ansible-playbook [core 2.17.14] config file = None configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/local/lib/python3.12/site-packages/ansible ansible collection location = /tmp/collections-8AM executable location = /usr/local/bin/ansible-playbook python version = 3.12.13 (main, Jun 1 2026, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-14)] (/usr/bin/python3.12) jinja version = 3.1.6 libyaml = True No config file found; using defaults running playbook inside collection fedora.linux_system_roles Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'jsonl', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: tests_trust.yml ****************************************************** 1 plays in /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml PLAY [Test adding certificates to the system trust store] ********************** TASK [Gathering Facts] ********************************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:3 Tuesday 14 July 2026 03:06:20 -0400 (0:00:00.020) 0:00:00.020 ********** [WARNING]: Platform linux on host managed-node2 is using the discovered Python interpreter at /usr/bin/python3.9, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible- core/2.17/reference_appendices/interpreter_discovery.html for more information. ok: [managed-node2] TASK [Get var __certificate_is_ostree and other role vars] ********************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:11 Tuesday 14 July 2026 03:06:21 -0400 (0:00:01.064) 0:00:01.085 ********** included: fedora.linux_system_roles.certificate for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Tuesday 14 July 2026 03:06:21 -0400 (0:00:00.035) 0:00:01.120 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_required_facts | difference(ansible_facts.keys() | list) | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Tuesday 14 July 2026 03:06:21 -0400 (0:00:00.037) 0:00:01.158 ********** ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Tuesday 14 July 2026 03:06:22 -0400 (0:00:00.403) 0:00:01.561 ********** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Tuesday 14 July 2026 03:06:22 -0400 (0:00:00.428) 0:00:01.990 ********** ok: [managed-node2] => { "ansible_facts": { "__certificate_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Tuesday 14 July 2026 03:06:22 -0400 (0:00:00.020) 0:00:02.011 ********** ok: [managed-node2] => { "changed": false, "cmd": [ "systemctl", "is-system-running" ], "delta": "0:00:00.008200", "end": "2026-07-14 03:06:23.008786", "failed_when_result": false, "rc": 0, "start": "2026-07-14 03:06:23.000586" } STDOUT: running TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Tuesday 14 July 2026 03:06:23 -0400 (0:00:00.450) 0:00:02.461 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "\"No such file or directory\" in __is_system_running.msg | d(\"\")", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Tuesday 14 July 2026 03:06:23 -0400 (0:00:00.059) 0:00:02.521 ********** ok: [managed-node2] => { "ansible_facts": { "__certificate_is_booted": true }, "changed": false } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Tuesday 14 July 2026 03:06:23 -0400 (0:00:00.033) 0:00:02.555 ********** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } TASK [Ensure openssl is installed] ********************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:17 Tuesday 14 July 2026 03:06:23 -0400 (0:00:00.066) 0:00:02.621 ********** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [Generate a self-signed test CA certificate] ****************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:23 Tuesday 14 July 2026 03:06:24 -0400 (0:00:01.063) 0:00:03.685 ********** changed: [managed-node2] => { "changed": true, "cmd": [ "openssl", "req", "-x509", "-new", "-newkey", "rsa:2048", "-nodes", "-days", "3650", "-subj", "/CN=LSR-Trust-Test-CA", "-keyout", "/tmp/lsr_trust_test_ca.key", "-out", "/tmp/lsr_trust_test_ca.crt" ], "delta": "0:00:00.053901", "end": "2026-07-14 03:06:24.659759", "rc": 0, "start": "2026-07-14 03:06:24.605858" } STDERR: ....+.....+...+.+..+...+....+...........+......+.+..+++++++++++++++++++++++++++++++++++++++*.+++++++++++++++++++++++++++++++++++++++*.............+.......+..+.+......+...+......+.....+...................+..+...+.+.....+.........+......+.......+..+...+...+.+.....+....+.........+...+............+..+....+..+..........+.................+...............+.......+......+..+.............+.....+.............+.........+.....+.+......+......+........+.........+.............+..+......+.+...+.....+......+....+...+.....+.........+..................+...+...+.........+.+......+.....+.+...++++++ ....+........+.......+++++++++++++++++++++++++++++++++++++++*.+.+..+.............+...+..+...............+...+.+.....+++++++++++++++++++++++++++++++++++++++*......+...+..+......+.+......+...+............+.....++++++ ----- TASK [Check that the test CA certificate is not yet trusted] ******************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:31 Tuesday 14 July 2026 03:06:24 -0400 (0:00:00.426) 0:00:04.111 ********** ok: [managed-node2] => { "changed": false, "cmd": [ "openssl", "verify", "/tmp/lsr_trust_test_ca.crt" ], "delta": "0:00:00.014074", "end": "2026-07-14 03:06:25.057972", "failed_when_result": false, "rc": 2, "start": "2026-07-14 03:06:25.043898" } STDERR: CN=LSR-Trust-Test-CA error 18 at 0 depth lookup: self-signed certificate error /tmp/lsr_trust_test_ca.crt: verification failed MSG: non-zero return code TASK [Assert that the test CA certificate is not yet trusted] ****************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:37 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.392) 0:00:04.504 ********** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Run the role to trust a certificate file on the managed host] ************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:41 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.025) 0:00:04.529 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:9 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.024) 0:00:04.553 ********** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.000) 0:00:04.554 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.024) 0:00:04.579 ********** included: fedora.linux_system_roles.certificate for managed-node2 TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.088) 0:00:04.667 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.021) 0:00:04.689 ********** ok: [managed-node2] TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Tuesday 14 July 2026 03:06:25 -0400 (0:00:00.525) 0:00:05.214 ********** ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.349) 0:00:05.564 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.019) 0:00:05.584 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.021) 0:00:05.605 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.018) 0:00:05.624 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.024) 0:00:05.648 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.022) 0:00:05.670 ********** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:10 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.052) 0:00:05.722 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:16 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.015) 0:00:05.738 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:26 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.025) 0:00:05.764 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:50 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.021) 0:00:05.785 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:77 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.022) 0:00:05.807 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure certificates in the system trust store] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:87 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.021) 0:00:05.828 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Validate certificate_trust items] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:3 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.023) 0:00:05.851 ********** ok: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "item": { "name": "lsr-trust-test-src", "remote_src": true, "src": "/tmp/lsr_trust_test_ca.crt" } } MSG: All assertions passed TASK [fedora.linux_system_roles.certificate : Ensure trust store packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 Tuesday 14 July 2026 03:06:26 -0400 (0:00:00.032) 0:00:05.883 ********** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.certificate : Install trust certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:26 Tuesday 14 July 2026 03:06:27 -0400 (0:00:01.247) 0:00:07.131 ********** changed: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": true, "checksum": "6b3c586b62e4ceb976c4dfeada1b1a22d58375c3", "dest": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-src.crt", "gid": 0, "group": "root", "item": { "name": "lsr-trust-test-src", "remote_src": true, "src": "/tmp/lsr_trust_test_ca.crt" }, "md5sum": "e0e4e609c72f409469fae499c0424d56", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:cert_t:s0", "size": 1135, "src": "/tmp/lsr_trust_test_ca.crt", "state": "file", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Install trust certificates from URL] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:43 Tuesday 14 July 2026 03:06:28 -0400 (0:00:00.468) 0:00:07.600 ********** skipping: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.url is defined", "item": { "name": "lsr-trust-test-src", "remote_src": true, "src": "/tmp/lsr_trust_test_ca.crt" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Remove trust certificates] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:58 Tuesday 14 July 2026 03:06:28 -0400 (0:00:00.026) 0:00:07.627 ********** skipping: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'absent'", "item": { "name": "lsr-trust-test-src", "remote_src": true, "src": "/tmp/lsr_trust_test_ca.crt" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Update system trust store] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:68 Tuesday 14 July 2026 03:06:28 -0400 (0:00:00.025) 0:00:07.652 ********** changed: [managed-node2] => { "changed": true, "cmd": [ "/usr/bin/update-ca-trust", "extract" ], "delta": "0:00:00.923463", "end": "2026-07-14 03:06:29.474459", "rc": 0, "start": "2026-07-14 03:06:28.550996" } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:91 Tuesday 14 July 2026 03:06:29 -0400 (0:00:01.266) 0:00:08.919 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.011) 0:00:08.931 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:148 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.014) 0:00:08.946 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:156 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.013) 0:00:08.960 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:160 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.015) 0:00:08.975 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.017) 0:00:08.993 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:179 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.017) 0:00:09.010 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:190 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.028) 0:00:09.039 ********** ok: [managed-node2] => { "changed": false } TASK [Get the trust anchor file attributes] ************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:50 Tuesday 14 July 2026 03:06:29 -0400 (0:00:00.341) 0:00:09.380 ********** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1784012788.5581453, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "6b3c586b62e4ceb976c4dfeada1b1a22d58375c3", "ctime": 1784012788.1561432, "dev": 66305, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 4647243, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0644", "mtime": 1784012784.6591232, "nlink": 1, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-src.crt", "pw_name": "root", "readable": true, "rgrp": true, "roth": true, "rusr": true, "size": 1135, "uid": 0, "version": "1473061173", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Assert that the trust anchor was installed] ****************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:55 Tuesday 14 July 2026 03:06:30 -0400 (0:00:00.336) 0:00:09.717 ********** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Check that the test CA certificate is now trusted] *********************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:63 