No config file found; using defaults [WARNING]: No inventory was parsed, only implicit localhost is available [WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all' PLAY [Build a centos 9 cloud image suitable for Zuul] ************************** TASK [Gathering Facts] ********************************************************* ok: [localhost] TASK [discover-centos : Fail when release is not set] ************************** skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [discover-centos : Fail when composes is set to Centos 8 stream] ********** skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [discover-centos : tempfile] ********************************************** changed: [localhost] => {"changed": true, "gid": 0, "group": "root", "mode": "0600", "owner": "root", "path": "/tmp/ansible.43pp5_8u", "size": 0, "state": "file", "uid": 0} TASK [discover-centos : file] ************************************************** changed: [localhost] => {"changed": true, "path": "/tmp/ansible.43pp5_8u", "state": "absent"} TASK [discover-centos : Set proper url - stable] ******************************* ok: [localhost] => {"ansible_facts": {"mirror_url": "https://cloud.centos.org/centos/9-stream/x86_64/images"}, "changed": false} TASK [discover-centos : Set proper url - composes] ***************************** skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [discover-centos : Fetch publication page] ******************************** changed: [localhost] => {"changed": true, "checksum_dest": null, "checksum_src": "9285f0f14f873cfd9cf3b2e8220c70eafe87d22e", "dest": "/tmp/ansible.43pp5_8u", "elapsed": 0, "gid": 0, "group": "root", "md5sum": "cb6a2e94c6bc138fdfa444a0c264979e", "mode": "0644", "msg": "OK (unknown bytes)", "owner": "root", "size": 151014, "src": "/root/.ansible/tmp/ansible-tmp-1774904607.5053182-2462-36909388506202/tmpa5qg08ro", "state": "file", "status_code": 200, "uid": 0, "url": "https://cloud.centos.org/centos/9-stream/x86_64/images"} TASK [discover-centos : Find specified centos image version] ******************* skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [discover-centos : Find centos-9-stream qcow] ***************************** [WARNING]: Consider using the replace, lineinfile or template module rather than running 'sed'. If you need to use command because replace, lineinfile or template is insufficient you can add 'warn: false' to this command task or set 'command_warnings=False' in ansible.cfg to get rid of this message. changed: [localhost] => {"changed": true, "cmd": "sed -n \"/qcow2/ s/.*\\(CentOS-Stream-GenericCloud-9-.*\\)<\\/a>.*/\\1/p\" /tmp/ansible.43pp5_8u | grep -v 'latest' | sort | grep -vEi 'md5sum|sha1sum|sha256sum' | tail -n1\n", "delta": "0:00:00.018714", "end": "2026-03-30 21:03:28.878256", "rc": 0, "start": "2026-03-30 21:03:28.859542", "stderr": "", "stderr_lines": [], "stdout": "CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "stdout_lines": ["CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2"]} TASK [discover-centos : Find checksum file url] ******************************** changed: [localhost] => {"changed": true, "cmd": "sed -n \"/SHA256SUM/ s/.*\\(CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2.SHA256SUM\\)<\\/a>.*/\\1/p\" /tmp/ansible.43pp5_8u\n", "delta": "0:00:00.010740", "end": "2026-03-30 21:03:29.163838", "rc": 0, "start": "2026-03-30 21:03:29.153098", "stderr": "", "stderr_lines": [], "stdout": "CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2.SHA256SUM", "stdout_lines": ["CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2.SHA256SUM"]} TASK [discover-centos : set_fact] ********************************************** ok: [localhost] => {"ansible_facts": {"checksums_url": "https://cloud.centos.org/centos/9-stream/x86_64/images/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2.SHA256SUM"}, "changed": false} TASK [discover-centos : file] ************************************************** changed: [localhost] => {"changed": true, "path": "/tmp/ansible.43pp5_8u", "state": "absent"} TASK [discover-centos : Fetch checksum file] *********************************** changed: [localhost] => {"changed": true, "checksum_dest": null, "checksum_src": "24bc84107d0355123ce1f984d175ecfed4ef4a5d", "dest": "/tmp/ansible.43pp5_8u", "elapsed": 0, "gid": 0, "group": "root", "md5sum": "0b0c2e0d4a719625aca32be6f4e6d0b3", "mode": "0644", "msg": "OK (202 bytes)", "owner": "root", "size": 202, "src": "/root/.ansible/tmp/ansible-tmp-1774904609.535974-2540-195058891328684/tmp_0cwjs77", "state": "file", "status_code": 200, "uid": 