# NOTE: ansible-core is in rhel-8.6 and newer, but not installable

# in buildroot as it depended on modular Python.

# It has been installable at buildtime in 8.8 and newer.

%if 0%{?fedora}

BuildRequires: ansible-packaging

%else

%if 0%{?rhel} >= 8

BuildRequires: ansible-core >= 2.11.0

%endif

%endif

%bcond_with collection_artifact

%if 0%{?fedora} || 0%{?rhel} >= 8

%bcond_without html

%else

# pandoc is not supported in rhel 7 and older,

# which is needed for converting .md to .html.

%bcond_with html

%endif

%if 0%{?rhel}

Name: rhel-system-roles

%else

Name: linux-system-roles

%endif

Url: https://github.com/linux-system-roles

Summary: Set of interfaces for unified system management

Version: 1.21.2

Release: 1%{?dist}

License: GPLv3+ and MIT and BSD and Python

%global _pkglicensedir %{_licensedir}/%{name}

%global roleinstprefix %{name}.

%if 0%{?rhel}

%global collection_namespace redhat

%global collection_name rhel_system_roles

%else

%global collection_namespace fedora

%global collection_name linux_system_roles

%endif

%global collection_version %{version}

# be compatible with the usual Fedora Provides:

Provides: ansible-collection-%{collection_namespace}-%{collection_name} = %{collection_version}-%{release}

# ansible-core is in rhel 8.6 and later - default to ansible-core, but allow

# the use of ansible if present - we may revisit this if the automatic dependency

# generator is added to ansible-core in RHEL

# Fedora - the automatic generator will add this - no need to explicit declare

# it in the spec file

# EL7 - no dependency on ansible because there is no ansible in el7 - user is

# responsible for knowing they have to install ansible

%if 0%{?rhel} >= 8

Requires: (ansible-core >= 2.11.0 or ansible >= 2.9.0)

%endif

# For each role, call either defcommit() or deftag(). The other macros

# (%%id and %%shortid) can be then used in the same way in both cases.

# This way  the rest of the spec file des not need to know whether we are

# dealing with a tag or a commit.

%global archiveext tar.gz

# list of role names

%global rolenames %nil

# list of assignments that can be used to populate a bash associative array variable

%global rolestodir %nil

%define getarchivedir() %(p=%{basename:%{S:%{1}}}; echo ${p%%.%{archiveext}})

%define defcommit() %{expand:%%global ref%{1} %{2}

%%global shortcommit%{1} %%(c=%%{ref%{1}}; echo ${c:0:7})

%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}

%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}

%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz

%%global rolenames %%{?rolenames} %%{rolename%{1}}

%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"

%%global rolestodir %%{?rolestodir} %{roletodir%{1}}

}

%define deftag() %{expand:%%global ref%{1} %{2}

%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}

%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}

%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz

%%global rolenames %%{?rolenames} %%{rolename%{1}}

%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"

