Use vagrant/libvirt to test flatpaks requiring escalated privileges; install vagrant dependencies on CI

Author: ivan-c

.github/workflows/molecule-test.yaml

@@ -6,13 +6,26 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - name: Check out code
+        uses: actions/checkout@v3
 
       - name: Set up Python 3
         uses: actions/setup-python@v4
         with:
           python-version: 3.x
 
+      - name: Install vagrant and libvirt packages
+        run:
+          sudo apt-get install --no-install-recommends
+            libvirt-daemon-system
+            vagrant-libvirt
+            qemu-kvm
+            libguestfs-tools
+
+        # HACK molecule does not emit colored output with sudo
+      - name: Allow any user to run libvirt
+        run: sudo chmod o+rw /var/run/libvirt/libvirt-sock
+
       - name: Install test runner
         run: python3 -m pip install tox
 

requirements.txt

@@ -1,5 +1,8 @@
 molecule[docker]==4.0.4
 
+molecule-plugins[vagrant]==v23.0.0
+python-vagrant==1.0.0
+
 # ansible-compat 3.0 requires ansible 2.11
 ansible-compat<3.0
 

roles/work/molecule/default/converge.yml

@@ -0,0 +1,13 @@
+---
+- name: Converge
+  hosts: all
+  pre_tasks:
+    - name: Update apt cache
+      ansible.builtin.apt:
+        update_cache: yes
+        cache_valid_time: 3600
+      become: yes
+  roles:
+    # dynamically set role name from role directory name
+    - role: "{{ lookup('env','MOLECULE_PROJECT_DIRECTORY').split('/')[-1] }}"
+      become: yes

roles/work/molecule/default/molecule.yml

@@ -1,14 +1,13 @@
 # molecule config stub
 # extends --base-config molecule/default/molecule.yml
 ---
+driver:
+  name: vagrant
+  provider:
+    # zoom flatpak requires ability to create namespace
+    name: libvirt
+  provision: true
 platforms:
-  - name: instance
+  - name: bullseye
     # pin to current debian stable
-    image: python:3-bullseye
-    pre_build_image: true
-    # zoom flatpak requires ability to create namespace
-    privileged: true
-provisioner:
-  name: ansible
-  playbooks:
-    converge: ../../../../molecule/default/converge.yml
+    box: debian/bullseye64