ansible-playbook 2.9.27 config file = /etc/ansible/ansible.cfg configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 2.7.5 (default, Nov 14 2023, 16:14:06) [GCC 4.8.5 20150623 (Red Hat 4.8.5-44)] Using /etc/ansible/ansible.cfg as config file [WARNING]: running playbook inside collection fedora.linux_system_roles Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'jsonl', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: tests_fs_attrs.yml *************************************************** 1 plays in /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml PLAY [Ensure UID and GID exists] *********************************************** TASK [Gathering Facts] ********************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2 Wednesday 22 April 2026 14:05:11 -0400 (0:00:00.024) 0:00:00.024 ******* ok: [managed-node2] META: ran handlers TASK [Ensure ftp group exists] ************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:5 Wednesday 22 April 2026 14:05:12 -0400 (0:00:00.969) 0:00:00.993 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure ftp user exists] ************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:13 Wednesday 22 April 2026 14:05:12 -0400 (0:00:00.051) 0:00:01.045 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure user exists] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:22 Wednesday 22 April 2026 14:05:12 -0400 (0:00:00.047) 0:00:01.092 ******* changed: [managed-node2] => { "changed": true, "comment": "", "create_home": true, "group": 1040, "home": "/home/user1", "name": "user1", "shell": "/bin/bash", "state": "present", "system": false, "uid": 1040 } TASK [Ensure group "somegroup" exists] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:28 Wednesday 22 April 2026 14:05:13 -0400 (0:00:00.597) 0:00:01.689 ******* changed: [managed-node2] => { "changed": true, "gid": 1041, "name": "somegroup", "state": "present", "system": false } TASK [Issue certificate setting user/group] ************************************ task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:34 Wednesday 22 April 2026 14:05:13 -0400 (0:00:00.511) 0:00:02.201 ******* included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23 Wednesday 22 April 2026 14:05:13 -0400 (0:00:00.053) 0:00:02.255 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33 Wednesday 22 April 2026 14:05:13 -0400 (0:00:00.035) 0:00:02.291 ******* TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Wednesday 22 April 2026 14:05:14 -0400 (0:00:00.192) 0:00:02.483 ******* included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Wednesday 22 April 2026 14:05:14 -0400 (0:00:00.027) 0:00:02.510 ******* ok: [managed-node2] TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Wednesday 22 April 2026 14:05:14 -0400 (0:00:00.460) 0:00:02.971 ******* ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Wednesday 22 April 2026 14:05:15 -0400 (0:00:00.438) 0:00:03.410 ******* ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Wednesday 22 April 2026 14:05:15 -0400 (0:00:00.386) 0:00:03.796 ******* ok: [managed-node2] => { "ansible_facts": { "__certificate_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Wednesday 22 April 2026 14:05:15 -0400 (0:00:00.031) 0:00:03.827 ******* ok: [managed-node2] => { "changed": false, "cmd": [ "systemctl", "is-system-running" ], "delta": "0:00:00.007993", "end": "2026-04-22 14:05:15.861415", "failed_when_result": false, "rc": 0, "start": "2026-04-22 14:05:15.853422" } STDOUT: running TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Wednesday 22 April 2026 14:05:15 -0400 (0:00:00.393) 0:00:04.220 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Wednesday 22 April 2026 14:05:15 -0400 (0:00:00.025) 0:00:04.246 ******* ok: [managed-node2] => { "ansible_facts": { "__certificate_is_booted": true }, "changed": false } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Wednesday 22 April 2026 14:05:15 -0400 (0:00:00.024) 0:00:04.271 ******* skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_7.yml) => { "ansible_facts": { "__certificate_default_directory": "/etc/pki/tls", "__certificate_packages": [ "python-pyasn1", "python-cryptography", "python-dbus" ] }, "ansible_included_var_files": [ "/tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_7.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.yml" } skipping: [managed-node2] => (item=CentOS_7.9.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.9.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 Wednesday 22 April 2026 14:05:16 -0400 (0:00:00.056) 0:00:04.327 ******* ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-pyasn1-0.1.9-7.el7.noarch providing python-pyasn1 is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python-cryptography is already installed", "dbus-python-1.1.1-9.el7.x86_64 providing python-dbus is already installed" ] } TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 Wednesday 22 April 2026 14:05:17 -0400 (0:00:01.565) 0:00:05.893 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [ "certmonger-0.78.4-17.el7_9.x86_64 providing certmonger is already installed" ] } TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25 Wednesday 22 April 2026 14:05:18 -0400 (0:00:00.829) 0:00:06.723 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49 Wednesday 22 April 2026 14:05:18 -0400 (0:00:00.556) 0:00:07.279 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 Wednesday 22 April 2026 14:05:19 -0400 (0:00:00.337) 0:00:07.617 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Wed 2026-04-22 14:05:04 EDT", "ActiveEnterTimestampMonotonic": "213714097", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice basic.target systemd-journald.socket network.target dbus.service syslog.target", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Wed 2026-04-22 14:05:04 EDT", "AssertTimestampMonotonic": "213683020", "Before": "multi-user.