fix tests (#5)

* add file modes

* extend ci

* ci: add schedule

Author: resmo

.github/workflows/ci.yml

@@ -7,6 +7,8 @@ name: CI
       - main
     tags:
       - "v*"
+  schedule:
+    - cron: 57 7 * * 2  # Run weekly
 
 defaults:
   run:
@@ -44,16 +46,22 @@ jobs:
     strategy:
       matrix:
         include:
+          - distro: debian12
+            playbook: converge.yml
           - distro: debian11
             playbook: converge.yml
-          - distro: rockylinux8
+          - distro: debian10
             playbook: converge.yml
-          - distro: ubuntu2004
+          - distro: rockylinux9
             playbook: converge.yml
-          - distro: debian10
+          - distro: rockylinux8
             playbook: converge.yml
           - distro: centos7
             playbook: converge.yml
+          - distro: ubuntu2204
+            playbook: converge.yml
+          - distro: ubuntu2004
+            playbook: converge.yml
     steps:
       - name: Check out the codebase.
         uses: actions/checkout@v4
@@ -66,7 +74,7 @@ jobs:
           python-version: "3.x"
 
       - name: Install test dependencies.
-        run: pip3 install ansible molecule[docker] docker
+        run: pip3 install ansible molecule molecule-docker docker
 
       - name: Run Molecule tests.
         run: molecule test

molecule/default/molecule.yml

@@ -5,10 +5,11 @@ driver:
   name: docker
 platforms:
   - name: instance
-    image: "geerlingguy/docker-${MOLECULE_DISTRO:-debian11}-ansible:latest"
+    image: "geerlingguy/docker-${MOLECULE_DISTRO:-debian12}-ansible:latest"
     command: ${MOLECULE_DOCKER_COMMAND:-""}
     volumes:
-      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    cgroupns_mode: host
     privileged: true
     pre_build_image: true
 provisioner:

tasks/main.yml

@@ -17,23 +17,27 @@
       run_once: false
       ansible.builtin.template:
         src: ssh_config.j2
+        mode: "0640"
         dest: "{{ ssh_config__fragments_path }}/{{ inventory_hostname }}"
       changed_when: false
 
     - name: Create destination directory
       ansible.builtin.file:
         path: "{{ ssh_config__dest_path }}"
+        mode: "0755"
         state: directory
 
     - name: Add header file
       ansible.builtin.copy:
         content: "### Autogenerated, do not modify ###\n"
+        mode: "0644"
         dest: "{{ ssh_config__fragments_path }}/00-header"
       changed_when: false
 
     - name: Assemble config fragments into a single SSH config
       ansible.builtin.assemble:
         src: "{{ ssh_config__fragments_path }}"
+        mode: "0600"
         dest: "{{ ssh_config__dest_path }}/ssh_config_{{ ssh_config__env }}.conf"
         delimiter: "\n"