ansible-playbook 2.9.27 config file = /etc/ansible/ansible.cfg configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 2.7.5 (default, Nov 14 2023, 16:14:06) [GCC 4.8.5 20150623 (Red Hat 4.8.5-44)] Using /etc/ansible/ansible.cfg as config file [WARNING]: running playbook inside collection fedora.linux_system_roles Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'jsonl', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: tests_fs_attrs.yml *************************************************** 1 plays in /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml PLAY [Ensure UID and GID exists] *********************************************** TASK [Gathering Facts] ********************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2 Saturday 07 February 2026 07:39:09 -0500 (0:00:00.024) 0:00:00.024 ***** ok: [managed-node2] META: ran handlers TASK [Ensure user exists] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:5 Saturday 07 February 2026 07:39:09 -0500 (0:00:00.812) 0:00:00.836 ***** changed: [managed-node2] => { "changed": true, "comment": "", "create_home": true, "group": 1040, "home": "/home/user1", "name": "user1", "shell": "/bin/bash", "state": "present", "system": false, "uid": 1040 } TASK [Ensure group "somegroup" exists] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:11 Saturday 07 February 2026 07:39:10 -0500 (0:00:00.577) 0:00:01.414 ***** changed: [managed-node2] => { "changed": true, "gid": 1041, "name": "somegroup", "state": "present", "system": false } TASK [Issue certificate setting user/group] ************************************ task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:17 Saturday 07 February 2026 07:39:10 -0500 (0:00:00.498) 0:00:01.913 ***** TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Saturday 07 February 2026 07:39:11 -0500 (0:00:00.207) 0:00:02.121 ***** included: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Saturday 07 February 2026 07:39:11 -0500 (0:00:00.038) 0:00:02.159 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10 Saturday 07 February 2026 07:39:11 -0500 (0:00:00.053) 0:00:02.213 ***** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:15 Saturday 07 February 2026 07:39:11 -0500 (0:00:00.429) 0:00:02.642 ***** ok: [managed-node2] => { "ansible_facts": { "__certificate_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:22 Saturday 07 February 2026 07:39:11 -0500 (0:00:00.059) 0:00:02.702 ***** ok: [managed-node2] => { "changed": false, "cmd": [ "systemctl", "is-system-running" ], "delta": "0:00:00.007253", "end": "2026-02-07 07:39:12.183738", "failed_when_result": false, "rc": 0, "start": "2026-02-07 07:39:12.176485" } STDOUT: running TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:30 Saturday 07 February 2026 07:39:12 -0500 (0:00:00.453) 0:00:03.155 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:35 Saturday 07 February 2026 07:39:12 -0500 (0:00:00.038) 0:00:03.194 ***** ok: [managed-node2] => { "ansible_facts": { "__certificate_is_booted": true }, "changed": false } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:40 Saturday 07 February 2026 07:39:12 -0500 (0:00:00.039) 0:00:03.233 ***** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_7.yml) => { "ansible_facts": { "__certificate_default_directory": "/etc/pki/tls", "__certificate_packages": [ "python-pyasn1", "python-cryptography", "python-dbus" ] }, "ansible_included_var_files": [ "/tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_7.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.yml" } skipping: [managed-node2] => (item=CentOS_7.9.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.9.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 Saturday 07 February 2026 07:39:12 -0500 (0:00:00.068) 0:00:03.302 ***** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-pyasn1-0.1.9-7.el7.noarch providing python-pyasn1 is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python-cryptography is already installed", "dbus-python-1.1.1-9.el7.x86_64 providing python-dbus is already installed" ] } lsrpackages: python-cryptography python-dbus python-pyasn1 TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 Saturday 07 February 2026 07:39:13 -0500 (0:00:01.310) 0:00:04.613 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [ "certmonger-0.78.4-17.el7_9.x86_64 providing certmonger is already installed" ] } lsrpackages: certmonger TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25 Saturday 07 February 2026 07:39:14 -0500 (0:00:00.568) 0:00:05.182 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49 Saturday 07 February 2026 07:39:14 -0500 (0:00:00.518) 0:00:05.700 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 Saturday 07 February 2026 07:39:15 -0500 (0:00:00.335) 0:00:06.035 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Sat 2026-02-07 07:39:01 EST", "ActiveEnterTimestampMonotonic": "280867055", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service network.target basic.target syslog.target system.slice systemd-journald.socket", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2026-02-07 07:39:01 EST", "AssertTimestampMonotonic": "280839392", "Before": "multi-user.