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2026-04-22 14:05:04 EDT", "ConditionTimestampMonotonic": "213683018", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "EnvironmentFile": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "10007", "ExecMainStartTimestamp": "Wed 2026-04-22 14:05:04 EDT", "ExecMainStartTimestampMonotonic": "213683679", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /var/run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Wed 2026-04-22 14:05:04 EDT] ; stop_time=[n/a] ; pid=10007 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2026-04-22 14:05:04 EDT", "InactiveExitTimestampMonotonic": "213683714", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "29173", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "29173", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "10007", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PIDFile": "/var/run/certmonger.pid", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "WatchdogTimestamp": "Wed 2026-04-22 14:05:04 EDT", "WatchdogTimestampMonotonic": "213714045", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 Wednesday 22 April 2026 14:05:20 -0400 (0:00:01.035) 0:00:08.653 ******* changed: [managed-node2] => (item={u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } } MSG: Certificate requested (new). File attributes updated. changed: [managed-node2] => (item={u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } } MSG: Certificate requested (new). File attributes updated. TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:138 Wednesday 22 April 2026 14:05:21 -0400 (0:00:01.433) 0:00:10.087 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Wednesday 22 April 2026 14:05:21 -0400 (0:00:00.029) 0:00:10.116 ******* skipping: [managed-node2] => (item=[u'cert', {u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'cert', {u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'owner': u'ftp', u'ca': u'self-sign', u'group': u'ftp', u'name': u'mycert_fs_attrs', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "name": "mycert_fs_attrs", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'owner': 1040, u'ca': u'self-sign', u'group': 1041, u'name': u'certid', u'dns': u'www.example.com'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "group": 1041, "name": "certid", "owner": 1040 } ], "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:151 Wednesday 22 April 2026 14:05:21 -0400 (0:00:00.076) 0:00:10.193 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:155 Wednesday 22 April 2026 14:05:21 -0400 (0:00:00.023) 0:00:10.217 ******* skipping: [managed-node2] => (item=certid) => { "ansible_loop_var": "cert_name", "cert_name": "certid", "changed": false, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=mycert_fs_attrs) => { "ansible_loop_var": "cert_name", "cert_name": "mycert_fs_attrs", "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:169 Wednesday 22 April 2026 14:05:21 -0400 (0:00:00.035) 0:00:10.252 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Wednesday 22 April 2026 14:05:21 -0400 (0:00:00.028) 0:00:10.281 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:185 Wednesday 22 April 2026 14:05:21 -0400 (0:00:00.027) 0:00:10.308 ******* ok: [managed-node2] => { "changed": false } TASK [Load certificate role platform variables] ******************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:50 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.307) 0:00:10.616 ******* TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.044) 0:00:10.660 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.044) 0:00:10.704 ******* ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.299) 0:00:11.004 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.019) 0:00:11.023 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.019) 0:00:11.043 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.017) 0:00:11.060 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.026) 0:00:11.087 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.022) 0:00:11.110 ******* skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_7.yml) => { "ansible_facts": { "__certificate_default_directory": "/etc/pki/tls", "__certificate_packages": [ "python-pyasn1", "python-cryptography", "python-dbus" ] }, "ansible_included_var_files": [ "/tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_7.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.yml" } skipping: [managed-node2] => (item=CentOS_7.9.