all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe35:b366
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 508c99cd-e53a-42b6-b737-23e78ea469e8
        host_id: 4ba4344415ca7057d9956ea5de826bbc0b830981e82c0e0f191fa07b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe35:b366
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.110
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.48
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe35:b366
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job flake8 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#32>'
      - '<Job flake8 explicit: None implied: None source: osism/ansible-collection-services/.zuul.yaml@main#498>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 3fb5ea52b5a84e82b4f56296f0ed9897
      build_refs:
      - branch: main
        change: '2120'
        change_message: "falco: drop obsolete kmod driver workflow\n\n## What\n\nRemoves
          the obsolete kmod driver workflow from the falco role's Debian-family install
          path (`roles/falco/tasks/install-Debian-family.yml`) and the matching molecule
          assertions.\n\n## Why\n\nSince #1749 the role runs `falco-modern-bpf.service`,
          which uses the modern eBPF probe (CO-RE, built into the falco package) and
          needs no kernel module. The install path nonetheless still ran the pre-#1749
          kmod workflow: `falcoctl driver config --type kmod`, `falcoctl driver install`,
          the `.ko` symlink, `modules-load.d` persistence, and `modprobe`.\n\nThis
          file is the **Debian-family** path, so it runs on both Debian and Ubuntu
          (`ansible_os_family` is `Debian` for Ubuntu; there is no Ubuntu-specific
          task file).\n\n`falcoctl driver install` fails on any Debian-family host
          with no prebuilt `.ko` for its running kernel \u2014 it 404s on the download
          and the compile fallback dies because `dkms` is not installed. A failed
          command task aborts the play, so applying the role never completes (converge
          fails before the molecule tests run).\n\n- molecule-falco check red on **debian-bookworm**
          on every run since 2025-12-01\n- ubuntu-noble passed only because a prebuilt
          `.ko` happened to exist for its runner kernel\n- any **Ubuntu** host on
          a kernel falco has not published a driver for (HWE, newer point releases,
          custom kernels) would fail identically \u2014 a latent failure on our usual
          target OS\n\n## How\n\nThis is a fix to the install path, not a silenced
          test. With the kmod tasks gone the role applies cleanly on both Debian and
          Ubuntu, and the modern-bpf service it was already configured to use comes
          up with no driver build. The two removed molecule assertions (`test_kernelmodfile`,
          `test_kernelmod`) only checked kmod artifacts (`/etc/modules-load.d/falco.conf`
          and a loaded falco module) that modern eBPF never produces, so they would
          now fail on every platform.\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/ansible-collection-services/pull/2120
        commit_id: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
        patchset: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          name: osism/ansible-collection-services
          short_name: ansible-collection-services
        src_dir: src/github.com/osism/ansible-collection-services
        topic: null
      buildset: 0226f56a5b4a48c49128abe9486b0554
      buildset_refs:
      - branch: main
        change: '2120'
        change_message: "falco: drop obsolete kmod driver workflow\n\n## What\n\nRemoves
          the obsolete kmod driver workflow from the falco role's Debian-family install
          path (`roles/falco/tasks/install-Debian-family.yml`) and the matching molecule
          assertions.\n\n## Why\n\nSince #1749 the role runs `falco-modern-bpf.service`,