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2026-02-07 07:39:01 EST", "ConditionTimestampMonotonic": "280839390", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "EnvironmentFile": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "9738", "ExecMainStartTimestamp": "Sat 2026-02-07 07:39:01 EST", "ExecMainStartTimestampMonotonic": "280839925", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /var/run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Sat 2026-02-07 07:39:01 EST] ; stop_time=[n/a] ; pid=9738 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2026-02-07 07:39:01 EST", "InactiveExitTimestampMonotonic": "280839955", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "29173", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "29173", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "9738", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PIDFile": "/var/run/certmonger.pid", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "basic.target system.slice", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "WatchdogTimestamp": "Sat 2026-02-07 07:39:01 EST", "WatchdogTimestampMonotonic": "280867020", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 Saturday 07 February 2026 07:39:15 -0500 (0:00:00.739) 0:00:06.775 ***** changed: [managed-node2] => (item={u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } } MSG: Certificate requested (new). File attributes updated. changed: [managed-node2] => (item={u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } } MSG: Certificate requested (new). File attributes updated. TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:138 Saturday 07 February 2026 07:39:17 -0500 (0:00:01.513) 0:00:08.289 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.039) 0:00:08.329 ***** skipping: [managed-node2] => (item=[u'cert', {u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'cert', {u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } ], "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:151 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.085) 0:00:08.415 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:155 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.035) 0:00:08.450 ***** skipping: [managed-node2] => (item=certid) => { "ansible_loop_var": "cert_name", "cert_name": "certid", "changed": false, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=mycert_fs_attrs) => { "ansible_loop_var": "cert_name", "cert_name": "mycert_fs_attrs", "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:169 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.047) 0:00:08.498 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.035) 0:00:08.533 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Verify each user/group certificate] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:34 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.040) 0:00:08.573 ***** included: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 included: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.141) 0:00:08.715 ***** ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.091) 0:00:08.807 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.054) 0:00:08.861 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Saturday 07 February 2026 07:39:17 -0500 (0:00:00.051) 0:00:08.913 ***** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } lsrpackages: python2-cryptography TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Saturday 07 February 2026 07:39:18 -0500 (0:00:00.632) 0:00:09.545 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Saturday 07 February 2026 07:39:18 -0500 (0:00:00.056) 0:00:09.601 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467956.555918, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "fc34c30cc0b963017bb1be009c62980c710088fd", "ctime": 1770467956.6069176, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 171877, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1770467956.5519178, "nlink": 1, "path": "/etc/pki/tls/certs/mycert_fs_attrs.crt", "pw_name": "ftp", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1294, "uid": 14, "version": "406979861", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Saturday 07 February 2026 07:39:19 -0500 (0:00:00.355) 0:00:09.957 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Saturday 07 February 2026 07:39:19 -0500 (0:00:00.043) 0:00:10.001 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Saturday 07 February 2026 07:39:19 -0500 (0:00:00.047) 0:00:10.048 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Saturday 07 February 2026 07:39:19 -0500 (0:00:00.044) 0:00:10.093 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467956.509918, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "3b4f5813126f315d14d71a5b984b3cc271db982b", "ctime": 1770467956.6069176, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 168506, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1770467956.5519178, "nlink": 1, "path": "/etc/pki/tls/private/mycert_fs_attrs.key", "pw_name": "ftp", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1708, "uid": 14, "version": "406979848", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Saturday 07 February 2026 07:39:19 -0500 (0:00:00.313) 0:00:10.407 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Saturday 07 February 2026 07:39:19 -0500 (0:00:00.065) 0:00:10.472 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Saturday 