Noticket: Fix YAML linter configuration compatibility with Ansible linter:

- Ansible linter expects some settings to be configured in a specific
way when a custom YAML linter configuration is provided.

Noticket: Fix YAML linter configuration compatibility with Ansible linter:

- Ansible linter expects some settings to be configured in a specific
way when a custom YAML linter configuration is provided.

MAR-245: Fix locale-related errors by reworking the SSH config workaround:

- Looks like SetEnv takes precedence over SendEnv, and seems like
ordering matters for when the locale gets set. If user overrides
some individual LC_* variables, LC_ALL has to be set prior to user
configuration to take effect.

MAR-245: Fix some linting errors in documentation:

- Use proper truthy YAML expressions.
- Explicitly specify file permissions.

MAR-245: Add conveniece copy buttons to documentation code blocks:

- Makes usage instructions testing a bit smoother/simpler.
- Unfortunately, does not add copy buttons to file path blocks.

MAR-245: Upgrade to Ansible 11.2.x:

- Update the requirements files.
- Update documentation.
- Update role meta information.
- No obvious breakages at the moment.

MAR-245: Fix test errors related to missing locales on test machines:

- Default SSH configuration often enables passing specific environment
variables to destination machines. By creating a custom SSH config
that gets used when connecting to the test VMs, we can exclude all
environment variables from being sent, thus also having a
more pristine test environment.
- Update site requirements for running tests etc.

MAR-242: Mark some of the HTTP file sharing tests as slow:

- Update develpment instructions to include information on how to run
individual tests etc.

MAR-242: Added role parameter to xmpp_server role for configuring uploaded file expiration (XEP-0363):

- Also reworded and harmonised related role parameter descriptions.

MAR-242: Added role parameters for xmpp_server role to configure HTTP file upload limits (XEP-0363):

- Refactor the daily quota tests to be a bit more flexible.

MAR-242: Refactor file upload tests:

- Use fixtures for grabbing the server host and cleaning up the
uploads directory. Deduplicates the test code a bit as well.

MAR-242: Added initial set of tests for file upload size and user daily quota:

- Tests currently operate on default values for the Prosody modules.

MAR-240: Tag dropped packet messages in system log (due to rate-limiting):

- Improves visibility of such messages, making it easier to
distinguish them from other firewall-related messages.
- Update documentation to mention that the messages are logged.

MAR-241: Implemented connection rate limit tests for the common role:

- Tweak some test machine parameters to have better test
sample representation.
- Tests heavily rely not being laggy to get the expected output. Tests
may need to get reworked a bit if they end up failing repeatedly
during test runs.

MAR-243: Drop inventory hostname usage from ldap_server tests:

- Most other roles seem to rely on invoking the hostname command.
- Might be worth it switching to something more technicall correct in
the future, like invoking hostname -f for FQDN.

MAR-243: Drop inventory_hostname use from tests where possible:

- Primarily focused on Ansible playbooks and variable files.
- The variable is still used within some Python test fixtures. Test
behaviour should still be correct, with one advantage being that
lookups should be much faster than using the setup module (which
would require running Ansible code on each remote/test machine).

MAR-236: Add auxiliary object class to LDAP directory for optional countryName and friendlyCountryName attributes:

- Makes it easier to specify free-form optional country name in
LDAP-backed address books.
- Object class uses Majic-specific PEN (Private Enterprise Number)
"namespace" - 1.3.6.1.4.1.40926.417.2.1 (40926 is Majic PEN, 417
stands for LDAP, 2 stands for object class, and 1 is incremental
sequence number). The 417 is result of adding together lower-cased
letters LDAP in their decimal value.

MAR-233: Replace hping3 with nmap in connectivity tests for the xmpp_server role:

- Parametrize the connectivity tests instead of running them in a
loop.

