ansible-lint does not respect project dir and lints installed galaxy dependencies too

[Xerkus]

Summary

Ansible-lint reports on roles and collections installed with ansible galaxy outside of current directory (at ~/.ansible/ )

Issue Type

• Bug Report

Ansible and Ansible Lint details

ansible --version

ansible [core 2.12.3]
  config file = None
  configured module search path = ['/home/Xerkus/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /home/Xerkus/workspace/coalescent/nomad-cluster-packer/venv/lib64/python3.10/site-packages/ansible
  ansible collection location = /home/Xerkus/.ansible/collections:/usr/share/ansible/collections
  executable location = /home/Xerkus/workspace/coalescent/nomad-cluster-packer/venv/bin/ansible
  python version = 3.10.3 (main, Mar 18 2022, 00:00:00) [GCC 11.2.1 20220127 (Red Hat 11.2.1-9)]
  jinja version = 3.1.1
  libyaml = True

ansible-lint --version

ansible-lint 6.0.2 using ansible 2.12.3

• ansible installation method: pip
• ansible-lint installation method: pip

OS / ENVIRONMENT

Fedora 35 Workstation x64
python 3.10.3 with venv

STEPS TO REPRODUCE

From the project root activate venv, install dependencies and run ansible-lint:

python -m venv venv
source venv/bin/activate
pip install -r requirements.txt
ansible-galaxy install --force -r requirements.yml 

ansible-lint -vvvv

• .ansible-lint

---
enable_list:
  - fcqn-builtins
  - no-log-password
exclude_paths:
  - .github
  - venv
use_default_rules: true

• requirements.txt

ansible==5.5.0
ansible-lint==6.0.2

• requirements.yml

---
collections:
  - name: coales.collection
    type: git
    source: https://github.com/Coalescent-inc/ansible-collection.git
  - name: coales.consul
    type: git
    source: https://github.com/Coalescent-inc/ansible-collection-consul.git
  - name: manala.roles
    version: "1.0.11"

roles:
  - name: cisagov.amazon-ssm-agent
    src: https://github.com/cisagov/ansible-role-amazon-ssm-agent
  - name: cisagov.chrony-aws
    src: https://github.com/cisagov/ansible-role-chrony-aws
  - name: cisagov.automated-security-updates
    src: https://github.com/cisagov/ansible-role-automated-security-updates.git
  - src: geerlingguy.docker
    version: "4.1.3"
  - src: robertdebock.hashicorp
    version: "3.2.4"

• playbook

---
- hosts: all
  name: Generic image setup tasks
  become: true
  become_method: sudo
  roles:
    - coales.collection.defaults
    - cisagov.automated-security-updates
    - coales.collection.awscli
    - role: robertdebock.hashicorp
      vars:
        hashicorp_installation_method: package
        hashicorp_products:
          - name: consul
          - name: consul-template
          - name: nomad
          - name: vault

- hosts: nomad_client
  name: Setup image for Nomad client node tasks
  become: true
  become_method: sudo
  roles:
    - geerlingguy.docker
    - role: coales.consul.agent
      consul_agent_mode: "client"
    - hashicorp_nomad_client

Full directory structure (click to expand)

├── ansible/
│   ├── roles/
│   │   ├── hashicorp_nomad_agent/
│   │   │   ├── files/
│   │   │   │   ├── sbin/
│   │   │   │   │   └── nomad-cloud-init
│   │   │   │   ├── templates/
│   │   │   │   └── nomad.hcl
│   │   │   ├── meta/
│   │   │   │   └── main.yml
│   │   │   └── tasks/
│   │   │       └── main.yml
│   │   ├── hashicorp_nomad_client/
│   │   │   ├── files/
│   │   │   │   ├── sbin/
│   │   │   │   │   └── nomad-cloud-init
│   │   │   │   ├── docker-auth.json
│   │   │   │   ├── nomad.hcl
│   │   │   │   └── nomad.service
│   │   │   ├── meta/
│   │   │   │   └── main.yml
│   │   │   └── tasks/
│   │   │       └── main.yml
│   │   └── hashicorp_nomad_server/
│   │       ├── files/
│   │       │   ├── sbin/
│   │       │   │   ├── nomad-cloud-init
│   │       │   │   └── vault-auth-aws
│   │       │   ├── nomad.hcl
│   │       │   ├── nomad.service
│   │       │   └── nomad-vault-auth.service
│   │       ├── meta/
│   │       │   └── main.yml
│   │       └── tasks/
│   │           └── main.yml
│   ├── aws.yml
│   ├── base.yml
│   ├── cluster.yml
│   ├── playbook.yml
│   └── upgrade.yml
├── .github/
│   ├── workflows/
│   │   ├── ci.yml
│   │   └── release.yml
│   ├── lineage.yml
│   └── renovate.json
├── terraform/
│   └── .gitignore
├── .ansible-lint
├── aws_ami.pkr.hcl
├── .gitignore
├── README.md
├── requirements.txt
└── requirements.yml

Desired Behavior

Ansible-lint might scan outside of project directory for its own use but it should not produce linting errors for files outside of it.

Actual Behavior

A lot of linting issues are reported way outside of project directory. Looks like it follows configured collection/role paths?
Might have been exposed by #2016 since reported paths are ~/.ansible used by ansible-galaxy cli?

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:41 Task/Handler: Add a server line for Amazon Time Sync Service

yaml: line too long (182 > 160 characters) (line-length)
../../../.ansible/roles/geerlingguy.docker/defaults/main.yml:25

Output of `ansible-lint -vvv --offline` (click to expand)

DEBUG    Logging initialized to level 10
DEBUG    Options: Namespace(cache_dir='/home/Xerkus/.cache/ansible-compat/8330a2', colored=True, configured=True, cwd=PosixPath('/home/Xerkus/workspace/coalescent/nomad-cluster-packer'), display_relative_path=True, exclude_paths=['/home/Xerkus/workspace/coalescent/nomad-cluster-packer/.github', '/home/Xerkus/workspace/coalescent/nomad-cluster-packer/venv'], format='rich', lintables=[], listrules=False, listtags=False, write=False, parseable=False, quiet=False, rulesdirs=['/home/Xerkus/workspace/coalescent/nomad-cluster-packer/venv/lib64/python3.10/site-packages/ansiblelint/rules'], skip_list=[], tags=[], verbosity=3, warn_list=['experimental', 'role-name'], kinds=[{'jinja2': '**/*.j2'}, {'jinja2': '**/*.j2.*'}, {'text': '**/templates/**/*.*'}, {'inventory': '**/inventory/**.yml'}, {'requirements': '**/meta/requirements.yml'}, {'galaxy': '**/galaxy.yml'}, {'reno': '**/releasenotes/*/*.{yaml,yml}'}, {'playbook': '**/playbooks/*.{yml,yaml}'}, {'playbook': '**/*playbook*.{yml,yaml}'}, {'role': '**/roles/*/'}, {'tasks': '**/tasks/**/*.{yaml,yml}'}, {'handlers': '**/handlers/*.{yaml,yml}'}, {'vars': '**/{host_vars,group_vars,vars,defaults}/**/*.{yaml,yml}'}, {'meta': '**/meta/main.{yaml,yml}'}, {'yaml': '.config/molecule/config.{yaml,yml}'}, {'requirements': '**/molecule/*/{collections,requirements}.{yaml,yml}'}, {'yaml': '**/molecule/*/{base,molecule}.{yaml,yml}'}, {'requirements': '**/requirements.yml'}, {'playbook': '**/molecule/*/*.{yaml,yml}'}, {'yaml': '**/{.ansible-lint,.yamllint}'}, {'yaml': '**/*.{yaml,yml}'}, {'yaml': '**/.*.{yaml,yml}'}], mock_modules=[], mock_roles=[], loop_var_prefix=None, var_naming_pattern=None, offline=True, project_dir='.', extra_vars=None, enable_list=['fcqn-builtins', 'no-log-password'], skip_action_validation=True, rules={}, progressive=False, rulesdir=[], use_default_rules=True, config_file='/home/Xerkus/workspace/coalescent/nomad-cluster-packer/.ansible-lint', version=False)
DEBUG    /home/Xerkus/workspace/coalescent/nomad-cluster-packer
INFO     Running ansible-galaxy role install -vr requirements.yml --roles-path /home/Xerkus/.cache/ansible-compat/8330a2/roles
INFO     Running ansible-galaxy collection install -vr requirements.yml -p /home/Xerkus/.cache/ansible-compat/8330a2/collections
INFO     Set ANSIBLE_LIBRARY=/home/Xerkus/.cache/ansible-compat/8330a2/modules:/home/Xerkus/.ansible/plugins/modules:/usr/share/ansible/plugins/modules
INFO     Set ANSIBLE_COLLECTIONS_PATH=/home/Xerkus/.cache/ansible-compat/8330a2/collections:/home/Xerkus/.ansible/collections:/usr/share/ansible/collections
INFO     Set ANSIBLE_ROLES_PATH=/home/Xerkus/.cache/ansible-compat/8330a2/roles:/home/Xerkus/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles
DEBUG    Loading rules from /home/Xerkus/workspace/coalescent/nomad-cluster-packer/venv/lib64/python3.10/site-packages/ansiblelint/rules
DEBUG    Effective yamllint rules used: {'braces': {'level': 'error', 'forbid': False, 'min-spaces-inside': 0, 'max-spaces-inside': 0, 'min-spaces-inside-empty': -1, 'max-spaces-inside-empty': -1}, 'brackets': {'level': 'error', 'forbid': False, 'min-spaces-inside': 0, 'max-spaces-inside': 0, 'min-spaces-inside-empty': -1, 'max-spaces-inside-empty': -1}, 'colons': {'level': 'error', 'max-spaces-before': 0, 'max-spaces-after': 1}, 'commas': {'level': 'error', 'max-spaces-before': 0, 'min-spaces-after': 1, 'max-spaces-after': 1}, 'comments': {'level': 'warning', 'require-starting-space': True, 'ignore-shebangs': True, 'min-spaces-from-content': 1}, 'comments-indentation': False, 'document-end': False, 'document-start': False, 'empty-lines': {'level': 'error', 'max': 2, 'max-start': 0, 'max-end': 0}, 'empty-values': False, 'hyphens': {'level': 'error', 'max-spaces-after': 1}, 'indentation': {'level': 'error', 'spaces': 'consistent', 'indent-sequences': True, 'check-multi-line-strings': False}, 'key-duplicates': {'level': 'error'}, 'key-ordering': False, 'line-length': {'level': 'error', 'max': 160, 'allow-non-breakable-words': True, 'allow-non-breakable-inline-mappings': False}, 'new-line-at-end-of-file': {'level': 'error'}, 'new-lines': {'level': 'error', 'type': 'unix'}, 'octal-values': False, 'quoted-strings': False, 'trailing-spaces': {'level': 'error'}, 'truthy': {'level': 'warning', 'allowed-values': ['true', 'false'], 'check-keys': True}}
INFO     Discovered files to lint using: git ls-files --cached --others --exclude-standard -z
INFO     Excluded removed files using: git ls-files --deleted -z
DEBUG    Ignored .github/lineage.yml due to: File /home/Xerkus/workspace/coalescent/nomad-cluster-packer/.github matched exclusion entry: .github/lineage.yml
DEBUG    Ignored .github/renovate.json due to: File /home/Xerkus/workspace/coalescent/nomad-cluster-packer/.github matched exclusion entry: .github/renovate.json
DEBUG    Ignored .github/workflows/ci.yml due to: File /home/Xerkus/workspace/coalescent/nomad-cluster-packer/.github matched exclusion entry: .github/workflows/ci.yml
DEBUG    Ignored .github/workflows/release.yml due to: File /home/Xerkus/workspace/coalescent/nomad-cluster-packer/.github matched exclusion entry: .github/workflows/release.yml
DEBUG    Added role: ansible/roles/hashicorp_nomad_agent (role)
DEBUG    Added role: ansible/roles/hashicorp_nomad_client (role)
DEBUG    Added role: ansible/roles/hashicorp_nomad_server (role)
INFO     Discovered files to lint using: git ls-files --cached --others --exclude-standard -z
INFO     Excluded removed files using: git ls-files --deleted -z
INFO     Executing syntax check on ansible/playbook.yml (0.64s)
DEBUG    Examining ansible/roles/hashicorp_nomad_server/tasks/main.yml of type tasks
DEBUG    Examining ansible/roles/hashicorp_nomad_client/meta/main.yml of type meta
DEBUG    Examining ansible/roles/hashicorp_nomad_server of type role
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/tasks/docker-users.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/cisagov.amazon-ssm-agent/vars/Debian.yml of type vars
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/tasks/Debian.yml of type tasks
DEBUG    Examining ansible/playbook.yml of type playbook
DEBUG    Examining ansible/upgrade.yml of type yaml
DEBUG    Examining ../../../.ansible/roles/cisagov.amazon-ssm-agent/meta/main.yml of type meta
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/handlers/main.yml of type handlers
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/tasks/RedHat.yml of type tasks
DEBUG    Examining ansible/roles/hashicorp_nomad_agent of type role
DEBUG    Examining ../../../.ansible/roles/cisagov.chrony-aws/meta/main.yml of type meta
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/vars/Debian.yml of type vars
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/defaults/main.yml of type vars
DEBUG    Examining ../../../.ansible/roles/cisagov.chrony-aws/vars/Debian.yml of type vars
DEBUG    Examining ../../../.ansible/roles/cisagov.chrony-aws/vars/RedHat.yml of type vars
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/tasks/setup-RedHat.yml of type tasks
DEBUG    Examining ansible/roles/hashicorp_nomad_client of type role
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/tasks/Amazon.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/main.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/tasks/main.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml of type tasks
DEBUG    Examining ansible/cluster.yml of type playbook
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/tasks/main.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/install_RedHat.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/robertdebock.hashicorp/vars/main.yml of type vars
DEBUG    Examining ansible/base.yml of type playbook
DEBUG    Examining ansible/roles/hashicorp_nomad_server/meta/main.yml of type meta
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/meta/main.yml of type meta
DEBUG    Examining ../../../.ansible/roles/cisagov.amazon-ssm-agent/vars/RedHat.yml of type vars
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml of type tasks
DEBUG    Examining ansible/roles/hashicorp_nomad_agent/tasks/main.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/vars/RedHat.yml of type vars
DEBUG    Examining ansible/aws.yml of type playbook
DEBUG    Examining ../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/install_Amazon.yml of type tasks
DEBUG    Examining ansible/cluster.yml of type yaml
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/meta/main.yml of type meta
DEBUG    Examining ../../../.ansible/roles/robertdebock.hashicorp/meta/main.yml of type meta
DEBUG    Examining requirements.yml of type requirements
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/vars/Amazon.yml of type vars
DEBUG    Examining ../../../.ansible/roles/robertdebock.hashicorp/defaults/main.yml of type vars
DEBUG    Examining ../../../.ansible/roles/robertdebock.hashicorp/tasks/assert.yml of type tasks
DEBUG    Examining ansible/base.yml of type yaml
DEBUG    Examining ansible/roles/hashicorp_nomad_client/tasks/main.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/install_Debian.yml of type tasks
DEBUG    Examining ansible/roles/hashicorp_nomad_agent/meta/main.yml of type meta
DEBUG    Examining ansible/aws.yml of type yaml
DEBUG    Examining ../../../.ansible/roles/geerlingguy.docker/tasks/docker-compose.yml of type tasks
DEBUG    Examining ../../../.ansible/roles/robertdebock.hashicorp/tasks/main.yml of type tasks
DEBUG    Examining .ansible-lint of type yaml
DEBUG    Examining ../../../.ansible/roles/cisagov.automated-security-updates/tasks/Ubuntu.yml of type tasks
WARNING  Listing 59 violation(s) that are fatal
fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/install_Amazon.yml:2 Task/Handler: Install amazon-ssm-agent

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/install_Debian.yml:2 Task/Handler: Download and install amazon-ssm-agent deb package

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/install_RedHat.yml:2 Task/Handler: Download and install amazon-ssm-agent rpm package

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/install_RedHat.yml:6

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/main.yml:4 Task/Handler: Load var file with package names based on the OS type

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/main.yml:26 Task/Handler: Enable Amazon SSM Agent service

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.amazon-ssm-agent/tasks/main.yml:29

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/Amazon.yml:8

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/Amazon.yml:17

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/Amazon.yml:26

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/Debian.yml:14

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/RedHat.yml:8

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/RedHat.yml:17

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/RedHat.yml:26

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/Ubuntu.yml:17

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.automated-security-updates/tasks/main.yml:33

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:2 Task/Handler: Load var file with package names based on the OS type

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:13 Task/Handler: Install chrony

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:18 Task/Handler: Enable chrony at boot

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:21

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:25 Task/Handler: Comment out existing pool lines

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:30 Task/Handler: Comment out existing server lines that do not correspond to the Amazon Time Sync Service


fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/cisagov.chrony-aws/tasks/main.yml:41 Task/Handler: Add a server line for Amazon Time Sync Service

yaml: line too long (182 > 160 characters) (line-length)
../../../.ansible/roles/geerlingguy.docker/defaults/main.yml:25

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/handlers/main.yml:2 Task/Handler: restart docker

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/docker-compose.yml:2 Task/Handler: Check current docker-compose version.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/docker-compose.yml:9 Task/Handler: Delete existing docker-compose version if it's different.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/docker-compose.yml:17 Task/Handler: Install Docker Compose (if configured).

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/docker-users.yml:2 Task/Handler: Ensure docker users are added to the docker group.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/main.yml:8 Task/Handler: Install Docker.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/main.yml:15 Task/Handler: Ensure /etc/docker/ directory exists.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/main.yml:22 Task/Handler: Configure Docker daemon options.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/main.yml:30 Task/Handler: Ensure Docker is started and enabled at boot.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/main.yml:37 Task/Handler: Ensure handlers are notified now to avoid firewall conflicts.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:2 Task/Handler: Ensure old versions of Docker are not installed.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:9 Task/Handler: Ensure dependencies are installed.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:16 Task/Handler: Ensure additional dependencies are installed (on Ubuntu < 20.04 and any other systems).

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:22 Task/Handler: Ensure additional dependencies are installed (on Ubuntu >= 20.04).

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:28 Task/Handler: Add Docker apt key.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:36 Task/Handler: Ensure curl is present (on older systems without SNI).

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:40 Task/Handler: Add Docker apt key (alternative for older systems without SNI).

risky-shell-pipe: Shells that use pipes should set the pipefail option.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:40 Task/Handler: Add Docker apt key (alternative for older systems without SNI).

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-Debian.yml:47 Task/Handler: Add Docker repository.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-RedHat.yml:2 Task/Handler: Ensure old versions of Docker are not installed.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-RedHat.yml:10 Task/Handler: Add Docker GPG key.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-RedHat.yml:15 Task/Handler: Add Docker repository.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-RedHat.yml:41 Task/Handler: Ensure container-selinux is installed.

fqcn-builtins: Use FQCN for builtin actions.
../../../.ansible/roles/geerlingguy.docker/tasks/setup-RedHat.yml:46 Task/Handler: Ensure containerd.io is installed.

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/robertdebock.hashicorp/tasks/assert.yml:8

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/robertdebock.hashicorp/tasks/assert.yml:14

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/robertdebock.hashicorp/tasks/assert.yml:24

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/robertdebock.hashicorp/tasks/assert.yml:38

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/robertdebock.hashicorp/tasks/main.yml:6

risky-file-permissions: File permissions unset or incorrect.
../../../.ansible/roles/robertdebock.hashicorp/tasks/main.yml:11 Task/Handler: install repository for RedHat

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/robertdebock.hashicorp/tasks/main.yml:24

yaml: truthy value should be one of [false, true] (truthy)
../../../.ansible/roles/robertdebock.hashicorp/tasks/main.yml:52

yaml: line too long (186 > 160 characters) (line-length)
../../../.ansible/roles/robertdebock.hashicorp/vars/main.yml:10

yaml: line too long (164 > 160 characters) (line-length)
../../../.ansible/roles/robertdebock.hashicorp/vars/main.yml:20

yaml: line too long (172 > 160 characters) (line-length)
../../../.ansible/roles/robertdebock.hashicorp/vars/main.yml:21

You can skip specific rules or tags by adding them to your configuration file:
# .config/ansible-lint.yml
warn_list:  # or 'skip_list' to silence them completely
  - experimental  # all rules tagged as experimental
  - fqcn-builtins  # Use FQCN for builtin actions.
  - risky-shell-pipe  # Shells that use pipes should set the pipefail option.
  - yaml  # Violations reported by yamllint.

Finished with 58 failure(s), 1 warning(s) on 68 files.

[ssbarnea]

Please post a link to a repository where this misbehavior can be reproduced. By looking at it, it looks as a local configuration issue. I know for sure that the linter is not supposed to look outside the current project.

[isuftin]

This seems to fix that issue...

