관리-도구
편집 파일: __init__.cpython-39.pyc
a �)g� � @ sv d dl mZmZmZ eZd dlZd dlZd dlZd dl Z d dl Z d dl Z d dl Z d dl Z d dlmZmZ d dlmZ d dlmZ d dlmZmZmZmZmZ d dl m Z d dl m Z m Z d d l!m"Z" d d l#m$Z$ d d l%m&Z& d d l'm(Z(m)Z)m*Z* d d l+m,Z,m-Z-m.Z. d dl/m0Z0 d dl1m2Z2 d dl3m4Z4 d dl5m6Z6 d dl7m8Z8m9Z9 d dl:m;Z; d dl<m=Z= e6� Z>G dd� de�Z?dS )� )�absolute_import�division�print_functionN)�ABC�abstractmethod)�Sequence)� constants)� AnsibleError�AnsibleConnectionFailure�AnsibleActionSkip�AnsibleActionFail� AnsibleAuthenticationFailure)� modify_module)�discover_interpreter�!InterpreterDiscoveryRequiredError)�ArgumentSpecValidator)�UnsupportedError)�_filter_non_json_lines)� binary_type� string_types� text_type)�to_bytes� to_native�to_text)�jsonify)� __version__)�resource_from_fqcr)�Display)�wrap_var�AnsibleUnsafeText)�remove_internal_keys)�get_versioned_doclinkc @ sp e Zd ZdZeg �Zdd� ZedPdd��ZdQdd�Z dRd d �Z dSd d �Z dTdd�Z dUdd�Z dVdd�Zdd� Zdd� ZdWdd�Zdd� ZdXd d �Zd d � Zd d!� Zd"d#� Zd$d%� ZdYd&d'�Zd(d)� ZdZd*d+�Zd,d-� Zd.d/� Z d[d1d2�Z d\d3d4�Z d]d5d6�Z d^d7d8�Z d_d9d:�Z!d`d;d<�Z"dad=d>�Z#dbd?d@�Z$dAdB� Z%dCdD� Z&dcdEdF�Z'dGdH� Z(dddJdK�Z)dedLdM�Z*dNdO� Z+dS )f� ActionBasez� This class is the base class for all action plugins, and defines code common to all actions. The base class handles the connection by putting/getting files and executing commands based on the current action in use. c C s^ || _ || _|| _|| _|| _|| _d| _d| _d| _d | _ d| _ g | _ g | _ t | _d | _d S )NFT)�_task� _connection� _play_context�_loader�_templar�_shared_loader_obj�_cleanup_remote_tmp�_supports_check_mode�_supports_async�_discovered_interpreter_key�_discovered_interpreter� _discovery_deprecation_warnings�_discovery_warnings�display�_display�_used_interpreter)�selfZtaskZ connectionZ play_context�loaderZtemplarZshared_loader_obj� r5 �C/usr/lib/python3.9/site-packages/ansible/plugins/action/__init__.py�__init__6 s zActionBase.__init__Nc C s� i }|durdg|d< ~| j jr0| js0td��n0| j jrH| jsHtd��n| j jr`| j jr`td��| jr�t| j j � � �}|� | j�}|r�td| j j d� t|��f ��| jjjdu r�| �� r�| �� |S ) a� Action Plugins should implement this method to perform their tasks. Everything else in this base class is a helper method for the action plugin to do that. :kwarg tmp: Deprecated parameter. This is no longer used. An action plugin that calls another one and wants to use the same remote tmp for both should set self._connection._shell.tmpdir rather than this parameter. :kwarg task_vars: The variables (host vars, group vars, config vars, etc) associated with this task. :returns: dictionary of results from the module Implementors of action modules may find the following variables especially useful: * Module parameters. These are stored in self._task.args Nz�ActionModule.run() no longer honors the tmp parameter. Action plugins should set self._connection._shell.tmpdir to share the tmpdir�warningz%async is not supported for this task.z*check mode is not supported for this task.z1check mode and async cannot be used on same task.zInvalid options for %s: %s�,)r# � async_valr+ r � check_moder* r � _VALID_ARGS� frozenset�args�keys� difference�action�join�listr$ �_shell�tmpdir�_early_needs_tmp_path�_make_tmp_path)r3 �tmp� task_vars�resultZ task_optsZbad_optsr5 r5 r6 �runM s$ zActionBase.runc C s� | j j�� }t||||||d�}|�|�} |�| j� z| jd } W n tyZ d} Y n0 | r�| jj } t | t �r�d| j � d| � �} t | ��| |fS )aZ Validate an argument spec against the task args This will return a tuple of (ValidationResult, dict) where the dict is the validated, coerced, and normalized task args. Be cautious when directly passing ``new_module_args`` directly to a module invocation, as it will contain the defaults, and not only the args supplied from the task. If you do this, the module should not define ``mututally_exclusive`` or similar. This code is roughly copied from the ``validate_argument_spec`` action plugin for use by other action plugins. )�mutually_exclusive�required_together�required_one_of� required_if� required_byr Nz Unsupported parameters for (z ) module: )r# r> �copyr Zvalidate�updateZvalidated_parameters�errors� IndexError�msg� isinstancer Z _load_namer ) r3 Z argument_specrL rM rN rO rP Znew_module_argsZ validatorZvalidation_result�errorrU r5 r5 r6 �validate_argument_spec{ s* � z!ActionBase.validate_argument_specFc C s |s | j js | �| jjj� dS )a? Method to perform a clean up at the end of an action plugin execution By default this is designed to clean up the shell tmpdir, and is toggled based on whether async is in use Action plugins may override this if they deem necessary, but should still call this method via super N)r# r: �_remove_tmp_pathr$ rD rE )r3 �forcer5 r5 r6 �cleanup� s zActionBase.cleanupc C s, z |� |�W S ttfy& | Y S 0 dS )z}Helper to get an option from a plugin without having to use the try/except dance everywhere to set a default N)� get_option�AttributeError�KeyError)r3 Zplugin�option�defaultr5 r5 r6 �get_plugin_option� s z ActionBase.get_plugin_optionc C s | j | jj||d�S �N�r` )ra r$ �become�r3 r_ r` r5 r5 r6 �get_become_option� s z ActionBase.get_become_optionc C s | j | j||d�S rb )ra r$ re r5 r5 r6 �get_connection_option� s z ActionBase.get_connection_optionc C s | j | jj||d�S rb )ra r$ rD re r5 r5 r6 �get_shell_option� s zActionBase.get_shell_optionc C s0 | j j�|�}| j|dd�}|d dkr,dS dS )NT)�cmd�sudoable�rcr F)r$ rD �exists�_low_level_execute_command)r3 �pathri rJ r5 r5 r6 �_remote_file_exists� s z ActionBase._remote_file_existsc C s� | j jr |�d�| j j }n|}|�d�}t|�dkrHd�|dd� �nd}t|�}| jjD �]}|dkr�d} g d�} |d v r�|| v r�| j j |kr�d | |f }n |d kr�|| v r�d | |f }|d v r�|r�t | jj d�r�dD ]"} | |v r�| jj � || �|| < q�| j jj||| j jd�} | j�sP| j�rPt| j�dk�rP| jd } td�|| ���| j}|r\ �qnq\td| ��t� }| �|� i }| jj�r�d|d< | jjj|d< | jjjd| jd�|d< | jjjd| jd�|d< | jjjd | jd�|d < d D ]�}zLt |||| j f|| jj | j j |t t!| jd d ��d �|��\}}}W �q�W n� t"�y� } z�t#t$| |j%|j&|d!��| _'d"|j% }| j'|d# |< | j j�r�| j j(�r�| j'|d# |< || _)n| j'|d | j j d# |< W Y d$}~n d$}~0 0 �q�||||fS )%zu Handles the loading and templating of the module code through the modify_module() function. Zansible_delegated_vars�.� r � z.ps1zansible.windows)zansible.builtinzansible.legacyrr )�stat�filerQ Zpingz %s.win_%sZ async_statusz%s.%s)Zwin_statZwin_fileZwin_copyZslurp�_unquote)�src�destrn )Zcollection_list� ���z@The module {0} was redirected to {1}, which could not be loaded.z6The module %s was not found in configured module pathsTrd Z become_method� become_user)Z playcontextZ become_passZbecome_passwordZ become_flags)rx rq �_remote_is_localF)rI �module_compressionZ async_timeout� environmentZremote_is_local)rA �interpreter_name�discovery_moderI zdiscovered_interpreter_%s� ansible_factsN)*r# Z delegate_to�get�split�lenrB r r$ Z!module_implementation_preferencesrA �hasattrrD ru r( Z module_loaderZfind_plugin_with_context� collectionsZresolvedZ redirect_listr �formatZplugin_resolved_path�dict�_compute_environment_stringrd �namer\ r% r r' r| r: �bool�getattrr r r r~ r r- Zdelegate_factsr, )r3 � module_name� module_argsrI Zuse_varsZsplit_module_nameZcollection_nameZleaf_module_name�mod_typeZwin_collectionZrewrite_collection_names�keyrJ Ztarget_module_name� module_path�final_environmentZ become_kwargsZdummy� module_data� module_styleZmodule_shebangZidreZdiscovered_keyr5 r5 r6 �_configure_module� s� "� � � � � � �� � 4z ActionBase._configure_modulec C s� t � }| jjdur~| jj}t|t�s*|g}|D ]N}|du s.t|�dkrHq.