- hosts: localhost
  roles:
    - role: emit-job-header
      zuul_log_path_shard_build: true
    - log-inventory

- hosts: all
  pre_tasks:
    # NOTE(pabelanger): Until we hit the validate-host role, we have a minimal
    # set of ansible variables collected by zuul-executor. This doesn't include
    # network variables (ansible_default_ipv4 / ansible_default_ipv6) so gather
    # these variables as they are important to the configure-unbound role.
    - name: Gather network facts
      setup:
        gather_subset: 'network'
    # NOTE(clarkb) this is here to debug why some hosts don't seem to properly
    # grow their root disks when jobs start.
    - name: Check growroot logs
      become: yes
      ignore_errors: yes
      command: journalctl -u growroot

  roles:
    - add-build-sshkey-fork
    - start-zuul-console
    - ensure-output-dirs

- hosts: all
  roles:
    # NOTE(pabelanger): We run this role in its own play to ensure unbound is
    # restarted before proceeding with any other role. This is because we use
    # notify / handler to restart the unbound service. With ansible notify
    # actions are triggered at the end of each block of tasks in a play.
    - configure-unbound

- hosts: all
  roles:
    - validate-host
    - prepare-workspace-git
    - mirror-info
    - role: configure-mirrors
      set_apt_mirrors_trusted: True
      mirror_use_ssl: True