MAR-233: Add IPv6 connectivity tests for the mail_server role:

- Include an example of IPv6 address in documentation for the
smtp_allow_relay_from role parameter (has to have square brackets to
make it usable with Postfix configuratin).
- Expand the tests and test parameters to ensure IPv6 is properly
covered.
- Reorder the names in /etc/hosts slightly to ensure the ansible_fqdn
and inventory_hostname match-up. Code should be revisited to
probably drop the use of inventory_hostname from both roles and
tests, and instead rely on ansible_fqdn and ansible_hostname.
- Correct the Dovecot SSL DH parameter specification to use
ansible_fqdn for consistency purposes.

MAR-233: Add IPv6 connectivity tests for the mail_forwarder role:

- Configure static IPv6 addresses on all test machines.
- Parametrise all connectivity tests to cover both IPv4 and IPv6.
- Be explicit on receiving servers for all swaks invocations that
target localhost.
- Make sure that the helper mail server has the necessary iptables
forwarding rules for IPv6 as well.

MAR-230: Test for correct Diffie-Hellman parameter is not relevant for TLSv1.3:

- The test should be run only against servers where mandatory
parameters are tested since those have the TLSv1.2 enabled (by
defalt).

MAR-230: Updated documentation, inline comments, and some tests related to TLS configuration:

- Documentation and comments should be a bit more consistent across
the roles now.
- Try to follow same rule for inclusion of singular TLSv1.2 cipher
across the board in affected tests.

MAR-230: Drop support for older TLS versions from the xmpp_server role:

- Update documentation.
- Include TLSv1.3 ciphers in default configuration for documentation
purposes - although ciphers are not configurable.
- Update the tests. Drop the workarounds for enabling the older
versions via OpenSSL policies.

MAR-230: Add support for TLSv1.3 to the mail_server role:

- Tests/support for older versions have already been dropped
previously.
- Document the specifics of TLSv1.3 cipher configuration.
- Update tests. The DH param test is now applicable only for the
mandatory parameter test servers.

MAR-230: Add support for TLSv1.3 to the ldap_server role and drop TLSv1.1 from tests:

- Update the role defaults, make sure to include additional priority
strings for TLSv1.3.
- Document the specifics of TLSv1.3 cipher configuration.
- Update tests.

MAR-230: Add support for TLSv1.3 to the web_server role and drop TLSv1.1 from tests:

- Update the role defaults, make sure to include additional ciphers
for TLSv1.3.
- Document the specifics of TLSv1.3 cipher configuration.
- Update tests, dropping the hack/workaround that allows use of weaker
TLS protocols.

MAR-227: Drop the workaround for older Postfix TLS protocol configuration syntax:

- Since the roles have dropped support for older versions of
Debian/Postfix, no need to use the backwards compatible syntax any
longer.

MAR-218: Rework/improve code for setting LDAP server admin password:

- Avoid dropping temporary file with password by invoking a search on
the LDAP server using the supplied credentials.
- Do not log sensitive informationi when setting the LDAP server admin
password.

MAR-218: Use offline mode when running ansible-lint:

- Avoids calling out to remote servers (and leaking info about
caller).

MAR-218: Improve linter reporting in the test runner script:

- Show info messages on what linter is currently running, and
explicitly report success and failure.

MAR-218: Bump Ansible version to 10.4.x:

- Fix the requirements file not depending on the patch release.
- Bump all metadata to reference the new version.

MAR-218: Fix incorrect logic for switching directory:

- No piping can be used (since that would be a subshell and would not
affect the working directory for the remainder of the script run).

MAR-218: Disable the boot-time hanging workaround for VirtualBox:

- The workaround is most likely no longer necessary with up-to-date
versions of kernel and VirtualBox (modules) themselves.

MAR-218: Fix the test run logic in test runner script:

- Linter tests should _always_ be run.
- Test report files should be appended to when using tee.
- Get rid of excess molecule destroy (probably not required any
longer). This will reduce the output and speed up things a little
bit.

MAR-218: Fix some minor issues for the test runner script:

- No need to use the $ variable syntax for arithmetic operations.
- Use correct form when printing the list of roles (@ -> *).
- Fix missing quote when assembling the list of roles.

