From 7c1939b54a3e4218090fcc82edaed48f665df39a Mon Sep 17 00:00:00 2001
From: Markus Pesch <markus.pesch@cryptic.systems>
Date: Sun, 18 Oct 2026 14:46:48 +0200
Subject: [PATCH] ci: run Molecule on pushes and pull requests

Exercise the role across supported test platforms to catch regressions before merging.

Co-authored-by: Copilot <copilot@github.com>
---
 .gitea/workflows/molecule.yml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 .gitea/workflows/molecule.yml

diff --git a/.gitea/workflows/molecule.yml b/.gitea/workflows/molecule.yml
new file mode 100644
index 0000000..dfdd65a
--- /dev/null
+++ b/.gitea/workflows/molecule.yml
@@ -0,0 +1,29 @@
+name: Molecule
+
+on:
+  pull_request:
+    types: [ "opened", "reopened", "synchronize" ]
+  push:
+    branches: [ '**' ]
+    tags-ignore: [ '**' ]
+
+permissions:
+  contents: read
+
+jobs:
+  molecule:
+    name: Molecule
+    runs-on: ubuntu-latest-amd64
+    steps:
+    # The scenario includes the role by its directory name, whose parent is used as roles path.
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      with:
+        path: root
+    - name: Install molecule
+      run: |
+        apt update --yes
+        apt install --yes python3-pip
+        pip3 install --break-system-packages molecule docker
+    - name: Run molecule
+      run: molecule test
+      working-directory: root