/init
     privileged: true
-    pkg_extras: python-setuptools python-enum34 python-netaddr epel-release ruby PyYAML
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    etc_hosts:
-      undercloud.ctlplane.mydomain.tld: "127.0.0.1"
-    image: centos:8
-    override_command: true
-    command: /sbin/init
-    privileged: true
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby epel-release python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: ../../../../library
+    ANSIBLE_ROLES_PATH: "${ANSIBLE_ROLES_PATH}:${HOME}/zuul-jobs/roles"
-    ANSIBLE_ROLES_PATH: ../../../../roles/roles.galaxy/tripleo-ansible/tripleo-ansible/tripleo_ansible/roles
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/ironic_boot_configuration/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/mysql_open_files_limit/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
-    easy_install:
+      url: registry.access.redhat.com
-      - pip
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/network_environment/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/neutron_sanity_check/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
-    easy_install:
+      url: registry.access.redhat.com
-      - pip
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/no_op_firewall_nova_driver/molecule/default/molecule.yml

@@ -1,38 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    command: /sbin/init
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/node_disks/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/node_health/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/nova_event_callback/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/nova_status/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-enum34 python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/nova_svirt/molecule/default/molecule.yml

@@ -1,39 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
+    registry:
+      url: registry.access.redhat.com
     dockerfile: Dockerfile
-    pkg_extras: python-setuptools python-lxml
+    pkg_extras: python*-setuptools
+    privileged: true
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    dockerfile: Dockerfile
-    pkg_extras: python*-setuptools python*-lxml
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/nova_svirt/molecule/default/prepare.yml

@@ -18,6 +18,11 @@
 - name: Prepare
   hosts: all
   tasks:
+    - name: Install python lxml library
+      package:
+        name: python*-lxml
+        state: present
+
     - name: Create directory tree
       file:
         path: "{{ item }}"

roles/openshift_on_openstack/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/openstack_endpoints/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
-    easy_install:
+      url: registry.access.redhat.com
-      - pip
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/ovs_dpdk_pmd/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
-    easy_install:
+      url: registry.access.redhat.com
-      - pip
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/pacemaker_status/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/rabbitmq_limits/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools
+    registry:
-    volumes:
+      url: registry.access.redhat.com
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+    dockerfile: Dockerfile
-    easy_install:
-      - pip
-    environment: &env
-      http_proxy: "{{ lookup('env', 'http_proxy') }}"
-      https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
-  - name: centos8
-    hostname: centos8
-    image: centos:8
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      <<: *env
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
+    environment: &env
+      http_proxy: "{{ lookup('env', 'http_proxy') }}"
+      https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - host
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/repos/molecule/default/molecule.yml

@@ -1,36 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools
+    registry:
-    volumes:
+      url: registry.access.redhat.com
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+    dockerfile: Dockerfile
-    easy_install:
-      - pip
-    environment: &env
-      http_proxy: "{{ lookup('env', 'http_proxy') }}"
-      https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
-  - name: centos8
-    hostname: centos8
-    image: centos:8
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      <<: *env
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
+    environment: &env
+      http_proxy: "{{ lookup('env', 'http_proxy') }}"
+      https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - host
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/repos/molecule/default/verify.yml

@@ -1,15 +0,0 @@
----
-# Copyright 2019 Red Hat, Inc.
-# All Rights Reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License"); you may
-# not use this file except in compliance with the License. You may obtain
-# a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
-# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
-# License for the specific language governing permissions and limitations
-# under the License.

roles/stack_health/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/stonith_exists/molecule/default/molecule.yml

@@ -1,36 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools
+    registry:
-    volumes:
+      url: registry.access.redhat.com
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+    dockerfile: Dockerfile
-    easy_install:
-      - pip
-    environment: &env
-      http_proxy: "{{ lookup('env', 'http_proxy') }}"
-      https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
-  - name: centos8
-    hostname: centos8
-    image: centos:8
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      <<: *env
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
+    environment: &env
+      http_proxy: "{{ lookup('env', 'http_proxy') }}"
+      https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - host
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/switch_vlans/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/system_encoding/molecule/default/molecule.yml

@@ -1,39 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    dockerfile: Dockerfile
+    registry:
-    pkg_extras: python-setuptools
+      url: registry.access.redhat.com
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
-      - pip
-    environment: &env
-      http_proxy: "{{ lookup('env', 'http_proxy') }}"
-      https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
-  - name: centos8
-    hostname: centos8
-    image: centos:8
     dockerfile: Dockerfile
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      <<: *env
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
+    environment: &env
+      http_proxy: "{{ lookup('env', 'http_proxy') }}"
+      https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - host
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/tls_everywhere/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml krb5-workstation
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/undercloud_debug/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/undercloud_disk_space/molecule/default/molecule.yml

@@ -1,36 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools
+    registry:
-    volumes:
+      url: registry.access.redhat.com
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
+    dockerfile: Dockerfile
-    easy_install:
-      - pip
-    environment: &env
-      http_proxy: "{{ lookup('env', 'http_proxy') }}"
-      https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
-  - name: centos8
-    hostname: centos8
-    image: centos:8
     pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      <<: *env
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
+    environment: &env
+      http_proxy: "{{ lookup('env', 'http_proxy') }}"
+      https_proxy: "{{ lookup('env', 'https_proxy') }}"
+    ulimits: &ulimit
+      - host
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/undercloud_heat_purge_deleted/molecule/default/molecule.yml

@@ -1,41 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    override_command: true
+    registry:
-    command: python -m SimpleHTTPServer 8787
+      url: registry.access.redhat.com
-    pkg_extras: python-setuptools python-enum34 python-netaddr epel-release ruby PyYAML
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    override_command: true
-    command: python3 -m http.server 8787
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby epel-release python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/undercloud_process_count/molecule/default/molecule.yml

@@ -1,37 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    pkg_extras: python-setuptools python-enum34 python-netaddr ruby epel-release PyYAML
+    registry:
+      url: registry.access.redhat.com
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/undercloud_tokenflush/molecule/default/molecule.yml

@@ -1,41 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    override_command: true
+    registry:
-    command: python -m SimpleHTTPServer 8787
+      url: registry.access.redhat.com
-    pkg_extras: python-setuptools python-enum34 python-netaddr epel-release ruby PyYAML
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    override_command: true
-    command: python3 -m http.server 8787
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby epel-release python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

roles/undercloud_tokenflush/molecule/non-persistent-token-format/molecule.yml

@@ -1,41 +1,40 @@
 ---
 driver:
-  name: docker
+  name: podman
 
 log: true
 
 platforms:
-  - name: centos7
+  - name: ubi8
-    hostname: centos7
+    hostname: ubi8
-    image: centos:7
+    image: ubi8/ubi-init
-    override_command: true
+    registry:
-    command: python -m SimpleHTTPServer 8787
+      url: registry.access.redhat.com
-    pkg_extras: python-setuptools python-enum34 python-netaddr epel-release ruby PyYAML
+    dockerfile: Dockerfile
+    pkg_extras: python*-setuptools python*-pyyaml
     volumes:
       - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    easy_install:
+      - /etc/pki/rpm-gpg:/etc/pki/rpm-gpg
-      - pip
+      - /opt/yum.repos.d:/etc/yum.repos.d:rw
+    privileged: true
     environment: &env
       http_proxy: "{{ lookup('env', 'http_proxy') }}"
       https_proxy: "{{ lookup('env', 'https_proxy') }}"
-
+    ulimits: &ulimit
-  - name: centos8
+      - host
-    hostname: centos8
-    image: centos:8
-    override_command: true
-    command: python3 -m http.server 8787
-    pkg_extras: python*-setuptools python*-enum34 python*-netaddr ruby epel-release python*-PyYAML
-    volumes:
-      - /etc/ci/mirror_info.sh:/etc/ci/mirror_info.sh:ro
-    environment:
-      <<: *env
 
 provisioner:
   name: ansible
+  inventory:
+    hosts:
+      all:
+        hosts:
+          ubi8:
+            ansible_python_interpreter: /usr/bin/python3
   log: true
   env:
     ANSIBLE_STDOUT_CALLBACK: yaml
-    ANSIBLE_LIBRARY: "../../../../library"
+    ANSIBLE_LIBRARY: "${ANSIBLE_LIBRARY:-/usr/share/ansible/plugins/modules}"
 
 scenario:
   test_sequence:

scripts/run-local-test

@@ -24,7 +24,7 @@ set -xeuo
 
 export PROJECT_DIR="$(dirname $(readlink -f ${BASH_SOURCE[0]}))/../"
 export ROLE_NAME="${ROLE_NAME:-$1}"
-export TRIPLEO_JOB_ANSIBLE_ARGS=${TRIPLEO_JOB_ANSIBLE_ARGS:-"-v"}
+export TRIPLEO_JOB_ANSIBLE_ARGS=${TRIPLEO_JOB_ANSIBLE_ARGS:-""}
 
 ## Main ----------------------------------------------------------------------
 
@@ -40,6 +40,10 @@ case "${ID,,}" in
         ;;
 esac
 
+# Ensure the required ci file is present
+sudo mkdir -p /etc/ci
+sudo touch /etc/ci/mirror_info.sh
+
 # Create a virtual env
 "${PYTHON_EXEC}" -m virtualenv --system-site-packages "${HOME}/test-python"
 
