test(tmachine): verify SELinux in Fedora scenarios (#3457)

Closes #2973

Closes #2976

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

Author: SDAChess

tests/ansible/playbooks/selinux.yaml

@@ -0,0 +1,20 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+---
+- name: Verify SELinux
+  hosts: all
+  gather_facts: false
+
+  tasks:
+    - name: Read the current SELinux mode
+      ansible.builtin.command:
+        cmd: getenforce
+      register: selinux_mode
+      changed_when: false
+
+    - name: Verify enforcing mode
+      ansible.builtin.assert:
+        that:
+          - selinux_mode.stdout == "Enforcing"
+        fail_msg: SELinux is not enforcing.

tests/config.nix

@@ -63,6 +63,7 @@ let
           use_galaxy = false;
           playbooks = [
             "ansible/playbooks/nextest.yaml"
+            "ansible/playbooks/selinux.yaml"
             "ansible/playbooks/podman-rootful.yaml"
           ];
         };
@@ -87,6 +88,7 @@ let
           use_galaxy = false;
           playbooks = [
             "ansible/playbooks/nextest.yaml"
+            "ansible/playbooks/selinux.yaml"
             "ansible/playbooks/podman-rootless.yaml"
           ];
         };