diff --git a/scripts/inventory_host.py b/scripts/inventory_host.py
index 87d1260..2312100 100644
--- a/scripts/inventory_host.py
+++ b/scripts/inventory_host.py
@@ -206,6 +206,12 @@ def afficher_playbooks_hote(data: dict, host: str, playbook_dir: Path) -> None:
     if not groups:
         raise ValueError(f"Hote absent de l'inventaire: {host}")
 
+    # Le SOCLE passe toujours en premier : il pose /etc/hosts (resolution interne),
+    # le durcissement, etc. Les integrations client_* et les services en dependent
+    # (ex. client_pki doit resoudre l'AC via /etc/hosts avant de bootstrapper).
+    socle = ["serveur_debian", "serveur_durci"]
+    groups = sorted(groups, key=lambda g: (socle.index(g) if g in socle else len(socle), g))
+
     missing_playbooks: list[str] = []
     playbooks: list[Path] = []