Tuesday 14 July 2026 03:06:30 -0400 (0:00:00.018) 0:00:09.736 ********** [WARNING]: conditional statements should not include jinja2 templating delimiters such as {{ }} or {% %}. Found: {{ __trust_verify_after.stdout is not search(': OK') }} ok: [managed-node2] => { "changed": false, "cmd": [ "openssl", "verify", "/tmp/lsr_trust_test_ca.crt" ], "delta": "0:00:00.012862", "end": "2026-07-14 03:06:30.625303", "failed_when_result": false, "rc": 0, "start": "2026-07-14 03:06:30.612441" } STDOUT: /tmp/lsr_trust_test_ca.crt: OK TASK [Slurp the test CA certificate] ******************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:69 Tuesday 14 July 2026 03:06:30 -0400 (0:00:00.335) 0:00:10.072 ********** ok: [managed-node2] => { "changed": false, "content": "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", "encoding": "base64", "source": "/tmp/lsr_trust_test_ca.crt" } TASK [Run the role to trust inline certificate content] ************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:74 Tuesday 14 July 2026 03:06:31 -0400 (0:00:00.398) 0:00:10.470 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:9 Tuesday 14 July 2026 03:06:31 -0400 (0:00:00.025) 0:00:10.496 ********** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23 Tuesday 14 July 2026 03:06:31 -0400 (0:00:00.001) 0:00:10.497 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33 Tuesday 14 July 2026 03:06:31 -0400 (0:00:00.024) 0:00:10.522 ********** included: fedora.linux_system_roles.certificate for managed-node2 TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Tuesday 14 July 2026 03:06:31 -0400 (0:00:00.060) 0:00:10.583 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Tuesday 14 July 2026 03:06:31 -0400 (0:00:00.032) 0:00:10.615 ********** ok: [managed-node2] TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Tuesday 14 July 2026 03:06:31 -0400 (0:00:00.546) 0:00:11.162 ********** ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.323) 0:00:11.485 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.020) 0:00:11.506 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.017) 0:00:11.524 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.016) 0:00:11.541 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.017) 0:00:11.558 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.017) 0:00:11.575 ********** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:10 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.038) 0:00:11.613 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:16 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.013) 0:00:11.627 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:26 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.020) 0:00:11.648 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:50 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.021) 0:00:11.669 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:77 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.020) 0:00:11.690 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure certificates in the system trust store] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:87 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.025) 0:00:11.715 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Validate certificate_trust items] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:3 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.021) 0:00:11.737 ********** ok: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "item": { "content": "-----BEGIN CERTIFICATE-----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\njx0fNO7/1KwhhW7jI1461hY9VYXVVB/YG1a+hk8=\n-----END CERTIFICATE-----\n", "name": "lsr-trust-test-content" } } MSG: All assertions passed TASK [fedora.linux_system_roles.certificate : Ensure trust store packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 Tuesday 14 July 2026 03:06:32 -0400 (0:00:00.031) 0:00:11.769 ********** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.certificate : Install trust certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:26 Tuesday 14 July 2026 03:06:33 -0400 (0:00:01.282) 0:00:13.051 ********** changed: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": true, "checksum": "6b3c586b62e4ceb976c4dfeada1b1a22d58375c3", "dest": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-content.crt", "gid": 0, "group": "root", "item": { "content": "-----BEGIN CERTIFICATE-----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\njx0fNO7/1KwhhW7jI1461hY9VYXVVB/YG1a+hk8=\n-----END CERTIFICATE-----\n", "name": "lsr-trust-test-content" }, "md5sum": "e0e4e609c72f409469fae499c0424d56", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:cert_t:s0", "size": 1135, "src": "/root/.ansible/tmp/ansible-tmp-1784012793.727589-19008-62795808745611/.source.crt", "state": "file", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Install trust certificates from URL] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:43 Tuesday 14 July 2026 03:06:34 -0400 (0:00:00.638) 0:00:13.691 ********** skipping: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.url is defined", "item": { "content": "-----BEGIN CERTIFICATE-----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\njx0fNO7/1KwhhW7jI1461hY9VYXVVB/YG1a+hk8=\n-----END CERTIFICATE-----\n", "name": "lsr-trust-test-content" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Remove trust certificates] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:58 Tuesday 14 July 2026 03:06:34 -0400 (0:00:00.022) 0:00:13.714 ********** skipping: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'absent'", "item": { "content": "-----BEGIN CERTIFICATE-----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\njx0fNO7/1KwhhW7jI1461hY9VYXVVB/YG1a+hk8=\n-----END CERTIFICATE-----\n", "name": "lsr-trust-test-content" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Update system trust store] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:68 Tuesday 14 July 2026 03:06:34 -0400 (0:00:00.021) 0:00:13.735 ********** changed: [managed-node2] => { "changed": true, "cmd": [ "/usr/bin/update-ca-trust", "extract" ], "delta": "0:00:00.916704", "end": "2026-07-14 03:06:35.532508", "rc": 0, "start": "2026-07-14 