          which uses the modern eBPF probe (CO-RE, built into the falco package) and
          needs no kernel module. The install path nonetheless still ran the pre-#1749
          kmod workflow: `falcoctl driver config --type kmod`, `falcoctl driver install`,
          the `.ko` symlink, `modules-load.d` persistence, and `modprobe`.\n\nThis
          file is the **Debian-family** path, so it runs on both Debian and Ubuntu
          (`ansible_os_family` is `Debian` for Ubuntu; there is no Ubuntu-specific
          task file).\n\n`falcoctl driver install` fails on any Debian-family host
          with no prebuilt `.ko` for its running kernel \u2014 it 404s on the download
          and the compile fallback dies because `dkms` is not installed. A failed
          command task aborts the play, so applying the role never completes (converge
          fails before the molecule tests run).\n\n- molecule-falco check red on **debian-bookworm**
          on every run since 2025-12-01\n- ubuntu-noble passed only because a prebuilt
          `.ko` happened to exist for its runner kernel\n- any **Ubuntu** host on
          a kernel falco has not published a driver for (HWE, newer point releases,
          custom kernels) would fail identically \u2014 a latent failure on our usual
          target OS\n\n## How\n\nThis is a fix to the install path, not a silenced
          test. With the kmod tasks gone the role applies cleanly on both Debian and
          Ubuntu, and the modern-bpf service it was already configured to use comes
          up with no driver build. The two removed molecule assertions (`test_kernelmodfile`,
          `test_kernelmod`) only checked kmod artifacts (`/etc/modules-load.d/falco.conf`
          and a loaded falco module) that modern eBPF never produces, so they would
          now fail on every platform.\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/ansible-collection-services/pull/2120
        commit_id: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
        patchset: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          name: osism/ansible-collection-services
          short_name: ansible-collection-services
        src_dir: src/github.com/osism/ansible-collection-services
        topic: null
      change: '2120'
      change_message: "falco: drop obsolete kmod driver workflow\n\n## What\n\nRemoves
        the obsolete kmod driver workflow from the falco role's Debian-family install
        path (`roles/falco/tasks/install-Debian-family.yml`) and the matching molecule
        assertions.\n\n## Why\n\nSince #1749 the role runs `falco-modern-bpf.service`,
        which uses the modern eBPF probe (CO-RE, built into the falco package) and
        needs no kernel module. The install path nonetheless still ran the pre-#1749
        kmod workflow: `falcoctl driver config --type kmod`, `falcoctl driver install`,
        the `.ko` symlink, `modules-load.d` persistence, and `modprobe`.\n\nThis file
        is the **Debian-family** path, so it runs on both Debian and Ubuntu (`ansible_os_family`
        is `Debian` for Ubuntu; there is no Ubuntu-specific task file).\n\n`falcoctl
        driver install` fails on any Debian-family host with no prebuilt `.ko` for
        its running kernel \u2014 it 404s on the download and the compile fallback
        dies because `dkms` is not installed. A failed command task aborts the play,
        so applying the role never completes (converge fails before the molecule tests
        run).\n\n- molecule-falco check red on **debian-bookworm** on every run since
        2025-12-01\n- ubuntu-noble passed only because a prebuilt `.ko` happened to
        exist for its runner kernel\n- any **Ubuntu** host on a kernel falco has not
        published a driver for (HWE, newer point releases, custom kernels) would fail
