Test role invocation through old 'roles'

.travis.yml

@@ -70,12 +70,18 @@ script:
     && (echo 'Match blocks with iteration test: pass' && exit 0)
     || (echo 'Match blocks with iteration test: fail' && exit 1)
 
-  # Test 8: Test hostkeys can be generated by this role
+  # Test 8a: Test hostkeys can be generated by this role
   - >
     ANSIBLE_FORCE_COLOR=1 ansible-playbook -i tests/inventory tests/tests_hostkeys.yml --connection=local --become -v
     && (echo 'Hostkeys test: pass' && exit 0)
     || (echo 'Hostkeys test: fail' && exit 1)
 
+  # Test 8b: Test hostkeys can be generated by this role using old invocation
+  - >
+    ANSIBLE_FORCE_COLOR=1 ansible-playbook -i tests/inventory tests/tests_hostkeys_role.yml --connection=local --become -v
+    && (echo 'Hostkeys role test: pass' && exit 0)
+    || (echo 'Hostkeys role test: fail' && exit 1)
+
   # Test 9: Test missing hostkeys
   - >
     ANSIBLE_FORCE_COLOR=1 ansible-playbook -i tests/inventory tests/tests_hostkeys_missing.yml --connection=local --become -v

tests/tests_hostkeys_role.yml

@@ -0,0 +1,91 @@
+---
+- hosts: all
+  vars:
+    __sshd_test_backup_files:
+      - /etc/ssh/sshd_config
+      - /etc/ssh/sshd_config.d/00-ansible_system_role.conf
+      - /tmp/ssh_host_rsa_key2
+  tasks:
+    - name: "Backup configuration files"
+      include_tasks: tasks/backup.yml
+
+    - name: Remove host key before the test
+      file:
+        path: /tmp/ssh_host_rsa_key2
+        state: absent
+
+    - name: Ensure group 'nobody' exists
+      group:
+        name: nobody
+
+    - name: Ensure the user 'nobody' exists
+      user:
+        name: nobody
+        group: nobody
+        comment: nobody
+        create_home: no
+        shell: /sbin/nologin
+
+# invoke role through "roles"
+- hosts: all
+  roles:
+    - ansible-sshd
+  vars:
+    # very BAD example
+    sshd_hostkey_owner: "nobody"
+    sshd_hostkey_group: "nobody"
+    sshd_hostkey_mode: "0664"
+    sshd:
+      HostKey:
+        - /tmp/ssh_host_rsa_key2
+
+- hosts: all
+  vars:
+    __sshd_test_backup_files:
+      - /etc/ssh/sshd_config
+      - /etc/ssh/sshd_config.d/00-ansible_system_role.conf
+      - /tmp/ssh_host_rsa_key2
+  tasks:
+    - name: Verify the options are correctly set
+      vars:
+        main_sshd_config: >-
+          {{
+            "/etc/ssh/sshd_config.d/00-ansible_system_role.conf"
+            if ansible_facts['distribution'] == 'Fedora'
+            else "/etc/ssh/sshd_config"
+          }}
+      block:
+        - meta: flush_handlers
+
+        - name: Print current configuration file
+          slurp:
+            src: "{{ main_sshd_config }}"
+          register: config
+
+        - name: Get stat of private key
+          stat:
+            path: /tmp/ssh_host_rsa_key2
+          register: privkey
+
+        - name: Get stat of public key
+          stat:
+            path: /tmp/ssh_host_rsa_key2.pub
+          register: pubkey
+
+        - name: Check the options are in configuration file
+          assert:
+            that:
+              - "'HostKey /tmp/ssh_host_rsa_key2' in config.content | b64decode"
+
+        - name: Check the generated host key has requested properties
+          assert:
+            that:
+              - privkey.stat.exists
+              - privkey.stat.gr_name == 'nobody'
+              - privkey.stat.pw_name == 'nobody'
+              - privkey.stat.mode == '0664'
+              - pubkey.stat.exists
+      tags: tests::verify
+
+    - name: "Restore configuration files"
+      include_tasks: tasks/restore.yml