feat(main): ditch ansible-semaphore and use ansible directly

ansible/Containerfile

@@ -0,0 +1,20 @@
+# Source Image
+FROM docker.io/library/python:3.11-alpine3.19
+
+# Environment vars
+ENV PIPX_BIN_DIR="/usr/local/py-utils"
+ENV PIPX_HOME="/usr/local/pipx"
+ENV POETRY_VERSION="1.8.2"
+ENV POETRY_VIRTUALENVS_CREATE="true"
+ENV POETRY_VIRTUALENVS_IN_PROJECT="true"
+ENV PATH="${PATH}:${PIPX_BIN_DIR}:${PIPX_HOME}/venvs/poetry/bin:/ansible/.venv/bin"
+
+# Install system dependencies
+RUN apk --no-cache add pipx openssh bash
+RUN pipx install poetry==${POETRY_VERSION}
+
+# Install ansible and dependencies
+WORKDIR /ansible
+COPY . .
+RUN poetry install --no-root
+CMD poetry env use .venv/bin/python

setup/ansible/ansible.cfg → ansible/ansible.cfg

@@ -1,10 +1,10 @@
 [defaults]
 # Inventory location
-inventory = inventory
+inventory = inventory.yml
 # Location for roles
 roles_path = ./roles
 # Location for collections
-collections_paths = ./collections
+collection_paths = ./collections
 # Localtion for plugins & modules
 library = ./library
 # SSH

ansible/inventory.yml

@@ -0,0 +1,9 @@
+---
+all:
+  hosts:
+    localhost:
+    host.ublue.local:
+      ansible_host: host.containers.internal
+      ansible_user: "{{ lookup('ansible.builtin.env', 'ANSIBLE_HOST_USER') }}"
+      ansible_become_password: "{{ lookup('ansible.builtin.env', 'ANSIBLE_HOST_BECOME_PASSWORD') }}"
+  children:

ansible/playbooks/configure_host.yml

@@ -0,0 +1,26 @@
+---
+- name: Configure host system
+  hosts: host.ublue.local
+  gather_facts: true
+  tasks:
+    - name: Add ublue.local entries to /etc/hosts
+      ansible.builtin.lineinfile:
+        path: /etc/hosts
+        search_string: 127.0.0.1 rvproxy.ublue.local registry.ublue.local forge.ublue.local
+        line: 127.0.0.1 rvproxy.ublue.local registry.ublue.local forge.ublue.local
+        state: present
+      become: true
+
+    - name: Add ublue.local TSL root certificate to trust anchors
+      ansible.builtin.copy:
+        src: /certs/tls/ublue-os_forge-root.pem
+        dest: /etc/pki/ca-trust/source/anchors/ublue-os_forge-root.pem
+        force: true
+        mode: "0644"
+      become: true
+
+    - name: Update ca-trust store
+      ansible.builtin.command:
+        cmd: update-ca-trust
+      changed_when: false
+      become: true

setup/ansible/pyproject.toml → ansible/pyproject.toml

@@ -7,13 +7,12 @@ license = "../LICENSE"
 readme = "../README.md"
 
 [tool.poetry.dependencies]
-python = "^3.9"
-ansible-core = "^2.14.5"
-jmespath = "^1.0.1"
-dnspython = "^2.3.0"
+python = "^3.11"
+ansible-core = "^2.16"
+jmespath = "^1.0"
 
-[tool.poetry.dev-dependencies]
-ansible-lint = { version = "^6.14.1", markers = 'platform_system != "Windows"' }
+[tool.poetry.group.dev.dependencies]
+ansible-lint = { version = "^24.2", markers = 'platform_system != "Windows"' } # https://github.com/ansible/ansible-lint/issues/2730#issuecomment-1330406601
 
 [build-system]
 requires = ["poetry-core"]