ansible-playbook [core 2.17.14]
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
  ansible collection location = /tmp/collections-4Ed
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.12.12 (main, Mar  9 2026, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-14)] (/usr/bin/python3.12)
  jinja version = 3.1.6
  libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'jsonl', as we already have a stdout callback.
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.

PLAYBOOK: tests_fs_attrs.yml ***************************************************
1 plays in /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml

PLAY [Ensure UID and GID exists] ***********************************************

TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2
Wednesday 22 April 2026  17:48:54 -0400 (0:00:00.018)       0:00:00.018 ******* 
[WARNING]: Platform linux on host managed-node2 is using the discovered Python
interpreter at /usr/bin/python3.9, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [managed-node2]

TASK [Ensure ftp group exists] *************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:5
Wednesday 22 April 2026  17:48:55 -0400 (0:00:01.168)       0:00:01.186 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_facts['os_family'] == 'Suse'",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure ftp user exists] **************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:13
Wednesday 22 April 2026  17:48:55 -0400 (0:00:00.037)       0:00:01.223 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_facts['os_family'] == 'Suse'",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure user exists] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:22
Wednesday 22 April 2026  17:48:55 -0400 (0:00:00.034)       0:00:01.258 ******* 
changed: [managed-node2] => {
    "changed": true,
    "comment": "",
    "create_home": true,
    "group": 1040,
    "home": "/home/user1",
    "name": "user1",
    "shell": "/bin/bash",
    "state": "present",
    "system": false,
    "uid": 1040
}

TASK [Ensure group "somegroup" exists] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:28
Wednesday 22 April 2026  17:48:56 -0400 (0:00:00.589)       0:00:01.848 ******* 
changed: [managed-node2] => {
    "changed": true,
    "gid": 1041,
    "name": "somegroup",
    "state": "present",
    "system": false
}

TASK [Issue certificate setting user/group] ************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:34
Wednesday 22 April 2026  17:48:56 -0400 (0:00:00.472)       0:00:02.320 ******* 
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2

TASK [Clear facts] *************************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:9
Wednesday 22 April 2026  17:48:56 -0400 (0:00:00.034)       0:00:02.355 ******* 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23
Wednesday 22 April 2026  17:48:56 -0400 (0:00:00.000)       0:00:02.355 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33
Wednesday 22 April 2026  17:48:56 -0400 (0:00:00.013)       0:00:02.369 ******* 
included: fedora.linux_system_roles.certificate for managed-node2

TASK [fedora.linux_system_roles.certificate : Set version specific variables] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2
Wednesday 22 April 2026  17:48:56 -0400 (0:00:00.063)       0:00:02.433 ******* 
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2

TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Wednesday 22 April 2026  17:48:56 -0400 (0:00:00.017)       0:00:02.450 ******* 
ok: [managed-node2]

TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7
Wednesday 22 April 2026  17:48:57 -0400 (0:00:00.560)       0:00:03.010 ******* 
ok: [managed-node2] => {
    "changed": false
}

TASK [fedora.linux_system_roles.certificate : Check if system is ostree] *******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16
Wednesday 22 April 2026  17:48:57 -0400 (0:00:00.406)       0:00:03.417 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21
Wednesday 22 April 2026  17:48:58 -0400 (0:00:00.427)       0:00:03.844 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "__certificate_is_ostree": false
    },
    "changed": false
}

TASK [fedora.linux_system_roles.certificate : Run systemctl] *******************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28
Wednesday 22 April 2026  17:48:58 -0400 (0:00:00.027)       0:00:03.872 ******* 
ok: [managed-node2] => {
    "changed": false,
    "cmd": [
        "systemctl",
        "is-system-running"
    ],
    "delta": "0:00:00.008990",
    "end": "2026-04-22 17:48:58.471010",
    "failed_when_result": false,
    "rc": 0,
    "start": "2026-04-22 17:48:58.462020"
}

STDOUT:

running

TASK [fedora.linux_system_roles.certificate : Require installed systemd] *******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36
Wednesday 22 April 2026  17:48:58 -0400 (0:00:00.439)       0:00:04.312 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "\"No such file or directory\" in __is_system_running.msg | d(\"\")",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41
Wednesday 22 April 2026  17:48:58 -0400 (0:00:00.019)       0:00:04.331 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "__certificate_is_booted": true
    },
    "changed": false
}

TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46
Wednesday 22 April 2026  17:48:58 -0400 (0:00:00.019)       0:00:04.350 ******* 
skipping: [managed-node2] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
ok: [managed-node2] => (item=CentOS_9.yml) => {
    "ansible_facts": {
        "__certificate_certmonger_packages": [
            "certmonger",
            "python3-packaging"
        ]
    },
    "ansible_included_var_files": [
        "/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_9.yml"
}
ok: [managed-node2] => (item=CentOS_9.yml) => {
    "ansible_facts": {
        "__certificate_certmonger_packages": [
            "certmonger",
            "python3-packaging"
        ]
    },
    "ansible_included_var_files": [
        "/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_9.yml"
}

TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Wednesday 22 April 2026  17:48:58 -0400 (0:00:00.033)       0:00:04.384 ******* 
ok: [managed-node2] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15
Wednesday 22 April 2026  17:48:59 -0400 (0:00:01.402)       0:00:05.786 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25
Wednesday 22 April 2026  17:49:01 -0400 (0:00:01.307)       0:00:07.094 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/etc/certmonger//pre-scripts",
    "secontext": "unconfined_u:object_r:etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49
Wednesday 22 April 2026  17:49:01 -0400 (0:00:00.462)       0:00:07.557 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/etc/certmonger//post-scripts",
    "secontext": "unconfined_u:object_r:etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76
Wednesday 22 April 2026  17:49:02 -0400 (0:00:00.384)       0:00:07.941 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "enabled": true,
    "name": "certmonger",
    "state": "started",
    "status": {
        "AccessSELinuxContext": "system_u:object_r:certmonger_unit_file_t:s0",
        "ActiveEnterTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "ActiveEnterTimestampMonotonic": "154310813",
        "ActiveExitTimestampMonotonic": "0",
        "ActiveState": "active",
        "After": "dbus-broker.service systemd-journald.socket dbus.socket system.slice sysinit.target network.target syslog.target basic.target",
        "AllowIsolate": "no",
        "AssertResult": "yes",
        "AssertTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "AssertTimestampMonotonic": "154295783",
        "Before": "multi-user.target shutdown.target",
        "BlockIOAccounting": "no",
        "BlockIOWeight": "[not set]",
        "BusName": "org.fedorahosted.certmonger",
        "CPUAccounting": "yes",
        "CPUAffinityFromNUMA": "no",
        "CPUQuotaPerSecUSec": "infinity",
        "CPUQuotaPeriodUSec": "infinity",
        "CPUSchedulingPolicy": "0",
        "CPUSchedulingPriority": "0",
        "CPUSchedulingResetOnFork": "no",
        "CPUShares": "[not set]",
        "CPUUsageNSec": "490650000",
        "CPUWeight": "[not set]",
        "CacheDirectoryMode": "0755",
        "CanFreeze": "yes",
        "CanIsolate": "no",
        "CanReload": "no",
        "CanStart": "yes",
        "CanStop": "yes",
        "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
        "CleanResult": "success",
        "CollectMode": "inactive",
        "ConditionResult": "yes",
        "ConditionTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "ConditionTimestampMonotonic": "154295780",
        "ConfigurationDirectoryMode": "0755",
        "Conflicts": "shutdown.target",
        "ControlGroup": "/system.slice/certmonger.service",
        "ControlGroupId": "4195",
        "ControlPID": "0",
        "CoredumpFilter": "0x33",
        "DefaultDependencies": "yes",
        "DefaultMemoryLow": "0",
        "DefaultMemoryMin": "0",
        "Delegate": "no",
        "Description": "Certificate monitoring and PKI enrollment",
        "DevicePolicy": "auto",
        "DynamicUser": "no",
        "EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
        "ExecMainCode": "0",
        "ExecMainExitTimestampMonotonic": "0",
        "ExecMainPID": "10951",
        "ExecMainStartTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "ExecMainStartTimestampMonotonic": "154302676",
        "ExecMainStatus": "0",
        "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Wed 2026-04-22 17:48:46 EDT] ; stop_time=[n/a] ; pid=10951 ; code=(null) ; status=0/0 }",
        "ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[Wed 2026-04-22 17:48:46 EDT] ; stop_time=[n/a] ; pid=10951 ; code=(null) ; status=0/0 }",
        "ExitType": "main",
        "FailureAction": "none",
        "FileDescriptorStoreMax": "0",
        "FinalKillSignal": "9",
        "FragmentPath": "/usr/lib/systemd/system/certmonger.service",
        "FreezerState": "running",
        "GID": "[not set]",
        "GuessMainPID": "yes",
        "IOAccounting": "no",
        "IOReadBytes": "18446744073709551615",
        "IOReadOperations": "18446744073709551615",
        "IOSchedulingClass": "2",
        "IOSchedulingPriority": "4",
        "IOWeight": "[not set]",
        "IOWriteBytes": "18446744073709551615",
        "IOWriteOperations": "18446744073709551615",
        "IPAccounting": "no",
        "IPEgressBytes": "[no data]",
        "IPEgressPackets": "[no data]",
        "IPIngressBytes": "[no data]",
        "IPIngressPackets": "[no data]",
        "Id": "certmonger.service",
        "IgnoreOnIsolate": "no",
        "IgnoreSIGPIPE": "yes",
        "InactiveEnterTimestampMonotonic": "0",
        "InactiveExitTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "InactiveExitTimestampMonotonic": "154302968",
        "InvocationID": "d698fc5228cf4a6c8f861aeec46c179e",
        "JobRunningTimeoutUSec": "infinity",
        "JobTimeoutAction": "none",
        "JobTimeoutUSec": "infinity",
        "KeyringMode": "private",
        "KillMode": "control-group",
        "KillSignal": "15",
        "LimitAS": "infinity",
        "LimitASSoft": "infinity",
        "LimitCORE": "infinity",
        "LimitCORESoft": "infinity",
        "LimitCPU": "infinity",
        "LimitCPUSoft": "infinity",
        "LimitDATA": "infinity",
        "LimitDATASoft": "infinity",
        "LimitFSIZE": "infinity",
        "LimitFSIZESoft": "infinity",
        "LimitLOCKS": "infinity",
        "LimitLOCKSSoft": "infinity",
        "LimitMEMLOCK": "8388608",
        "LimitMEMLOCKSoft": "8388608",
        "LimitMSGQUEUE": "819200",
        "LimitMSGQUEUESoft": "819200",
        "LimitNICE": "0",
        "LimitNICESoft": "0",
        "LimitNOFILE": "524288",
        "LimitNOFILESoft": "1024",
        "LimitNPROC": "13598",
        "LimitNPROCSoft": "13598",
        "LimitRSS": "infinity",
        "LimitRSSSoft": "infinity",
        "LimitRTPRIO": "0",
        "LimitRTPRIOSoft": "0",
        "LimitRTTIME": "infinity",
        "LimitRTTIMESoft": "infinity",
        "LimitSIGPENDING": "13598",
        "LimitSIGPENDINGSoft": "13598",
        "LimitSTACK": "infinity",
        "LimitSTACKSoft": "8388608",
        "LoadState": "loaded",
        "LockPersonality": "no",
        "LogLevelMax": "-1",
        "LogRateLimitBurst": "0",
        "LogRateLimitIntervalUSec": "0",
        "LogsDirectoryMode": "0755",
        "MainPID": "10951",
        "ManagedOOMMemoryPressure": "auto",
        "ManagedOOMMemoryPressureLimit": "0",
        "ManagedOOMPreference": "none",
        "ManagedOOMSwap": "auto",
        "MemoryAccounting": "yes",
        "MemoryAvailable": "infinity",
        "MemoryCurrent": "4464640",
        "MemoryDenyWriteExecute": "no",
        "MemoryHigh": "infinity",
        "MemoryLimit": "infinity",
        "MemoryLow": "0",
        "MemoryMax": "infinity",
        "MemoryMin": "0",
        "MemoryPeak": "9408512",
        "MemorySwapMax": "infinity",
        "MountAPIVFS": "no",
        "NFileDescriptorStore": "0",
        "NRestarts": "0",
        "NUMAPolicy": "n/a",
        "Names": "certmonger.service",
        "NeedDaemonReload": "no",
        "Nice": "0",
        "NoNewPrivileges": "no",
        "NonBlocking": "no",
        "NotifyAccess": "none",
        "OOMPolicy": "stop",
        "OOMScoreAdjust": "0",
        "OnFailureJobMode": "replace",
        "OnSuccessJobMode": "fail",
        "PIDFile": "/run/certmonger.pid",
        "PartOf": "dbus-broker.service",
        "Perpetual": "no",
        "PrivateDevices": "no",
        "PrivateIPC": "no",
        "PrivateMounts": "no",
        "PrivateNetwork": "no",
        "PrivateTmp": "no",
        "PrivateUsers": "no",
        "ProcSubset": "all",
        "ProtectClock": "no",
        "ProtectControlGroups": "no",
        "ProtectHome": "no",
        "ProtectHostname": "no",
        "ProtectKernelLogs": "no",
        "ProtectKernelModules": "no",
        "ProtectKernelTunables": "no",
        "ProtectProc": "default",
        "ProtectSystem": "no",
        "RefuseManualStart": "no",
        "RefuseManualStop": "no",
        "ReloadResult": "success",
        "ReloadSignal": "1",
        "RemainAfterExit": "no",
        "RemoveIPC": "no",
        "Requires": "dbus.socket sysinit.target system.slice",
        "Restart": "no",
        "RestartKillSignal": "15",
        "RestartUSec": "100ms",
        "RestrictNamespaces": "no",
        "RestrictRealtime": "no",
        "RestrictSUIDSGID": "no",
        "Result": "success",
        "RootDirectoryStartOnly": "no",
        "RuntimeDirectoryMode": "0755",
        "RuntimeDirectoryPreserve": "no",
        "RuntimeMaxUSec": "infinity",
        "RuntimeRandomizedExtraUSec": "0",
        "SameProcessGroup": "no",
        "SecureBits": "0",
        "SendSIGHUP": "no",
        "SendSIGKILL": "yes",
        "Slice": "system.slice",
        "StandardError": "inherit",
        "StandardInput": "null",
        "StandardOutput": "journal",
        "StartLimitAction": "none",
        "StartLimitBurst": "5",
        "StartLimitIntervalUSec": "10s",
        "StartupBlockIOWeight": "[not set]",
        "StartupCPUShares": "[not set]",
        "StartupCPUWeight": "[not set]",
        "StartupIOWeight": "[not set]",
        "StateChangeTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "StateChangeTimestampMonotonic": "154310813",
        "StateDirectoryMode": "0755",
        "StatusErrno": "0",
        "StopWhenUnneeded": "no",
        "SubState": "running",
        "SuccessAction": "none",
        "SyslogFacility": "3",
        "SyslogLevel": "6",
        "SyslogLevelPrefix": "yes",
        "SyslogPriority": "30",
        "SystemCallErrorNumber": "2147483646",
        "TTYReset": "no",
        "TTYVHangup": "no",
        "TTYVTDisallocate": "no",
        "TasksAccounting": "yes",
        "TasksCurrent": "1",
        "TasksMax": "21756",
        "TimeoutAbortUSec": "1min 30s",
        "TimeoutCleanUSec": "infinity",
        "TimeoutStartFailureMode": "terminate",
        "TimeoutStartUSec": "1min 30s",
        "TimeoutStopFailureMode": "terminate",
        "TimeoutStopUSec": "1min 30s",
        "TimerSlackNSec": "50000",
        "Transient": "no",
        "Type": "dbus",
        "UID": "[not set]",
        "UMask": "0022",
        "UnitFilePreset": "disabled",
        "UnitFileState": "enabled",
        "UtmpMode": "init",
        "WantedBy": "multi-user.target",
        "WatchdogSignal": "6",
        "WatchdogTimestampMonotonic": "0",
        "WatchdogUSec": "0"
    }
}

TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] *****
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86
Wednesday 22 April 2026  17:49:03 -0400 (0:00:01.070)       0:00:09.011 ******* 
changed: [managed-node2] => (item={'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "ca": "self-sign",
        "dns": "www.example.com",
        "group": "ftp",
        "name": "mycert_fs_attrs",
        "owner": "ftp"
    }
}

MSG:

Certificate requested (new). File attributes updated.
changed: [managed-node2] => (item={'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "ca": "self-sign",
        "dns": "www.example.com",
        "group": 1041,
        "name": "certid",
        "owner": 1040
    }
}

MSG:

Certificate requested (new). File attributes updated.

TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:138
Wednesday 22 April 2026  17:49:04 -0400 (0:00:01.543)       0:00:10.555 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143
Wednesday 22 April 2026  17:49:04 -0400 (0:00:00.011)       0:00:10.567 ******* 
skipping: [managed-node2] => (item=['cert', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "cert",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": "ftp",
            "name": "mycert_fs_attrs",
            "owner": "ftp"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['cert', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "cert",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": 1041,
            "name": "certid",
            "owner": 1040
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['key', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "key",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": "ftp",
            "name": "mycert_fs_attrs",
            "owner": "ftp"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['key', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "key",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": 1041,
            "name": "certid",
            "owner": 1040
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['ca', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "ca",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": "ftp",
            "name": "mycert_fs_attrs",
            "owner": "ftp"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['ca', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "ca",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": 1041,
            "name": "certid",
            "owner": 1040
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] ****
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:151
Wednesday 22 April 2026  17:49:04 -0400 (0:00:00.031)       0:00:10.599 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Create return data] **************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:155
Wednesday 22 April 2026  17:49:04 -0400 (0:00:00.015)       0:00:10.614 ******* 
skipping: [managed-node2] => (item=mycert_fs_attrs)  => {
    "ansible_loop_var": "cert_name",
    "cert_name": "mycert_fs_attrs",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=certid)  => {
    "ansible_loop_var": "cert_name",
    "cert_name": "certid",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:169
Wednesday 22 April 2026  17:49:04 -0400 (0:00:00.025)       0:00:10.639 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Remove files] ********************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174
Wednesday 22 April 2026  17:49:04 -0400 (0:00:00.019)       0:00:10.658 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:185
Wednesday 22 April 2026  17:49:04 -0400 (0:00:00.026)       0:00:10.685 ******* 
ok: [managed-node2] => {
    "changed": false
}

TASK [Load certificate role platform variables] ********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:50
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.335)       0:00:11.020 ******* 
included: fedora.linux_system_roles.certificate for managed-node2

TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.038)       0:00:11.058 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__certificate_required_facts | difference(ansible_facts.keys() | list) | length > 0",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.019)       0:00:11.077 ******* 
ok: [managed-node2] => {
    "changed": false
}

TASK [fedora.linux_system_roles.certificate : Check if system is ostree] *******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.351)       0:00:11.429 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.015)       0:00:11.445 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Run systemctl] *******************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.016)       0:00:11.462 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__certificate_is_booted is not defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Require installed systemd] *******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.015)       0:00:11.477 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__certificate_is_booted is not defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.015)       0:00:11.492 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__certificate_is_booted is not defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.013)       0:00:11.506 ******* 
skipping: [managed-node2] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
ok: [managed-node2] => (item=CentOS_9.yml) => {
    "ansible_facts": {
        "__certificate_certmonger_packages": [
            "certmonger",
            "python3-packaging"
        ]
    },
    "ansible_included_var_files": [
        "/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_9.yml"
}
ok: [managed-node2] => (item=CentOS_9.yml) => {
    "ansible_facts": {
        "__certificate_certmonger_packages": [
            "certmonger",
            "python3-packaging"
        ]
    },
    "ansible_included_var_files": [
        "/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_9.yml"
}

TASK [Verify each user/group certificate] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:56
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.035)       0:00:11.542 ******* 
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 => (item={'path': '/etc/pki/tls/certs/mycert_fs_attrs.crt', 'key_path': '/etc/pki/tls/private/mycert_fs_attrs.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'owner': 'ftp', 'group': 'ftp', 'mode': '0640'})
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 => (item={'path': '/etc/pki/tls/certs/certid.crt', 'key_path': '/etc/pki/tls/private/certid.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'owner': 1040, 'group': 1041, 'mode': '0640'})

TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.055)       0:00:11.598 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "__virtualenv_path": "/tmp/certificate-tests-venv"
    },
    "changed": false
}

TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.013)       0:00:11.612 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.016)       0:00:11.628 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python2 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.014)       0:00:11.643 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_facts[\"distribution_major_version\"] == \"7\"",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31
Wednesday 22 April 2026  17:49:05 -0400 (0:00:00.010)       0:00:11.654 ******* 
ok: [managed-node2] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41
Wednesday 22 April 2026  17:49:07 -0400 (0:00:01.323)       0:00:12.977 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894543.8823395,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "f73fb74f0089d30ece6860dbb8cc051fd8cb699f",
        "ctime": 1776894543.9743385,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 50,
        "gr_name": "ftp",
        "inode": 12742456,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0640",
        "mtime": 1776894543.8793397,
        "nlink": 1,
        "path": "/etc/pki/tls/certs/mycert_fs_attrs.crt",
        "pw_name": "ftp",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 1294,
        "uid": 14,
        "version": "1943910701",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46
Wednesday 22 April 2026  17:49:07 -0400 (0:00:00.357)       0:00:13.334 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52
Wednesday 22 April 2026  17:49:07 -0400 (0:00:00.023)       0:00:13.358 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62
Wednesday 22 April 2026  17:49:07 -0400 (0:00:00.031)       0:00:13.389 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68
Wednesday 22 April 2026  17:49:07 -0400 (0:00:00.028)       0:00:13.418 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894543.82834,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "1ff771ab80fbbe3298c3c71a7ac2f74dfa27bc1d",
        "ctime": 1776894543.9753385,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 50,
        "gr_name": "ftp",
        "inode": 9413636,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0640",
        "mtime": 1776894543.8793397,
        "nlink": 1,
        "path": "/etc/pki/tls/private/mycert_fs_attrs.key",
        "pw_name": "ftp",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 1704,
        "uid": 14,
        "version": "110789005",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.384)       0:00:13.802 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.024)       0:00:13.826 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Parse certificate] *******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.052)       0:00:13.879 ******* 
ok: [managed-node2] => {
    "certificate": {
        "extensions": {
            "authorityKeyIdentifier": {
                "critical": false,
                "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
            },
            "basicConstraints": {
                "critical": true,
                "value": {
                    "ca": false
                }
            },
            "extendedKeyUsage": {
                "critical": false,
                "value": [
                    {
                        "name": "id-kp-serverAuth",
                        "oid": "1.3.6.1.5.5.7.3.1"
                    },
                    {
                        "name": "id-kp-clientAuth",
                        "oid": "1.3.6.1.5.5.7.3.2"
                    }
                ]
            },
            "keyUsage": {
                "critical": false,
                "value": [
                    "digital_signature",
                    "key_encipherment"
                ]
            },
            "subjectAltName": {
                "critical": false,
                "value": [
                    {
                        "name": "DNS",
                        "value": "www.example.com"
                    }
                ]
            },
            "subjectKeyIdentifier": {
                "critical": false,
                "value": "EA:CD:B7:65:BB:33:E6:8C:08:12:52:22:DE:40:61:E3:75:1F:8E:B2"
            }
        },
        "key_size": 2048,
        "signature_algorithm": {
            "algorithm": "sha256WithRSAEncryption",
            "signature": "37:58:D2:E8:09:6C:31:58:29:7A:3E:C6:94:0F:3B:35:16:61:5C:41:DC:6B:ED:48:1E:35:48:DC:BE:36:86:D4:17:AF:2E:9E:D6:65:EC:80:41:70:52:C6:FD:B1:FE:5A:2E:78:1D:3C:4A:A7:4F:54:57:29:4A:3B:93:1B:04:A3:CB:8C:77:93:64:1A:EE:CE:0E:DB:82:F4:20:30:68:FF:DE:CC:97:8A:E2:D2:9B:F7:C4:0E:6E:C2:BC:D6:17:CF:42:8A:6B:D5:A3:89:F4:D0:D1:99:7B:9E:79:7D:34:E3:A9:D0:58:B3:4D:70:BA:7C:A0:08:F2:37:FE:E2:39:89:57:6A:08:52:96:58:5C:D4:E1:2B:38:66:55:4E:3F:6A:93:CD:6B:EB:36:80:51:20:3E:46:4E:05:60:A0:F7:C4:1D:10:7C:B8:0E:36:4B:3D:B7:8F:5A:F8:57:A6:4D:AB:43:4E:CD:61:EC:F8:D0:9A:B2:D4:CA:4F:93:BE:9C:24:3F:EF:A2:F1:9A:F4:A3:0B:FE:8D:38:9D:97:D3:C1:0F:61:80:88:5C:6C:33:B2:DD:7A:FB:08:A8:E9:BF:D3:7F:F9:C4:6C:5A:BA:19:75:B1:81:C7:75:4D:80:AC:9A:CB:98:7D:7B:7D:08:9B:90:E9:44:E2:A7:46:D6:F1:79:50"
        },
        "subject": [
            {
                "name": "commonName",
                "oid": "2.5.4.3",
                "value": "www.example.com"
            }
        ],
        "validity": {
            "not_valid_after": "20270422214847Z",
            "not_valid_before": "20260422214903Z"
        }
    },
    "changed": false
}

TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.547)       0:00:14.426 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "cert_issued": {
            "extensions": {
                "authorityKeyIdentifier": {
                    "critical": false,
                    "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
                },
                "basicConstraints": {
                    "critical": true,
                    "value": {
                        "ca": false
                    }
                },
                "extendedKeyUsage": {
                    "critical": false,
                    "value": [
                        {
                            "name": "id-kp-serverAuth",
                            "oid": "1.3.6.1.5.5.7.3.1"
                        },
                        {
                            "name": "id-kp-clientAuth",
                            "oid": "1.3.6.1.5.5.7.3.2"
                        }
                    ]
                },
                "keyUsage": {
                    "critical": false,
                    "value": [
                        "digital_signature",
                        "key_encipherment"
                    ]
                },
                "subjectAltName": {
                    "critical": false,
                    "value": [
                        {
                            "name": "DNS",
                            "value": "www.example.com"
                        }
                    ]
                },
                "subjectKeyIdentifier": {
                    "critical": false,
                    "value": "EA:CD:B7:65:BB:33:E6:8C:08:12:52:22:DE:40:61:E3:75:1F:8E:B2"
                }
            },
            "key_size": 2048,
            "signature_algorithm": {
                "algorithm": "sha256WithRSAEncryption",
                "signature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
            },
            "subject": [
                {
                    "name": "commonName",
                    "oid": "2.5.4.3",
                    "value": "www.example.com"
                }
            ],
            "validity": {
                "not_valid_after": "20270422214847Z",
                "not_valid_before": "20260422214903Z"
            }
        }
    },
    "changed": false
}

TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.024)       0:00:14.451 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.029)       0:00:14.480 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key size] *********************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.026)       0:00:14.506 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.026)       0:00:14.533 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.033)       0:00:14.567 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146
Wednesday 22 April 2026  17:49:08 -0400 (0:00:00.031)       0:00:14.599 ******* 
ok: [managed-node2] => {
    "changed": false,
    "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
    "delta": "0:00:00.044047",
    "end": "2026-04-22 17:49:09.167327",
    "rc": 0,
    "start": "2026-04-22 17:49:09.123280"
}

STDOUT:

yes

TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.417)       0:00:15.016 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.027)       0:00:15.044 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Assert that commands file got removed] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.367)       0:00:15.412 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat first-boot unit file] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.023)       0:00:15.435 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert presence of first-boot unit] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.011)       0:00:15.447 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that first-boot unit is enabled] **********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.010)       0:00:15.458 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.013)       0:00:15.471 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that commands file exists] ****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.009)       0:00:15.480 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.011)       0:00:15.492 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "__virtualenv_path": "/tmp/certificate-tests-venv"
    },
    "changed": false
}

TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.020)       0:00:15.512 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.024)       0:00:15.536 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python2 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.024)       0:00:15.561 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_facts[\"distribution_major_version\"] == \"7\"",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31
Wednesday 22 April 2026  17:49:09 -0400 (0:00:00.019)       0:00:15.581 ******* 
ok: [managed-node2] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41
Wednesday 22 April 2026  17:49:11 -0400 (0:00:01.305)       0:00:16.887 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894544.5543325,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "28122b8b0be3bdc1b7fdae5b9ba0133d8c873a5c",
        "ctime": 1776894544.7023308,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 1041,
        "gr_name": "somegroup",
        "inode": 12742457,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0640",
        "mtime": 1776894544.5513325,
        "nlink": 1,
        "path": "/etc/pki/tls/certs/certid.crt",
        "pw_name": "user1",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 1294,
        "uid": 1040,
        "version": "761431867",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46
Wednesday 22 April 2026  17:49:11 -0400 (0:00:00.355)       0:00:17.243 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52
Wednesday 22 April 2026  17:49:11 -0400 (0:00:00.015)       0:00:17.258 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62
Wednesday 22 April 2026  17:49:11 -0400 (0:00:00.019)       0:00:17.278 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68
Wednesday 22 April 2026  17:49:11 -0400 (0:00:00.017)       0:00:17.295 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894544.501333,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "8afba827fa342efede900633cdf3ef105e05e6c4",
        "ctime": 1776894544.7023308,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 1041,
        "gr_name": "somegroup",
        "inode": 9413637,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0640",
        "mtime": 1776894544.5513325,
        "nlink": 1,
        "path": "/etc/pki/tls/private/certid.key",
        "pw_name": "user1",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 1704,
        "uid": 1040,
        "version": "3374768468",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73
Wednesday 22 April 2026  17:49:11 -0400 (0:00:00.344)       0:00:17.639 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79
Wednesday 22 April 2026  17:49:11 -0400 (0:00:00.019)       0:00:17.659 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Parse certificate] *******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89
Wednesday 22 April 2026  17:49:11 -0400 (0:00:00.019)       0:00:17.678 ******* 
ok: [managed-node2] => {
    "certificate": {
        "extensions": {
            "authorityKeyIdentifier": {
                "critical": false,
                "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
            },
            "basicConstraints": {
                "critical": true,
                "value": {
                    "ca": false
                }
            },
            "extendedKeyUsage": {
                "critical": false,
                "value": [
                    {
                        "name": "id-kp-serverAuth",
                        "oid": "1.3.6.1.5.5.7.3.1"
                    },
                    {
                        "name": "id-kp-clientAuth",
                        "oid": "1.3.6.1.5.5.7.3.2"
                    }
                ]
            },
            "keyUsage": {
                "critical": false,
                "value": [
                    "digital_signature",
                    "key_encipherment"
                ]
            },
            "subjectAltName": {
                "critical": false,
                "value": [
                    {
                        "name": "DNS",
                        "value": "www.example.com"
                    }
                ]
            },
            "subjectKeyIdentifier": {
                "critical": false,
                "value": "5E:1E:E3:D8:A2:F3:08:45:6B:BE:37:B2:CF:B0:06:C4:DF:50:84:1D"
            }
        },
        "key_size": 2048,
        "signature_algorithm": {
            "algorithm": "sha256WithRSAEncryption",
            "signature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
        },
        "subject": [
            {
                "name": "commonName",
                "oid": "2.5.4.3",
                "value": "www.example.com"
            }
        ],
        "validity": {
            "not_valid_after": "20270422214847Z",
            "not_valid_before": "20260422214904Z"
        }
    },
    "changed": false
}

TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.396)       0:00:18.075 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "cert_issued": {
            "extensions": {
                "authorityKeyIdentifier": {
                    "critical": false,
                    "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
                },
                "basicConstraints": {
                    "critical": true,
                    "value": {
                        "ca": false
                    }
                },
                "extendedKeyUsage": {
                    "critical": false,
                    "value": [
                        {
                            "name": "id-kp-serverAuth",
                            "oid": "1.3.6.1.5.5.7.3.1"
                        },
                        {
                            "name": "id-kp-clientAuth",
                            "oid": "1.3.6.1.5.5.7.3.2"
                        }
                    ]
                },
                "keyUsage": {
                    "critical": false,
                    "value": [
                        "digital_signature",
                        "key_encipherment"
                    ]
                },
                "subjectAltName": {
                    "critical": false,
                    "value": [
                        {
                            "name": "DNS",
                            "value": "www.example.com"
                        }
                    ]
                },
                "subjectKeyIdentifier": {
                    "critical": false,
                    "value": "5E:1E:E3:D8:A2:F3:08:45:6B:BE:37:B2:CF:B0:06:C4:DF:50:84:1D"
                }
            },
            "key_size": 2048,
            "signature_algorithm": {
                "algorithm": "sha256WithRSAEncryption",
                "signature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
            },
            "subject": [
                {
                    "name": "commonName",
                    "oid": "2.5.4.3",
                    "value": "www.example.com"
                }
            ],
            "validity": {
                "not_valid_after": "20270422214847Z",
                "not_valid_before": "20260422214904Z"
            }
        }
    },
    "changed": false
}

TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.016)       0:00:18.092 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.017)       0:00:18.110 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key size] *********************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.016)       0:00:18.126 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.016)       0:00:18.142 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.019)       0:00:18.162 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.019)       0:00:18.181 ******* 
ok: [managed-node2] => {
    "changed": false,
    "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
    "delta": "0:00:00.043586",
    "end": "2026-04-22 17:49:12.715520",
    "rc": 0,
    "start": "2026-04-22 17:49:12.671934"
}

