diff --git a/molecule/default/converge.yml b/molecule/default/converge.yml
new file mode 100644
index 0000000..e82ff98
--- /dev/null
+++ b/molecule/default/converge.yml
@@ -0,0 +1,16 @@
+---
+# unbound molecule/default/verify.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: Converge
+  hosts: all
+  vars:
+    unbound_allow_all: true
+    unbound_listen_default: true
+    unbound_listen_zone_ips: false
+  tasks:
+    - name: "Include unbound"
+      include_role:
+        name: "unbound"
diff --git a/molecule/default/molecule.yml b/molecule/default/molecule.yml
new file mode 100644
index 0000000..4da1cc0
--- /dev/null
+++ b/molecule/default/molecule.yml
@@ -0,0 +1,41 @@
+---
+# unbound molecule/default/molecule.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+dependency:
+  name: galaxy
+driver:
+  name: docker
+platforms:
+  - name: "ubuntu-18.04-priv"
+    image: "quay.io/paulfantom/molecule-systemd:ubuntu-18.04"
+    privileged: true
+    volumes:
+      - "/sys/fs/cgroup:/sys/fs/cgroup:ro"
+provisioner:
+  name: ansible
+  playbooks:
+    prepare: prepare.yml
+  inventory:
+    host_vars:
+      ubuntu-18.04-priv:
+        ansible_python_interpreter: /usr/bin/python3
+        dns_zones:
+          example.com:
+            serial: 20201102
+            ip_range: 192.168.1.1/24
+            ns:
+              - gw.example.com.
+            a:
+              gw: 192.168.1.1
+              host1: 192.168.1.2
+              host2: 192.168.1.3
+              printer: 192.168.1.4
+            cname:
+              lpr: printer.example.com.
+            srv: {}
+            txt: {}
+verifier:
+  name: ansible
diff --git a/molecule/default/prepare.yml b/molecule/default/prepare.yml
new file mode 100644
index 0000000..cfec10c
--- /dev/null
+++ b/molecule/default/prepare.yml
@@ -0,0 +1,17 @@
+---
+# unbound molecule/default/prepare.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: Prepare for unbound by installing nsd for testing
+  hosts: all
+  roles:
+    - nsd
+
+  tasks:
+    - name: Add dnsutils so dig works in tests
+      apt:
+        name: "dnsutils"
+        state: "present"
+        update_cache: true
diff --git a/molecule/default/verify.yml b/molecule/default/verify.yml
new file mode 100644
index 0000000..87b7bc8
--- /dev/null
+++ b/molecule/default/verify.yml
@@ -0,0 +1,12 @@
+---
+# unbound molecule/default/verify.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: Verify
+  hosts: all
+  tasks:
+  - name: example assertion
+    assert:
+      that: true