MAR-218: Reimplement linting supports in test runner scrupt:

- Molecule no longer has command for running the linters, so a small
wrapper around linters has to be implemented.

MAR-218: Switch to using task imports instead of includes:

- Should result in somewhat faster run, except the includes happen
during planning phase. None of the changed includes will have
problem with this.
- Solves the issue of (included) imported tasks not being tagged
properly, particularly in relation to the mechanism for explicitly
running all handlers.

MAR-218: Document the passlib Python package requirement:

- The library is used for hashing the operating system user passwords
during account creation.

MAR-218: Undo removal of explicitly specifying Python interpreter:

- Ansible will produce warnings if the interpreter path is not
specified explicitly.

MAR-218: Update the usage tasks and instructions for Ansible 10.3:

- Update the module names to include the namespace.
- Drop references to Python 3, and bump up the installed package
versions.

MAR-218: Drop documentation references to only Python 3 being supported:

- The project is at this point only supporting Python 3, and all
modern distros support only Python 3 nowadays. No need to be
explicit anymore.

MAR-218: Enable case-sensitive column name handling for database privileges:

- This will become a new default in the next major release of the
community.mysql collection.
- Gets rid of the Ansible mysql_user module warning.

MAR-218: Upgrade test site for Ansible 10.x and fix linting errors:

- Disable name checks when importing playbooks into top-level playbook
to avoid naming duplication.

MAR-218: Fix the custom m_ldap_permissions module to work correctly with ansible-lint:

- In order for things to behave correctly, module should not invoke
the main part of code automatically during import, but only if run
via CLI.
- Without this the ansible-lint kept erroring out with:

"missing required arguments: filter, rules"

MAR-218: Improve mail server role test reliability:

- Introduce sleep after sending out mails in order to ensure that
Postfix has had enough time to process the messages.
- Relevant only for tests that take care of parsing the mail log.
- Solves the false negatives caused by timing issues.
- It might be a good idea down the line to implement some kind of
retry/backoff mechanism instead.

MAR-218: Fix test instance preparation for php_website testing:

- Some of the tasks can only be run without errors on the spun up PHP
website instance due to (un)availability of ansible_eth0 variable.

MAR-218: Fix/improve reliability of mail_server tests:

- The common role has rather conservative rate limit values that
easily get triggered when running connectivity tests in quick
succesions.

MAR-218: Force handler execution during testing for consistency:

- Otherwise it can easily happen that some handlers never run, leaving
the machine in inconsistent state until they are run by hand.

MAR-218: Fix execution of the LDAP database permissions module:

- Python interpreter path must be specified explicitly (without the
env wrapper).

MAR-218: Drop the workaround for running connectivity tests:

- Relevant PR has been long merged into testinfra, and no longer poses
an issue.

MAR-218: Add back flake8 requirement for running tests:

- Requirements was dropped by accident.

MAR-218: Switch to using ldap_attrs module:

- Update invocations and syntax.
- Drop the workaround for configuring TLS on the LDAP server (should
be possible to set all relevant attributes at the same time at this
point).
- Group some invocations where it makes sense.

MAR-218: Switch to using fully-qualified collection names for all tasks:

- Ensures there is no ambiguity when invoking a module.

MAR-218: Quote all octal values in YAML files:

- Fixes linting errors, and ensures there is no ambiguity in case of
YAML specification changes.

MAR-218: Disable Ansible lints for prefixed role variable names:

- At this point in time, it does not make much sense to introduce
prefixing and breaking every single role invocation.
- Might be worth revisting down the line, although it would require
understanding a bit more clearly if prefixing has any kind of
special logic handling or it's pure guidelines.

MAR-218: Fix linting errors related to commands doing unconditional changes:

- Tasks run during the prepare stage of test runs do not matter.
- Some of the role tasks are already effectively running only when
change _will_ happen (when it is detected via variable registered by
a previous task).