| j�|�}t|t �srtd|t |�f ��|� |� q.t|�dkr�| j�|�}t|t �r�|� � |� |� | j j jf i |��S )zZ Builds the environment string to be used when executing the remote task. Nr z2environment must be a dictionary, received %s (%s))r� r# r} rV rC r� r' �templater �typerR �clearr$ rD Z env_prefix)r3 Zraw_environment_outr� Z environmentsr} Ztemp_environmentr5 r5 r6 r� @ s$ z&ActionBase._compute_environment_stringc C s t | dd�S )z[ Determines if a tmp path should be created before the action is executed. ZTRANSFERS_FILESF)r� �r3 r5 r5 r6 rF a s z ActionBase._early_needs_tmp_pathc C s� z| j �d�}W n tttfy0 | jj}Y n0 | j j}| j jrL| j jj nddk}| j j |p`||dkt j | pt||g}t |�S )zE Determines if we are required and can do pipelining � pipeliningrr Zsu�new)r$ r\ r^ r] � ValueErrorr% r� �always_pipeline_modulesrd r� Zhas_pipelining�C�DEFAULT_KEEP_REMOTE_FILES�all)r3 r� � wrap_asyncZ is_enabledZalways_pipelineZbecome_exceptionZ conditionsr5 r5 r6 �_is_pipelining_enabledh s � z!ActionBase._is_pipelining_enabledc C s | � ddg�S )zh Returns a list of admin users that are configured for the current shell plugin � admin_users�root)rh r� r5 r5 r6 �_get_admin_users� s zActionBase._get_admin_usersc C sf |� di �� d|� d|� dd���}dD ]0}z| j�|�}W n tyR Y q(Y n0 qbq(| jj}|S )z= consistently get the 'remote_address' for the action plugin Zdelegated_varsZ ansible_hostZinventory_hostnameN)� remote_addr�host)r� r$ r\ r^ r% r� )r3 �tvarsr� Z variationr5 r5 r6 �_get_remote_addr� s $ zActionBase._get_remote_addrc C sZ d}z| j �d�}W n@ ty< t| j dd�p6| jj}Y n tyT | jj}Y n0 |S )z: consistently get the 'remote_user' for the action plugin N� remote_userZ default_user)r$ r\ r^ r� r% r� r] )r3 r� r5 r5 r6 �_get_remote_user� s zActionBase._get_remote_userc C s< | j js dS | �� }| �� }| �d�}t|o8|||g v�S )z} The user is not the same as the connection user and is not part of the shell configured admin users Frz )r$ rd r� r� rf r� )r3 r� r� rz r5 r5 r6 �_is_become_unprivileged� s z"ActionBase._is_become_unprivilegedc C s� t | jdd�rtj}n| j| jddd�dd�}| �� }| jj�� }| jjj |||d�}| j |dd�}|d d k�rN|d d kr�d }nd|d d kr�| jj d v r�t j dkr�d|d |d f }q�d}n&d|d v r�|d }nd||d f }d|v �r|d dk�r|d|d }t j dk�rDd|v �rD|d dk�rD|d|d 7 }t|��nd| _z8|d �� �d| d�}| jj�|d d��� d } W n t�y� d } Y n0 | d k�r�td ||f ��| | jj_| S ) zE Create and return a temporary path on a remote box. r{ F� remote_tmp�~/.ansible/tmprc �rj )�basefile�systemrE rk r � zAuthentication failure.� )Zssh� z6SSH encountered an unknown error. The output was: %s%s�stdout�stderrz�SSH encountered an unknown error during the connection. We recommend you re-run the command using -vvvv, which will enable SSH debugging output to help diagnose the issuezNo space left on devicea5 Failed to create temporary directory. In some cases, you may have been able to authenticate and did not have permissions on the target directory. Consider changing the remote tmp path in ansible.cfg to a path rooted in "/tmp", for more error information use -vvv. Failed command was: %s, exited with result %drr z, stdout output: %sz, stderr output: %sTz%s=rx ry �/zPfailed to resolve remote temporary directory from %s: `%s` returned empty string)r� r$ r� �DEFAULT_LOCAL_TMP�_remote_expand_userrh r� rD Z_generate_temp_dir_nameZmkdtemprm � transportr0 � verbosityr r) �stripr� � join_path� splitlinesrT r rE ) r3 r� rE Zbecome_unprivilegedr� ri rJ �outputZ stdout_partsrk