        identically \u2014 a latent failure on our usual target OS\n\n## How\n\nThis
        is a fix to the install path, not a silenced test. With the kmod tasks gone
        the role applies cleanly on both Debian and Ubuntu, and the modern-bpf service
        it was already configured to use comes up with no driver build. The two removed
        molecule assertions (`test_kernelmodfile`, `test_kernelmod`) only checked
        kmod artifacts (`/etc/modules-load.d/falco.conf` and a loaded falco module)
        that modern eBPF never produces, so they would now fail on every platform.\n\n\U0001F916
        Generated with [Claude Code](https://claude.com/claude-code)"
      change_url: https://github.com/osism/ansible-collection-services/pull/2120
      child_jobs: []
      commit_id: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
      event_id: fe23bfe0-6e54-11f1-891a-b493e6b82e72
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/3fb5ea52b5a84e82b4f56296f0ed9897/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/3fb5ea52b5a84e82b4f56296f0ed9897/work/logs
        result_data_file: /var/lib/zuul/builds/3fb5ea52b5a84e82b4f56296f0ed9897/work/results.json
        src_root: /var/lib/zuul/builds/3fb5ea52b5a84e82b4f56296f0ed9897/work/src
        work_root: /var/lib/zuul/builds/3fb5ea52b5a84e82b4f56296f0ed9897/work
      include_vars: []
      items:
      - branch: main
        change: '2120'
        change_message: "falco: drop obsolete kmod driver workflow\n\n## What\n\nRemoves
          the obsolete kmod driver workflow from the falco role's Debian-family install
          path (`roles/falco/tasks/install-Debian-family.yml`) and the matching molecule
          assertions.\n\n## Why\n\nSince #1749 the role runs `falco-modern-bpf.service`,
          which uses the modern eBPF probe (CO-RE, built into the falco package) and
          needs no kernel module. The install path nonetheless still ran the pre-#1749
          kmod workflow: `falcoctl driver config --type kmod`, `falcoctl driver install`,
          the `.ko` symlink, `modules-load.d` persistence, and `modprobe`.\n\nThis
          file is the **Debian-family** path, so it runs on both Debian and Ubuntu
          (`ansible_os_family` is `Debian` for Ubuntu; there is no Ubuntu-specific
          task file).\n\n`falcoctl driver install` fails on any Debian-family host
          with no prebuilt `.ko` for its running kernel \u2014 it 404s on the download
          and the compile fallback dies because `dkms` is not installed. A failed
          command task aborts the play, so applying the role never completes (converge
          fails before the molecule tests run).\n\n- molecule-falco check red on **debian-bookworm**
          on every run since 2025-12-01\n- ubuntu-noble passed only because a prebuilt
          `.ko` happened to exist for its runner kernel\n- any **Ubuntu** host on
          a kernel falco has not published a driver for (HWE, newer point releases,
          custom kernels) would fail identically \u2014 a latent failure on our usual
          target OS\n\n## How\n\nThis is a fix to the install path, not a silenced
          test. With the kmod tasks gone the role applies cleanly on both Debian and
          Ubuntu, and the modern-bpf service it was already configured to use comes
          up with no driver build. The two removed molecule assertions (`test_kernelmodfile`,
          `test_kernelmod`) only checked kmod artifacts (`/etc/modules-load.d/falco.conf`
          and a loaded falco module) that modern eBPF never produces, so they would
          now fail on every platform.\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/ansible-collection-services/pull/2120
        commit_id: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
        patchset: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          name: osism/ansible-collection-services