%%global rolestodir %%{?rolestodir} %%{roletodir%{1}}

}

%global mainid f8932b3155a3cb7579a2b3c453578f7bee6bb837

Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar.gz

# BEGIN AUTOGENERATED SOURCES

%global rolename1 postfix

%deftag 1 1.3.6

%global rolename2 selinux

%deftag 2 1.5.9

%global rolename3 timesync

%deftag 3 1.7.5

%global rolename4 kdump

%deftag 4 1.2.9

%global rolename5 network

%deftag 5 1.11.4

%global rolename6 storage

%deftag 6 1.9.8

%global rolename7 metrics

%deftag 7 1.8.4

%global rolename8 tlog

%deftag 8 1.2.14

%global rolename9 kernel_settings

%deftag 9 1.1.15

%global rolename10 logging

%deftag 10 1.11.7

%global rolename11 nbde_server

%deftag 11 1.3.5

%global rolename12 nbde_client

%deftag 12 1.2.13

%global rolename13 certificate

%deftag 13 1.1.11

%global rolename14 crypto_policies

%deftag 14 1.2.9

%global forgeorg15 https://github.com/willshersystems

%global repo15 ansible-sshd

%global rolename15 sshd

%deftag 15 v0.19.0

%global rolename16 ssh

%deftag 16 1.1.15

%global rolename17 ha_cluster

%deftag 17 1.9.2

%global rolename18 vpn

%deftag 18 1.5.6

%global rolename19 firewall

%deftag 19 1.4.4

%global rolename20 cockpit

%deftag 20 1.4.5

%global rolename21 podman

%deftag 21 1.1.5

%global rolename22 ad_integration

%deftag 22 1.1.0

%global rolename23 rhc

%deftag 23 1.1.2

%global rolename24 journald

%deftag 24 1.0.3

#%%global rolename25 postgresql

#%%deftag 25 1.0.3

Source1: %{archiveurl1}

Source2: %{archiveurl2}

Source3: %{archiveurl3}

Source4: %{archiveurl4}

Source5: %{archiveurl5}

Source6: %{archiveurl6}

Source7: %{archiveurl7}

Source8: %{archiveurl8}

Source9: %{archiveurl9}

Source10: %{archiveurl10}

Source11: %{archiveurl11}

Source12: %{archiveurl12}

Source13: %{archiveurl13}

Source14: %{archiveurl14}

Source15: %{archiveurl15}

Source16: %{archiveurl16}

Source17: %{archiveurl17}

Source18: %{archiveurl18}

Source19: %{archiveurl19}

Source20: %{archiveurl20}

Source21: %{archiveurl21}

Source22: %{archiveurl22}

Source23: %{archiveurl23}

Source24: %{archiveurl24}

#Source25: %{archiveurl25}

# END AUTOGENERATED SOURCES

# Includes with definitions/tags that differ between RHEL and Fedora

Source1001: extrasources.inc

%include %{SOURCE1001}

# Includes with ansible_collection_build/_install that differ between RHEL versions

Source1002: ansible-packaging.inc

%include %{SOURCE1002}

Source1003: vendoring-prep.inc

Source1004: vendoring-build.inc

Source995: CHANGELOG.md

BuildArch: noarch

%if %{with html}

# Requirements for md2html.sh to build the documentation

%if 0%{?fedora} || 0%{?rhel} >= 9

BuildRequires: rubygem-kramdown-parser-gfm

%else

BuildRequires: pandoc

BuildRequires: asciidoc

BuildRequires: highlight

%endif

%endif

# Requirements for galaxy_transform.py

BuildRequires: python3

BuildRequires: python%{python3_pkgversion}-ruamel-yaml

# We must put %%description within the if block to avoid empty lines showing up.

%if 0%{?rhel}

%description

Collection of Ansible roles and modules that provide a stable and

consistent configuration interface for managing multiple versions

of Red Hat Enterprise Linux.

%else

%description

Collection of Ansible roles and modules that provide a stable and

consistent configuration interface for managing multiple versions

of Fedora, Red Hat Enterprise Linux & CentOS.

%endif

%if %{with collection_artifact}

%package collection-artifact

Summary: Collection artifact to import to Automation Hub / Ansible Galaxy

%description collection-artifact

Collection artifact for %{name}. This package contains %{collection_namespace}-%{collection_name}-%{version}.tar.gz

%endif

# Fix issue with package update introduce with changing symlink to directory

# in 1.21.1-5

%pretrans -p <lua>

roles = {

    "certificate", "cockpit", "crypto_policies", "firewall", "ha_cluster",

    "kdump", "kernel_settings", "logging", "metrics", "nbde_client",

    "nbde_server", "network", "postfix", "selinux", "ssh", "sshd", "storage",

    "timesync", "tlog", "vpn"

}

for i,v in ipairs(roles) do

    path = "/usr/share/ansible/roles/linux-system-roles." .. v

    st = posix.stat(path)

    if st and st.type == "link" then

      os.remove(path)

    end

end

%prep

# BEGIN AUTOGENERATED SETUP

%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a23 -a24 -n %{getarchivedir 0}

#%%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a23 -a24 -a25 -n %{getarchivedir 0}

# END AUTOGENERATED SETUP

# vendoring prep steps, if any

%include %{SOURCE1003}

declare -A ROLESTODIR=(%{rolestodir})

for rolename in %{rolenames}; do

    dir_from_archive="${ROLESTODIR[${rolename}]}"

    if [ ! -d "$dir_from_archive" ]; then

        # ansible-sshd uses tags like vX.Y.Z

        # using the github archive/ link with a tag like this strips

        # the leading v from the tag used to construct the directory

        # name in the archive

        if [[ "$dir_from_archive" =~ %{repo15}-v([0-9]+[.][0-9]+.*) ]]; then

            dir_from_archive="%{repo15}-${BASH_REMATCH[1]}"

        fi

    fi

    mv "$dir_from_archive" ${rolename}

done

%if 0%{?rhel}

cd %{rolename2}/tests

# this test causes avcs we want to ignore

sed -r -i -e '/hosts: all/a\

  tags:\

    - tests::avc' tests_selinux_disabled.yml

cd ../..

