---
- name: Vérifier une VM Debian gérée par Set-OPS
  hosts: serveur_debian
  become: true
  gather_facts: true

  tasks:
    - name: Vérifier que la cible est Debian 13
      ansible.builtin.assert:
        that:
          - ansible_facts.distribution == "Debian"
          - ansible_facts.distribution_major_version == "13"
        fail_msg: "Cette vérification attend une VM Debian 13."

    - name: Collecter les services
      ansible.builtin.service_facts:

    - name: Vérifier les services du socle
      ansible.builtin.assert:
        that:
          - '"ssh.service" in ansible_facts.services'
          - '"qemu-guest-agent.service" in ansible_facts.services'
          - '"chrony.service" in ansible_facts.services'
          - ansible_facts.services["ssh.service"].state == "running"
          - ansible_facts.services["qemu-guest-agent.service"].state == "running"
          - ansible_facts.services["chrony.service"].state == "running"
        fail_msg: "Un service du socle Debian n'est pas actif."

    - name: Vérifier sudo non interactif via become
      ansible.builtin.command: whoami
      changed_when: false
      register: verifier_hote_debian_whoami

    - name: Valider l'élévation root
      ansible.builtin.assert:
        that:
          - verifier_hote_debian_whoami.stdout == "root"
        fail_msg: "L'élévation sudo ne retourne pas root."