Login to Docker Hub before pulling images

.github/workflows/build.yml

@@ -231,6 +231,13 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           pip install --upgrade --requirement requirements-test.txt
+      # We are less likely to hit rate limiting if we log into Docker
+      # Hub before pulling images.
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          password: ${{ secrets.DOCKER_PASSWORD }}
+          username: ${{ secrets.DOCKER_USERNAME }}
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx

molecule/default/converge.yml

@@ -2,6 +2,6 @@
 - name: Converge
   hosts: all
   tasks:
-    - name: Include skeleton-ansible-role
+    - name: Include cisagov/skeleton-ansible-role
       ansible.builtin.include_role:
-        name: skeleton-ansible-role
+        name: skeleton

molecule/default/requirements.yml

@@ -7,5 +7,7 @@ collections:
     version: ">=3.10.2"
 
 roles:
+  - name: skeleton
+    src: https://github.com/cisagov/skeleton-ansible-role
   - name: upgrade
     src: https://github.com/cisagov/ansible-role-upgrade

requirements-test.txt

@@ -40,11 +40,9 @@ ansible>=10,<11
 # requirements.txt in cisagov/skeleton-packer and
 # .pre-commit-config.yaml in cisagov/skeleton-generic.
 ansible-core>=2.17
-# With the release of molecule v5 there were some breaking changes so
-# we need to pin at v5 or newer. However, v5.0.0 had an internal
-# dependency issue so we must use the bugfix release as the actual
-# lower bound.
-molecule>=5.0.1
+# With the release of molecule v25.2 the role being tested must be
+# specified in requirements.yml.
+molecule>=25.2.0
 molecule-plugins[docker]
 pre-commit
 # pytest-testinfra 10.1.1 contains a fix for SystemdService.exists