ANSIBLE_ROLES_PATH=. ansible-lint

Without setting that variable at runtime, I get:

INFO Set ANSIBLE_ROLES_PATH=/Users/isuftin/.cache/ansible-compat/80d820/roles:roles:/Users/isuftin/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles

When I do set it at runtime, I get:

INFO Set ANSIBLE_ROLES_PATH=/Users/isuftin/.cache/ansible-compat/80d820/roles:roles:/Users/isuftin/Development/ansible/roles/the_role_im_working_on:.

I am guessing the same would need to be done for ANSIBLE_COLLECTIONS_PATH :(

[paddyroddy]

I'm experiencing the same issue. For now, I'm going to create an .ansible-lint file and add ~/.ansible/ to the exclude_paths but it seems odd that I should have to do this

[paddyroddy]

You could have phrased that better. It is clear I'm not trying to spam. I have only just started using ansible-lint for the first time, and I am using version ansible-lint 6.3.0 using ansible 2.12.6.

My requirements.yml looks like

---
collections:
  - ansible.posix
  - community.crypto
  - community.docker
  - community.general
  - community.postgresql

roles:
  - src: ome.omero_server
    version: 4.0.2

  - src: ome.omero_user
    version: 0.3.0

  - src: ome.postgresql
    version: 5.0.3

  - src: ome.omero_web
    version: 4.0.1

[ssbarnea]

You should not have to add ~/.ansible to exclude folder but I think that there is something unique to your environment that makes it report issues with 3rd-party content. Is your repo public?

In fact there is no need to pre-install your requirements because linter is able to install them itself, unless you pass --offline. Try to run with -v and look for which paths are used, what is ansible config being used. I suspect something related to his is confusing it.

Shortly try to reproduce the problem with a public repository on github, so we can easily try to do the same.

[paddyroddy]

Unfortunately the repo is private as it is to do with sensitive hospital projects, but I've created a simpler version with an accompanying bash script which shows the problems I'm experiencing https://github.com/paddyroddy/ansible-lint-bug-demo

You can see from this action the errors https://github.com/paddyroddy/ansible-lint-bug-demo/runs/7466324960?check_suite_focus=true

[ssbarnea]

@paddyroddy Thanks for creating the bug-demo repo. Have you tried to to move the roles folder one level up, so it would be at the same level as playbooks? My impression is that this might fix your issue.

That might be happening because in absence of an ansible.cfg, we assume that project directory to be the root of the git repository.

@cidrblock Let's have a discussion early next week about how to address this issue. Once we decide we should be able to make a patch in a day. That is mostly related to which repository layouts we need/want to support or not and which would be workarounds for those going off-the-book.

[paddyroddy]

I just tried that and experienced the same issue.

My other wonder is that I still get the warning about a given role, i.e. ome.omero_web, doesn't exist suggesting that installation is necessary

[btravouillon]

I know for sure that the linter is not supposed to look outside the current project.

It still does with 6.8.0a0.

Reproducible in a container where the ansible requirements are already installed in the default path (~/.ansible/).

Dockerfile

FROM registry.access.redhat.com/ubi8

RUN dnf install python39 git -y

RUN pip3 install -U pip
RUN pip install ansible ansible-lint==6.8.0a0

RUN mkdir -p projectA/playbooks/

RUN echo "roles:" > projectA/requirements.yml && \
    echo "  - name: minio" >> projectA/requirements.yml && \
    echo "    src: https://github.com/minio/ansible-minio" >> projectA/requirements.yml

RUN ansible-galaxy role install -r projectA/requirements.yml

RUN echo "- name: Reproducer" > projectA/playbooks/minio.yml && \
    echo "  hosts: localhost" >> projectA/playbooks/minio.yml && \
    echo "  roles:" >> projectA/playbooks/minio.yml && \
    echo "    - role: minio" >> projectA/playbooks/minio.yml

Reproducer

$ docker build -t "ansible-lint:2067" .
$ docker run -ti ansible-lint:2067
[root@b7cb8306777c /]# cd projectA/
[root@b7cb8306777c projectA]# ansible-lint --version
ansible-lint 6.8.0a0 using ansible 2.13.4
[root@b7cb8306777c projectA]# ansible-lint playbooks/
WARNING  Listing 25 violation(s) that are fatal
jinja: Jinja2 spacing could be improved: {{ minio_server_ip }}:{{ minio_server_port}} -> {{ minio_server_ip }}:{{ minio_server_port }} (jinja[spacing])
~/.ansible/roles/minio/defaults/main.yml:30 Jinja2 template rewrite recommendation: `{{ minio_server_ip }}:{{ minio_server_port }}`.