STDOUT:

yes

TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.376)       0:00:18.558 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163
Wednesday 22 April 2026  17:49:12 -0400 (0:00:00.022)       0:00:18.580 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Assert that commands file got removed] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.351)       0:00:18.931 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat first-boot unit file] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.014)       0:00:18.946 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert presence of first-boot unit] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.010)       0:00:18.956 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that first-boot unit is enabled] **********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.009)       0:00:18.966 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.010)       0:00:18.977 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that commands file exists] ****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.009)       0:00:18.986 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Issue certificate setting user/group/mode] *******************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:88
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.009)       0:00:18.996 ******* 
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2

TASK [Clear facts] *************************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:9
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.039)       0:00:19.036 ******* 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.001)       0:00:19.037 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.021)       0:00:19.059 ******* 
included: fedora.linux_system_roles.certificate for managed-node2

TASK [fedora.linux_system_roles.certificate : Set version specific variables] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.052)       0:00:19.111 ******* 
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2

TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.027)       0:00:19.139 ******* 
ok: [managed-node2]

TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7
Wednesday 22 April 2026  17:49:13 -0400 (0:00:00.544)       0:00:19.683 ******* 
ok: [managed-node2] => {
    "changed": false
}

TASK [fedora.linux_system_roles.certificate : Check if system is ostree] *******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16
Wednesday 22 April 2026  17:49:14 -0400 (0:00:00.348)       0:00:20.031 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21
Wednesday 22 April 2026  17:49:14 -0400 (0:00:00.015)       0:00:20.047 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Run systemctl] *******************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28
Wednesday 22 April 2026  17:49:14 -0400 (0:00:00.015)       0:00:20.062 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__certificate_is_booted is not defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Require installed systemd] *******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36
Wednesday 22 April 2026  17:49:14 -0400 (0:00:00.014)       0:00:20.076 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__certificate_is_booted is not defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41
Wednesday 22 April 2026  17:49:14 -0400 (0:00:00.017)       0:00:20.093 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "__certificate_is_booted is not defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46
Wednesday 22 April 2026  17:49:14 -0400 (0:00:00.024)       0:00:20.118 ******* 
skipping: [managed-node2] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
ok: [managed-node2] => (item=CentOS_9.yml) => {
    "ansible_facts": {
        "__certificate_certmonger_packages": [
            "certmonger",
            "python3-packaging"
        ]
    },
    "ansible_included_var_files": [
        "/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_9.yml"
}
ok: [managed-node2] => (item=CentOS_9.yml) => {
    "ansible_facts": {
        "__certificate_certmonger_packages": [
            "certmonger",
            "python3-packaging"
        ]
    },
    "ansible_included_var_files": [
        "/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_9.yml"
}

TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Wednesday 22 April 2026  17:49:14 -0400 (0:00:00.048)       0:00:20.166 ******* 
ok: [managed-node2] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15
Wednesday 22 April 2026  17:49:15 -0400 (0:00:01.333)       0:00:21.500 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25
Wednesday 22 April 2026  17:49:17 -0400 (0:00:01.355)       0:00:22.855 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/etc/certmonger//pre-scripts",
    "secontext": "unconfined_u:object_r:etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49
Wednesday 22 April 2026  17:49:17 -0400 (0:00:00.372)       0:00:23.228 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/etc/certmonger//post-scripts",
    "secontext": "unconfined_u:object_r:etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76
Wednesday 22 April 2026  17:49:17 -0400 (0:00:00.356)       0:00:23.584 ******* 
ok: [managed-node2] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "enabled": true,
    "name": "certmonger",
    "state": "started",
    "status": {
        "AccessSELinuxContext": "system_u:object_r:certmonger_unit_file_t:s0",
        "ActiveEnterTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "ActiveEnterTimestampMonotonic": "154310813",
        "ActiveExitTimestampMonotonic": "0",
        "ActiveState": "active",
        "After": "dbus-broker.service systemd-journald.socket dbus.socket system.slice sysinit.target network.target syslog.target basic.target",
        "AllowIsolate": "no",
        "AssertResult": "yes",
        "AssertTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "AssertTimestampMonotonic": "154295783",
        "Before": "multi-user.target shutdown.target",
        "BlockIOAccounting": "no",
        "BlockIOWeight": "[not set]",
        "BusName": "org.fedorahosted.certmonger",
        "CPUAccounting": "yes",
        "CPUAffinityFromNUMA": "no",
        "CPUQuotaPerSecUSec": "infinity",
        "CPUQuotaPeriodUSec": "infinity",
        "CPUSchedulingPolicy": "0",
        "CPUSchedulingPriority": "0",
        "CPUSchedulingResetOnFork": "no",
        "CPUShares": "[not set]",
        "CPUUsageNSec": "849312000",
        "CPUWeight": "[not set]",
        "CacheDirectoryMode": "0755",
        "CanFreeze": "yes",
        "CanIsolate": "no",
        "CanReload": "no",
        "CanStart": "yes",
        "CanStop": "yes",
        "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
        "CleanResult": "success",
        "CollectMode": "inactive",
        "ConditionResult": "yes",
        "ConditionTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "ConditionTimestampMonotonic": "154295780",
        "ConfigurationDirectoryMode": "0755",
        "Conflicts": "shutdown.target",
        "ControlGroup": "/system.slice/certmonger.service",
        "ControlGroupId": "4195",
        "ControlPID": "0",
        "CoredumpFilter": "0x33",
        "DefaultDependencies": "yes",
        "DefaultMemoryLow": "0",
        "DefaultMemoryMin": "0",
        "Delegate": "no",
        "Description": "Certificate monitoring and PKI enrollment",
        "DevicePolicy": "auto",
        "DynamicUser": "no",
        "EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
        "ExecMainCode": "0",
        "ExecMainExitTimestampMonotonic": "0",
        "ExecMainPID": "10951",
        "ExecMainStartTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "ExecMainStartTimestampMonotonic": "154302676",
        "ExecMainStatus": "0",
        "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Wed 2026-04-22 17:48:46 EDT] ; stop_time=[n/a] ; pid=10951 ; code=(null) ; status=0/0 }",
        "ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[Wed 2026-04-22 17:48:46 EDT] ; stop_time=[n/a] ; pid=10951 ; code=(null) ; status=0/0 }",
        "ExitType": "main",
        "FailureAction": "none",
        "FileDescriptorStoreMax": "0",
        "FinalKillSignal": "9",
        "FragmentPath": "/usr/lib/systemd/system/certmonger.service",
        "FreezerState": "running",
        "GID": "[not set]",
        "GuessMainPID": "yes",
        "IOAccounting": "no",
        "IOReadBytes": "18446744073709551615",
        "IOReadOperations": "18446744073709551615",
        "IOSchedulingClass": "2",
        "IOSchedulingPriority": "4",
        "IOWeight": "[not set]",
        "IOWriteBytes": "18446744073709551615",
        "IOWriteOperations": "18446744073709551615",
        "IPAccounting": "no",
        "IPEgressBytes": "[no data]",
        "IPEgressPackets": "[no data]",
        "IPIngressBytes": "[no data]",
        "IPIngressPackets": "[no data]",
        "Id": "certmonger.service",
        "IgnoreOnIsolate": "no",
        "IgnoreSIGPIPE": "yes",
        "InactiveEnterTimestampMonotonic": "0",
        "InactiveExitTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "InactiveExitTimestampMonotonic": "154302968",
        "InvocationID": "d698fc5228cf4a6c8f861aeec46c179e",
        "JobRunningTimeoutUSec": "infinity",
        "JobTimeoutAction": "none",
        "JobTimeoutUSec": "infinity",
        "KeyringMode": "private",
        "KillMode": "control-group",
        "KillSignal": "15",
        "LimitAS": "infinity",
        "LimitASSoft": "infinity",
        "LimitCORE": "infinity",
        "LimitCORESoft": "infinity",
        "LimitCPU": "infinity",
        "LimitCPUSoft": "infinity",
        "LimitDATA": "infinity",
        "LimitDATASoft": "infinity",
        "LimitFSIZE": "infinity",
        "LimitFSIZESoft": "infinity",
        "LimitLOCKS": "infinity",
        "LimitLOCKSSoft": "infinity",
        "LimitMEMLOCK": "8388608",
        "LimitMEMLOCKSoft": "8388608",
        "LimitMSGQUEUE": "819200",
        "LimitMSGQUEUESoft": "819200",
        "LimitNICE": "0",
        "LimitNICESoft": "0",
        "LimitNOFILE": "524288",
        "LimitNOFILESoft": "1024",
        "LimitNPROC": "13598",
        "LimitNPROCSoft": "13598",
        "LimitRSS": "infinity",
        "LimitRSSSoft": "infinity",
        "LimitRTPRIO": "0",
        "LimitRTPRIOSoft": "0",
        "LimitRTTIME": "infinity",
        "LimitRTTIMESoft": "infinity",
        "LimitSIGPENDING": "13598",
        "LimitSIGPENDINGSoft": "13598",
        "LimitSTACK": "infinity",
        "LimitSTACKSoft": "8388608",
        "LoadState": "loaded",
        "LockPersonality": "no",
        "LogLevelMax": "-1",
        "LogRateLimitBurst": "0",
        "LogRateLimitIntervalUSec": "0",
        "LogsDirectoryMode": "0755",
        "MainPID": "10951",
        "ManagedOOMMemoryPressure": "auto",
        "ManagedOOMMemoryPressureLimit": "0",
        "ManagedOOMPreference": "none",
        "ManagedOOMSwap": "auto",
        "MemoryAccounting": "yes",
        "MemoryAvailable": "infinity",
        "MemoryCurrent": "5197824",
        "MemoryDenyWriteExecute": "no",
        "MemoryHigh": "infinity",
        "MemoryLimit": "infinity",
        "MemoryLow": "0",
        "MemoryMax": "infinity",
        "MemoryMin": "0",
        "MemoryPeak": "9408512",
        "MemorySwapMax": "infinity",
        "MountAPIVFS": "no",
        "NFileDescriptorStore": "0",
        "NRestarts": "0",
        "NUMAPolicy": "n/a",
        "Names": "certmonger.service",
        "NeedDaemonReload": "no",
        "Nice": "0",
        "NoNewPrivileges": "no",
        "NonBlocking": "no",
        "NotifyAccess": "none",
        "OOMPolicy": "stop",
        "OOMScoreAdjust": "0",
        "OnFailureJobMode": "replace",
        "OnSuccessJobMode": "fail",
        "PIDFile": "/run/certmonger.pid",
        "PartOf": "dbus-broker.service",
        "Perpetual": "no",
        "PrivateDevices": "no",
        "PrivateIPC": "no",
        "PrivateMounts": "no",
        "PrivateNetwork": "no",
        "PrivateTmp": "no",
        "PrivateUsers": "no",
        "ProcSubset": "all",
        "ProtectClock": "no",
        "ProtectControlGroups": "no",
        "ProtectHome": "no",
        "ProtectHostname": "no",
        "ProtectKernelLogs": "no",
        "ProtectKernelModules": "no",
        "ProtectKernelTunables": "no",
        "ProtectProc": "default",
        "ProtectSystem": "no",
        "RefuseManualStart": "no",
        "RefuseManualStop": "no",
        "ReloadResult": "success",
        "ReloadSignal": "1",
        "RemainAfterExit": "no",
        "RemoveIPC": "no",
        "Requires": "dbus.socket sysinit.target system.slice",
        "Restart": "no",
        "RestartKillSignal": "15",
        "RestartUSec": "100ms",
        "RestrictNamespaces": "no",
        "RestrictRealtime": "no",
        "RestrictSUIDSGID": "no",
        "Result": "success",
        "RootDirectoryStartOnly": "no",
        "RuntimeDirectoryMode": "0755",
        "RuntimeDirectoryPreserve": "no",
        "RuntimeMaxUSec": "infinity",
        "RuntimeRandomizedExtraUSec": "0",
        "SameProcessGroup": "no",
        "SecureBits": "0",
        "SendSIGHUP": "no",
        "SendSIGKILL": "yes",
        "Slice": "system.slice",
        "StandardError": "inherit",
        "StandardInput": "null",
        "StandardOutput": "journal",
        "StartLimitAction": "none",
        "StartLimitBurst": "5",
        "StartLimitIntervalUSec": "10s",
        "StartupBlockIOWeight": "[not set]",
        "StartupCPUShares": "[not set]",
        "StartupCPUWeight": "[not set]",
        "StartupIOWeight": "[not set]",
        "StateChangeTimestamp": "Wed 2026-04-22 17:48:46 EDT",
        "StateChangeTimestampMonotonic": "154310813",
        "StateDirectoryMode": "0755",
        "StatusErrno": "0",
        "StopWhenUnneeded": "no",
        "SubState": "running",
        "SuccessAction": "none",
        "SyslogFacility": "3",
        "SyslogLevel": "6",
        "SyslogLevelPrefix": "yes",
        "SyslogPriority": "30",
        "SystemCallErrorNumber": "2147483646",
        "TTYReset": "no",
        "TTYVHangup": "no",
        "TTYVTDisallocate": "no",
        "TasksAccounting": "yes",
        "TasksCurrent": "1",
        "TasksMax": "21756",
        "TimeoutAbortUSec": "1min 30s",
        "TimeoutCleanUSec": "infinity",
        "TimeoutStartFailureMode": "terminate",
        "TimeoutStartUSec": "1min 30s",
        "TimeoutStopFailureMode": "terminate",
        "TimeoutStopUSec": "1min 30s",
        "TimerSlackNSec": "50000",
        "Transient": "no",
        "Type": "dbus",
        "UID": "[not set]",
        "UMask": "0022",
        "UnitFilePreset": "disabled",
        "UnitFileState": "enabled",
        "UtmpMode": "init",
        "WantedBy": "multi-user.target",
        "WatchdogSignal": "6",
        "WatchdogTimestampMonotonic": "0",
        "WatchdogUSec": "0"
    }
}

TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] *****
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86
Wednesday 22 April 2026  17:49:18 -0400 (0:00:00.889)       0:00:24.474 ******* 
changed: [managed-node2] => (item={'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "ca": "self-sign",
        "dns": "www.example.com",
        "group": "ftp",
        "mode": "0620",
        "name": "mycert_fs_attrs_mode",
        "owner": "ftp"
    }
}

MSG:

Certificate requested (new). File attributes updated.
changed: [managed-node2] => (item={'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0o600', 'ca': 'self-sign'}) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "ca": "self-sign",
        "dns": "www.example.com",
        "mode": "0o600",
        "name": "certid_mode"
    }
}

MSG:

Certificate requested (new).

TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:138
Wednesday 22 April 2026  17:49:20 -0400 (0:00:01.694)       0:00:26.169 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.016)       0:00:26.185 ******* 
skipping: [managed-node2] => (item=['cert', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "cert",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": "ftp",
            "mode": "0620",
            "name": "mycert_fs_attrs_mode",
            "owner": "ftp"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['cert', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0o600', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "cert",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "mode": "0o600",
            "name": "certid_mode"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['key', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "key",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": "ftp",
            "mode": "0620",
            "name": "mycert_fs_attrs_mode",
            "owner": "ftp"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['key', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0o600', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "key",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "mode": "0o600",
            "name": "certid_mode"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['ca', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "ca",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "group": "ftp",
            "mode": "0620",
            "name": "mycert_fs_attrs_mode",
            "owner": "ftp"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=['ca', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0o600', 'ca': 'self-sign'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "item": [
        "ca",
        {
            "ca": "self-sign",
            "dns": "www.example.com",
            "mode": "0o600",
            "name": "certid_mode"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] ****
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:151
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.037)       0:00:26.222 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Create return data] **************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:155
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.014)       0:00:26.237 ******* 
skipping: [managed-node2] => (item=mycert_fs_attrs_mode)  => {
    "ansible_loop_var": "cert_name",
    "cert_name": "mycert_fs_attrs_mode",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => (item=certid_mode)  => {
    "ansible_loop_var": "cert_name",
    "cert_name": "certid_mode",
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node2] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ******
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:169
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.031)       0:00:26.269 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Remove files] ********************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.017)       0:00:26.286 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "certificate_test_mode | d(false)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] ***
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:185
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.017)       0:00:26.303 ******* 
ok: [managed-node2] => {
    "changed": false
}

TASK [Create QEMU deployment during bootc end-to-end test] *********************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:106
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.326)       0:00:26.630 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Verify each fs_attrs_mode certificate] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:113
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.011)       0:00:26.641 ******* 
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 => (item={'path': '/etc/pki/tls/certs/mycert_fs_attrs_mode.crt', 'key_path': '/etc/pki/tls/private/mycert_fs_attrs_mode.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'owner': 'ftp', 'group': 'ftp', 'mode': '0620'})
included: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node2 => (item={'path': '/etc/pki/tls/certs/certid_mode.crt', 'key_path': '/etc/pki/tls/private/certid_mode.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'mode': '0600'})

TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.068)       0:00:26.709 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "__virtualenv_path": "/tmp/certificate-tests-venv"
    },
    "changed": false
}

TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.014)       0:00:26.723 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.015)       0:00:26.738 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python2 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.015)       0:00:26.754 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_facts[\"distribution_major_version\"] == \"7\"",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31
Wednesday 22 April 2026  17:49:20 -0400 (0:00:00.012)       0:00:26.766 ******* 
ok: [managed-node2] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41
Wednesday 22 April 2026  17:49:22 -0400 (0:00:01.292)       0:00:28.058 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894559.2891748,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "bb8ed833fae764893b5c4567062f316fedd860f9",
        "ctime": 1776894559.367174,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 50,
        "gr_name": "ftp",
        "inode": 12742458,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0620",
        "mtime": 1776894559.2871747,
        "nlink": 1,
        "path": "/etc/pki/tls/certs/mycert_fs_attrs_mode.crt",
        "pw_name": "ftp",
        "readable": true,
        "rgrp": false,
        "roth": false,
        "rusr": true,
        "size": 1294,
        "uid": 14,
        "version": "64454901",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46
Wednesday 22 April 2026  17:49:22 -0400 (0:00:00.361)       0:00:28.420 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52
Wednesday 22 April 2026  17:49:22 -0400 (0:00:00.016)       0:00:28.436 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62
Wednesday 22 April 2026  17:49:22 -0400 (0:00:00.020)       0:00:28.457 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68
Wednesday 22 April 2026  17:49:22 -0400 (0:00:00.018)       0:00:28.475 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894559.2361753,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "d52b33c534ec1491881416074efdc2e11e970ec0",
        "ctime": 1776894559.3681738,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 50,
        "gr_name": "ftp",
        "inode": 9413639,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0620",
        "mtime": 1776894559.2871747,
        "nlink": 1,
        "path": "/etc/pki/tls/private/mycert_fs_attrs_mode.key",
        "pw_name": "ftp",
        "readable": true,
        "rgrp": false,
        "roth": false,
        "rusr": true,
        "size": 1704,
        "uid": 14,
        "version": "682749862",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.351)       0:00:28.826 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.016)       0:00:28.843 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Parse certificate] *******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.020)       0:00:28.864 ******* 
ok: [managed-node2] => {
    "certificate": {
        "extensions": {
            "authorityKeyIdentifier": {
                "critical": false,
                "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
            },
            "basicConstraints": {
                "critical": true,
                "value": {
                    "ca": false
                }
            },
            "extendedKeyUsage": {
                "critical": false,
                "value": [
                    {
                        "name": "id-kp-serverAuth",
                        "oid": "1.3.6.1.5.5.7.3.1"
                    },
                    {
                        "name": "id-kp-clientAuth",
                        "oid": "1.3.6.1.5.5.7.3.2"
                    }
                ]
            },
            "keyUsage": {
                "critical": false,
                "value": [
                    "digital_signature",
                    "key_encipherment"
                ]
            },
            "subjectAltName": {
                "critical": false,
                "value": [
                    {
                        "name": "DNS",
                        "value": "www.example.com"
                    }
                ]
            },
            "subjectKeyIdentifier": {
                "critical": false,
                "value": "54:3B:C3:CC:60:32:BC:37:1B:46:C0:7B:79:61:F9:7C:53:DF:F0:11"
            }
        },
        "key_size": 2048,
        "signature_algorithm": {
            "algorithm": "sha256WithRSAEncryption",
            "signature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
        },
        "subject": [
            {
                "name": "commonName",
                "oid": "2.5.4.3",
                "value": "www.example.com"
            }
        ],
        "validity": {
            "not_valid_after": "20270422214847Z",
            "not_valid_before": "20260422214919Z"
        }
    },
    "changed": false
}

TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.391)       0:00:29.255 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "cert_issued": {
            "extensions": {
                "authorityKeyIdentifier": {
                    "critical": false,
                    "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
                },
                "basicConstraints": {
                    "critical": true,
                    "value": {
                        "ca": false
                    }
                },
                "extendedKeyUsage": {
                    "critical": false,
                    "value": [
                        {
                            "name": "id-kp-serverAuth",
                            "oid": "1.3.6.1.5.5.7.3.1"
                        },
                        {
                            "name": "id-kp-clientAuth",
                            "oid": "1.3.6.1.5.5.7.3.2"
                        }
                    ]
                },
                "keyUsage": {
                    "critical": false,
                    "value": [
                        "digital_signature",
                        "key_encipherment"
                    ]
                },
                "subjectAltName": {
                    "critical": false,
                    "value": [
                        {
                            "name": "DNS",
                            "value": "www.example.com"
                        }
                    ]
                },
                "subjectKeyIdentifier": {
                    "critical": false,
                    "value": "54:3B:C3:CC:60:32:BC:37:1B:46:C0:7B:79:61:F9:7C:53:DF:F0:11"
                }
            },
            "key_size": 2048,
            "signature_algorithm": {
                "algorithm": "sha256WithRSAEncryption",
                "signature": "18:56:A7:DE:67:94:8D:20:58:FF:69:1D:F9:22:14:94:D7:92:E2:23:03:49:96:4F:59:06:AA:F1:11:CB:C8:D5:82:46:6C:3F:21:00:2A:87:F3:E7:39:48:42:19:BB:86:01:F5:A3:04:39:28:09:F4:8E:1B:78:7D:8C:8D:E6:A1:4B:83:5B:6F:A7:80:AC:47:AE:A5:25:69:A0:EA:21:8A:85:AD:AD:1E:C8:4F:2B:90:2C:E8:79:1B:AD:D0:D9:8F:FA:D5:02:9B:D8:84:B0:3F:84:F6:4A:56:5A:A4:8E:55:5F:DB:48:B1:44:7E:CE:FA:9B:71:7F:49:43:21:12:47:1B:8D:41:92:AA:D4:73:16:86:E0:77:63:98:A8:11:4E:83:9D:A6:C3:D8:06:26:6D:EE:7E:10:5D:AE:8D:7B:B1:CE:5C:09:83:03:6D:63:5B:40:A6:7E:D4:A2:7F:EE:A9:C4:8A:A2:45:2B:69:33:B7:DF:40:8B:D6:58:A0:C3:4D:7B:EB:8E:1C:9B:D6:C3:A3:51:9F:F9:64:86:9A:D6:85:06:D4:52:A0:3A:58:93:28:6D:C8:DF:AE:BE:64:24:54:2F:03:F4:EC:9B:C0:E1:6C:9A:3E:BA:FF:93:7D:C8:60:19:AD:8A:E2:C8:A3:F9:1A:07:47:50:3F:F3:87:E4:FF"
            },
            "subject": [
                {
                    "name": "commonName",
                    "oid": "2.5.4.3",
                    "value": "www.example.com"
                }
            ],
            "validity": {
                "not_valid_after": "20270422214847Z",
                "not_valid_before": "20260422214919Z"
            }
        }
    },
    "changed": false
}

TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.016)       0:00:29.272 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.018)       0:00:29.290 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key size] *********************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.015)       0:00:29.306 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.017)       0:00:29.323 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.025)       0:00:29.349 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.032)       0:00:29.381 ******* 
ok: [managed-node2] => {
    "changed": false,
    "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
    "delta": "0:00:00.045448",
    "end": "2026-04-22 17:49:23.948946",
    "rc": 0,
    "start": "2026-04-22 17:49:23.903498"
}

STDOUT:

yes

TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155
Wednesday 22 April 2026  17:49:23 -0400 (0:00:00.409)       0:00:29.791 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.018)       0:00:29.809 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Assert that commands file got removed] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.334)       0:00:30.144 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat first-boot unit file] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.022)       0:00:30.167 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert presence of first-boot unit] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.019)       0:00:30.187 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that first-boot unit is enabled] **********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.010)       0:00:30.197 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.012)       0:00:30.210 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that commands file exists] ****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.012)       0:00:30.222 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:5
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.012)       0:00:30.235 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "__virtualenv_path": "/tmp/certificate-tests-venv"
    },
    "changed": false
}

TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:12
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.013)       0:00:30.249 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:17
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.018)       0:00:30.268 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "not __certificate_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python2 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:21
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.015)       0:00:30.283 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_facts[\"distribution_major_version\"] == \"7\"",
    "skip_reason": "Conditional result was False"
}

TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31
Wednesday 22 April 2026  17:49:24 -0400 (0:00:00.011)       0:00:30.295 ******* 
ok: [managed-node2] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:41
Wednesday 22 April 2026  17:49:25 -0400 (0:00:01.299)       0:00:31.594 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894560.1741652,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "5c2d6dcb603c6311106b650600af09c16a63ebe8",
        "ctime": 1776894560.1721654,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 12742463,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0600",
        "mtime": 1776894560.1721654,
        "nlink": 1,
        "path": "/etc/pki/tls/certs/certid_mode.crt",
        "pw_name": "root",
        "readable": true,
        "rgrp": false,
        "roth": false,
        "rusr": true,
        "size": 1294,
        "uid": 0,
        "version": "3011098813",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:46
Wednesday 22 April 2026  17:49:26 -0400 (0:00:00.349)       0:00:31.944 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:52
Wednesday 22 April 2026  17:49:26 -0400 (0:00:00.018)       0:00:31.962 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:62
Wednesday 22 April 2026  17:49:26 -0400 (0:00:00.025)       0:00:31.988 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:68
Wednesday 22 April 2026  17:49:26 -0400 (0:00:00.018)       0:00:32.006 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "atime": 1776894560.1211658,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "000329f622d3c3c31b58e8701211b8b700bcc236",
        "ctime": 1776894560.1721654,
        "dev": 66305,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 9413640,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0600",
        "mtime": 1776894560.1721654,
        "nlink": 1,
        "path": "/etc/pki/tls/private/certid_mode.key",
        "pw_name": "root",
        "readable": true,
        "rgrp": false,
        "roth": false,
        "rusr": true,
        "size": 1704,
        "uid": 0,
        "version": "1999168907",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:73
Wednesday 22 April 2026  17:49:26 -0400 (0:00:00.355)       0:00:32.362 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:79
Wednesday 22 April 2026  17:49:26 -0400 (0:00:00.024)       0:00:32.386 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Parse certificate] *******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89
Wednesday 22 April 2026  17:49:26 -0400 (0:00:00.033)       0:00:32.420 ******* 
ok: [managed-node2] => {
    "certificate": {
        "extensions": {
            "authorityKeyIdentifier": {
                "critical": false,
                "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
            },
            "basicConstraints": {
                "critical": true,
                "value": {
                    "ca": false
                }
            },
            "extendedKeyUsage": {
                "critical": false,
                "value": [
                    {
                        "name": "id-kp-serverAuth",
                        "oid": "1.3.6.1.5.5.7.3.1"
                    },
                    {
                        "name": "id-kp-clientAuth",
                        "oid": "1.3.6.1.5.5.7.3.2"
                    }
                ]
            },
            "keyUsage": {
                "critical": false,
                "value": [
                    "digital_signature",
                    "key_encipherment"
                ]
            },
            "subjectAltName": {
                "critical": false,
                "value": [
                    {
                        "name": "DNS",
                        "value": "www.example.com"
                    }
                ]
            },
            "subjectKeyIdentifier": {
                "critical": false,
                "value": "4C:E9:9A:CC:42:59:FB:1B:08:4B:1B:25:F6:D4:CE:0D:4D:FD:8F:73"
            }
        },
        "key_size": 2048,
        "signature_algorithm": {
            "algorithm": "sha256WithRSAEncryption",
            "signature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
        },
        "subject": [
            {
                "name": "commonName",
                "oid": "2.5.4.3",
                "value": "www.example.com"
            }
        ],
        "validity": {
            "not_valid_after": "20270422214847Z",
            "not_valid_before": "20260422214920Z"
        }
    },
    "changed": false
}

TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:95
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.419)       0:00:32.840 ******* 
ok: [managed-node2] => {
    "ansible_facts": {
        "cert_issued": {
            "extensions": {
                "authorityKeyIdentifier": {
                    "critical": false,
                    "value": "2C:52:A1:8E:C3:E4:DF:C0:13:CD:FC:73:C6:B3:FB:38:D0:89:C2:B6"
                },
                "basicConstraints": {
                    "critical": true,
                    "value": {
                        "ca": false
                    }
                },
                "extendedKeyUsage": {
                    "critical": false,
                    "value": [
                        {
                            "name": "id-kp-serverAuth",
                            "oid": "1.3.6.1.5.5.7.3.1"
                        },
                        {
                            "name": "id-kp-clientAuth",
                            "oid": "1.3.6.1.5.5.7.3.2"
                        }
                    ]
                },
                "keyUsage": {
                    "critical": false,
                    "value": [
                        "digital_signature",
                        "key_encipherment"
                    ]
                },
                "subjectAltName": {
                    "critical": false,
                    "value": [
                        {
                            "name": "DNS",
                            "value": "www.example.com"
                        }
                    ]
                },
                "subjectKeyIdentifier": {
                    "critical": false,
                    "value": "4C:E9:9A:CC:42:59:FB:1B:08:4B:1B:25:F6:D4:CE:0D:4D:FD:8F:73"
                }
            },
            "key_size": 2048,
            "signature_algorithm": {
                "algorithm": "sha256WithRSAEncryption",
                "signature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
            },
            "subject": [
                {
                    "name": "commonName",
                    "oid": "2.5.4.3",
                    "value": "www.example.com"
                }
            ],
            "validity": {
                "not_valid_after": "20270422214847Z",
                "not_valid_before": "20260422214920Z"
            }
        }
    },
    "changed": false
}

TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:99
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.017)       0:00:32.857 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:107
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.023)       0:00:32.881 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify key size] *********************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:115
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.017)       0:00:32.898 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:122
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.023)       0:00:32.921 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:133
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.023)       0:00:32.945 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:146
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.023)       0:00:32.969 ******* 
ok: [managed-node2] => {
    "changed": false,
    "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
    "delta": "0:00:00.045464",
    "end": "2026-04-22 17:49:27.505735",
    "rc": 0,
    "start": "2026-04-22 17:49:27.460271"
}

STDOUT:

yes

TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:155
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.378)       0:00:33.347 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:163
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.019)       0:00:33.367 ******* 
ok: [managed-node2] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Assert that commands file got removed] ***********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:168
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.338)       0:00:33.706 ******* 
ok: [managed-node2] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat first-boot unit file] ***********************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:176
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.019)       0:00:33.725 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert presence of first-boot unit] **************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:181
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.011)       0:00:33.736 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that first-boot unit is enabled] **********************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:186
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.013)       0:00:33.749 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Stat commands file] ******************************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:193
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.013)       0:00:33.763 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

TASK [Assert that commands file exists] ****************************************
task path: /tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:198
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.011)       0:00:33.774 ******* 
skipping: [managed-node2] => {
    "changed": false,
    "false_condition": "ansible_connection == \"buildah\"",
    "skip_reason": "Conditional result was False"
}

PLAY RECAP *********************************************************************
managed-node2              : ok=120  changed=4    unreachable=0    failed=0    skipped=61   rescued=0    ignored=0   

SYSTEM ROLES ERRORS BEGIN v1
[]
SYSTEM ROLES ERRORS END v1

TASKS RECAP ********************************************************************
Wednesday 22 April 2026  17:49:27 -0400 (0:00:00.014)       0:00:33.789 ******* 
=============================================================================== 
fedora.linux_system_roles.certificate : Ensure certificate requests ----- 1.69s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 
fedora.linux_system_roles.certificate : Ensure certificate requests ----- 1.54s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 
fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 1.40s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 
fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 1.36s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 
fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 1.33s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 
Ensure python3 is installed --------------------------------------------- 1.32s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 
fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 1.31s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 
Ensure python3 is installed --------------------------------------------- 1.31s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 
Ensure python3 is installed --------------------------------------------- 1.30s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 
Ensure python3 is installed --------------------------------------------- 1.29s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:31 
Gathering Facts --------------------------------------------------------- 1.17s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2 
fedora.linux_system_roles.certificate : Ensure provider service is running --- 1.07s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 
fedora.linux_system_roles.certificate : Ensure provider service is running --- 0.89s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76 
Ensure user exists ------------------------------------------------------ 0.59s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:22 
fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.56s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 
Parse certificate ------------------------------------------------------- 0.55s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:89 
fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.54s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 
Ensure group "somegroup" exists ----------------------------------------- 0.47s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:28 
fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists --- 0.46s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25 
fedora.linux_system_roles.certificate : Run systemctl ------------------- 0.44s
/tmp/collections-4Ed/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28