diff --git a/scripts/diagnose.sh b/scripts/diagnose.sh
new file mode 100755
index 0000000..a3a3d76
--- /dev/null
+++ b/scripts/diagnose.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+set -e
+echo "=== whoami ==="
+whoami
+
+echo "=== /etc/ansible/ansible.cfg ==="
+cat /etc/ansible/ansible.cfg 2>/dev/null || echo "(not found)"
+
+echo "=== ANSIBLE env vars ==="
+env | grep -i ansible || echo "(none)"
+
+echo "=== which sudo ==="
+which sudo 2>/dev/null || echo "(not found)"
+
+echo "=== ansible --version ==="
+ansible --version 2>/dev/null | head -5 || echo "(not found)"
+
+echo "=== ansible.cfg in cwd ==="
+cat ansible.cfg 2>/dev/null || echo "(not found)"
+
+echo "DONE"