03:06:34.615804" } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:91 Tuesday 14 July 2026 03:06:35 -0400 (0:00:01.240) 0:00:14.976 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.011) 0:00:14.987 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:148 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.013) 0:00:15.001 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:156 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.011) 0:00:15.013 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:160 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.013) 0:00:15.026 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.013) 0:00:15.039 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:179 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.014) 0:00:15.054 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:190 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.019) 0:00:15.073 ********** ok: [managed-node2] => { "changed": false } TASK [Get the trust anchor file attributes] ************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:82 Tuesday 14 July 2026 03:06:35 -0400 (0:00:00.320) 0:00:15.394 ********** ok: [managed-node2] => { "changed": false, "stat": { "atime": 1784012794.62118, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "6b3c586b62e4ceb976c4dfeada1b1a22d58375c3", "ctime": 1784012794.246178, "dev": 66305, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 578814171, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0644", "mtime": 1784012794.0041766, "nlink": 1, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-content.crt", "pw_name": "root", "readable": true, "rgrp": true, "roth": true, "rusr": true, "size": 1135, "uid": 0, "version": "2493129665", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Assert that the trust anchor was installed] ****************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:87 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.330) 0:00:15.724 ********** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Run the role with conflicting certificate sources] *********************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:97 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.021) 0:00:15.745 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:9 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.018) 0:00:15.764 ********** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.000) 0:00:15.765 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.016) 0:00:15.782 ********** included: fedora.linux_system_roles.certificate for managed-node2 TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.035) 0:00:15.817 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.018) 0:00:15.836 ********** ok: [managed-node2] TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Tuesday 14 July 2026 03:06:36 -0400 (0:00:00.521) 0:00:16.358 ********** ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.315) 0:00:16.673 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.017) 0:00:16.691 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.017) 0:00:16.708 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.017) 0:00:16.726 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.016) 0:00:16.742 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.021) 0:00:16.764 ********** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:10 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.040) 0:00:16.805 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:16 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.015) 0:00:16.820 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:26 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.021) 0:00:16.841 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:50 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.020) 0:00:16.862 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:77 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.021) 0:00:16.883 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure certificates in the system trust store] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:87 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.020) 0:00:16.904 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Validate certificate_trust items] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:3 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.022) 0:00:16.926 ********** failed: [managed-node2] (item=lsr-trust-test-invalid) => { "ansible_loop_var": "item", "assertion": "item.state | d('present') == 'absent' or [item.content is defined, item.src is defined, item.url is defined] | select | list | length == 1", "changed": false, "evaluated_to": false, "item": { "content": "not-a-certificate", "name": "lsr-trust-test-invalid", "url": "https://ca.example.com/ca.crt" } } MSG: Each certificate_trust item must have a name, state must be 'present' or 'absent', and exactly one of content, src, or url must be given when state is 'present' TASK [Assert that the role failed in validation] ******************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:109 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.032) 0:00:16.958 ********** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Run the role to remove the trust anchors] ******************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:118 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.020) 0:00:16.978 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:9 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.022) 0:00:17.001 ********** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.000) 0:00:17.001 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.017) 0:00:17.018 ********** included: fedora.linux_system_roles.certificate for managed-node2 TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.034) 0:00:17.053 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Tuesday 14 July 2026 03:06:37 -0400 (0:00:00.020) 0:00:17.073 ********** ok: [managed-node2] TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.519) 0:00:17.593 ********** ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.315) 0:00:17.909 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.017) 0:00:17.926 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.016) 