fix: update lint script and molecule configs for CI

- Add project-level .ansible-lint with profile:min and skip_list for
  pre-existing issues (fqcn, name casing, truthy, octal, etc.)
- Rewrite lint script to run from project root using project config
- Remove per-role .ansible-lint files (conflicted with v26 syntax)
- Molecule: drop Ubuntu 20.04 platforms (EOL), keep 22.04 only
- Molecule: use cgroupns_mode:host, remove command:/sbin/init and
  tmpfs that caused systemd temp dir failures on cgroup v2 hosts
- Molecule: add privileged:true where missing, remove max-parallel
  limit, set fail-fast:false, upgrade runner to ubuntu-24.04
- Add ANSIBLE_ROLES_PATH and passlib to molecule workflow

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Douglas Holt <dholt@nvidia.com>

Author: dholt

.ansible-lint

@@ -0,0 +1,26 @@
+---
+# Project-level ansible-lint configuration for ansible-lint 26.x
+# Profile levels: min, basic, moderate, safety, shared, production
+profile: min
+
+# Exclude external/vendored roles and hardware-specific roles
+exclude_paths:
+  - roles/galaxy/
+  - roles/nvidia-dgx/
+  - roles/nvidia-dgx-firmware/
+  - roles/nvidia-gpu-tests/
+  - submodules/
+
+# Skip rules for pre-existing issues across the codebase.
+# These should be fixed incrementally in future PRs.
+skip_list:
+  - fqcn[action-core]    # 634 violations: modules not using FQCN
+  - fqcn[action]         # 24 violations: same for non-core
+  - name[casing]         # 526 violations: task names not capitalized
+  - yaml[truthy]         # 152 violations: yes/no instead of true/false
+  - yaml[octal-values]   # 52 violations: octal file modes
+  - jinja[spacing]       # 20 violations: jinja2 spacing
+  - name[play]           # 12 violations: play names
+  - schema[meta]         # 3 violations: meta/main.yml schema
+  - key-order[task]      # 3 violations: task key ordering
+  - ignore-errors        # pre-existing ignore_errors usage

.github/workflows/molecule.yml

@@ -5,9 +5,9 @@ on:
   - pull_request
 jobs:
   build:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
-      max-parallel: 4
+      fail-fast: false
       matrix:
         deepops-role:
           - cachefilesd
@@ -38,9 +38,11 @@ jobs:
       - name: install dependencies
         run: |
           python3 -m pip install --upgrade pip
-          python3 -m pip install ansible==10.7.0
+          python3 -m pip install ansible==10.7.0 passlib
           python3 -m pip install molecule molecule-plugins[docker] docker
       - name: run molecule test
+        env:
+          ANSIBLE_ROLES_PATH: "${{ github.workspace }}/${{ github.repository }}/roles/galaxy:${{ github.workspace }}/${{ github.repository }}/roles"
         run: |
           cd "${{ github.repository }}/roles"
           ansible-galaxy role install --force -r ./requirements.yml

roles/cachefilesd/molecule/default/molecule.yml

@@ -4,24 +4,9 @@ dependency:
 driver:
   name: docker
 platforms:
-  - name: cachefilesd-ubuntu-2004
-    image: geerlingguy/docker-ubuntu2004-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
-    tmpfs:
-    - /run
-    - /tmp
-    pre_build_image: true
-    privileged: true
   - name: cachefilesd-ubuntu-2204
     image: geerlingguy/docker-ubuntu2204-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
-    tmpfs:
-    - /run
-    - /tmp
+    cgroupns_mode: host
     pre_build_image: true
     privileged: true
 provisioner:

roles/easy-build-packages/.ansible-lint

@@ -4,24 +4,11 @@ dependency:
 driver:
   name: docker
 platforms:
-  - name: facts-ubuntu-2004
-    image: geerlingguy/docker-ubuntu2004-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
-    tmpfs:
-    - /run
-    - /tmp
-    pre_build_image: true
   - name: facts-ubuntu-2204
     image: geerlingguy/docker-ubuntu2204-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
-    tmpfs:
-    - /run
-    - /tmp
+    cgroupns_mode: host
     pre_build_image: true
+    privileged: true
 provisioner:
   name: ansible
   ansible_args:

roles/easy-build/.ansible-lint

@@ -4,24 +4,11 @@ dependency:
 driver:
   name: docker
 platforms:
-  - name: krb-ubuntu-2004
-    image: geerlingguy/docker-ubuntu2004-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
-    tmpfs:
-    - /run
-    - /tmp
-    pre_build_image: true
   - name: krb-ubuntu-2204
     image: geerlingguy/docker-ubuntu2204-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
-    tmpfs:
-    - /run
-    - /tmp
+    cgroupns_mode: host
     pre_build_image: true
+    privileged: true
 provisioner:
   name: ansible
   ansible_args:

roles/facts/molecule/default/molecule.yml

@@ -4,16 +4,9 @@ dependency:
 driver:
   name: docker
 platforms:
-  - name: lmod-ubuntu-2004
-    image: geerlingguy/docker-ubuntu2004-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    privileged: true
-    pre_build_image: true
   - name: lmod-ubuntu-2204
     image: geerlingguy/docker-ubuntu2204-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:

roles/kerberos_client/.ansible-lint

@@ -4,18 +4,9 @@ dependency:
 driver:
   name: docker
 platforms:
-  - name: mofed-ubuntu-2004
-    image: geerlingguy/docker-ubuntu2004-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
-    pre_build_image: true
-    privileged: true
   - name: mofed-ubuntu-2204
     image: geerlingguy/docker-ubuntu2204-ansible
-    volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
-    command: /sbin/init
+    cgroupns_mode: host
     pre_build_image: true
     privileged: true
 provisioner: