Always update Vagrant Boxes before using

Signed-off-by: Martin Schurz <Martin.Schurz@telekom.de>

.github/workflows/os_hardening_vm.yml

@@ -58,6 +58,10 @@ jobs:
           path: ansible_collections/devsec/hardening
           submodules: true
 
+      - name: Update Vagrant Box
+        run: |
+          vagrant box update --box ${{ matrix.molecule_distro }}
+
       - name: Test with molecule
         run: |
           molecule --version

.github/workflows/ssh_hardening_bsd.yml

@@ -47,6 +47,10 @@ jobs:
           path: ansible_collections/devsec/hardening
           submodules: true
 
+      - name: Update Vagrant Box
+        run: |
+          vagrant box update --box generic/${{ matrix.molecule_distro }}
+
       - name: Test with molecule
         run: |
           molecule --version

molecule/ssh_hardening_bsd/converge.yml

@@ -1,15 +1,4 @@
 ---
-- name: Prepare OpenBSD host
-  hosts: all
-  become: true
-  gather_facts: false
-  tasks:
-    - name: Use Python 3 on OpenBSD
-      ansible.builtin.set_fact:
-        ansible_python_interpreter: /usr/bin/python3
-      changed_when: false
-      when: lookup('env', 'MOLECULE_DISTRO') == 'openbsd7'
-
 - name: Wrapper playbook for kitchen testing "ansible-ssh-hardening" with default settings
   hosts: all
   environment:

molecule/ssh_hardening_bsd/prepare.yml

@@ -9,12 +9,6 @@
       ansible.builtin.raw: pkg_add python%3.10
       changed_when: false
       when: lookup('env', 'MOLECULE_DISTRO') == 'openbsd7'
-      
-    - name: Use Python 3 on OpenBSD
-      ansible.builtin.set_fact:
-        ansible_python_interpreter: /usr/bin/python3
-      changed_when: false
-      when: lookup('env', 'MOLECULE_DISTRO') == 'openbsd7'
 
 - name: Wrapper playbook for kitchen testing "ansible-ssh-hardening" with default settings
   hosts: all

molecule/ssh_hardening_bsd/verify.yml

@@ -3,12 +3,6 @@
   hosts: all
   become: true
   tasks:
-    - name: Use Python 3 on OpenBSD
-      ansible.builtin.set_fact:
-        ansible_python_interpreter: /usr/bin/python3
-      changed_when: false
-      when: lookup('env', 'MOLECULE_DISTRO') == 'openbsd7'
-      
     - name: Use the type command instead of which to detect existing commands
       ansible.builtin.file:
         src: /usr/bin/which