ci: several changes related to new qemu test, ansible-lint, python versions, ubuntu versions

[richm]

There is a new QEMU based test which uses the qemu/kvm capability of
github action runners. This is the basis for new bootc/image mode tests
which we will be rolling out in the near future.

ansible-lint requires that the collection path is set so that the requirements
it installs are installed in the correct place.

There has been some general github action deprecation of python versions and
ubuntu versions that we have had to fix.

Remove CONTRIBUTOR from the list of users who can trigger citest.

For more information, see

• ci: ansible-lint needs collection path; tox-lsr 3.5.1 .github#98
• ci: Run QEMU tox integration tests in GitHub workflow .github#94
• Apply a stricter policy to who can run the workflow .github#93
• ci: Remove tft trigger capability for contributors .github#92
• ci: Drop explicit "connection:" for provisioning .github#91

[richm]

@Jakuje re: f42 failures - I guess there are some new options or removed options in f42?

[Jakuje]

@Jakuje re: f42 failures - I guess there are some new options or removed options in f42?

Is there way to get some logs from that or output? I do not see in our CI any issues on Fedora 42.

[richm]

@Jakuje re: f42 failures - I guess there are some new options or removed options in f42?

Is there way to get some logs from that or output? I do not see in our CI any issues on Fedora 42.

https://github.com/linux-system-roles/ssh/actions/runs/14340666754/job/40198837238?pr=177

The failing test is FAIL: tests_all_options.yml

the failure is

  TASK [Reinstall manual pages for openssh-clients on RHEL] **********************
  task path: /home/runner/work/ssh/ssh/tests/tests_all_options.yml:49
  Tuesday 08 April 2025  19:34:24 +0000 (0:00:00.491)       0:00:02.261 ********* 
  fatal: [/home/runner/.cache/linux-system-roles/fedora-42.qcow2]: FAILED! => {
      "changed": true,
      "cmd": [
          "dnf",
          "reinstall",
          "-y",
          "openssh-clients"
      ],
      "delta": "0:00:00.531813",
      "end": "2025-04-08 19:34:25.576412",
      "rc": 1,
      "start": "2025-04-08 19:34:25.044599"
  }
  
  STDERR:
  
  Updating and loading repositories:
  Repositories loaded.
  Failed to resolve the transaction:
  Installed packages for argument 'openssh-clients' are not available in repositories in the same version, available versions: openssh-clients-9.9p1-10.fc42.x86_64, cannot reinstall.
  
  
  MSG:
  
  non-zero return code

[Jakuje]

Sounds like some repository issue, It should be safe to skip this test on QEMU. This is just to install manual pages in minimized container images. We have some logic to run something only on containers in sshd, but I do not think we have it here.

[martinpitt]

Green now with the latest update, the previous failure sounds and awful lot like the ansible 2.16 dnf5 incompatibility.