%endif

cd %{rolename15}

find -P tests examples -name \*.yml | while read file; do

  sed -r -i -e "s/willshersystems:ansible-sshd/system_role:sshd/" \

     -e "s/ansible-sshd/linux-system-roles.sshd/" \

     -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" "$file"

done

sed -r -i -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" README.md

sed -r -i -e 's/min_ansible_version: 2.8/min_ansible_version: "2.9"/' meta/main.yml

cd ..

cd %{rolename7}

# metrics roles dir is a symlink to the vendored dir.

# rpm upgrade doesn't like the symlink.  Replace the

# symlink with the real dir

rolesdir=$(pwd)/roles

realrolesdir=$(realpath "$rolesdir")

if [ "$rolesdir" != "$realrolesdir" ]; then

    rm -rf roles

    mv "$realrolesdir" .

    rm -rf vendor

fi

cd ..

# vendoring build steps, if any

%include %{SOURCE1004}

# Removing symlinks in tests/roles

for rolename in %{rolenames}; do

    if [ -d ${rolename}/tests/roles ]; then

        find ${rolename}/tests/roles -type l -exec rm {} \;

        if [ -d ${rolename}/tests/roles/linux-system-roles.${rolename} ]; then

            rm -r ${rolename}/tests/roles/linux-system-roles.${rolename}

        fi

    fi

done

rm %{rolename5}/tests/modules

rm %{rolename5}/tests/module_utils

rm %{rolename5}/tests/playbooks/roles

# Drop network/{scripts/print_all_options.py,tests/ensure_provider_tests.py}

# from rpm. These 2 files fail in brp-python-bytecompile due to f-strings

# when python2 is default python.

rm %{rolename5}/scripts/print_all_options.py

rm %{rolename5}/tests/ensure_provider_tests.py

# Drop storage tests/scripts

rm -rf %{rolename6}/tests/scripts

# fix system_roles fingerprint in "external" roles

python3 lsr_fingerprint.py

# transform ambiguous #!/usr/bin/env python shebangs to python3 to stop brp-mangle-shebangs complaining

find -type f -executable -name '*.py' -exec \

     sed -i -r -e '1s@^(#! */usr/bin/env python)(\s|$)@#\13\2@' '{}' +

%build

%if %{with html}

# HACK HACK HACK

# pandoc/asciidoc on rhel 8.9 does not like the journald README badge links

# remove all of the badge links from all README.md files

# in the first 14 lines of the file, remove any line that looks like a

# github action badge

# HACK HACK HACK

readmes=""

matchstr="actions/workflows/"

for role in %{rolenames}; do

    sed -e "1,14 {\\,${matchstr},d; /\!\[/d}" -i $role/README.md

    readmes="${readmes} $role/README.md"

done

sh md2html.sh $readmes

%endif

mkdir .collections

%if 0%{?rhel}

# Convert the upstream collection readme to the downstream one

%{SOURCE998} lsr_role2collection/collection_readme.md

%{python3} ./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \

                      "Red Hat Enterprise Linux System Roles Ansible Collection" \

                      "https://linux-system-roles.github.io" \

                      "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/administration_and_configuration_tasks_using_system_roles_in_rhel" \

                      "https://access.redhat.com/articles/3050101" \

                      "https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%208&component=rhel-system-roles" \

                      > galaxy.yml.tmp

# we vendor-in all of the dependencies on rhel, so remove them

rm -f lsr_role2collection/collection_requirements.txt

# but leave bindep.txt

%else

./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \

                      "Linux System Roles Ansible Collection" \

                      > galaxy.yml.tmp

%endif

mv galaxy.yml.tmp galaxy.yml

includes=""

for role in %{rolenames}; do

    includes="$includes --include $role"