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.9.yml", "skip_reason": "Conditional result was False" } TASK [Verify each user/group certificate] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:56 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.054) 0:00:11.165 ******* included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.101) 0:00:11.267 ******* ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.020) 0:00:11.287 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Wednesday 22 April 2026 14:05:22 -0400 (0:00:00.018) 0:00:11.306 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Wednesday 22 April 2026 14:05:23 -0400 (0:00:00.018) 0:00:11.324 ******* ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Wednesday 22 April 2026 14:05:23 -0400 (0:00:00.852) 0:00:12.177 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Wednesday 22 April 2026 14:05:23 -0400 (0:00:00.028) 0:00:12.206 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881121.024972, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "2e97141408d7a04342ee879bfdb20988b52dbb54", "ctime": 1776881121.0739722, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 171877, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1776881121.019972, "nlink": 1, "path": "/etc/pki/tls/certs/mycert_fs_attrs.crt", "pw_name": "ftp", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1294, "uid": 14, "version": "18446744072518473511", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Wednesday 22 April 2026 14:05:24 -0400 (0:00:00.326) 0:00:12.532 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Wednesday 22 April 2026 14:05:24 -0400 (0:00:00.023) 0:00:12.556 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Wednesday 22 April 2026 14:05:24 -0400 (0:00:00.027) 0:00:12.583 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Wednesday 22 April 2026 14:05:24 -0400 (0:00:00.025) 0:00:12.608 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881120.9759717, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "2524ccae1aa9c5d0fd0023e434cdce7d9c52f464", "ctime": 1776881121.0739722, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 168506, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1776881121.019972, "nlink": 1, "path": "/etc/pki/tls/private/mycert_fs_attrs.key", "pw_name": "ftp", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1704, "uid": 14, "version": "18446744072518473498", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Wednesday 22 April 2026 14:05:24 -0400 (0:00:00.279) 0:00:12.888 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Wednesday 22 April 2026 14:05:24 -0400 (0:00:00.025) 0:00:12.913 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Wednesday 22 April 2026 14:05:24 -0400 (0:00:00.027) 0:00:12.940 ******* ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "6A:8D:18:40:2D:E0:4E:AB:19:EA:4D:3D:D3:21:D4:2D:35:2F:DC:E1" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180521Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.489) 0:00:13.429 ******* ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "6A:8D:18:40:2D:E0:4E:AB:19:EA:4D:3D:D3:21:D4:2D:35:2F:DC:E1" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "18:20:F9:0D:55:C0:E9:24:94:4C:20:8E:CC:EE:5A:F8:35:CF:30:97:BF:A1:2D:CC:83:8B:9F:65:06:75:BD:F1:83:E3:CE:81:29:AF:76:CC:E4:F1:02:AB:29:FC:78:22:30:F5:C1:1E:41:12:61:9F:B6:21:66:3F:AD:0B:CC:43:71:40:AC:B8:E3:D4:E8:29:47:C5:F6:6C:A0:3C:33:56:D3:AE:3C:6D:AA:0A:65:37:60:45:83:B6:86:0E:FA:21:56:6B:F6:00:B1:31:2A:5D:F3:DE:97:C5:95:D4:E1:FE:DD:BA:CD:A0:AA:7B:E7:A5:1C:53:80:85:81:4A:C8:95:CE:68:B3:A7:7E:A8:9A:C2:88:D3:63:2F:E7:EA:BA:D0:5D:80:0F:91:15:6C:6B:E2:0F:9C:D2:0F:4F:50:C0:8F:CF:A2:42:5C:D0:17:70:A5:F7:62:00:A9:89:6D:20:09:C5:78:55:80:51:DC:13:02:03:14:D1:0D:DC:47:71:8B:E1:24:F5:AC:E4:00:AE:7A:B2:14:E3:2C:86:00:F7:90:47:0D:A7:3A:E1:00:21:CF:07:59:D9:5B:08:6D:FC:B9:87:D8:1C:AE:EA:5E:75:AC:2D:61:AA:F5:04:47:24:62:ED:22:5C:25:D1:4F:E1:41:81:63:07:A7:F2:89:65:1D" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180521Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.025) 0:00:13.455 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.027) 0:00:13.483 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.024) 0:00:13.507 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.025) 0:00:13.533 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.031) 0:00:13.564 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.030) 0:00:13.595 ******* ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.040418", "end": "2026-04-22 14:05:25.565473", "rc": 0, "start": "2026-04-22 14:05:25.525055" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.341) 0:00:13.936 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.039) 0:00:13.975 ******* ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.291) 0:00:14.267 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.026) 0:00:14.293 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Wednesday 22 April 2026 14:05:25 -0400 (0:00:00.020) 0:00:14.314 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.020) 0:00:14.334 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.018) 0:00:14.353 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.016) 