0, "url": "https://cloud.centos.org/centos/9-stream/x86_64/images/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2.SHA256SUM"} TASK [discover-centos : Find checksum] ***************************************** changed: [localhost] => {"changed": true, "cmd": "tail -n1 /tmp/ansible.43pp5_8u | awk '{print $4}'\n", "delta": "0:00:00.016308", "end": "2026-03-30 21:03:30.220753", "rc": 0, "start": "2026-03-30 21:03:30.204445", "stderr": "", "stderr_lines": [], "stdout": "a81ad1e7ae33177a87c54e3027a6adc7591d353d67a4a404bcafa0ed3c2c644a", "stdout_lines": ["a81ad1e7ae33177a87c54e3027a6adc7591d353d67a4a404bcafa0ed3c2c644a"]} TASK [discover-centos : set_fact] ********************************************** ok: [localhost] => {"ansible_facts": {"image": "CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "image_checksum": "sha256:a81ad1e7ae33177a87c54e3027a6adc7591d353d67a4a404bcafa0ed3c2c644a", "image_url": "https://cloud.centos.org/centos/9-stream/x86_64/images/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2"}, "changed": false} TASK [discover-centos : debug] ************************************************* ok: [localhost] => { "msg": "Discovered image name: CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2\nDiscovered image_url: https://cloud.centos.org/centos/9-stream/x86_64/images/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2\nDiscovered image_checksum: sha256:a81ad1e7ae33177a87c54e3027a6adc7591d353d67a4a404bcafa0ed3c2c644a\n" } TASK [base-appliance : Set appliance_archive] ********************************** ok: [localhost] => {"ansible_facts": {"appliance_archive": "/tmp/appliance-1.54.0.tar.xz"}, "changed": false} TASK [base-appliance : Set appliance_path] ************************************* ok: [localhost] => {"ansible_facts": {"appliance_path": "/tmp//tmp/appliance-1.54.0"}, "changed": false} TASK [base-appliance : Remove existing appliance directory to avoid error: virt-customize: error: libguestfs error: cannot find any suitable libguestfs supermin] *** changed: [localhost] => {"changed": true, "path": "/tmp//tmp/appliance-1.54.0", "state": "absent"} TASK [base-appliance : Ensure appliance_path exists] *************************** changed: [localhost] => {"changed": true, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/tmp//tmp/appliance-1.54.0", "size": 6, "state": "directory", "uid": 0} TASK [base-appliance : Download appliance] ************************************* ok: [localhost] => {"changed": false, "dest": "/tmp/appliance-1.54.0.tar.xz", "elapsed": 0, "gid": 0, "group": "root", "mode": "0644", "msg": "HTTP Error 304: Not Modified", "owner": "root", "size": 197794224, "state": "file", "uid": 0, "url": "https://download.libguestfs.org/binaries/appliance/appliance-1.54.0.tar.xz"} TASK [base-appliance : Unarchive appliance] ************************************ changed: [localhost] => {"changed": true, "dest": "/tmp//tmp/appliance-1.54.0", "extract_results": {"cmd": ["/bin/gtar", "--extract", "-C", "/tmp//tmp/appliance-1.54.0", "-f", "/root/.ansible/tmp/ansible-tmp-1774904611.867781-2634-125132537454995/source"], "err": "", "out": "", "rc": 0}, "gid": 0, "group": "root", "handler": "TarArchive", "mode": "0755", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1774904611.867781-2634-125132537454995/source", "state": "directory", "uid": 0} TASK [base-appliance : set_fact] *********************************************** ok: [localhost] => {"ansible_facts": {"virt_customize_env": {"LIBGUESTFS_BACKEND": "direct", "LIBGUESTFS_PATH": "/tmp//tmp/appliance-1.54.0/appliance"}}, "changed": false} TASK [base : assert] *********************************************************** ok: [localhost] => { "changed": false, "msg": "All assertions passed" } TASK [base : Set some runtime facts] ******************************************* ok: [localhost] => {"ansible_facts": {"image_cache_file": "/var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "image_tmp_dir": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786"}, "changed": false} TASK [base : Make sure cache directory exist] ********************************** ok: [localhost] => {"changed": false, "gid": 1002, "group": "1002", "mode": "0755", "owner": "1002", "path": "/var/cache/nodepool", "size": 8192, "state": "directory", "uid": 1002} TASK [base : Delete previous image cache] ************************************** skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [base : Check if image is already downloaded] ***************************** ok: [localhost] => {"changed": false, "stat": {"atime": 