r5 r5 r6 rG � sD �$ zActionBase._make_tmp_pathc C s |o| j otj od|v S )zLDetermine if temporary path should be deleted or kept by user request/configz-tmp-)r) r� r� )r3 �tmp_pathr5 r5 r6 �_should_remove_tmp_path� s z"ActionBase._should_remove_tmp_pathc C s� |du r | j jjr | j jj}|s*| �|�r�| j jj|dd�}| j|dd�}|�dd�dkr|t�d|�d�|�d d �f � n d| j j_dS ) z$Remove a temporary path we created. NT)ZrecurseFr� rk r z;Error deleting remote temporary files (rc: %s, stderr: %s})r� zNo error string available.) r$ rD rE r� �removerm r� r0 r8 )r3 r� rZ ri Z tmp_rm_resr5 r5 r6 rY � s �zActionBase._remove_tmp_pathc C s | j �||� |S )a� Copy a file from the controller to a remote path :arg local_path: Path on controller to transfer :arg remote_path: Path on the remote system to transfer into .. warning:: * When you use this function you likely want to use use fixup_perms2() on the remote_path to make sure that the remote file is readable when the user becomes a non-privileged user. * If you use fixup_perms2() on the file and copy or move the file into place, you will need to then remove filesystem acls on the file once it has been copied into place by the module. See how the copy module implements this for help. )r$ Zput_file)r3 Z local_path� remote_pathr5 r5 r6 �_transfer_file s zActionBase._transfer_filec C s� t |t�rt|�}tjtjd�\}}t�|d�}zt |dd�}|� |� W n4 t y~ } z t dt |� ��W Y d}~n d}~0 0 |�� |�� z| �||� W t�|� n t�|� 0 |S )zJ Copies the module data out to the temporary module path. )�dir�wb�surrogate_or_strict�rS z>failure writing module data to temporary file for transfer: %sN)rV r� r �tempfileZmkstempr� r� �os�fdopenr �write� Exceptionr r �flush�closer� �unlink)r3 r� �dataZafdZafileZafo�er5 r5 r6 �_transfer_data# s &zActionBase._transfer_dataTc C s� |du r| � � }t| jjdd�r$|S | �� sh|rd| �|d�}|d dkrdtd�|d t|d ����|S | � d �}|r�d }d }d �|�}d �|�} n d}d}d�|�}d�|�} | � |||�}|d dkr�|S |�r | �|d�}|d dk�r td�|d t|d ����| � ||�}|d dk�r(|S || � � v �r>td��z| �|gt |� d�}W n& t�y~ } z W Y d} ~ n d} ~ 0 0 |d dk�r�|S | �|| �}|d dk�r�|S td�} | �d�} | du�r.| �|| �}|d dk�r.| �d��r t�d| � |�r d} nd} | �|| �}|d dk�r.|S | �d��r�t�d| � | �|d | �}|d dk�rj|S td �|d t|d ����td |d t|d �| f ��dS ) a% We need the files we upload to be readable (and sometimes executable) by the user being sudo'd to but we want to limit other people's access (because the files could contain passwords or other private information. We achieve this in one of these ways: * If no sudo is performed or the remote_user is sudo'ing to themselves, we don't have to change permissions. * If the remote_user sudo's to a privileged user (for instance, root), we don't have to change permissions * If the remote_user sudo's to an unprivileged user then we attempt to grant the unprivileged user access via file system acls. * If granting file system acls fails we try to change the owner of the file with chown which only works in case the remote_user is privileged or the remote systems allows chown calls by unprivileged users (e.g. HP-UX) * If the above fails, we next try 'chmod +a' which is a macOS way of setting ACLs on files. * If the above fails, we check if ansible_common_remote_group is set. If it is, we attempt to chgrp the file to its value. This is useful if the remote_user has a group in common with the become_user. As the remote_user, we can chgrp the file to that group and allow the become_user to read it. * If (the chown fails AND ansible_common_remote_group is not set) OR (ansible_common_remote_group is set AND the chgrp (or following chmod) returned non-zero), we can set the file to be world readable