Refactor requirements-dev.txt and remove molecule-vagrant

ansible/roles/cis/molecule/default/converge.yml

@@ -3,6 +3,6 @@
   hosts: all
   any_errors_fatal: true
   tasks:
-    - name: "Include cis_hardening"
+    - name: "Include cis"
       ansible.builtin.include_role:
-        name: "cis_hardening"
+        name: "cis"

ansible/roles/cis/molecule/default/molecule.yml

@@ -3,9 +3,12 @@ dependency:
   name: galaxy
   enabled: true
 driver:
-  name: vagrant
-  provider:
-    name: libvirt
+  name: podman
+platforms:
+  - name: instance
+    image: ubuntu:20.04
+    pre_build_image: true
+    privileged: true
 provisioner:
   name: ansible
   config_options:
@@ -19,71 +22,8 @@ provisioner:
         ssh_allowed_networks: "0.0.0.0/0"
         sshd_allow_groups: "vagrant sudo"
         suid_sgid_permissions: false
-platforms:
-  - name: jammy
-    box: "jaredeh/ubuntu2204-server"
-    box_version: "0.1.1"
-    interfaces:
-      - auto_config: true
-        network_name: private_network
-        type: dhcp
-    instance_raw_config_args:
-      # use single quotes to avoid YAML parsing as dict due to ':'
-      - 'vm.synced_folder ".", "/vagrant", type: "rsync"'
-      # Run 'uname' a provisionning step **needs 'provision: true' to work**
-      - 'vm.provision :shell, inline: "uname"'
-    # Dictionary of `config` options. Note that string values need to be
-    # explicitly enclosed in quotes.
-    config_options:
-      vm.boot_timeout: 600
-      ssh.keep_alive: true
-      ssh.remote_user: 'ansible'
-      synced_folder: true
-    provider_options:
-      video_type: 'vga'
-      host: 'localhost'
-      uri: 'qemu:///system'
-    memory: 4096
 verifier:
   name: ansible
 lint: |
   set -e
   ansible-lint
-scenario:
-  name: default
-  create_sequence:
-    - dependency
-    - create
-    - prepare
-  check_sequence:
-    - dependency
-    - cleanup
-    - destroy
-    - create
-    - prepare
-    - converge
-    - check
-    - destroy
-  converge_sequence:
-    - dependency
-    - create
-    - prepare
-    - converge
-  destroy_sequence:
-    - dependency
-    - cleanup
-    - destroy
-  test_sequence:
-    - dependency
-    - lint
-    - cleanup
-    - destroy
-    - syntax
-    - create
-    - prepare
-    - converge
-    - idempotence
-    - side_effect
-    - verify
-    - cleanup
-    - destroy

ansible/roles/cis/molecule/default/prepare.yml

@@ -0,0 +1,10 @@
+---
+- name: Prepare
+  hosts: all
+  gather_facts: false
+  tasks:
+    - name: Update cache # noqa no-changed-when
+      ansible.builtin.raw: apt update
+
+    - name: Install required packages # noqa no-changed-when
+      ansible.builtin.raw: apt install -y python3 sudo cron kmod