@@ -67,4 +71,5 @@ ansible-playbook -i "${PROJECT_DIR}/tests/hosts.ini" \
                  -e "ansible_user=${USER}" \
                  -e "ansible_user_dir=${HOME}" \
                  "${PROJECT_DIR}/tests/prepare-test-host.yml" \
-                 "${PROJECT_DIR}/zuul.d/playbooks/run-local.yml"
+                 "${PROJECT_DIR}/ci/playbooks/run-local.yml"  \
+                 -v

tools/test-setup.sh

@@ -1,8 +0,0 @@
-#!/bin/bash
-set -euxo pipefail
-# Used by Zuul CI to perform extra bootstrapping
-
-# Workaround for a potential:
-# Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock
-# See https://docs.docker.com/install/linux/linux-postinstall/
-newgrp docker || true

zuul.d/molecule.yaml

@@ -249,6 +249,7 @@
     parent: tripleo-validations-centos-8-base
     vars:
       tripleo_validations_role_name: image_serve
+    voting: false
 - job:
     files:
     - ^roles/check_network_gateway/.*

zuul.d/playbooks/pre.yml

@@ -1,11 +1,19 @@
 ---
 - hosts: all
   pre_tasks:
+    - name: Set project path fact
+      set_fact:
+        tripleo_validations_project_path: "{{ ansible_user_dir }}/{{ zuul.projects['opendev.org/openstack/tripleo-validations'].src_dir }}"
+
     - name: Ensure output dirs
       file:
         path: "{{ ansible_user_dir }}/zuul-output/logs"
         state: directory
 
+    - name: Ensure pip is available
+      include_role:
+        name: ensure-pip
+
     - name: Ensure virtualenv is available
       include_role:
         name: ensure-virtualenv
@@ -14,12 +22,13 @@
       pip:
         name: "bindep"
         virtualenv: "{{ ansible_user_dir }}/test-python"
+        virtualenv_command: "{{ ensure_pip_virtualenv_command }}"
         virtualenv_site_packages: true
 
     - name: Run bindep
       shell: |-
         . {{ ansible_user_dir }}/test-python/bin/activate
-        {{ ansible_user_dir }}/{{ zuul.project.src_dir }}/scripts/bindep-install
+        {{ tripleo_validations_project_path }}/scripts/bindep-install
       become: true
       changed_when: false
 
@@ -31,18 +40,81 @@
 
     - name: Setup test-python
       pip:
-        requirements: "{{ ansible_user_dir }}/{{ zuul.project.src_dir }}/molecule-requirements.txt"
+        requirements: "{{ tripleo_validations_project_path }}/molecule-requirements.txt"
         virtualenv: "{{ ansible_user_dir }}/test-python"
+        virtualenv_command: "{{ ensure_pip_virtualenv_command }}"
         virtualenv_site_packages: true
 
-  tasks:
+    - name: Display test-python virtualenv package versions
-    - name: Get Ansible Galaxy roles
+      shell: |-
-      command: >-
+        . {{ ansible_user_dir }}/test-python/bin/activate
-        {{ ansible_user_dir }}/test-python/bin/ansible-galaxy install
+        pip freeze
-        -fr
-        {{ ansible_user_dir }}/{{ zuul.project.src_dir }}/ansible-role-requirements.yml
-      environment:
-        ANSIBLE_ROLES_PATH: "{{ ansible_user_dir }}/{{ zuul.project.src_dir }}/roles/roles.galaxy"
 
-  roles:
+    - name: Basic ci setup
-    - role: ensure-docker
+      become: true
+      block:
+        - name: Ensure ci directories
+          file:
+            path: "/etc/ci"
+            state: "directory"
+
+        - name: Ensure ci mirror file
+          file:
+            path: "/etc/ci/mirror_info.sh"
+            state: "touch"
+
+        - name: Set an appropriate fs.file-max
+          sysctl:
+            name: fs.file-max
+            value: 2048000
+            sysctl_set: true
+            state: present
+            reload: true
+
+        - name: Set container_manage_cgroup boolean
+          seboolean:
+            name: container_manage_cgroup
+            state: true
+            persistent: true
+          failed_when: false
+
+        - name: Create limits file for containers
+          copy:
+            content: |
+              * soft nofile 102400
+              * hard nofile 204800
+              * soft nproc 2048
+              * hard nproc 4096
+            dest: /etc/security/limits.d/containers.conf
+
+        - name: Install epel-release
+          package:
+            name: epel-release
+            state: present
+
+        - name: Be sure to enable epel repo
+          become: true
+          command: >-
+            dnf config-manager --set-enabled epel
+          args:
+            warn: false
+
+        - name: Copy repos directory to opt workspace
+          copy:
+            src: /etc/yum.repos.d
+            dest: /opt/
+            remote_src: true
+            mode: "0777"
+
+        - name: Reset ssh connection
+          meta: reset_connection
+  tasks:
+    - name: Get necessary git repos
+      git:
+        repo: https://opendev.org/openstack/{{ item }}
+        dest: "{{ tripleo_validations_project_path }}/roles/roles.galaxy/{{ item }}"
+        version: master
+        force: true
+      with_items:
+        - tripleo-ansible
+        - validations-common

zuul.d/playbooks/run-local.yml

@@ -4,8 +4,9 @@
     - name: set basic zuul fact
       set_fact:
         zuul:
-          project:
+          projects:
-            src_dir: "{{ tripleo_src }}"
+            "opendev.org/openstack/tripleo-validations":
+              src_dir: "{{ tripleo_src }}"
         ansible_connection: ssh
 
 - import_playbook: pre.yml