%if 0%{?rhel}

    # we vendor-in all of the dependencies on rhel, so remove them

    rm -f "$role/meta/requirements.yml" "$role/meta/collection-requirements.yml" \

      "$role/tests/collection-requirements.yml"

%endif

done

# do not process changelogs on RHEL

%if 0%{?rhel}

extra_mapping="--extra-mapping fedora.linux_system_roles:%{collection_namespace}.%{collection_name}"

%else

extra_mapping=""

%endif

LANG=C.utf-8 LC_ALL=C.utf-8 %{python3} release_collection.py --galaxy-yml galaxy.yml \

    --src-path $(pwd) --dest-path $(pwd)/.collections $includes --force --no-update \

    --src-owner %{name} --skip-git --skip-check --skip-changelog $extra_mapping --debug

# Remove table of contents from logging README.md

# It is not needed for html and AH/Galaxy

sed -i -e 's/^\(## Table of Contents\)/## Background\n\1/' \

  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md

sed -i -e '/^## Table of Contents/,/^## Background/d' \

  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md

# Remove internal links from readme files

# They are not rendered properly on AH.

for role in %{rolenames}; do

    sed -r -i -e 's/\[([^[]+)\]\(#[^)]+\)/\1/g' \

    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/$role/README.md

done

# Remove test only collection dependencies

# NOTE: These should not be in meta/collection-requirements.yml, they should be

# in tests/collection-requirements.yml, but they can't be moved yet

sed -i -e '/community[.]mysql:/d' -e '/community[.]postgresql:/d' \

  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/galaxy.yml

cp %{SOURCE995} \

    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/docs/CHANGELOG.md

%if 0%{?rhel}

cp %{SOURCE996} \

    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/CHANGELOG.rst

%endif

# Build the collection

pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/

%ansible_collection_build

popd

%install

mkdir -p %{buildroot}%{ansible_roles_dir}

for role in %{rolenames}; do

    cp -pR "$role" "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role"

done

%if 0%{?rhel}

# Create symlinks for roles in /usr/share/ansible/roles/linux-system-roles.$rolename

# That's required to make roles work with upstream naming too

for role in %{rolenames}; do

    ln -s "%{name}.$role" "%{buildroot}%{ansible_roles_dir}/linux-system-roles.$role"

done

%endif

mkdir -p %{buildroot}%{_pkglicensedir}

rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}network/examples/roles

for role in %{rolenames}; do

    mkdir -p "%{buildroot}%{_pkgdocdir}/$role"

    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/CHANGELOG.md" \

       "%{buildroot}%{_pkgdocdir}/$role"

    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.md" \

       "%{buildroot}%{_pkgdocdir}/$role"

%if %{with html}

    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.html" \

       "%{buildroot}%{_pkgdocdir}/$role"

%endif

    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" ]; then

        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" \

           "%{buildroot}%{_pkglicensedir}/$role.COPYING"

    fi

    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" ]; then

        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" \

           "%{buildroot}%{_pkglicensedir}/$role.LICENSE"

    fi

    if [ -d "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples" ]; then

        for file in "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/"* ; do

            if [[ "$file" == *.yml ]]; then

                basename=$(basename "$file" .yml)

                newname="$basename"

                if [[ "$newname" != example-* ]]; then

                    newname="example-$newname"

                fi

                if [[ "$newname" != *-playbook ]]; then

                    newname="${newname}-playbook"

                fi

                cp "$file" "%{buildroot}%{_pkgdocdir}/$role/${newname}.yml"

            else

                cp "$file" "%{buildroot}%{_pkgdocdir}/$role"

            fi

            rm "$file"

        done

        if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" ]; then

            cp "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" \

               "%{buildroot}%{_pkgdocdir}/$role/example-inventory"

            rm "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory"

        fi

        # special case for network

        # this will error if the directory is unexpectedly empty

        rmdir "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples"