0:00:14.369 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.015) 0:00:14.384 ******* ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.018) 0:00:14.403 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.018) 0:00:14.422 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.018) 0:00:14.440 ******* ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Wednesday 22 April 2026 14:05:26 -0400 (0:00:00.860) 0:00:15.301 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.022) 0:00:15.323 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881121.6489754, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "310070e2d66bfaea70c37f8e899eff2158d93309", "ctime": 1776881121.7069757, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 1041, "gr_name": "somegroup", "inode": 172747, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1776881121.6449754, "nlink": 1, "path": "/etc/pki/tls/certs/certid.crt", "pw_name": "user1", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1294, "uid": 1040, "version": "18446744072518473550", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.297) 0:00:15.621 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.032) 0:00:15.654 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.040) 0:00:15.695 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.033) 0:00:15.728 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881121.6039753, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "387a584ba9c317746255043c86809dfbe5d891ce", "ctime": 1776881121.7069757, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 1041, "gr_name": "somegroup", "inode": 172745, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0640", "mtime": 1776881121.6449754, "nlink": 1, "path": "/etc/pki/tls/private/certid.key", "pw_name": "user1", "readable": true, "rgrp": true, "roth": false, "rusr": true, "size": 1704, "uid": 1040, "version": "18446744072518473537", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.343) 0:00:16.072 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.035) 0:00:16.107 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Wednesday 22 April 2026 14:05:27 -0400 (0:00:00.043) 0:00:16.151 ******* ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "51:0B:4C:45:53:DD:B9:F4:BA:61:49:4D:03:02:4D:44:20:8D:BD:00" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "1E:56:A5:4A:52:CF:20:15:4F:89:59:DC:D3:B3:02:5F:98:5C:BF:90:5F:5A:74:A3:3C:A0:6C:09:AB:31:8F:C0:EF:45:22:4E:1C:9D:61:37:DD:2D:C5:AB:19:46:A5:5B:E6:AE:78:66:B7:B0:28:4F:E2:72:17:6B:72:81:5F:72:3C:CE:0F:AE:01:5F:50:BF:FC:F9:BB:EC:A6:83:26:98:F9:3A:59:F3:5C:48:25:A5:68:DF:30:FC:29:40:A1:09:EA:48:C2:8F:D5:54:D9:CC:4F:C5:8A:40:00:67:C2:F6:3B:3F:62:3B:17:96:3F:E5:40:4A:50:B3:F5:80:32:24:8B:FE:97:EA:CD:45:85:C3:60:05:10:15:FD:11:1C:DE:26:4F:06:F5:09:1A:7B:DD:10:85:F8:A4:30:61:96:5A:3F:07:79:43:E3:41:18:7E:C5:B5:4A:5C:F0:DF:F4:72:FB:9F:11:46:76:C6:10:EF:5D:C2:23:B0:5D:BF:8A:F3:F2:FA:6F:B5:03:F9:1D:E0:6C:46:5A:E8:9A:87:76:24:57:E6:67:16:02:B3:5F:2B:0A:8C:08:E5:05:2A:7A:55:79:EF:F1:7C:66:27:C9:92:A8:7D:E8:D5:75:3C:15:20:27:04:1A:FB:0E:39:B5:92:0E:33:65:C3:AB:D5:D6:FC" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180521Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.411) 0:00:16.562 ******* ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "51:0B:4C:45:53:DD:B9:F4:BA:61:49:4D:03:02:4D:44:20:8D:BD:00" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "1E:56:A5:4A:52:CF:20:15:4F:89:59:DC:D3:B3:02:5F:98:5C:BF:90:5F:5A:74:A3:3C:A0:6C:09:AB:31:8F:C0:EF:45:22:4E:1C:9D:61:37:DD:2D:C5:AB:19:46:A5:5B:E6:AE:78:66:B7:B0:28:4F:E2:72:17:6B:72:81:5F:72:3C:CE:0F:AE:01:5F:50:BF:FC:F9:BB:EC:A6:83:26:98:F9:3A:59:F3:5C:48:25:A5:68:DF:30:FC:29:40:A1:09:EA:48:C2:8F:D5:54:D9:CC:4F:C5:8A:40:00:67:C2:F6:3B:3F:62:3B:17:96:3F:E5:40:4A:50:B3:F5:80:32:24:8B:FE:97:EA:CD:45:85:C3:60:05:10:15:FD:11:1C:DE:26:4F:06:F5:09:1A:7B:DD:10:85:F8:A4:30:61:96:5A:3F:07:79:43:E3:41:18:7E:C5:B5:4A:5C:F0:DF:F4:72:FB:9F:11:46:76:C6:10:EF:5D:C2:23:B0:5D:BF:8A:F3:F2:FA:6F:B5:03:F9:1D:E0:6C:46:5A:E8:9A:87:76:24:57:E6:67:16:02:B3:5F:2B:0A:8C:08:E5:05:2A:7A:55:79:EF:F1:7C:66:27:C9:92:A8:7D:E8:D5:75:3C:15:20:27:04:1A:FB:0E:39:B5:92:0E:33:65:C3:AB:D5:D6:FC" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180521Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.035) 0:00:16.597 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.039) 0:00:16.637 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.030) 0:00:16.668 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.034) 0:00:16.703 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.043) 0:00:16.746 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.041) 0:00:16.787 ******* ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.042054", "end": "2026-04-22 14:05:28.752959", "rc": 0, "start": "2026-04-22 14:05:28.710905" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.334) 0:00:17.121 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Wednesday 22 April 2026 14:05:28 -0400 (0:00:00.052) 0:00:17.174 ******* ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.340) 0:00:17.515 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.031) 0:00:17.547 