07 February 2026 07:39:19 -0500 (0:00:00.071) 0:00:10.544 ***** ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "70:DE:74:4B:01:4E:14:35:DD:49:D8:DF:A4:F6:75:51:2B:6A:E0:A7" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "02:56:5F:AD:FE:46:C6:C1:8B:8D:97:55:36:D9:0F:4B:FF:35:3C:C7:70:63:53:9E:67:A8:95:FA:1C:A2:D5:45:BD:CF:8F:62:86:C9:B4:57:46:1E:D8:E7:42:F3:BC:E0:32:56:5D:97:FA:1E:CB:4B:A9:80:C6:27:83:4B:DF:42:D0:6A:57:4D:AF:16:8B:DD:12:B8:99:48:2C:08:65:A7:4B:46:5F:0A:E6:91:82:26:D6:35:34:8A:FC:21:CC:DE:2C:25:11:CC:8B:12:43:36:B8:D6:BE:8E:B6:B5:1A:11:E6:55:70:4C:5E:E1:11:39:25:5E:25:FF:3B:E7:DF:E5:DA:F8:D3:F0:66:7D:7C:CF:13:4B:1D:97:44:11:AE:DB:D9:F6:F8:11:D8:C4:0E:91:3D:59:45:43:68:23:5F:50:DD:EA:69:6C:E1:50:43:67:5D:1A:B6:A3:A3:8A:6A:CC:6E:EC:BC:A0:22:08:EA:57:33:6C:DF:8E:42:02:A3:1C:46:F8:94:F7:0A:25:EA:49:8E:5F:29:DF:FF:AF:40:E3:E6:43:44:A4:2F:F8:76:89:56:37:58:BC:2C:73:1A:F2:C6:34:73:92:F1:ED:8F:E8:D4:9B:EB:F9:63:8F:63:2F:76:62:22:D4:76:7B:B0:E2:CC:C4:D4:7D:01:B8:DA:2D" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123916Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Saturday 07 February 2026 07:39:20 -0500 (0:00:00.593) 0:00:11.137 ***** ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "70:DE:74:4B:01:4E:14:35:DD:49:D8:DF:A4:F6:75:51:2B:6A:E0:A7" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123916Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Saturday 07 February 2026 07:39:20 -0500 (0:00:00.064) 0:00:11.202 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Saturday 07 February 2026 07:39:20 -0500 (0:00:00.057) 0:00:11.260 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Saturday 07 February 2026 07:39:20 -0500 (0:00:00.065) 0:00:11.325 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Saturday 07 February 2026 07:39:20 -0500 (0:00:00.066) 0:00:11.392 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Saturday 07 February 2026 07:39:20 -0500 (0:00:00.066) 0:00:11.459 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Saturday 07 February 2026 07:39:20 -0500 (0:00:00.071) 0:00:11.530 ***** ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.041200", "end": "2026-02-07 07:39:20.953538", "rc": 0, "start": "2026-02-07 07:39:20.912338" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.405) 0:00:11.936 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.069) 0:00:12.005 ***** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.550) 0:00:12.555 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.063) 0:00:12.619 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.054) 0:00:12.674 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.047) 0:00:12.722 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.054) 0:00:12.776 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.074) 0:00:12.850 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Saturday 07 February 2026 07:39:21 -0500 (0:00:00.050) 0:00:12.901 ***** ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Saturday 07 February 2026 07:39:22 -0500 (0:00:00.056) 0:00:12.958 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Saturday 07 February 2026 07:39:22 -0500 (0:00:00.050) 0:00:13.009 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Saturday 07 February 2026 07:39:22 -0500 (0:00:00.045) 0:00:13.054 ***** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } lsrpackages: python2-cryptography TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Saturday 07 February 2026 07:39:22 -0500 (0:00:00.574) 0:00:13.629 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Saturday 07 February 2026 07:39:22 -0500 (0:00:00.043) 0:00:13.673 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467957.1859157, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "ba7ba5c1855f0173a5887fca3e19eb1e7fa8730a", "ctime": 1770467957.3009155, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 1041, "gr_name": "somegroup", "inode": 172747, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1770467957.1819158, "nlink": 1, "path": "/etc/pki/tls/certs/certid.crt", "pw_name": "user1", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1294, "uid": 1040, "version": "406979899", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Saturday 07 February 2026 07:39:23 -0500 (0:00:00.388) 0:00:14.061 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Saturday 07 February 2026 07:39:23 -0500 (0:00:00.064) 0:00:14.125 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Saturday 07 February 2026 07:39:23 -0500 (0:00:00.067) 0:00:14.193 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Saturday 07 February 2026 07:39:23 -0500 (0:00:00.056) 0:00:14.249 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467957.1409159, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "39f422b9b65b8fd4c95adaafe76ecefca26c071b", "ctime": 1770467957.3009155, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 1041, "gr_name": "somegroup", "inode": 172745, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1770467957.1819158, "nlink": 1, "path": "/etc/pki/tls/private/certid.key", "pw_name": "user1", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1708, "uid": 1040, "version": "406979886", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Saturday 07 February 2026 07:39:23 -0500 (0:00:00.315) 0:00:14.565 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Saturday 07 February 2026 07:39:23 -0500 (0:00:00.043) 0:00:14.609 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Saturday 07 February 2026 07:39:23 -0500 (0:00:00.047) 0:00:14.656 ***** ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "C7:22:E9:A0:CD:E5:6A:93:DF:98:49:13:0F:BD:8D:25:3D:C0:CD:40" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123917Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.359) 0:00:15.015 ***** ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "C7:22:E9:A0:CD:E5:6A:93:DF:98:49:13:0F:BD:8D:25:3D:C0:CD:40" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123917Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.044) 0:00:15.060 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.051) 0:00:15.111 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.063) 0:00:15.174 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.064) 0:00:15.239 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.058) 0:00:15.297 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.055) 0:00:15.352 ***** ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.040003", "end": "2026-02-07 07:39:24.714837", "rc": 0, "start": "2026-02-07 07:39:24.674834" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.337) 0:00:15.690 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Saturday 07 February 2026 07:39:24 -0500 (0:00:00.050) 0:00:15.740 ***** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.358) 0:00:16.099 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.045) 0:00:16.144 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.037) 0:00:16.181 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.039) 0:00:16.221 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.046) 0:00:16.267 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.049) 0:00:16.317 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Issue certificate setting user/group/mode] ******************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:66 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.040) 0:00:16.357 ***** TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.141) 0:00:16.499 ***** included: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.054) 0:00:16.554 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.044) 0:00:16.599 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:15 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.051) 0:00:16.651 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:22 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.050) 0:00:16.702 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:30 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.051) 0:00:16.753 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:35 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.053) 0:00:16.806 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:40 Saturday 07 February 2026 07:39:25 -0500 (0:00:00.053) 0:00:16.860 ***** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_7.yml) => { "ansible_facts": { "__certificate_default_directory": "/etc/pki/tls", "__certificate_packages": [ "python-pyasn1", "python-cryptography", "python-dbus" ] }, "ansible_included_var_files": [ "/tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_7.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.yml" } skipping: [managed-node2] => (item=CentOS_7.9.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.9.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 Saturday 07 February 2026 07:39:26 -0500 (0:00:00.106) 0:00:16.967 ***** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-pyasn1-0.1.9-7.el7.noarch providing python-pyasn1 is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python-cryptography is already installed", "dbus-python-1.1.1-9.el7.x86_64 providing python-dbus is already installed" ] } lsrpackages: python-cryptography python-dbus python-pyasn1 TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 Saturday 07 February 2026 07:39:27 -0500 (0:00:01.077) 0:00:18.044 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [ "certmonger-0.78.4-17.el7_9.x86_64 providing certmonger is already installed" ] } lsrpackages: certmonger TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25 Saturday 07 February 2026 07:39:27 -0500 (0:00:00.663) 0:00:18.708 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49 Saturday 07 February 2026 07:39:28 -0500 (0:00:00.310) 0:00:19.018 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 Saturday 07 February 2026 07:39:28 -0500 (0:00:00.329) 0:00:19.347 ***** ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Sat 2026-02-07 07:39:01 EST", "ActiveEnterTimestampMonotonic": "280867055", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service network.target basic.target syslog.target system.slice systemd-journald.socket", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2026-02-07 07:39:01 EST", "AssertTimestampMonotonic": "280839392", "Before": "multi-user.