1774904426.786252, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 3748456, "charset": "binary", "checksum": "9d742da397ac42f8060f72cb95c9a730fbc2b7a8", "ctime": 1774904425.676219, "dev": 64545, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 70, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "application/octet-stream", "mode": "0644", "mtime": 1774904425.676219, "nlink": 1, "path": "/var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "pw_name": "root", "readable": true, "rgrp": true, "roth": true, "rusr": true, "size": 1919221760, "uid": 0, "version": "1204573827", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}} TASK [base : Download if checksum doesn't match] ******************************* skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [base : Extract the image if necessary] *********************************** ok: [localhost] => {"changed": false, "cmd": ["xz", "-k", "-d", "/var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2.xz"], "rc": 0, "stdout": "skipped, since /var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2 exists", "stdout_lines": ["skipped, since /var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2 exists"]} TASK [base : Run pre-update command if needed] ********************************* changed: [localhost] => {"changed": true, "cmd": ["virt-customize", "-m", "2048", "-a", "/var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--run-command", "dnf -y install dnf-plugins-core && dnf config-manager --set-enabled crb --save"], "delta": "0:00:24.311710", "end": "2026-03-30 21:04:39.741093", "rc": 0, "start": "2026-03-30 21:04:15.429383", "stderr": "", "stderr_lines": [], "stdout": "[ 0.0] Examining the guest ...\n[ 16.3] Setting a random seed\n[ 16.4] Running: dnf -y install dnf-plugins-core && dnf config-manager --set-enabled crb --save\n[ 24.0] Finishing off", "stdout_lines": ["[ 0.0] Examining the guest ...", "[ 16.3] Setting a random seed", "[ 16.4] Running: dnf -y install dnf-plugins-core && dnf config-manager --set-enabled crb --save", "[ 24.0] Finishing off"]} TASK [base : Set custom kernel version] **************************************** skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [base : Exclude packages for being updated] ******************************* skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [base : Update the cache] ************************************************* changed: [localhost] => {"changed": true, "cmd": ["virt-customize", "-m", "2048", "-a", "/var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--update"], "delta": "0:00:25.140005", "end": "2026-03-30 21:05:05.268035", "rc": 0, "start": "2026-03-30 21:04:40.128030", "stderr": "", "stderr_lines": [], "stdout": "[ 0.0] Examining the guest ...\n[ 16.4] Setting a random seed\n[ 16.4] Updating packages\n[ 24.8] Finishing off", "stdout_lines": ["[ 0.0] Examining the guest ...", "[ 16.4] Setting a random seed", "[ 16.4] Updating packages", "[ 24.8] Finishing off"]} TASK [base : Create tmp directory] ********************************************* changed: [localhost] => {"changed": true, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786", "size": 6, "state": "directory", "uid": 0} TASK [base : Set filename copy fact] ******************************************* ok: [localhost] => {"ansible_facts": {"image_file": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2"}, "changed": false} TASK [base : Copy the image] *************************************************** changed: [localhost] => {"changed": true, "checksum": "df0c825a3434c6e10edd029126d98a304bc6eae2", "dest": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "gid": 0, "group": "root", "md5sum": "c2e99a485ac79521870f0691f40327c7", "mode": "0644", "owner": "root", "size": 1919221760, "src": "/var/cache/nodepool/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "state": "file", "uid": 0} TASK [Install base package and setup SELINUX] ********************************** ok: [localhost] => {"ansible_facts": {"virt_customize_cmd": ["virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install 'traceroute,iproute,git,rsync'", "--run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config'"]}, "changed": false} TASK [sshd-config : Prepare sshd_config file] ********************************** changed: [localhost] => {"changed": true, "checksum": "426f750873a82338136ef9ff497829722a2a035c", "dest": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config", "gid": 0, "group": "root", "md5sum": "0f47734e2af65faf089c7bb0a53ff448", "mode": "0644", "owner": "root", "size": 