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.023) 0:00:17.570 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.023) 0:00:17.593 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.024) 0:00:17.618 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.022) 0:00:17.640 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Issue certificate setting user/group/mode] ******************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:88 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.022) 0:00:17.662 ******* included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.104) 0:00:17.767 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.037) 0:00:17.804 ******* TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.044) 0:00:17.849 ******* included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Wednesday 22 April 2026 14:05:29 -0400 (0:00:00.078) 0:00:17.927 ******* ok: [managed-node2] TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.474) 0:00:18.401 ******* ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.295) 0:00:18.697 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.025) 0:00:18.722 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.026) 0:00:18.749 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.026) 0:00:18.775 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.023) 0:00:18.799 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.024) 0:00:18.823 ******* skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_7.yml) => { "ansible_facts": { "__certificate_default_directory": "/etc/pki/tls", "__certificate_packages": [ "python-pyasn1", "python-cryptography", "python-dbus" ] }, "ansible_included_var_files": [ "/tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_7.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.yml" } skipping: [managed-node2] => (item=CentOS_7.9.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_7.9.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 Wednesday 22 April 2026 14:05:30 -0400 (0:00:00.072) 0:00:18.896 ******* ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-pyasn1-0.1.9-7.el7.noarch providing python-pyasn1 is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python-cryptography is already installed", "dbus-python-1.1.1-9.el7.x86_64 providing python-dbus is already installed" ] } TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 Wednesday 22 April 2026 14:05:31 -0400 (0:00:01.390) 0:00:20.287 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [ "certmonger-0.78.4-17.el7_9.x86_64 providing certmonger is already installed" ] } TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25 Wednesday 22 April 2026 14:05:32 -0400 (0:00:00.856) 0:00:21.143 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49 Wednesday 22 April 2026 14:05:33 -0400 (0:00:00.315) 0:00:21.459 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 4096, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 Wednesday 22 April 2026 14:05:33 -0400 (0:00:00.298) 0:00:21.757 ******* ok: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Wed 2026-04-22 14:05:04 EDT", "ActiveEnterTimestampMonotonic": "213714097", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice basic.target systemd-journald.socket network.target dbus.service syslog.target", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Wed 2026-04-22 14:05:04 EDT", "AssertTimestampMonotonic": "213683020", "Before": "multi-user.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2026-04-22 14:05:04 EDT", "ConditionTimestampMonotonic": "213683018", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "EnvironmentFile": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "10007", "ExecMainStartTimestamp": "Wed 2026-04-22 14:05:04 EDT", "ExecMainStartTimestampMonotonic": "213683679", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /var/run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Wed 2026-04-22 14:05:04 EDT] ; stop_time=[n/a] ; pid=10007 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2026-04-22 14:05:04 EDT", "InactiveExitTimestampMonotonic": "213683714", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "29173", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "29173", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "10007", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PIDFile": "/var/run/certmonger.pid", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "WatchdogTimestamp": "Wed 2026-04-22 14:05:04 EDT", "WatchdogTimestampMonotonic": "213714045", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 Wednesday 22 April 2026 14:05:34 -0400 (0:00:00.646) 0:00:22.403 ******* changed: [managed-node2] => (item={u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } } MSG: Certificate requested (new). File attributes updated. changed: [managed-node2] => (item={u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } } MSG: Certificate requested (new). TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:138 Wednesday 22 April 2026 14:05:35 -0400 (0:00:01.434) 0:00:23.838 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Wednesday 22 April 2026 14:05:35 -0400 (0:00:00.029) 0:00:23.868 ******* skipping: [managed-node2] => (item=[u'cert', {u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'cert', {u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "cert", { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'key', {u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "key", { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'group': u'ftp', u'name': u'mycert_fs_attrs_mode', u'dns': u'www.example.com', u'owner': u'ftp', u'ca': u'self-sign', u'mode': u'0620'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "group": "ftp", "mode": "0620", "name": "mycert_fs_attrs_mode", "owner": "ftp" } ], "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=[u'ca', {u'ca': u'self-sign', u'name': u'certid_mode', u'dns': u'www.example.com', u'mode': u'0o600'}]) => { "ansible_loop_var": "item", "changed": false, "item": [ "ca", { "ca": "self-sign", "dns": "www.example.com", "mode": "0o600", "name": "certid_mode" } ], "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:151 Wednesday 22 April 2026 14:05:35 -0400 (0:00:00.079) 0:00:23.947 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:155 Wednesday 22 April 2026 14:05:35 -0400 (0:00:00.028) 0:00:23.975 ******* skipping: [managed-node2] => (item=certid_mode) => { "ansible_loop_var": "cert_name", "cert_name": "certid_mode", "changed": false, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=mycert_fs_attrs_mode) => { "ansible_loop_var": "cert_name", "cert_name": "mycert_fs_attrs_mode", "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:169 Wednesday 22 April 2026 14:05:35 -0400 (0:00:00.038) 0:00:24.014 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Wednesday 22 April 2026 14:05:35 -0400 (0:00:00.030) 0:00:24.045 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] *** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:185 Wednesday 22 April 2026 14:05:35 -0400 (0:00:00.027) 0:00:24.073 ******* ok: [managed-node2] => { "changed": false } TASK [Create QEMU deployment during bootc end-to-end test] ********************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:106 Wednesday 22 April 2026 14:05:36 -0400 (0:00:00.297) 0:00:24.370 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Verify each fs_attrs_mode certificate] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:113 Wednesday 22 April 2026 14:05:36 -0400 (0:00:00.030) 0:00:24.401 ******* included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 included: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Wednesday 22 April 2026 14:05:36 -0400 (0:00:00.150) 0:00:24.551 ******* ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Wednesday 22 April 2026 14:05:36 -0400 (0:00:00.029) 0:00:24.581 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Wednesday 22 April 2026 14:05:36 -0400 (0:00:00.025) 0:00:24.607 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Wednesday 22 April 2026 14:05:36 -0400 (0:00:00.025) 0:00:24.632 ******* ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Wednesday 22 April 2026 14:05:37 -0400 (0:00:00.859) 0:00:25.491 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Wednesday 22 April 2026 14:05:37 -0400 (0:00:00.032) 0:00:25.524 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881134.5900464, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "aa2ab1380a3eb1082b49071c88d2027d46d23216", "ctime": 1776881134.7280471, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 172749, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0620", "mtime": 1776881134.5860465, "nlink": 1, "path": "/etc/pki/tls/certs/mycert_fs_attrs_mode.crt", "pw_name": "ftp", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 14, "version": "18446744072518473716", "wgrp": true, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Wednesday 22 April 2026 14:05:37 -0400 (0:00:00.360) 0:00:25.884 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Wednesday 22 April 2026 14:05:37 -0400 (0:00:00.038) 0:00:25.922 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Wednesday 22 April 2026 14:05:37 -0400 (0:00:00.062) 0:00:25.985 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Wednesday 22 April 2026 14:05:37 -0400 (0:00:00.043) 0:00:26.028 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881134.545046, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "6c03ec173abf47d7b299f9d3eb7c8cecc76c4823", "ctime": 1776881134.729047, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 50, "gr_name": "ftp", "inode": 172748, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0620", "mtime": 1776881134.5860465, "nlink": 1, "path": "/etc/pki/tls/private/mycert_fs_attrs_mode.key", "pw_name": "ftp", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1704, "uid": 14, "version": "18446744072518473703", "wgrp": true, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.378) 0:00:26.407 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.031) 0:00:26.439 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.033) 0:00:26.473 ******* ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "86:95:AA:6A:A6:46:55:16:C3:47:85:B9:D5:08:E6:3C:29:42:A9:6B" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180534Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.353) 0:00:26.826 ******* ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "86:95:AA:6A:A6:46:55:16:C3:47:85:B9:D5:08:E6:3C:29:42:A9:6B" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "99:39:32:23:C0:00:B6:67:39:62:30:99:F2:C0:1E:9F:F5:FB:CF:EF:F7:C7:D1:7F:8A:32:46:CB:54:36:46:27:65:E2:1C:35:EF:A5:39:06:32:34:0E:0C:C6:8F:C5:F2:D5:F3:F6:42:9B:68:43:1D:8D:9A:14:5C:F3:4F:07:9C:ED:D8:97:72:F0:28:E5:CA:6F:16:7D:98:37:07:F5:37:4E:96:41:99:FA:80:A1:49:35:46:C0:53:36:93:B7:55:2F:3F:50:37:96:DA:D9:1C:FE:37:52:D7:08:2C:E4:53:9F:09:BC:41:54:E3:BD:F9:9C:08:B6:F7:41:68:F0:0F:6F:16:8B:AA:18:48:9C:3C:0E:2C:E6:16:D7:F8:61:8A:50:92:6A:88:25:3A:85:12:01:7E:3E:D1:90:C2:89:C6:4D:AD:D9:1C:63:8C:B6:A4:4F:2E:D7:FE:30:E1:13:54:B5:18:08:78:69:E8:B1:B0:29:C9:89:84:F3:C0:45:1C:EF:3F:59:8F:05:C8:7A:E7:15:76:06:D6:08:12:12:20:74:62:DA:63:F5:A9:E7:02:3F:BB:21:C1:BF:7E:31:56:60:46:17:8B:A7:53:F7:62:77:EC:BB:D0:0A:42:B9:F6:DB:13:83:83:3A:2B:44:42:84:1A:60:00:4B:CC:0F:21" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180534Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.038) 0:00:26.865 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.038) 0:00:26.903 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.040) 0:00:26.944 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.036) 0:00:26.981 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.041) 0:00:27.023 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Wednesday 22 April 2026 14:05:38 -0400 (0:00:00.042) 0:00:27.066 ******* ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.044804", "end": "2026-04-22 14:05:39.080127", "rc": 0, "start": "2026-04-22 14:05:39.035323" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.373) 0:00:27.439 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.027) 0:00:27.467 ******* ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.299) 0:00:27.766 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.034) 0:00:27.801 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.022) 0:00:27.823 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.020) 0:00:27.844 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.023) 0:00:27.867 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.016) 0:00:27.884 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set virtualenv_path] ***************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.017) 0:00:27.901 ******* ok: [managed-node2] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.030) 0:00:27.932 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.018) 0:00:27.950 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Ensure python2 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Wednesday 22 April 2026 14:05:39 -0400 (0:00:00.025) 0:00:27.975 ******* ok: [managed-node2] => { "changed": false, "rc": 0, "results": [ "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed", "python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed" ] } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 Wednesday 22 April 2026 14:05:40 -0400 (0:00:00.887) 0:00:28.863 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41 Wednesday 22 April 2026 14:05:40 -0400 (0:00:00.028) 0:00:28.891 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881135.3660507, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "e74a8a001cca75d90a864f7e937424c18710c67d", "ctime": 1776881135.3620505, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 172754, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1776881135.3620505, "nlink": 1, "path": "/etc/pki/tls/certs/certid_mode.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "18446744072518473754", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46 Wednesday 22 April 2026 14:05:40 -0400 (0:00:00.314) 0:00:29.206 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52 Wednesday 22 April 2026 14:05:40 -0400 (0:00:00.035) 0:00:29.241 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62 Wednesday 22 April 2026 14:05:40 -0400 (0:00:00.041) 0:00:29.282 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.037) 0:00:29.320 ******* ok: [managed-node2] => { "changed": false, "stat": { "atime": 1776881135.3230505, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "82149858526ede996e183e9de055d18875ecd114", "ctime": 1776881135.3620505, "dev": 51713, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 172750, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1776881135.3620505, "nlink": 1, "path": "/etc/pki/tls/private/certid_mode.