0:00:17.943 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.016) 0:00:17.959 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.017) 0:00:17.977 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.017) 0:00:17.994 ********** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:10 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.039) 0:00:18.033 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:16 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.014) 0:00:18.048 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:26 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.020) 0:00:18.068 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:50 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.020) 0:00:18.089 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:77 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.021) 0:00:18.111 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure certificates in the system trust store] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:87 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.020) 0:00:18.131 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Validate certificate_trust items] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:3 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.021) 0:00:18.152 ********** ok: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "item": { "name": "lsr-trust-test-src", "state": "absent" } } MSG: All assertions passed ok: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "item": { "name": "lsr-trust-test-content", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.certificate : Ensure trust store packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 Tuesday 14 July 2026 03:06:38 -0400 (0:00:00.043) 0:00:18.195 ********** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.certificate : Install trust certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:26 Tuesday 14 July 2026 03:06:40 -0400 (0:00:01.249) 0:00:19.445 ********** skipping: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-src", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-content", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Install trust certificates from URL] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:43 Tuesday 14 July 2026 03:06:40 -0400 (0:00:00.021) 0:00:19.466 ********** skipping: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-src", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-content", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Remove trust certificates] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:58 Tuesday 14 July 2026 03:06:40 -0400 (0:00:00.021) 0:00:19.488 ********** changed: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": true, "item": { "name": "lsr-trust-test-src", "state": "absent" }, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-src.crt", "state": "absent" } changed: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": true, "item": { "name": "lsr-trust-test-content", "state": "absent" }, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-content.crt", "state": "absent" } TASK [fedora.linux_system_roles.certificate : Update system trust store] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:68 Tuesday 14 July 2026 03:06:40 -0400 (0:00:00.738) 0:00:20.226 ********** changed: [managed-node2] => { "changed": true, "cmd": [ "/usr/bin/update-ca-trust", "extract" ], "delta": "0:00:00.916863", "end": "2026-07-14 03:06:42.027964", "rc": 0, "start": "2026-07-14 03:06:41.111101" } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:91 Tuesday 14 July 2026 03:06:42 -0400 (0:00:01.246) 0:00:21.472 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.011) 0:00:21.484 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:148 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.013) 0:00:21.498 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:156 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.013) 0:00:21.511 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:160 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.013) 0:00:21.524 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.013) 0:00:21.538 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:179 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.015) 0:00:21.553 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:190 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.020) 0:00:21.574 ********** ok: [managed-node2] => { "changed": false } TASK [Get the trust anchor file attributes] ************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:128 Tuesday 14 July 2026 03:06:42 -0400 (0:00:00.316) 0:00:21.890 ********** ok: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "item": "lsr-trust-test-src", "stat": { "exists": false } } ok: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "item": "lsr-trust-test-content", "stat": { "exists": false } } TASK [Assert that the trust anchors were removed] ****************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:136 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.623) 0:00:22.514 ********** ok: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "failed": false, "invocation": { "module_args": { "checksum_algorithm": "sha1", "follow": false, "get_attributes": true, "get_checksum": true, "get_mime": true, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-src.crt" } }, "item": "lsr-trust-test-src", "stat": { "exists": false } } } MSG: All assertions passed ok: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "failed": false, "invocation": { "module_args": { "checksum_algorithm": "sha1", "follow": false, "get_attributes": true, "get_checksum": true, "get_mime": true, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-content.crt" } }, "item": "lsr-trust-test-content", "stat": { "exists": false } } } MSG: All assertions passed TASK [Check that the test CA certificate is no longer trusted] ***************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:143 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.024) 0:00:22.539 ********** ok: [managed-node2] => { "changed": false, "cmd": [ "openssl", "verify", "/tmp/lsr_trust_test_ca.crt" ], "delta": "0:00:00.012779", "end": "2026-07-14 