907, "src": "/root/.ansible/tmp/ansible-tmp-1774904713.8782892-2836-239151558869966/source", "state": "file", "uid": 0} TASK [sshd-config : set_fact] ************************************************** ok: [localhost] => {"ansible_facts": {"cmd": ["--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/'", "--chmod '0600:/etc/ssh/sshd_config'"]}, "changed": false} TASK [sshd-config : Generate ssh host keys] ************************************ skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [sshd-config : set_fact] ************************************************** ok: [localhost] => {"ansible_facts": {"virt_customize_cmd": ["virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install 'traceroute,iproute,git,rsync'", "--run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/'", "--chmod '0600:/etc/ssh/sshd_config'"]}, "changed": false} TASK [zuul-user : Prepare the sudoers file] ************************************ changed: [localhost] => {"changed": true, "checksum": "bf0831556e9f0a8ed0d5520b424f992f590ea2e3", "dest": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul", "gid": 0, "group": "root", "md5sum": "4dca5fc5ab85dbdfff30d6dde7c49c65", "mode": "0644", "owner": "root", "size": 87, "src": "/root/.ansible/tmp/ansible-tmp-1774904714.7071128-2867-94252139832957/source", "state": "file", "uid": 0} TASK [zuul-user : Prepare the authorized_keys file] **************************** changed: [localhost] => {"changed": true, "checksum": "8a762e403cc4ed4e8498b801fcf57c967505132e", "dest": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys", "gid": 0, "group": "root", "md5sum": "0df0a4d0f345163e88e6dd96d3cb5f35", "mode": "0644", "owner": "root", "size": 395, "src": "/var/lib/nodepool/.ssh/zuul_rsa.pub", "state": "file", "uid": 0} TASK [zuul-user : set_fact] **************************************************** ok: [localhost] => {"ansible_facts": {"cmd": ["--run-command 'if id zuul; then userdel -r -f zuul; fi'"]}, "changed": false} TASK [zuul-user : set_fact] **************************************************** ok: [localhost] => {"ansible_facts": {"virt_customize_cmd": ["virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install 'traceroute,iproute,git,rsync'", "--run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/'", "--chmod '0600:/etc/ssh/sshd_config'", "--run-command 'if id zuul; then userdel -r -f zuul; fi'"]}, "changed": false} TASK [zuul-user : set_fact] **************************************************** ok: [localhost] => {"ansible_facts": {"cmd": ["--run-command 'adduser -m zuul'", "--mkdir '/home/zuul/.ssh'", "--chmod '0700:/home/zuul/.ssh'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys:/home/zuul/.ssh/'", "--chmod '0600:/home/zuul/.ssh/authorized_keys'", "--run-command 'chown -R zuul:zuul /home/zuul/.ssh/'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul:/etc/sudoers.d/'", "--chmod '0440:/etc/sudoers.d/zuul'", "--run-command 'chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh'"]}, "changed": false} TASK [zuul-user : set_fact] **************************************************** ok: [localhost] => {"ansible_facts": {"virt_customize_cmd": ["virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install 'traceroute,iproute,git,rsync'", "--run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/'", "--chmod '0600:/etc/ssh/sshd_config'", "--run-command 'if id zuul; then userdel -r -f zuul; fi'", "--run-command 'adduser -m zuul'", "--mkdir '/home/zuul/.ssh'", "--chmod '0700:/home/zuul/.ssh'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys:/home/zuul/.ssh/'", "--chmod '0600:/home/zuul/.ssh/authorized_keys'", "--run-command 'chown -R zuul:zuul /home/zuul/.ssh/'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul:/etc/sudoers.d/'", "--chmod '0440:/etc/sudoers.d/zuul'", "--run-command 'chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh'"]}, "changed": false} TASK [base-install-packages : set_fact] **************************************** ok: [localhost] => {"ansible_facts": {"cmd": ["--install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts'"]}, "changed": false} TASK [base-install-packages : set_fact] **************************************** ok: [localhost] => {"ansible_facts": {"virt_customize_cmd": ["virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install 'traceroute,iproute,git,rsync'", "--run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/'", "--chmod '0600:/etc/ssh/sshd_config'", "--run-command 'if id zuul; then userdel -r -f zuul; fi'", "--run-command 'adduser -m zuul'", "--mkdir '/home/zuul/.ssh'", "--chmod '0700:/home/zuul/.ssh'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys:/home/zuul/.ssh/'", "--chmod '0600:/home/zuul/.ssh/authorized_keys'", "--run-command 'chown -R zuul:zuul /home/zuul/.ssh/'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul:/etc/sudoers.d/'", "--chmod '0440:/etc/sudoers.d/zuul'", "--run-command 'chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh'", "--install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts'"]}, "changed": false} TASK [network-config : set_fact] *********************************************** skipping: [localhost] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [network-config : set_fact] *********************************************** ok: [localhost] => {"ansible_facts": {"network_command": ["--install iptables", "--run-command 'iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT'", "--run-command 'iptables -I INPUT -p tcp -m tcp --dport 22 -j ACCEPT'", "--run-command 'iptables-save > /etc/sysconfig/iptables'", "--run-command 'systemctl enable iptables.service'"]}, "changed": false} TASK [network-config : set_fact] *********************************************** ok: [localhost] => {"ansible_facts": {"virt_customize_cmd": ["virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install 'traceroute,iproute,git,rsync'", "--run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/'", "--chmod '0600:/etc/ssh/sshd_config'", "--run-command 'if id zuul; then userdel -r -f zuul; fi'", "--run-command 'adduser -m zuul'", "--mkdir '/home/zuul/.ssh'", "--chmod '0700:/home/zuul/.ssh'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys:/home/zuul/.ssh/'", "--chmod '0600:/home/zuul/.ssh/authorized_keys'", "--run-command 'chown -R zuul:zuul /home/zuul/.ssh/'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul:/etc/sudoers.d/'", "--chmod '0440:/etc/sudoers.d/zuul'", "--run-command 'chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh'", "--install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts'", "--install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts'", "--install iptables", "--run-command 'iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT'", "--run-command 'iptables -I INPUT -p tcp -m tcp --dport 22 -j ACCEPT'", "--run-command 'iptables-save > /etc/sysconfig/iptables'", "--run-command 'systemctl enable iptables.service'"]}, "changed": false} TASK [enable-fips : set_fact] ************************************************** ok: [localhost] => {"ansible_facts": {"cmd": ["--run-command 'fips-mode-setup --enable'"]}, "changed": false} TASK [enable-fips : set_fact] ************************************************** ok: [localhost] => {"ansible_facts": {"virt_customize_cmd": ["virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install 'traceroute,iproute,git,rsync'", "--run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/'", "--chmod '0600:/etc/ssh/sshd_config'", "--run-command 'if id zuul; then userdel -r -f zuul; fi'", "--run-command 'adduser -m zuul'", "--mkdir '/home/zuul/.ssh'", "--chmod '0700:/home/zuul/.ssh'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys:/home/zuul/.ssh/'", "--chmod '0600:/home/zuul/.ssh/authorized_keys'", "--run-command 'chown -R zuul:zuul /home/zuul/.ssh/'", "--copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul:/etc/sudoers.d/'", "--chmod '0440:/etc/sudoers.d/zuul'", "--run-command 'chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh'", "--install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts'", "--install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts'", "--install iptables", "--run-command 'iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT'", "--run-command 'iptables -I INPUT -p tcp -m tcp --dport 22 -j ACCEPT'", "--run-command 'iptables-save > /etc/sysconfig/iptables'", "--run-command 'systemctl enable iptables.service'", "--run-command 'fips-mode-setup --enable'"]}, "changed": false} TASK [base-customize : debug] ************************************************** ok: [localhost] => { "msg": "Running: virt-customize -m 2048 -a /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2 --selinux-relabel --install 'traceroute,iproute,git,rsync' --run-command 'sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config' --copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/' --chmod '0600:/etc/ssh/sshd_config' --run-command 'if id zuul; then userdel -r -f zuul; fi' --run-command 'adduser -m zuul' --mkdir '/home/zuul/.ssh' --chmod '0700:/home/zuul/.ssh' --copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys:/home/zuul/.ssh/' --chmod '0600:/home/zuul/.ssh/authorized_keys' --run-command 'chown -R zuul:zuul /home/zuul/.ssh/' --copy-in '/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul:/etc/sudoers.d/' --chmod '0440:/etc/sudoers.d/zuul' --run-command 'chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh' --install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts' --install 'traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts' --install iptables --run-command 'iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT' --run-command 'iptables -I INPUT -p tcp -m tcp --dport 22 -j ACCEPT' --run-command 'iptables-save > /etc/sysconfig/iptables' --run-command 'systemctl enable iptables.service' --run-command 'fips-mode-setup --enable'" } TASK [base-customize : Run virt-customize] ************************************* changed: [localhost] => {"changed": true, "cmd": ["virt-customize", "-m", "2048", "-a", "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "--selinux-relabel", "--install", "traceroute,iproute,git,rsync", "--run-command", "sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config", "--copy-in", "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config:/etc/ssh/", "--chmod", "0600:/etc/ssh/sshd_config", "--run-command", "if id zuul; then userdel -r -f zuul; fi", "--run-command", "adduser -m zuul", "--mkdir", "/home/zuul/.ssh", "--chmod", "0700:/home/zuul/.ssh", "--copy-in", "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys:/home/zuul/.ssh/", "--chmod", "0600:/home/zuul/.ssh/authorized_keys", "--run-command", "chown -R zuul:zuul /home/zuul/.ssh/", "--copy-in", "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul:/etc/sudoers.d/", "--chmod", "0440:/etc/sudoers.d/zuul", "--run-command", "chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh", "--install", "traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts", "--install", "traceroute,iproute,git,rsync,pigz,wget,unzip,redhat-rpm-config,rpm-build,rpm-sign,rpmlint,createrepo,gnupg2,expect,hostname,gcc,gcc-c++,make,patch,tar,time,python3,python3-PyYAML,python3-devel,python3-libselinux,python3-netifaces,python3-six,libffi-devel,libxml2-devel,libxslt-devel,openldap-devel,openssl-devel,python-devel,readline-devel,ruby-devel,systemd-devel,zlib-devel,iptables-nft,iptables-nft-services,crypto-policies-scripts", "--install", "iptables", "--run-command", "iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT", "--run-command", "iptables -I INPUT -p tcp -m tcp --dport 22 -j ACCEPT", "--run-command", "iptables-save > /etc/sysconfig/iptables", "--run-command", "systemctl enable iptables.service", "--run-command", "fips-mode-setup --enable"], "delta": "0:03:24.433237", "end": "2026-03-30 21:08:40.559498", "rc": 0, "start": "2026-03-30 21:05:16.126261", "stderr": "", "stderr_lines": [], "stdout": "[ 0.0] Examining the guest ...\n[ 17.0] Setting a random seed\n[ 17.0] Installing packages: traceroute iproute git rsync\n[ 41.8] Running: sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config\n[ 41.9] Copying: /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config to /etc/ssh/\n[ 41.9] Changing permissions of /etc/ssh/sshd_config to 0600\n[ 41.9] Running: if id zuul; then userdel -r -f zuul; fi\n[ 42.0] Running: adduser -m zuul\n[ 42.3] Making directory: /home/zuul/.ssh\n[ 42.3] Changing permissions of /home/zuul/.ssh to 0700\n[ 42.3] Copying: /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys to /home/zuul/.ssh/\n[ 42.3] Changing permissions of /home/zuul/.ssh/authorized_keys to 0600\n[ 42.3] Running: chown -R zuul:zuul /home/zuul/.ssh/\n[ 42.4] Copying: /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul to /etc/sudoers.d/\n[ 42.5] Changing permissions of /etc/sudoers.d/zuul to 0440\n[ 42.5] Running: chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh\n[ 42.5] Installing packages: traceroute iproute git rsync pigz wget unzip redhat-rpm-config rpm-build rpm-sign rpmlint createrepo gnupg2 expect hostname gcc gcc-c++ make patch tar time python3 python3-PyYAML python3-devel python3-libselinux python3-netifaces python3-six libffi-devel libxml2-devel libxslt-devel openldap-devel openssl-devel python-devel readline-devel ruby-devel systemd-devel zlib-devel iptables-nft iptables-nft-services crypto-policies-scripts\n[ 96.6] Installing packages: traceroute iproute git rsync pigz wget unzip redhat-rpm-config rpm-build rpm-sign rpmlint createrepo gnupg2 expect hostname gcc gcc-c++ make patch tar time python3 python3-PyYAML python3-devel python3-libselinux python3-netifaces python3-six libffi-devel libxml2-devel libxslt-devel openldap-devel openssl-devel python-devel readline-devel ruby-devel systemd-devel zlib-devel iptables-nft iptables-nft-services crypto-policies-scripts\n[ 97.5] Installing packages: iptables\n[ 98.4] Running: iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT\n[ 98.6] Running: iptables -I INPUT -p tcp -m tcp --dport 22 -j ACCEPT\n[ 98.7] Running: iptables-save > /etc/sysconfig/iptables\n[ 98.7] Running: systemctl enable iptables.service\n[ 98.8] Running: fips-mode-setup --enable\n[ 180.9] SELinux relabelling\n[ 204.1] Finishing off", "stdout_lines": ["[ 0.0] Examining the guest ...", "[ 17.0] Setting a random seed", "[ 17.0] Installing packages: traceroute iproute git rsync", "[ 41.8] Running: sed -e s/^SELINUX=.