so that the second unprivileged user can read the file. Since this could allow other users to get access to private information we only do this if ansible is configured with "allow_world_readable_tmpfiles" in the ansible.cfg. Also note that when ansible_common_remote_group is set this final fallback is very unlikely to ever be triggered, so long as chgrp was successful. But just because the chgrp was successful, does not mean Ansible can necessarily access the files (if, for example, the variable was set to a group that remote_user is in, and can chgrp to, but does not have in common with become_user). NZ _IS_WINDOWSFzu+xrk r z=Failed to set execute bit on remote files (rc: {0}, err: {1})r� rz �rxzr-xz{0} allow read,executezA+user:{0}:rx:allowZrXzr-Xz{0} allow readzA+user:{0}:r:allowzLFailed to set file mode or acl on remote temporary files (rc: {0}, err: {1})z�Failed to change ownership of the temporary files Ansible (via chmod nor setfacl) needs to create despite connecting as a privileged user. Unprivileged become user would be unable to read the file.z+azYplaybook_guide/playbooks_privilege_escalation.html#risks-of-becoming-an-unprivileged-userZcommon_remote_groupZworld_readable_tempa� Both common_remote_group and allow_world_readable_tmpfiles are set. chgrp was successful, but there is no guarantee that Ansible will be able to read the files after this operation, particularly if common_remote_group was set to a group of which the unprivileged become user is not a member. In this situation, allow_world_readable_tmpfiles is a no-op. See this URL for more details: %s#risks-of-becoming-an-unprivileged-userzg+rwxzg+rwz�Using world-readable permissions for temporary files Ansible needs to create when becoming an unprivileged user. This may be insecure. For information on securing this, see %s#risks-of-becoming-an-unprivileged-userza+%sz;Failed to set file mode on remote files (rc: {0}, err: {1})z�Failed to set permissions on the temporary files Ansible needs to create when becoming an unprivileged user (rc: %s, err: %s}). For information on working around this, see %s#risks-of-becoming-an-unprivileged-user)r� r� r$ rD r� � _remote_chmodr r� r rf �_remote_set_user_facl� _remote_chownr� rC r r! rh � _remote_chgrpr0 r8 )r3 Z remote_pathsr� Zexecute�resrz Z chmod_modeZ setfacl_modeZchmod_acl_modeZposix_acl_moder� Z become_link�groupZ group_moder5 r5 r6 � _fixup_perms2= s� & �� � �� � �� �� �� ���zActionBase._fixup_perms2c C s" | j j�||�}| j||d�}|S )z. Issue a remote chmod command r� )r$ rD �chmodrm )r3 �paths�moderj ri r� r5 r5 r6 r� s zActionBase._remote_chmodc C s" | j j�||�}| j||d�}|S )z. Issue a remote chown command r� )r$ rD �chownrm )r3 r� �userrj ri r� r5 r5 r6 r� ! s zActionBase._remote_chownc C s" | j j�||�}| j||d�}|S )z. Issue a remote chgrp command r� )r$ rD Zchgrprm )r3 r� r� rj ri r� r5 r5 r6 r� ) s zActionBase._remote_chgrpc C s$ | j j�|||�}| j||d�}|S )z0 Issue a remote call to setfacl r� )r$ rD Z set_user_faclrm )r3 r� r� r� rj ri r� r5 r5 r6 r� 1 s z ActionBase._remote_set_user_faclc C s� |durt �d� ~t|||dd�}| jd||dd�}|�d�rv|�d �}|sX|�d �}|sf|�d �}td ||f ��|d d s�d|d d< d|d vr�d|d d< n*t|d d t�s�tdt|d d � ��|d S )z3 Get information from remote file. Nz�_execute_remote_stat no longer honors the tmp parameter. Action plugins should set self._connection._shell.tmpdir to share the tmpdirZsha1)rn �followZ get_checksumZchecksum_algorithmzansible.legacy.statF)r� r� rI r� �failed� module_stderr� module_stdoutrU z1Failed to get information on remote file (%s): %srs rl �1�checksumrr zDInvalid checksum returned by stat: expected a