03:06:43.429687", "failed_when_result": false, "rc": 2, "start": "2026-07-14 03:06:43.416908" } STDERR: CN=LSR-Trust-Test-CA error 18 at 0 depth lookup: self-signed certificate error /tmp/lsr_trust_test_ca.crt: verification failed MSG: non-zero return code TASK [Assert that the test CA certificate is no longer trusted] **************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:149 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.333) 0:00:22.872 ********** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [Run the role to clean up the trust anchors] ****************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:153 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.021) 0:00:22.893 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:9 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.025) 0:00:22.918 ********** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:23 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.001) 0:00:22.920 ********** included: fedora.linux_system_roles.certificate for managed-node2 TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.043) 0:00:22.963 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Tuesday 14 July 2026 03:06:43 -0400 (0:00:00.028) 0:00:22.992 ********** ok: [managed-node2] TASK [fedora.linux_system_roles.certificate : Record role begin fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.537) 0:00:23.529 ********** ok: [managed-node2] => { "changed": false } TASK [fedora.linux_system_roles.certificate : Check if system is ostree] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:16 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.329) 0:00:23.859 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:21 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.019) 0:00:23.878 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "not __certificate_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Run systemctl] ******************* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:28 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.019) 0:00:23.898 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Require installed systemd] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:36 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.019) 0:00:23.917 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:41 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.018) 0:00:23.936 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:46 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.019) 0:00:23.955 ********** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } ok: [managed-node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__certificate_certmonger_packages": [ "certmonger", "python3-packaging" ] }, "ansible_included_var_files": [ "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:10 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.052) 0:00:24.008 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:16 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.020) 0:00:24.028 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:26 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.026) 0:00:24.055 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:50 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.026) 0:00:24.082 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:77 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.026) 0:00:24.108 ********** skipping: [managed-node2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "false_condition": "certificate_requests | length > 0", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Ensure certificates in the system trust store] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:87 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.026) 0:00:24.135 ********** included: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml for managed-node2 TASK [fedora.linux_system_roles.certificate : Validate certificate_trust items] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:3 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.027) 0:00:24.162 ********** ok: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "item": { "name": "lsr-trust-test-src", "state": "absent" } } MSG: All assertions passed ok: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "item": { "name": "lsr-trust-test-content", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.certificate : Ensure trust store packages are installed] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 Tuesday 14 July 2026 03:06:44 -0400 (0:00:00.049) 0:00:24.211 ********** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.certificate : Install trust certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:26 Tuesday 14 July 2026 03:06:46 -0400 (0:00:01.244) 0:00:25.456 ********** skipping: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-src", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-content", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Install trust certificates from URL] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:43 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.031) 0:00:25.487 ********** skipping: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-src", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "false_condition": "item.state | d('present') == 'present'", "item": { "name": "lsr-trust-test-content", "state": "absent" }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.certificate : Remove trust certificates] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:58 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.030) 0:00:25.518 ********** ok: [managed-node2] => (item=lsr-trust-test-src) => { "ansible_loop_var": "item", "changed": false, "item": { "name": "lsr-trust-test-src", "state": "absent" }, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-src.crt", "state": "absent" } ok: [managed-node2] => (item=lsr-trust-test-content) => { "ansible_loop_var": "item", "changed": false, "item": { "name": "lsr-trust-test-content", "state": "absent" }, "path": "/etc/pki/ca-trust/source/anchors/lsr-trust-test-content.crt", "state": "absent" } TASK [fedora.linux_system_roles.certificate : Update system trust