*/SELINUX=enforcing/ -i /etc/selinux/config", "[ 41.9] Copying: /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/sshd_config to /etc/ssh/", "[ 41.9] Changing permissions of /etc/ssh/sshd_config to 0600", "[ 41.9] Running: if id zuul; then userdel -r -f zuul; fi", "[ 42.0] Running: adduser -m zuul", "[ 42.3] Making directory: /home/zuul/.ssh", "[ 42.3] Changing permissions of /home/zuul/.ssh to 0700", "[ 42.3] Copying: /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/authorized_keys to /home/zuul/.ssh/", "[ 42.3] Changing permissions of /home/zuul/.ssh/authorized_keys to 0600", "[ 42.3] Running: chown -R zuul:zuul /home/zuul/.ssh/", "[ 42.4] Copying: /var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/zuul to /etc/sudoers.d/", "[ 42.5] Changing permissions of /etc/sudoers.d/zuul to 0440", "[ 42.5] Running: chcon -R -h system_u:object_r:user_home_t:s0 /home/zuul && chcon -R -h system_u:object_r:ssh_home_t:s0 /home/zuul/.ssh", "[ 42.5] Installing packages: traceroute iproute git rsync pigz wget unzip redhat-rpm-config rpm-build rpm-sign rpmlint createrepo gnupg2 expect hostname gcc gcc-c++ make patch tar time python3 python3-PyYAML python3-devel python3-libselinux python3-netifaces python3-six libffi-devel libxml2-devel libxslt-devel openldap-devel openssl-devel python-devel readline-devel ruby-devel systemd-devel zlib-devel iptables-nft iptables-nft-services crypto-policies-scripts", "[ 96.6] Installing packages: traceroute iproute git rsync pigz wget unzip redhat-rpm-config rpm-build rpm-sign rpmlint createrepo gnupg2 expect hostname gcc gcc-c++ make patch tar time python3 python3-PyYAML python3-devel python3-libselinux python3-netifaces python3-six libffi-devel libxml2-devel libxslt-devel openldap-devel openssl-devel python-devel readline-devel ruby-devel systemd-devel zlib-devel iptables-nft iptables-nft-services crypto-policies-scripts", "[ 97.5] Installing packages: iptables", "[ 98.4] Running: iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT", "[ 98.6] Running: iptables -I INPUT -p tcp -m tcp --dport 22 -j ACCEPT", "[ 98.7] Running: iptables-save > /etc/sysconfig/iptables", "[ 98.7] Running: systemctl enable iptables.service", "[ 98.8] Running: fips-mode-setup --enable", "[ 180.9] SELinux relabelling", "[ 204.1] Finishing off"]} TASK [base-finalize : Create raw file] ***************************************** changed: [localhost] => {"changed": true, "cmd": ["qemu-img", "convert", "-O", "raw", "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "/var/lib/nodepool/dib/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786.raw"], "delta": "0:00:09.608299", "end": "2026-03-30 21:08:50.449497", "rc": 0, "start": "2026-03-30 21:08:40.841198", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []} TASK [base-finalize : Create qcow file] **************************************** changed: [localhost] => {"changed": true, "cmd": ["mv", "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786/CentOS-Stream-GenericCloud-9-20260323.0.x86_64.qcow2", "/var/lib/nodepool/dib/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786.qcow2"], "delta": "0:00:04.504313", "end": "2026-03-30 21:08:55.172323", "rc": 0, "start": "2026-03-30 21:08:50.668010", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []} TASK [base-cleanup : Remove tmp directory] ************************************* changed: [localhost] => {"changed": true, "path": "/var/tmp/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786", "state": "absent"} PLAY RECAP ********************************************************************* localhost : ok=51 changed=22 unreachable=0 failed=0 skipped=10 rescued=0 ignored=0 Running: sudo /usr/local/bin/ansible-playbook -v /etc/nodepool/virt_images/cloud-centos-9-stream-tripleo-fips.yaml -e image_output=/var/lib/nodepool/dib/cloud-centos-9-stream-tripleo-fips-7b14fa86687148dabcb054895211c786 -e raw_type=True -e qcow2_type=True Exit code: 0