fqcn: Use FQCN for builtin module actions (systemd). (fqcn[action-core])
~/.ansible/roles/minio/handlers/main.yml:4 Use `ansible.builtin.systemd` or `ansible.legacy.systemd` instead.

name: All names should start with an uppercase letter. (name[casing])
~/.ansible/roles/minio/handlers/main.yml:4 Task/Handler: reload minio systemd

yaml: truthy value should be one of [false, true] (yaml[truthy])
~/.ansible/roles/minio/handlers/main.yml:7

fqcn: Use FQCN for builtin module actions (service). (fqcn[action-core])
~/.ansible/roles/minio/handlers/main.yml:9 Use `ansible.builtin.service` or `ansible.legacy.service` instead.

name: All names should start with an uppercase letter. (name[casing])
~/.ansible/roles/minio/handlers/main.yml:9 Task/Handler: restart minio

fqcn: Use FQCN for builtin module actions (uri). (fqcn[action-core])
~/.ansible/roles/minio/handlers/main.yml:15 Use `ansible.builtin.uri` or `ansible.legacy.uri` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-client.yml:3 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-client.yml:7 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-client.yml:12 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (get_url). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-client.yml:17 Use `ansible.builtin.get_url` or `ansible.legacy.get_url` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:2 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:6 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:11 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:16 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (set_fact). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:21 Use `ansible.builtin.set_fact` or `ansible.legacy.set_fact` instead.

fqcn: Use FQCN for builtin module actions (group). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:26 Use `ansible.builtin.group` or `ansible.legacy.group` instead.

fqcn: Use FQCN for builtin module actions (user). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:31 Use `ansible.builtin.user` or `ansible.legacy.user` instead.

fqcn: Use FQCN for builtin module actions (file). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:38 Use `ansible.builtin.file` or `ansible.legacy.file` instead.

fqcn: Use FQCN for builtin module actions (get_url). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:48 Use `ansible.builtin.get_url` or `ansible.legacy.get_url` instead.

fqcn: Use FQCN for builtin module actions (template). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:62 Use `ansible.builtin.template` or `ansible.legacy.template` instead.

fqcn: Use FQCN for builtin module actions (template). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:71 Use `ansible.builtin.template` or `ansible.legacy.template` instead.

fqcn: Use FQCN for builtin module actions (template). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:83 Use `ansible.builtin.template` or `ansible.legacy.template` instead.

fqcn: Use FQCN for builtin module actions (file). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:93 Use `ansible.builtin.file` or `ansible.legacy.file` instead.

fqcn: Use FQCN for builtin module actions (service). (fqcn[action-core])
~/.ansible/roles/minio/tasks/install-server.yml:102 Use `ansible.builtin.service` or `ansible.legacy.service` instead.

You can skip specific rules or tags by adding them to your configuration file:
# .config/ansible-lint.yml
warn_list:  # or 'skip_list' to silence them completely
  - fqcn[action-core]  # Use FQCN for builtin actions.
  - yaml[truthy]  # Violations reported by yamllint.

                 Rule Violation Summary                  
 count tag               profile    rule associated tags 
     1 jinja[spacing]    basic      formatting (warning) 
     1 yaml[truthy]      basic      formatting, yaml     
     2 name[casing]      moderate   idiom (warning)      
    21 fqcn[action-core] production formatting           

Finished with 22 failure(s), 3 warning(s) on 11 files. Code passed min profile. No rating.

This is a sample case with a single role. My team uses a lot more third-party roles and collections where we cannot force maintainers to comply with ansible-lint rules.

[btravouillon]

Still with latest pre-release (even more errors detected in the third-party role 😆 ).

[root@c516841eb40a projectA]# ansible-lint --version
ansible-lint 6.8.0b1 using ansible 2.13.4

@ssbarnea should this discussion be converted to an issue?

[ssbarnea]

Conversion is not possible, as it works only the other way. Stiil, you can create a new bug for and I will to fix it during next weeks.

[btravouillon]

#2536