string type but got %s) r0 r8 r� �_execute_moduler� r rV r r� ) r3 rn �all_varsr� rH r� r� ZmystatrU r5 r5 r6 �_execute_remote_stat9 s4 � � z ActionBase._execute_remote_statc C s� | j �dd� d}z�z2| j|||d�}|d r<|d r<d}n|d }W nX ty� } z@t|�}|�d �rnd }n |�d �r~d }n d |v r�d}W Y d}~n d}~0 0 W |S | Y S 0 dS )a� Deprecated. Use _execute_remote_stat() instead. Produces a remote checksum given a path, Returns a number 0-4 for specific errors instead of checksum, also ensures it is different 0 = unknown error 1 = file does not exist, this might not be an error 2 = permissions issue 3 = its a directory, not a file 4 = stat module failed, likely due to not finding python 5 = appropriate json module not found zThe '_remote_checksum()' method is deprecated. The plugin author should update the code to use '_execute_remote_stat()' insteadz2.16�0)r� rl �isdir�3r� zPermission denied�2�MODULE FAILURE�4�json�5N)r1 Z deprecatedr� r r �endswith)r3 rn r� r� �xZ remote_statr� Zerrormsgr5 r5 r6 �_remote_checksum` s$ � zActionBase._remote_checksumc C sX |� d�s|S |�tjjd�}|d }|dkrr| �d�}t| jdd�rHn*|rb| jjrb|rbd| }nd| � � pnd }| jj � |�}| j |dd �}z|d � � �� d } W n ty� d } Y n0 | s�| jj �� }| j |dd ��d d�� � } | r�| } n|} n2t|�dk�r&| jj j| g|dd � �R � } n| } d tj�| ��d�v �rTtd| �i � ��| S )zK takes a remote path and performs tilde/$HOME expansion on the remote host �~rx r rz r{ Fz~%srr r� r� ry Nz..r� zE'%s' returned an invalid relative home directory path containing '..')� startswithr� r� rn �seprf r� r$ rd r� rD Z expand_userrm r� r� rT �pwdr� r� r� �dirnamer r� ) r3 rn rj �pathsepZ split_pathZ expand_pathrz ri r� Zinitial_fragmentr� Zexpandedr5 r5 r6 r� � s: z ActionBase._remote_expand_userc C s |� � �d�r t�dd|�}|S )zC Removes the BECOME-SUCCESS message from the data. zBECOME-SUCCESS-z"^((\r)?\n)?BECOME-SUCCESS.*(\r)?\nrr )r� r� �re�sub)r3 r� r5 r5 r6 �_strip_success_message� s z!ActionBase._strip_success_messagec C s | j jr | jstd��d|d< nd|d< tjjd|d�}| j jpB||d< tj|d< | j j |d < t j |d < t |d < ||d < |� d tj�|d< tj|d< tj|d< t| jd�|d< |d s�|� d�|d< | jj|d< tj|d< | �� r�d |d< n| jjj|d< | jddd�|d< d S )Nz.check mode is not supported for this operationTZ_ansible_check_modeFZDEFAULT_NO_TARGET_SYSLOG)Z variablesZ_ansible_no_logZ_ansible_debugZ _ansible_diffZ_ansible_verbosityZ_ansible_versionZ_ansible_module_nameZansible_syslog_facilityZ_ansible_syslog_facilityZ_ansible_selinux_special_fsZ!_ansible_string_conversion_actionZ socket_pathZ_ansible_socketZansible_socketZ_ansible_shell_executableZ_ansible_keep_remote_filesZ_ansible_tmpdirr� r� rc Z_ansible_remote_tmp)r# r; r* r r� ZconfigZget_config_value�no_logZ DEFAULT_DEBUG�diffr0 r� r r� ZDEFAULT_SYSLOG_FACILITYZDEFAULT_SELINUX_SPECIAL_FSZSTRING_CONVERSION_ACTIONr� r$ r% � executabler� r� rD rE rh )r3 r� r� rI Zno_target_syslogr5 r5 r6 �_update_module_args� s0 z ActionBase._update_module_argsc & C s| |durt �d� ~|dur&t �d� ~| jjj}| �d|�sX|du rX| �� | jjj}|du rft� }|du rv| jj }|du r�| jj }| � |||� d} |s�| jj r�| j ddd�} t| jj�} | jj�d| i� | j|||d �\} } } }t �d | � | �s| d k�rtd | ��| | _d}| �| |��sh|du �rF| �� | jjj}| jj�|�}| jj�|d | �}d}| dv �r�| jj�|d�}|�s�| dk�r8t �d| � | d k�r�| �||� n | �|| � | dk�rd}|�� D ]$\}}|d|t� t |��f 7 }�q�| �||� n | dv �r.| �|t � |�� t �d� | � � }| du�rT| jj| = g }|�rl|�rl||g}|�r||�|� d}d}d}|�rx| jj!�sx| jdt� |d �\}} }} | jj�| �} | jj�|| �} | �| |� |�| � | jj } dt"�#dd�� �} | �$dd��%� }!|!| | | |g}"|�r0|"�&d|� |�rB|"�|� n |"�d � | �'|��sb|"�d � d �(d d � |"D ��}n:| �| ��r�| }t �d!� n|}| jjj)|| ||d"��%� }|�r�d#d$� |D �}| �*|| �+� � | j,|||d%�}#| �-|#�}$|$�.d&d'��rd'| _/d(|$v �rJt0|$d( t1��r.t0|$d( t2��rJ|$d( |$d)< |$d(= t �d*� t3|$� |�rjd| jj_d|$d+< d,|$v �r�d-|$v�r�|$�4d,d��p�d}%|%�5� |$d-< d.