          short_name: ansible-collection-services
          src_dir: src/github.com/osism/ansible-collection-services
        topic: null
      job: flake8
      jobtags: []
      max_attempts: 3
      message: ZmFsY286IGRyb3Agb2Jzb2xldGUga21vZCBkcml2ZXIgd29ya2Zsb3cKCiMjIFdoYXQKClJlbW92ZXMgdGhlIG9ic29sZXRlIGttb2QgZHJpdmVyIHdvcmtmbG93IGZyb20gdGhlIGZhbGNvIHJvbGUncyBEZWJpYW4tZmFtaWx5IGluc3RhbGwgcGF0aCAoYHJvbGVzL2ZhbGNvL3Rhc2tzL2luc3RhbGwtRGViaWFuLWZhbWlseS55bWxgKSBhbmQgdGhlIG1hdGNoaW5nIG1vbGVjdWxlIGFzc2VydGlvbnMuCgojIyBXaHkKClNpbmNlICMxNzQ5IHRoZSByb2xlIHJ1bnMgYGZhbGNvLW1vZGVybi1icGYuc2VydmljZWAsIHdoaWNoIHVzZXMgdGhlIG1vZGVybiBlQlBGIHByb2JlIChDTy1SRSwgYnVpbHQgaW50byB0aGUgZmFsY28gcGFja2FnZSkgYW5kIG5lZWRzIG5vIGtlcm5lbCBtb2R1bGUuIFRoZSBpbnN0YWxsIHBhdGggbm9uZXRoZWxlc3Mgc3RpbGwgcmFuIHRoZSBwcmUtIzE3NDkga21vZCB3b3JrZmxvdzogYGZhbGNvY3RsIGRyaXZlciBjb25maWcgLS10eXBlIGttb2RgLCBgZmFsY29jdGwgZHJpdmVyIGluc3RhbGxgLCB0aGUgYC5rb2Agc3ltbGluaywgYG1vZHVsZXMtbG9hZC5kYCBwZXJzaXN0ZW5jZSwgYW5kIGBtb2Rwcm9iZWAuCgpUaGlzIGZpbGUgaXMgdGhlICoqRGViaWFuLWZhbWlseSoqIHBhdGgsIHNvIGl0IHJ1bnMgb24gYm90aCBEZWJpYW4gYW5kIFVidW50dSAoYGFuc2libGVfb3NfZmFtaWx5YCBpcyBgRGViaWFuYCBmb3IgVWJ1bnR1OyB0aGVyZSBpcyBubyBVYnVudHUtc3BlY2lmaWMgdGFzayBmaWxlKS4KCmBmYWxjb2N0bCBkcml2ZXIgaW5zdGFsbGAgZmFpbHMgb24gYW55IERlYmlhbi1mYW1pbHkgaG9zdCB3aXRoIG5vIHByZWJ1aWx0IGAua29gIGZvciBpdHMgcnVubmluZyBrZXJuZWwg4oCUIGl0IDQwNHMgb24gdGhlIGRvd25sb2FkIGFuZCB0aGUgY29tcGlsZSBmYWxsYmFjayBkaWVzIGJlY2F1c2UgYGRrbXNgIGlzIG5vdCBpbnN0YWxsZWQuIEEgZmFpbGVkIGNvbW1hbmQgdGFzayBhYm9ydHMgdGhlIHBsYXksIHNvIGFwcGx5aW5nIHRoZSByb2xlIG5ldmVyIGNvbXBsZXRlcyAoY29udmVyZ2UgZmFpbHMgYmVmb3JlIHRoZSBtb2xlY3VsZSB0ZXN0cyBydW4pLgoKLSBtb2xlY3VsZS1mYWxjbyBjaGVjayByZWQgb24gKipkZWJpYW4tYm9va3dvcm0qKiBvbiBldmVyeSBydW4gc2luY2UgMjAyNS0xMi0wMQotIHVidW50dS1ub2JsZSBwYXNzZWQgb25seSBiZWNhdXNlIGEgcHJlYnVpbHQgYC5rb2AgaGFwcGVuZWQgdG8gZXhpc3QgZm9yIGl0cyBydW5uZXIga2VybmVsCi0gYW55ICoqVWJ1bnR1KiogaG9zdCBvbiBhIGtlcm5lbCBmYWxjbyBoYXMgbm90IHB1Ymxpc2hlZCBhIGRyaXZlciBmb3IgKEhXRSwgbmV3ZXIgcG9pbnQgcmVsZWFzZXMsIGN1c3RvbSBrZXJuZWxzKSB3b3VsZCBmYWlsIGlkZW50aWNhbGx5IOKAlCBhIGxhdGVudCBmYWlsdXJlIG9uIG91ciB1c3VhbCB0YXJnZXQgT1MKCiMjIEhvdwoKVGhpcyBpcyBhIGZpeCB0byB0aGUgaW5zdGFsbCBwYXRoLCBub3QgYSBzaWxlbmNlZCB0ZXN0LiBXaXRoIHRoZSBrbW9kIHRhc2tzIGdvbmUgdGhlIHJvbGUgYXBwbGllcyBjbGVhbmx5IG9uIGJvdGggRGViaWFuIGFuZCBVYnVudHUsIGFuZCB0aGUgbW9kZXJuLWJwZiBzZXJ2aWNlIGl0IHdhcyBhbHJlYWR5IGNvbmZpZ3VyZWQgdG8gdXNlIGNvbWVzIHVwIHdpdGggbm8gZHJpdmVyIGJ1aWxkLiBUaGUgdHdvIHJlbW92ZWQgbW9sZWN1bGUgYXNzZXJ0aW9ucyAoYHRlc3Rfa2VybmVsbW9kZmlsZWAsIGB0ZXN0X2tlcm5lbG1vZGApIG9ubHkgY2hlY2tlZCBrbW9kIGFydGlmYWN0cyAoYC9ldGMvbW9kdWxlcy1sb2FkLmQvZmFsY28uY29uZmAgYW5kIGEgbG9hZGVkIGZhbGNvIG1vZHVsZSkgdGhhdCBtb2Rlcm4gZUJQRiBuZXZlciBwcm9kdWNlcywgc28gdGhleSB3b3VsZCBub3cgZmFpbCBvbiBldmVyeSBwbGF0Zm9ybS4KCvCfpJYgR2VuZXJhdGVkIHdpdGggW0NsYXVkZSBDb2RlXShodHRwczovL2NsYXVkZS5jb20vY2xhdWRlLWNvZGUp
      patchset: 0bc3d8a6754ac9a4a878c108fa9b33a6ac4baedf
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 3d5c7b5973754999f7005857a00ce9168944f0f1
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 3d5c7b5973754999f7005857a00ce9168944f0f1
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/flake8/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/ansible-collection-services
        name: osism/ansible-collection-services
        short_name: ansible-collection-services
        src_dir: src/github.com/osism/ansible-collection-services
      projects:
        github.com/osism/ansible-collection-services:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          checkout: main
          checkout_description: zuul branch
          commit: b83860b3062df2df528c35570bea3ea8f53f1f4a
          name: osism/ansible-collection-services
          required: false
          short_name: ansible-collection-services
          src_dir: src/github.com/osism/ansible-collection-services
      ref: refs/pull/2120/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