store] ******* task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:68 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.652) 0:00:26.170 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__certificate_trust_copied is changed or __certificate_trust_downloaded is changed or __certificate_trust_removed is changed", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:91 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.018) 0:00:26.189 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.010) 0:00:26.200 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:148 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.019) 0:00:26.220 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] **** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:156 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.013) 0:00:26.233 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Create return data] ************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:160 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.019) 0:00:26.252 ********** skipping: [managed-node2] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ****** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.013) 0:00:26.266 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Remove files] ******************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:179 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.020) 0:00:26.286 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "certificate_test_mode | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Record role success fingerprint] *** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:190 Tuesday 14 July 2026 03:06:46 -0400 (0:00:00.024) 0:00:26.311 ********** ok: [managed-node2] => { "changed": false } TASK [Run the role normally] *************************************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/run_role_with_clear_facts.yml:33 Tuesday 14 July 2026 03:06:47 -0400 (0:00:00.323) 0:00:26.634 ********** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when | d(true)", "skip_reason": "Conditional result was False" } TASK [Clean up the test CA certificate and key] ******************************** task path: /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:164 Tuesday 14 July 2026 03:06:47 -0400 (0:00:00.014) 0:00:26.649 ********** changed: [managed-node2] => (item=/tmp/lsr_trust_test_ca.crt) => { "ansible_loop_var": "item", "changed": true, "item": "/tmp/lsr_trust_test_ca.crt", "path": "/tmp/lsr_trust_test_ca.crt", "state": "absent" } changed: [managed-node2] => (item=/tmp/lsr_trust_test_ca.key) => { "ansible_loop_var": "item", "changed": true, "item": "/tmp/lsr_trust_test_ca.key", "path": "/tmp/lsr_trust_test_ca.key", "state": "absent" } PLAY RECAP ********************************************************************* managed-node2 : ok=78 changed=8 unreachable=0 failed=0 skipped=94 rescued=1 ignored=0 SYSTEM ROLES ERRORS BEGIN v1 [ { "ansible_version": "2.17.14", "end_time": "2026-07-14T07:06:37.561293+00:00Z", "host": "managed-node2", "loop_item": { "content": "not-a-certificate", "name": "lsr-trust-test-invalid", "url": "https://ca.example.com/ca.crt" }, "loop_label": "lsr-trust-test-invalid", "loop_var": "item", "message": "Each certificate_trust item must have a name, state must be 'present' or 'absent', and exactly one of content, src, or url must be given when state is 'present'", "start_time": "2026-07-14T07:06:37.530951+00:00Z", "task_name": "Validate certificate_trust items", "task_path": "/tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:3" } ] SYSTEM ROLES ERRORS END v1 TASKS RECAP ******************************************************************** Tuesday 14 July 2026 03:06:47 -0400 (0:00:00.629) 0:00:27.279 ********** =============================================================================== fedora.linux_system_roles.certificate : Ensure trust store packages are installed --- 1.28s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 fedora.linux_system_roles.certificate : Update system trust store ------- 1.27s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:68 fedora.linux_system_roles.certificate : Ensure trust store packages are installed --- 1.25s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 fedora.linux_system_roles.certificate : Ensure trust store packages are installed --- 1.25s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 fedora.linux_system_roles.certificate : Update system trust store ------- 1.25s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:68 fedora.linux_system_roles.certificate : Ensure trust store packages are installed --- 1.24s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:20 fedora.linux_system_roles.certificate : Update system trust store ------- 1.24s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:68 Gathering Facts --------------------------------------------------------- 1.06s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:3 Ensure openssl is installed --------------------------------------------- 1.06s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:17 fedora.linux_system_roles.certificate : Remove trust certificates ------- 0.74s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:58 fedora.linux_system_roles.certificate : Remove trust certificates ------- 0.65s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:58 fedora.linux_system_roles.certificate : Install trust certificates ------ 0.64s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:26 Clean up the test CA certificate and key -------------------------------- 0.63s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:164 Get the trust anchor file attributes ------------------------------------ 0.62s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_trust.yml:128 fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.55s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.54s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.53s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.52s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.52s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Install trust certificates ------ 0.47s /tmp/collections-8AM/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/certificate_trust.yml:26