|$v �r�d/|$v�r�|$�4d.d��p�d}%|%�5� |$d/< | j6�r�|$�4d0�du �r�i |$d0< | j7|$d0 | j6< | j8�r.|$�4d1�du �r g |$d1< |$d1 �9| j8� | j:�r^|$�4d2�du �rNg |$d2< |$d2 �9| j:� t;|$�}$t �d3||f � |$S )4zE Transfer and run a module along with its arguments. Nz�_execute_module no longer honors the tmp parameter. Action plugins should set self._connection._shell.tmpdir to share the tmpdirz�_execute_module no longer honors the delete_remote_tmp parameter. Action plugins should check self._connection._shell.tmpdir to see if a tmpdir existed before they were called to determine if they are responsible for removing it.r� � async_dirz~/.ansible_asyncrc ZANSIBLE_ASYNC_DIR)r� r� rI zUsing module file %s�binaryz'module (%s) is missing interpreter linez AnsiballZ_%s)�old�non_native_want_jsonr r> z transferring module to remote %sr rr z%s=%s )r r z"done transferring module to remoteTz ansible.legacy.async_wrapper�jr l �J)�z#!�_z -preserve_tmp� c s s | ]}t |�V qd S )N)r ��.0r� r5 r5 r6 � <genexpr>{ � z-ActionBase._execute_module.<locals>.<genexpr>zPipelining is enabled.)Zarg_pathc S s g | ] }|r|�qS r5 r5 r r5 r5 r6 � <listcomp>� r z.ActionBase._execute_module.<locals>.<listcomp>)rj �in_dataZ _ansible_suppress_tmpdir_deleteF�resultsZansible_module_resultszSFound internal 'results' key in module return, renamed to 'ansible_module_results'.Zchangedr� � stdout_linesr� � stderr_linesr� �warningsZ deprecationsz"done with _execute_module (%s, %s))<r0 r8 r$ rD rE r� rG r� r# rA r> r r: rh r� r} �appendr� Zvvvr r2 Zget_remote_filenamer� �debugr� r� �items�shlex�quoter r� �dumpsr� r� �randomZrandint�replacer� �insertr� rB Zbuild_module_commandr� r� rm �_parse_returned_data�popr) rV r r r r� r� r, r- r/ �extendr. r )&r3 r� r� rH rI � persist_filesZdelete_remote_tmpr� rE Zremove_async_dirr r� Zshebangr� r� Zremote_module_pathZremote_module_filenameZargs_file_pathZ args_data�k�vZenvironment_stringZ remote_filesrj r ri Zasync_module_styleZasync_module_dataZasync_module_pathZ async_module_remote_filenameZremote_async_module_pathZ async_limitZ async_jid� interpreterZ async_cmdr� r� Ztxtr5 r5 r6 r� � s� � * zActionBase._execute_modulec C sL zDt |�dd�dd�\}}|D ]}t�|� q t�|�}d|d< W �n t�yF tddd�}|�dd�|d< d |v r�|d |d < |d �d �r�|d |d < d |vr�|d �d �r�|d |d < d |d< | j d u�r t � | j � d��}t � d| �}|�|d ��s|�|d ��r d|d< |d d7 < d|v �rB|d |d< Y n0 |S )Nr� rr T)Z objects_only�_ansible_parsedF)r� r" r� r� r� Z Traceback� exceptionr� rU z!#z+%s: (?:No such file or directory|not found)zQThe module failed to execute correctly, you probably need to set the interpreter.z& See stdout/stderr for the exact errorrk )r r� r0 r8 r� �loadsr� r� r� r2 r� �escape�lstrip�compile�search)r3 r� Zfiltered_outputr �wr� r! �matchr5 r5 r6 r � s2 z ActionBase._parse_returned_data�surrogate_then_replacec C s� t �d� |r0t �d| � | jj�d| |�}|r>|| jj_| �� }| �d�}|r�| jjr�t | jj �dkr�t j s�||ks�t ||f�s�t �d� | jj�|| jj�}| jjr�|du r�| jj}| jj�|d�}|r�|d t�|� }t �d |f � | jj d k�rt| j�� d d �| j_| jj|||d�\} } } t| t��rHt| |d �} n(t| t��sltd� | � � �|d �} n| } t| t��r�t| |d �} n(t| t��s�td� | � � �|d �} n| } | du �r�d} | � | �} t �d| | | f � t | | | � � | | � � d�S )a7 This is the function which executes the low level shell command, which may be commands to create/remove directories for temporary files, or to run the module code or python directly when pipelining. :kwarg encoding_errors: If the value returned by the command isn't utf-8 then we have to figure out how to transform it to unicode. If the value is