Added windows 11 molecule test

Author: xiaoyao9184

README.md

@@ -340,3 +340,4 @@ If you would like to perform testing, you need to follow the steps in the table
 | target | *-container@any | *-test@any |
 |-----|-----|-----|
 | Windows 2025 | [windows2025-container@any](molecule/windows2025-container@any/README.md) | [windows2025-test@any](molecule/windows2025-test@any/README.md) |
+| Windows 11 | [windows11-container@any](molecule/windows11-container@any/README.md) | [windows11-test@any](molecule/windows11-test@any/README.md) |

molecule/windows11-container@any/Dockerfile.j2

@@ -0,0 +1 @@
+FROM dockurr/windows

molecule/windows11-container@any/README.md

@@ -0,0 +1,19 @@
+# windows11-container@any
+
+NOTE: only support molecule `create` sequence, cant test `converge` automatically.
+
+```bash
+molecule --debug -vvv create --scenario-name windows11-container@any
+```
+
+then go `http://localhost:8116`, create username `docker` with password `4Test@ansible`,
+and enable ssh login, it will use by [windows11-test@any/converge](../windows11-test@any/converge.yml)
+
+after that use [windows11-test@any](../windows11-test@any/README.md)
+
+
+finally destroy it
+
+```bash
+molecule --debug -vvv destroy --scenario-name windows11-container@any
+```

molecule/windows11-container@any/converge.yml

@@ -0,0 +1,10 @@
+---
+# This is an example playbook to execute Ansible tests.
+
+- name: Converge
+  hosts: localhost
+  connection: local
+  tasks:
+  - name: Converge assert
+    ansible.builtin.assert:
+      that: true

molecule/windows11-container@any/install.bat

@@ -0,0 +1 @@
+winrm quickconfig -q -transport:http

molecule/windows11-container@any/molecule.yml

@@ -0,0 +1,44 @@
+---
+# skip role name check
+# see https://github.com/ansible/ansible-compat/issues/78
+role_name_check: 1
+dependency:
+  name: galaxy
+  # need update `community.docker` support `cgroupns_mode` by molecule-plugins[docker]
+  enabled: true
+  options:
+    role-file: requirements.yml
+driver:
+  name: docker
+platforms:
+  - name: windows11-container
+    image: dockurr/windows
+    privileged: true
+    override_command: false
+    env:
+      DISK_SIZE: "24G"
+      VERSION: "11"
+      USERNAME: "docker"
+      PASSWORD: "4Test@ansible"
+      VMX: "Y"
+    devices:
+      - /dev/kvm
+      - /dev/net/tun
+    capabilities:
+      - NET_ADMIN
+    published_ports:
+      - 8116:8006
+      - 11389:3389/tcp
+      - 11389:3389/udp
+      - 11985:5985
+    volumes:
+      - ${MOLECULE_SCENARIO_DIRECTORY}/install.bat:/oem/install.bat
+      # some file permission cant auto cleanup need manual remove
+      - $MOLECULE_EPHEMERAL_DIRECTORY/.storage:/storage
+    cgroupns_mode: host
+provisioner:
+  name: ansible
+  playbooks:
+    cleanup: ../shared/cleanup.yml
+verifier:
+  name: ansible

molecule/windows11-container@any/syntax.yml

@@ -0,0 +1,9 @@
+---
+# This is an example playbook to execute Ansible tests.
+
+- name: Verify
+  hosts: all
+  tasks:
+  - name: Verify assert
+    ansible.builtin.assert:
+      that: true

molecule/windows11-test@any/README.md

@@ -0,0 +1,13 @@
+# windows11-test@any
+
+NOTE: You need to manually restart the Windows container in order to proceed with the RUNNING HANDLER [docker : Reboot system] task, especially when encountering the TianoCore boot hang issue.
+
+NOTE: only support molecule `converge` sequence, cant test `create` automatically.
+
+before test, use [windows11-container@any](../windows11-container@any/README.md) first,
+then go `http://localhost:8116`, create username `docker` with password `4Test@ansible`,
+and enable ssh login, it will use by [windows11-test@any/converge](../windows11-test@any/converge.yml)
+
+```bash
+molecule --debug -vvv test --scenario-name windows11-test@any
+```

molecule/windows11-test@any/converge.yml

@@ -0,0 +1,24 @@
+---
+- name: Converge
+  hosts: all
+  vars:
+    docker_config_service: true
+    docker_daemon_file: "%userprofile%\\.docker\\daemon.json"
+    docker_opts:
+      builder:
+        gc:
+          defaultKeepStorage: 20GB
+          enabled: true
+      experimental: false
+      features:
+        buildkit: true
+      insecure-registries:
+        - http://nexus.lan:8082
+    docker_version: 4.39.0
+    # NOTE: TianoCore may hang during boot;
+    # make sure to allow sufficient wait time.
+    docker_windows_reboot_timeout: 86400
+  tasks:
+    - name: Include docker
+      ansible.builtin.include_role:
+        name: docker

molecule/windows11-test@any/molecule.yml

@@ -0,0 +1,34 @@
+---
+# skip role name check
+# see https://github.com/ansible/ansible-compat/issues/78
+role_name_check: 1
+dependency:
+  name: galaxy
+  # need update `community.docker` support `cgroupns_mode` by molecule-plugins[docker]
+  enabled: true
+  options:
+    role-file: requirements.yml
+driver:
+  # Automatically use the default driver to ensure compatibility with both pre-Molecule 6 and post-Molecule 6 versions.
+  # name: delegated
+  options:
+    managed: False
+    ansible_connection_options:
+      ansible_host: localhost
+      ansible_connection: winrm
+      ansible_winrm_scheme: http
+      ansible_port: "11985"
+      ansible_winrm_transport: ntlm
+      ansible_user: docker
+      ansible_password: 4Test@ansible
+      ansible_become_password: 4Test@ansible
+      ansible_winrm_server_cert_validation: ignore
+platforms:
+  - name: windows11-test
+provisioner:
+  name: ansible
+  playbooks:
+    prepare: ./prepare.yml
+    converge: ./converge.yml
+verifier:
+  name: ansible

molecule/windows11-test@any/prepare.yml

@@ -0,0 +1,16 @@
+---
+- name: Prepare
+  hosts: localhost
+  connection: local
+  tasks:
+    - name: Debug ansible_python_interpreter
+      ansible.builtin.debug:
+        msg: "{{ ansible_python_interpreter }}"
+
+    - name: Install winrm
+      ansible.builtin.pip:
+        name: pywinrm==0.4.3
+        state: present
+
+- name: Include shared prepare
+  ansible.builtin.import_playbook: ../shared/prepare.yml

molecule/windows11-test@any/verify.yml

@@ -0,0 +1,30 @@
+---
+# This is an example playbook to execute Ansible tests.
+
+- name: Verify
+  hosts: all
+  vars:
+    package: Docker
+  tasks:
+    - name: Read daemon.json
+      ansible.builtin.slurp:
+        src: "%userprofile%\\.docker\\daemon.json"
+      register: daemon_json_content
+
+    - name: Parse JSON and check values
+      ansible.builtin.set_fact:
+        daemon_json: "{{ daemon_json_content['content'] | b64decode | from_json }}"
+
+    - name: Ensure builder.gc.enabled is defined
+      ansible.builtin.assert:
+        that:
+          - daemon_json.builder.gc.enabled is defined
+          - daemon_json.builder.gc.enabled | bool
+        fail_msg: "'builder.gc.enabled' must be set to 'true' in '%userprofile%\\.docker\\daemon.json'"
+
+    - name: Ensure insecure-registries contains http://nexus.lan:8082
+      ansible.builtin.assert:
+        that:
+          - "'insecure-registries' in daemon_json"
+          - "'http://nexus.lan:8082' in daemon_json['insecure-registries']"
+        fail_msg: "'http://nexus.lan:8082' is missing from insecure-registries in '%userprofile%\\.docker\\daemon.json'"