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2026-02-07 07:39:01 EST", "ConditionTimestampMonotonic": "280839390", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "EnvironmentFile": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "9738", "ExecMainStartTimestamp": "Sat 2026-02-07 07:39:01 EST", "ExecMainStartTimestampMonotonic": "280839925", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /var/run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Sat 2026-02-07 07:39:01 EST] ; stop_time=[n/a] ; pid=9738 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2026-02-07 07:39:01 EST", "InactiveExitTimestampMonotonic": "280839955", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "29173", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "29173", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "9738", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PIDFile": "/var/run/certmonger.pid", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "basic.target system.slice", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "WatchdogTimestamp": "Sat 2026-02-07 07:39:01 EST", "WatchdogTimestampMonotonic": "280867020", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 Saturday 07 February 2026 07:39:28 -0500 (0:00:00.452) 0:00:19.800 ***** changed: [managed-node2] => (item={u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } } MSG: Certificate requested (new). File attributes updated. changed: [managed-node2] => (item={u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } } MSG: Certificate requested (new). TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:138 Saturday 07 February 2026 07:39:30 -0500 (0:00:01.516) 0:00:21.317 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.052) 0:00:21.369 ***** skipping: [managed-node2] => (item=[u'cert', {u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'cert', {u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } ], "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:151 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.105) 0:00:21.475 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:155 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.044) 0:00:21.519 ***** skipping: [managed-node2] => (item=certid_mode) => { "ansible_loop_var": "cert_name", "cert_name": "certid_mode", "changed": false, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=mycert_fs_attrs_mode) => { "ansible_loop_var": "cert_name", "cert_name": "mycert_fs_attrs_mode", "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:169 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.053) 0:00:21.573 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.041) 0:00:21.615 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Create QEMU deployment during bootc end-to-end test] ********************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:85 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.039) 0:00:21.654 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Verify each fs_attrs_mode certificate] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:92 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.034) 0:00:21.689 ***** included: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 included: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Saturday 07 February 2026 07:39:30 -0500 (0:00:00.177) 0:00:21.866 ***** ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Saturday 07 February 2026 07:39:31 -0500 (0:00:00.066) 0:00:21.933 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Saturday 07 February 2026 07:39:31 -0500 (0:00:00.057) 0:00:21.991 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Saturday 07 February 2026 07:39:31 -0500 (0:00:00.046) 0:00:22.037 ***** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } lsrpackages: python2-cryptography TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Saturday 07 February 2026 07:39:31 -0500 (0:00:00.584) 0:00:22.622 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Saturday 07 February 2026 07:39:31 -0500 (0:00:00.041) 0:00:22.664 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467969.5818737, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "a19d205075493972f4ebb22e52c8e1c7988afa9c", "ctime": 1770467969.6178737, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 172749, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0620", "mtime": 1770467969.5778737, "nlink": 1, "path": "/etc/pki/tls/certs/mycert_fs_attrs_mode.crt", "pw_name": "ftp", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 14, "version": "406980024", "wgrp": true, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.300) 0:00:22.965 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.041) 0:00:23.006 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.047) 0:00:23.053 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.043) 0:00:23.097 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467969.537874, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "6c9dd9bcd6c3ddd6261aca15eb4f1d1716b87473", "ctime": 1770467969.6178737, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 172748, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0620", "mtime": 1770467969.5778737, "nlink": 1, "path": "/etc/pki/tls/private/mycert_fs_attrs_mode.key", "pw_name": "ftp", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1708, "uid": 14, "version": "406980011", "wgrp": true, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.305) 0:00:23.402 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.054) 0:00:23.457 