From 8bb6395b40cf5e7ade68af42b43033dda514b614 Mon Sep 17 00:00:00 2001
From: Konstantin Renner <konstantin@renner.uno>
Date: Mon, 23 Mar 2026 18:02:06 +0100
Subject: [PATCH] fix(woodpecker): Set ANSIBLE_ROLES_PATH env var for
 update-all pipeline

ansible.cfg is ignored in world-writable CI directories. Setting
ANSIBLE_ROLES_PATH as environment variable bypasses the issue.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .woodpecker/update-all.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.woodpecker/update-all.yml b/.woodpecker/update-all.yml
index d1ff4868..b73f4468 100644
--- a/.woodpecker/update-all.yml
+++ b/.woodpecker/update-all.yml
@@ -8,6 +8,7 @@ steps:
     environment:
       ANSIBLE_FORCE_COLOR: "true"
       ANSIBLE_HOST_KEY_CHECKING: "false"
+      ANSIBLE_ROLES_PATH: "../roles:./roles"
       SSH_PRIVATE_KEY:
         from_secret: ssh_private_key
       VAULT_PASS:
@@ -24,7 +25,6 @@ steps:
       - echo "$SSH_PRIVATE_KEY" | base64 -d > ~/.ssh/id_ed25519
       - chmod 600 ~/.ssh/id_ed25519
       - printf "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile /dev/null\n" > ~/.ssh/config
-      - chmod 700 .
       - cd ansible
       - echo "$VAULT_PASS" > .vault_pass && chmod 600 .vault_pass
       - export ANSIBLE_VAULT_PASSWORD_FILE=.vault_pass