---
# Provision docker on the arm64 build host(s) — the native arm64 daily-image lane.
#   ansible-playbook infrastructure/playbooks/docker_build_host.yml
# Targets the [build_hosts] inventory group (gandalf). Idempotent: re-running re-asserts
# docker + the FORWARD-policy guard, so the build host survives re-imaging.
- name: Provision docker on arm64 build hosts
  hosts: build_hosts
  become: true
  roles:
    - docker_build_host