Update GitHub actions to use Ubuntu 22.04 (#298)

Author: alessfg

.github/workflows/galaxy.yml

@@ -8,7 +8,7 @@ name: Ansible Galaxy import
 jobs:
   galaxy:
     name: Galaxy
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
       - name: Check out the codebase
         uses: actions/checkout@v3

.github/workflows/molecule.yml

@@ -15,7 +15,7 @@ name: Molecule CI/CD
 jobs:
   molecule:
     name: Molecule
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     env:
       NGINX_CRT: ${{ secrets.NGINX_CRT }}
       NGINX_KEY: ${{ secrets.NGINX_KEY }}

.github/workflows/release-drafter.yml

@@ -13,7 +13,7 @@ name: Release Drafter
 jobs:
   update_release_draft:
     name: Update release draft
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
       - uses: release-drafter/release-drafter@v5
         env:

CHANGELOG.md

@@ -6,6 +6,10 @@ BUG FIXES:
 
 GitHub actions should now correctly skip \*plus\* scenarios only when the NGINX Plus license secrets are not present.
 
+TESTS:
+
+Update GitHub actions to run on Ubuntu 22.04 (and thus support `cgroups` v2).
+
 ## 0.5.2 (October 17, 2022)
 
 ENHANCEMENTS:

README.md

@@ -14,17 +14,17 @@ This role configures NGINX Open Source and NGINX Plus on your target host.
 
 ### Ansible
 
-* This role is developed and tested with [maintained](https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html) versions of Ansible core (above `2.11`).
+* This role is developed and tested with [maintained](https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html) versions of Ansible core (above `2.12`).
 * When using Ansible core, you will also need to install the following collections:
 
     ```yaml
     ---
     collections:
-      - name: community.general
-        version: 5.5.0
       - name: ansible.posix
         version: 1.4.0
-      - name: community.docker  # Only required if you plan to use Molecule (see below)
+      - name: community.general
+        version: 5.5.0
+      - name: community.docker # Only required if you plan to use Molecule (see below)
         version: 3.1.0
     ```
 
@@ -67,22 +67,31 @@ The NGINX config Ansible role supports all platforms supported by [NGINX Open So
 ### NGINX Open Source
 
 ```yaml
+AlmaLinux:
+  - 8
+  - 9
 Alpine:
-  - 3.13
   - 3.14
   - 3.15
   - 3.16
+  - 3.17
 Amazon Linux:
   - 2
 CentOS:
   - 7.4+
 Debian:
-  - buster (10)
   - bullseye (11)
+Oracle Linux:
+  - 7
+  - 8
+  - 9
 Red Hat:
   - 7.4+
   - 8
   - 9
+Rocky Linux:
+  - 8
+  - 9
 SUSE/SLES:
   - 12
   - 15
@@ -96,17 +105,20 @@ Ubuntu:
 ### NGINX Plus
 
 ```yaml
+AlmaLinux:
+  - 8
+  - 9
 Alpine:
   - 3.13
   - 3.14
   - 3.15
   - 3.16
+  - 3.17
 Amazon Linux 2:
   - any
 CentOS:
   - 7.4+
 Debian:
-  - buster (10)
   - bullseye (11)
 FreeBSD:
   - 12.1+
@@ -117,6 +129,9 @@ Red Hat:
   - 7.4+
   - 8
   - 9
+Rocky Linux:
+  - 8
+  - 9
 SUSE/SLES:
   - 12
   - 15
@@ -158,8 +173,6 @@ You can find the Ansible NGINX role to install NGINX OSS and NGINX Plus [here](h
 
 You can find the Ansible NGINX App Protect role to install and configure NGINX App Protect WAF and NGINX App Protect DoS [here](https://github.com/nginxinc/ansible-role-nginx-app-protect).
 
-You can find the Ansible NGINX Controller collection of roles to install and configure NGINX Controller [here](https://github.com/nginxinc/ansible-collection-nginx_controller).
-
 You can find the Ansible NGINX Unit role to install NGINX Unit [here](https://github.com/nginxinc/ansible-role-nginx-unit).
 
 ## License

molecule/cleanup_module/molecule.yml

@@ -9,31 +9,35 @@ lint: |
   set -e
   ansible-lint --force-color
 platforms:
-  - name: alpine-3.13
-    image: alpine:3.13
+  - name: alpine-3.17
+    image: alpine:3.17
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init
-  - name: centos-7
-    image: centos:7
+  - name: rhel-9
+    image: redhat/ubi9:9.1.0
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /usr/sbin/init
-  - name: debian-buster
-    image: debian:buster-slim
+  - name: debian-bullseye
+    image: debian:bullseye-slim
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init
-  - name: ubuntu-bionic
-    image: ubuntu:bionic
+  - name: ubuntu-jammy
+    image: ubuntu:jammy
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init

molecule/common/Dockerfile.j2

@@ -26,11 +26,14 @@ RUN \
   elif [ $(command -v yum) ]; then \
     yum makecache fast \
     && yum install -y bash iproute initscripts sudo /usr/bin/python /usr/bin/python2-config vim yum-plugin-ovl \
+    && yum install -y http://mirror.centos.org/centos/7/os/x86_64/Packages/yum-plugin-copr-1.1.31-54.el7_8.noarch.rpm http://mirror.centos.org/centos/7/os/x86_64/Packages/libseccomp-2.3.1-4.el7.x86_64.rpm \
+    && yum copr enable -y jsynacek/systemd-backports-for-centos-7 \
+    && yum update --disableplugin=priorities -y systemd \
     && sed -i 's/plugins=0/plugins=1/g' /etc/yum.conf \
     && yum clean all; \
   elif [ $(command -v zypper) ]; then \
     zypper refresh \
-    && zypper install -y bash iproute2 python3 sudo vim \
+    && zypper install -y bash iproute2 python3 sudo systemd systemd-sysvinit vim \
     && zypper clean -a; \
   elif [ $(command -v apk) ]; then \
     apk update \

molecule/default/molecule.yml

@@ -9,31 +9,35 @@ lint: |
   set -e
   ansible-lint --force-color
 platforms:
-  - name: alpine-3.13
-    image: alpine:3.13
+  - name: alpine-3.17
+    image: alpine:3.17
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init
-  - name: centos-7
-    image: centos:7
+  - name: rhel-9
+    image: redhat/ubi9:9.1.0
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /usr/sbin/init
-  - name: debian-buster
-    image: debian:buster-slim
+  - name: debian-bullseye
+    image: debian:bullseye-slim
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init
-  - name: ubuntu-bionic
-    image: ubuntu:bionic
+  - name: ubuntu-jammy
+    image: ubuntu:jammy
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init

molecule/plus/molecule.yml

@@ -13,13 +13,15 @@ platforms:
     image: centos:7
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /usr/sbin/init
   - name: ubuntu-bionic
     image: ubuntu:bionic
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init

molecule/stable_push/molecule.yml

@@ -9,31 +9,35 @@ lint: |
   set -e
   ansible-lint --force-color
 platforms:
-  - name: alpine-3.13
-    image: alpine:3.13
+  - name: alpine-3.17
+    image: alpine:3.17
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init
-  - name: centos-7
-    image: centos:7
+  - name: rhel-9
+    image: redhat/ubi9:9.1.0
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /usr/sbin/init
-  - name: debian-buster
-    image: debian:buster-slim
+  - name: debian-bullseye
+    image: debian:bullseye-slim
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init
-  - name: ubuntu-bionic
-    image: ubuntu:bionic
+  - name: ubuntu-jammy
+    image: ubuntu:jammy
     dockerfile: ../common/Dockerfile.j2
     privileged: true
+    cgroupns_mode: host
     volumes:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     command: /sbin/init