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.063) 0:00:23.520 ***** ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "52:4D:72:74:0E:FE:85:CF:47:B8:A3:8F:30:35:3C:28:C7:FE:4D:4C" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "0C:49:02:B7:73:9D:CC:E0:D3:0E:88:51:60:74:81:0F:46:B6:F8:A3:A0:82:3D:85:54:65:57:D4:18:4A:25:3D:26:27:34:EC:C3:80:CE:BC:E8:78:C7:18:D4:9F:E0:89:F2:95:25:ED:D8:73:76:AA:35:BA:A4:11:38:E1:E9:73:D5:DA:E4:8E:C9:CC:60:0B:5A:FB:C2:F9:45:35:8C:FA:C8:E8:07:FD:5A:35:69:9B:F6:F2:60:B6:FC:B3:84:7B:05:03:9D:0E:2E:8E:F9:D4:C3:15:05:0F:58:59:77:1A:1E:37:01:BA:74:58:F4:E5:D8:D4:41:00:EC:38:56:71:7B:01:16:2B:4F:36:64:69:68:0C:68:77:AB:5F:75:8E:17:5A:6A:E0:A1:2A:56:72:5A:FF:B9:39:36:0C:E7:40:E9:F8:96:F3:14:13:BB:76:55:B5:37:FB:99:A5:FD:9E:72:62:DD:0B:C0:AB:4C:2F:59:07:D7:D7:F0:71:6F:1C:39:07:C6:79:F8:A2:F3:01:C9:A3:8F:CF:65:8C:6E:31:2A:D5:79:F3:D6:A1:B5:72:31:AF:CE:21:7B:EF:77:1E:4B:01:6D:90:7F:14:1E:57:0E:6F:DC:45:2F:0B:C5:E8:AA:91:18:B4:31:E2:54:AD:03:04:F7:18:88:B6:61:00" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123929Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Saturday 07 February 2026 07:39:32 -0500 (0:00:00.377) 0:00:23.898 ***** ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "52:4D:72:74:0E:FE:85:CF:47:B8:A3:8F:30:35:3C:28:C7:FE:4D:4C" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123929Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.053) 0:00:23.951 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.048) 0:00:23.999 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.044) 0:00:24.044 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.043) 0:00:24.087 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.048) 0:00:24.135 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.047) 0:00:24.183 ***** ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.043665", "end": "2026-02-07 07:39:33.561870", "rc": 0, "start": "2026-02-07 07:39:33.518205" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.362) 0:00:24.546 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.050) 0:00:24.596 ***** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Saturday 07 February 2026 07:39:33 -0500 (0:00:00.295) 0:00:24.892 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.048) 0:00:24.940 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.035) 0:00:24.975 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.035) 0:00:25.011 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.041) 0:00:25.052 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.043) 0:00:25.096 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.049) 0:00:25.146 ***** ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.044) 0:00:25.190 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.043) 0:00:25.234 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.051) 0:00:25.285 ***** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } lsrpackages: python2-cryptography TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.569) 0:00:25.854 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Saturday 07 February 2026 07:39:34 -0500 (0:00:00.039) 0:00:25.894 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467970.1678717, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "ab7f138721f2bf6d964df1968ebd23be90d58459", "ctime": 1770467970.1638718, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 172754, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1770467970.1638718, "nlink": 1, "path": "/etc/pki/tls/certs/certid_mode.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "406980062", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Saturday 07 February 2026 07:39:35 -0500 (0:00:00.333) 0:00:26.228 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Saturday 07 February 2026 07:39:35 -0500 (0:00:00.057) 0:00:26.286 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Saturday 07 February 2026 07:39:35 -0500 (0:00:00.065) 0:00:26.352 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Saturday 07 February 2026 07:39:35 -0500 (0:00:00.051) 0:00:26.403 ***** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1770467970.1238718, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "51bd2dc3a7105a51642d716686bf32dc43a274f3", "ctime": 1770467970.1638718, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 172750, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1770467970.1638718, "nlink": 1, "path": "/etc/pki/tls/private/certid_mode.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1704, "uid": 0, "version": "406980049", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Saturday 07 February 2026 07:39:35 -0500 (0:00:00.324) 0:00:26.728 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Saturday 07 February 2026 07:39:35 -0500 (0:00:00.049) 0:00:26.777 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Saturday 07 February 2026 07:39:35 -0500 (0:00:00.047) 0:00:26.824 ***** ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "B1:E9:75:D3:BE:DD:45:6D:D2:3D:D4:3C:24:AB:CE:43:48:66:77:75" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "5A:33:54:E2:AB:0F:BA:60:F6:7C:3B:2C:FB:89:73:07:97:6C:1A:81:BA:BA:83:6B:81:19:B2:FC:D8:C0:D6:B7:62:70:0E:78:E2:C3:5F:5A:3A:A3:26:9B:09:42:65:FA:93:B4:02:21:26:F3:83:10:70:82:02:E4:9B:48:27:22:06:AB:F2:06:7A:C2:CD:30:36:8A:A0:31:C1:A0:32:24:16:1E:9A:7B:C0:63:E8:86:DA:B5:84:81:C7:DB:1E:44:70:59:4D:53:E4:1A:77:E3:BE:8D:17:24:8B:9C:2B:F9:EC:DE:50:86:D5:90:21:A7:8C:CC:DA:78:6A:BB:9F:0E:1D:B9:EB:22:0A:2E:4F:4C:8F:8C:A9:DF:16:CB:14:E7:23:1B:16:DE:ED:56:05:F6:66:49:71:8F:5B:E6:37:89:8F:1B:69:8F:BB:26:B0:D0:70:0B:7A:13:F8:DE:C1:39:05:CF:4C:B8:C4:33:A8:90:8C:5A:06:93:DE:72:8B:C2:47:0A:DE:18:0A:60:3C:83:78:46:99:66:D4:B3:D6:CC:24:41:05:34:B6:C8:00:44:4D:F4:7A:68:77:38:D4:C6:69:2D:59:22:55:1E:47:30:74:0B:B2:A7:54:DA:08:28:BB:02:55:BF:C4:11:B7:D9:41:13:FC:6C:45:B3:93:7C" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123930Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.359) 0:00:27.183 ***** ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "35:9A:7E:39:DD:4B:49:FB:DD:34:47:A1:DC:F7:92:66:D0:F7:B4:4F" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "B1:E9:75:D3:BE:DD:45:6D:D2:3D:D4:3C:24:AB:CE:43:48:66:77:75" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270207123901Z", "not_valid_before": "20260207123930Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.043) 0:00:27.226 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.044) 0:00:27.271 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.043) 0:00:27.314 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.042) 0:00:27.356 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.047) 0:00:27.404 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.048) 0:00:27.452 ***** ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.045887", "end": "2026-02-07 07:39:36.874919", "rc": 0, "start": "2026-02-07 07:39:36.829032" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.408) 0:00:27.861 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Saturday 07 February 2026 07:39:36 -0500 (0:00:00.067) 0:00:27.928 ***** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Saturday 07 February 2026 07:39:37 -0500 (0:00:00.356) 0:00:28.284 ***** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Saturday 07 February 2026 07:39:37 -0500 (0:00:00.066) 0:00:28.351 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Saturday 07 February 2026 07:39:37 -0500 (0:00:00.052) 0:00:28.404 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Saturday 07 February 2026 07:39:37 -0500 (0:00:00.056) 0:00:28.460 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Saturday 07 February 2026 07:39:37 -0500 (0:00:00.055) 0:00:28.515 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Saturday 07 February 2026 07:39:37 -0500 (0:00:00.053) 0:00:28.569 ***** skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* managed-node2 : ok=107 changed=4 unreachable=0 failed=0 skipped=53 rescued=0 ignored=0 SYSTEM ROLES ERRORS BEGIN v1 [] SYSTEM ROLES ERRORS END v1 TASKS RECAP ******************************************************************** Saturday 07 February 2026 07:39:37 -0500 (0:00:00.049) 0:00:28.618 ***** =============================================================================== fedora.linux_system_roles.certificate : Ensure certificate requests ----- 1.52s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 fedora.linux_system_roles.certificate : Ensure certificate requests ----- 1.51s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 1.31s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 1.08s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 Gathering Facts --------------------------------------------------------- 0.81s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2 fedora.linux_system_roles.certificate : Ensure provider service is running --- 0.74s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 0.66s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 Ensure python2 is installed --------------------------------------------- 0.63s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Parse certificate ------------------------------------------------------- 0.59s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Ensure python2 is installed --------------------------------------------- 0.59s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Ensure user exists ------------------------------------------------------ 0.58s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:5 Ensure python2 is installed --------------------------------------------- 0.57s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Ensure python2 is installed --------------------------------------------- 0.57s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 0.57s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 Stat commands file ------------------------------------------------------ 0.55s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists --- 0.52s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25 Ensure group "somegroup" exists ----------------------------------------- 0.50s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:11 fedora.linux_system_roles.certificate : Run systemctl ------------------- 0.45s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:22 fedora.linux_system_roles.certificate : Ensure provider service is running --- 0.45s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 fedora.linux_system_roles.certificate : Check if system is ostree ------- 0.43s /tmp/collections-rKF/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10