boma/roles/integration_test/molecule/default/converge.yml

---
# KVM/libvirt APT packages cannot be installed in the Docker Molecule container
# (no internet; KVM unusable in a container). This converge exercises only the
# nftables drop-in rendering via tasks_from, which IS meaningful in a container.
# The full role (packages/libvirt) is exercised by make test-integration.
- name: Converge
  hosts: all
  become: true
  gather_facts: true
  tasks:
    - name: Include integration_test firewall tasks
      ansible.builtin.include_role:
        name: integration_test
        tasks_from: firewall.yml