---
dependency:
  name: galaxy
  options:
    requirements-file: ../../requirements.yml

driver:
  name: docker

platforms:
  - name: instance
    # Project-owned image built from .docker/molecule-debian13/Dockerfile
    # and hosted in the Forgejo container registry.
    # Build/push with: make molecule-image / make molecule-image-push
    image: forgejo.nyumbani.baobab.band/sjat/molecule-debian13:latest
    pre_build_image: true
    privileged: true          # required for systemd
    cgroupns_mode: host
    volumes:
      - /sys/fs/cgroup:/sys/fs/cgroup:rw
    command: /lib/systemd/systemd
    # Pre-create the namespaced sysctl so ansible.posix.sysctl can set it (mesh-hardening 1/3).
    # The container image lacks procps so the sysctl binary is absent; we also install it in
    # prepare.yml. This entry ensures the value exists in the container's netns at startup.
    sysctls:
      net.ipv4.ip_nonlocal_bind: "0"
    # ubongo's /etc/resolv.conf points to the NetBird mesh DNS (100.99.x.x), which Docker
    # containers can't reach (no wt0). Override to a public resolver so prepare.yml apt tasks
    # can update the cache and install packages.
    dns_servers:
      - 8.8.8.8

provisioner:
  name: ansible
  inventory:
    host_vars:
      instance:
        ansible_user: root

verifier:
  name: ansible