    fi

done

rm -f %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/semaphore

rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/molecule

rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/.[A-Za-z]*

rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/tests/.git*

# NOTE: sshd/examples/example-root-login.yml is

# referenced in the configuring-openssh-servers-using-the-sshd-system-role documentation module

# must be updated if changing the file path

# Install the collection

pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/

%ansible_collection_install

popd

mkdir -p %{buildroot}%{_pkgdocdir}/collection

mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles

ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/README.md \

   %{buildroot}%{_pkgdocdir}/collection

for rolename in %{rolenames}; do

  for file in CHANGELOG.md README.md; do

    if [ -f %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file ]; then

      if [ ! -d %{buildroot}%{_pkgdocdir}/collection/roles/${rolename} ]; then

        mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}

      fi

      ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file \

        %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}

    fi

  done

done

%if %{with html}

# converting README.md to README.html for collection in %%{buildroot}%%{_pkgdocdir}/collection

readmes="%{buildroot}%{_pkgdocdir}/collection/README.md"

for role in %{rolenames}; do

    readmes="${readmes} %{buildroot}%{_pkgdocdir}/collection/roles/${role}/README.md"

done

sh md2html.sh $readmes

%endif

%if %{with collection_artifact}

# Copy collection artifact to /usr/share/ansible/collections/ for collection-artifact

pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/

    mv %{collection_namespace}-%{collection_name}-%{version}.tar.gz \

       %{buildroot}%{_datadir}/ansible/collections/

popd

%endif

# Generate the %%files section in files_section.txt

# Bulk files inclusion is not possible because roles store doc and licence

# files together with other files

format_item_for_files() {

    # $1 is directory or file name in buildroot

    # $2 - if true, and item is a directory, use %%dir

    local item

    local files_item

    item="$1" # full path including buildroot

    files_item=${item##"%{buildroot}"} # path with cut buildroot to be added to %%files

    if [ -L "$item" ]; then

        echo "$files_item"

    elif [ -d "$item" ]; then

        if [[ "$item" == */doc* ]]; then

            echo "%doc $files_item"

        elif [ "${2:-false}" = true ]; then

            echo "%dir $files_item"

        else

            echo "$files_item"

        fi

    elif [[ "$item" == */README.md ]] || [[ "$item" == */README.html ]] || [[ "$item" == */CHANGELOG.md ]]; then

        if [[ "$item" == */private_* ]]; then

            # mark as regular file, not %%doc

            echo "$files_item"

        else

            echo "%doc $files_item"

        fi

    elif [[ "$item" == */COPYING* ]] || [[ "$item" == */LICENSE* ]]; then

        echo "%""%""license" "$files_item"

    else

        echo "$files_item"

    fi

}

files_section=files_section.txt

rm -f $files_section

touch $files_section

# Dynamically generate files section entries for %%{ansible_collection_files}

find %{buildroot}%{ansible_collection_files}%{collection_name} -mindepth 1 -maxdepth 1 | \

    while read item; do

        if [[ "$item" == */roles ]]; then

            format_item_for_files "$item" true >> $files_section

            find "$item" -mindepth 1 -maxdepth 1 | while read roles_dir; do

                format_item_for_files "$roles_dir" true >> $files_section

                find "$roles_dir" -mindepth 1 -maxdepth 1 | while read roles_item; do

                    format_item_for_files "$roles_item" >> $files_section

                done

            done

        else

            format_item_for_files "$item" >> $files_section

        fi

    done

# Dynamically generate files section entries for %%{ansible_roles_dir}

find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \

    while read item; do

        if [ -d "$item" ]; then

            format_item_for_files "$item" true >> $files_section

            find "$item" -mindepth 1 -maxdepth 1 | while read roles_item; do

                format_item_for_files "$roles_item" >> $files_section

            done

        else

            format_item_for_files "$item" >> $files_section

        fi

    done

%files -f files_section.txt

%dir %{_datadir}/ansible

%dir %{ansible_roles_dir}

%dir %{ansible_collection_files}

%dir %{ansible_collection_files}%{collection_name}

%doc %{_pkgdocdir}

%license %{_pkglicensedir}

%if 0%{?rhel} && 0%{?rhel} < 8

# Needs to list excluded files in this hardcoded style since when

# format_item_for_files is executed, brp-python-bytecompile is not

# executed yet.

%exclude %{ansible_roles_dir}/*/*.py?

%exclude %{ansible_roles_dir}/*/*/*.py?

%exclude %{ansible_roles_dir}/*/*/*/*.py?

%exclude %{ansible_roles_dir}/*/*/*/*/*.py?

%exclude %{ansible_collection_files}/%{collection_name}/*/*/*.py?

%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*.py?

%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*/*.py?

%endif

%if %{with collection_artifact}

%files collection-artifact

%{_datadir}/ansible/collections/%{collection_namespace}-%{collection_name}-%{version}.tar.gz

%endif

%changelog

* Wed May 10 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.2-1

- Resolves:rhbz#2186913 : rhc - RHC system role: activation key registration fails if system is already registered

- Resolves:rhbz#2189194 : roles should support running with gather_facts: false

- Resolves:rhbz#2188332 : failing test podman/tests_basic.yml: Set per-container variables part 0

- Resolves:rhbz#2188384 : failing test - sshd/tests_firewall_selinux.yml - No package matching 'firewalld' found available, installed or updated

- move vendoring into included files

- Resolves:rhbz#2175324 : use ansible-galaxy collection build/install instead of tar

* Thu Apr 6 2023 Sergei Petrosian <spetrosi@redhat.com> - 1.21.1-2

- Resolves: rhbz#2185002 : Remove doc fragments from vendored modules

- Build collection artifact in the same directory on Fedora and RHEL

* Thu Mar 16 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.1-1

- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights

- includes the fix for tests_proxy.yml selinux and some test refactoring

* Wed Feb 22 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-2

- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights

- remove role until https://bugzilla.redhat.com/show_bug.cgi?id=2171829 is fixed

* Mon Feb 20 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-1

- Resolves:rhbz#2162617 : network - RedHat Role rhel-system-roles.network should route traffic via correct bond

* Thu Feb 16 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.19

- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights

- vendor in modules required by rhc role

- Resolves:rhbz#2167941 : ha_cluster - Fix stonith watchdog timeout

* Wed Feb 15 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.18

- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights

- ad_integration - fix issue with using the network role to configure DNS

* Thu Feb 09 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.17

- Resolves:rhbz#2164879 : selinux - managing modules is not idempotent

- Fix nbde_server test issue

* Fri Feb 03 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.16

- Resolves:rhbz#2165176 : journald - New role - journald - manage systemd-journald

- Resolves:rhbz#2159972 : nbde_client - nbde_client_clevis fails with a traceback and prints sensitive data

- Resolves:rhbz#2164879 : selinux - managing modules is not idempotent

- fix storage tests_swap and tests_misc - swap size < 128GB on EL7

- fix podman general-meta issue

- ha_cluster non-x86_64 tests issue

- certificate non-x86_64 tests issue

* Fri Jan 20 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.15

- Resolves:rhbz#2162788 : network - role should support running tests with ANSIBLE_GATHERING=explicit

- Resolves:rhbz#2149683 : Synchronize automation-related changes from Fedora spec file

- Fix ansible-test issues in several roles

- Fix nbde_server tang test failure

* Fri Jan 13 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.14

- Resolves:rhbz#2143814 : ha_cluster - Allow quorum device configuration

- Resolves:rhbz#2153081 : ha_cluster - Allow enabled SBD on disabled cluster

- Resolves:rhbz#2127497 : ha_cluster - use no_log in tasks looping over pot. secret parameters

- community.general 6.2.0

- replace community.general with namespace.name for rhc role

* Thu Jan 12 2023 Noriko Hosoi <nhosoi@redhat.com> - 1.20.1-4

- Resolves:rhbz#2138213: nbde_client - use fedora.linux_system_roles.nbde_server for tests

* Thu Dec 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.13

- Resolves:rhbz#2151355 : storage - [RHEL8] disks_needed need to be set for the raid test cases

- Resolves:rhbz#2154143 : storage - [RHEL8] tests_create_thinp_then_remove_scsi_generated.yml failed at "assertion": "(storage_test_expected_size|int - storage_test_actual_size.bytes)|abs / storage_test_expected_size|int < 0.01"

- Resolves:rhbz#2151342 : storage - [RHEL9]  ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'bytes'

- Resolves:rhbz#2151351 : storage - [RHEL9 system role]  storage role vdo tests failed about  "VDO deduplication is off but it should not"

* Thu Dec 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.12

- Resolves:rhbz#2153080 - tlog - Unconditionally enable the files provider

* Tue Dec 13 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.11