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1704, "uid": 0, "version": "18446744072518473741", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.334) 0:00:29.654 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.023) 0:00:29.678 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.029) 0:00:29.707 ******* ok: [managed-node2] => { "certificate": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "0D:D4:D0:AD:40:BD:CD:24:E2:F6:22:73:34:1D:74:0D:5D:D0:4A:E6" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180535Z" } }, "changed": false } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.346) 0:00:30.054 ******* ok: [managed-node2] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "1F:D8:5C:2F:3D:39:07:8A:65:FA:0B:91:CF:81:7E:0F:CA:CF:F4:84" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "key_encipherment", "digital_signature" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "0D:D4:D0:AD:40:BD:CD:24:E2:F6:22:73:34:1D:74:0D:5D:D0:4A:E6" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "20270422180504Z", "not_valid_before": "20260422180535Z" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.025) 0:00:30.080 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.025) 0:00:30.106 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.023) 0:00:30.129 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.024) 0:00:30.154 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.030) 0:00:30.184 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146 Wednesday 22 April 2026 14:05:41 -0400 (0:00:00.029) 0:00:30.214 ******* ok: [managed-node2] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.045506", "end": "2026-04-22 14:05:42.217611", "rc": 0, "start": "2026-04-22 14:05:42.172105" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.363) 0:00:30.577 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.025) 0:00:30.603 ******* ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [Assert that commands file got removed] *********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.291) 0:00:30.895 ******* ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Stat first-boot unit file] *********************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.022) 0:00:30.918 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert presence of first-boot unit] ************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.016) 0:00:30.935 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that first-boot unit is enabled] ********************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.014) 0:00:30.950 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Stat commands file] ****************************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.015) 0:00:30.965 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert that commands file exists] **************************************** task path: /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198 Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.015) 0:00:30.981 ******* skipping: [managed-node2] => { "changed": false, "skip_reason": "Conditional result was False" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* managed-node2 : ok=117 changed=4 unreachable=0 failed=0 skipped=61 rescued=0 ignored=0 SYSTEM ROLES ERRORS BEGIN v1 [] SYSTEM ROLES ERRORS END v1 TASKS RECAP ******************************************************************** Wednesday 22 April 2026 14:05:42 -0400 (0:00:00.013) 0:00:30.994 ******* =============================================================================== fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 2.96s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 fedora.linux_system_roles.certificate : Ensure certificate requests ----- 2.87s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 1.69s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 fedora.linux_system_roles.certificate : Ensure provider service is running --- 1.68s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 Gathering Facts --------------------------------------------------------- 0.97s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2 Ensure python2 is installed --------------------------------------------- 0.89s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists --- 0.87s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25 Ensure python2 is installed --------------------------------------------- 0.86s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Ensure python2 is installed --------------------------------------------- 0.86s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 Ensure python2 is installed --------------------------------------------- 0.85s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21 fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists --- 0.64s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49 fedora.linux_system_roles.certificate : Record role success fingerprint --- 0.60s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:185 Ensure user exists ------------------------------------------------------ 0.60s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:22 Ensure group "somegroup" exists ----------------------------------------- 0.51s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:28 Parse certificate ------------------------------------------------------- 0.49s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.47s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.46s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Record role begin fingerprint --- 0.44s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Parse certificate ------------------------------------------------------- 0.41s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 fedora.linux_system_roles.certificate : Run systemctl ------------------- 0.39s /tmp/collections-RTj/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28