just going to be displayed to the user (or discarded) then the default of 'replace' is fine. If the data is used as a key or is going to be written back out to a file verbatim, then this won't work. May have to use some sort of replacement strategy (python3 could use surrogateescape) :kwarg chdir: cd into this directory before executing the command. z&_low_level_execute_command(): startingzA_low_level_execute_command(): changing cwd to %s for this commandzcd %srz Z network_cliz;_low_level_execute_command(): using become for this commandNzsleep 0z -c z+_low_level_execute_command(): executing: %s�localr� r� )r rj r r z>_low_level_execute_command() done: rc=%d, stdout=%s, stderr=%s)rk r� r r� r )!r0 r r$ rD Zappend_commandr� r� rf rd r r� r� ZBECOME_ALLOW_SAME_USER�anyZbuild_become_commandZallow_executabler% r r r r& Z get_basedir�cwdZ exec_commandrV r r r rB � readlinesr� r� r� )r3 ri rj r r� Zencoding_errors�chdirZruserZbuserrk r� r� �out�errr5 r5 r6 rm � sX ��� � z%ActionBase._low_level_execute_commandc C st i }t �d� | jdt|dd�|dd�}|�dd�r`t �dtj�|�|t |�d d ��f � |S |�d d �d k�rB|�d �dv r�d |d< n�|�d�r�d|d< n�|�d�r�t j d kr�|d t j kr�t j |d< nvt �d| � | jdt|d�|dd�}d|v �rB|d }|d dk�r t � |�}ntdt|� ��||d < t |�|d< |�r(t�|�} t j d k�r|| tj t j k�r|t j |d < n�t �d | � z8t|d ��} | �� } W d � n1 �s�0 Y W n: t�y� } z td |t| �f ��W Y d } ~ n d } ~ 0 0 d!| v �rd|d"< n||d#< t | �|d$< nt �d%� d&|d#< ||d$< | jj�rpd|v �r^d |d< d$|v �rpd'|d$< |S )(Nz4Going to peek to see if file has changed permissionszansible.legacy.fileT)rn Z _diff_peek)r� r� rI r r� Fz,Failed to get diff between '%s' and '%s': %srU rr rk r �state)NZabsent�beforeZappears_binaryrx Z dst_binary�sizeZ dst_largerzSlurping the file %szansible.legacy.slurp)rn Zcontent�encoding�base64z.unknown encoding in content option, failed: %sZ before_headerZ src_largerz!Reading local copy of the file %s�rbz8Unexpected error while reading source (%s) for diff: %s � Z src_binaryZ after_headerZafterzsource of file passed inzdynamically generatedzX [[ Diff output has been hidden because 'no_log: true' was specified for this result ]] )r0 r r� r� r� r8 r� rn �basenamer r� ZMAX_FILE_SIZE_FOR_DIFFr7 Z b64decoder r rs �ST_SIZE�open�readr� r# r� ) r3 Z destination�sourcerI Z source_filer� Z peek_resultZ dest_resultZ dest_contents�strv Z src_contentsr� r5 r5 r6 �_get_diff_dataC sf � ( " � ,* zActionBase._get_diff_datac C s | j �� }| j�|||�S )z� find a needle in haystack of paths, optionally using 'dirname' as a subdir. This will build the ordered list of paths to search and pass them to dwim to get back the first existing file found. )r# Zget_search_pathr& Zpath_dwim_relative_stack)r3 r� ZneedleZ path_stackr5 r5 r6 � _find_needle� s zActionBase._find_needle)NN)NNNNNN)F)N)N)N)N)N)F)N)F)NT)F)F)F)F)NT)F)TN)NNNNFNF)TNNr+ N)T),�__name__� __module__� __qualname__�__doc__r= r< r7 r rK rX r[ ra rf rg rh ro r� r� rF r� r� r� r� r� rG r� rY r� r� r� r� r� r� r� r� r� r� r� r r� r rm r@ rA r5 r5 r5 r6 r" * s` - � 2 n ! ? ] ' 6: U' P Ir" )@Z __future__r r r r� Z __metaclass__r7 r� r� r r� r rs r� �abcr r �collections.abcr Zansibler r� Zansible.errorsr r r r r Z ansible.executor.module_commonr Z&ansible.executor.interpreter_discoveryr r Z$ansible.module_utils.common.arg_specr Zansible.module_utils.errorsr Z ansible.module_utils.json_utilsr Zansible.module_utils.sixr r r Zansible.module_utils._textr r r Z ansible.parsing.utils.jsonifyr Zansible.releaser Z ansible.utils.collection_loaderr Zansible.utils.displayr Zansible.utils.unsafe_proxyr r Zansible.vars.cleanr Zansible.utils.plugin_docsr! r0 r" r5 r5 r5 r6 �<module> s: