관리-도구
편집 파일: get_url.cpython-39.opt-1.pyc
a �)g�h � @ s� d dl mZmZmZ eZdZdZdZd dl Z d dl Z d dl Z d dl Z d dl Z d dlZd dlmZ d dlmZ d dlmZ d d lmZmZ d d � Zddd�Zdd� Zdd� Zdd� Z e dkr�e � dS )� )�absolute_import�division�print_functionaW# --- module: get_url short_description: Downloads files from HTTP, HTTPS, or FTP to node description: - Downloads files from HTTP, HTTPS, or FTP to the remote server. The remote server I(must) have direct access to the remote resource. - By default, if an environment variable C(<protocol>_proxy) is set on the target host, requests will be sent through that proxy. This behaviour can be overridden by setting a variable for this task (see R(setting the environment,playbooks_environment)), or by using the use_proxy option. - HTTP redirects can redirect from HTTP to HTTPS so you should be sure that your proxy environment for both protocols is correct. - From Ansible 2.4 when run with C(--check), it will do a HEAD request to validate the URL but will not download the entire file or verify it against hashes and will report incorrect changed status. - For Windows targets, use the M(ansible.windows.win_get_url) module instead. version_added: '0.6' options: ciphers: description: - SSL/TLS Ciphers to use for the request - 'When a list is provided, all ciphers are joined in order with C(:)' - See the L(OpenSSL Cipher List Format,https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html#CIPHER-LIST-FORMAT) for more details. - The available ciphers is dependent on the Python and OpenSSL/LibreSSL versions type: list elements: str version_added: '2.14' decompress: description: - Whether to attempt to decompress gzip content-encoded responses type: bool default: true version_added: '2.14' url: description: - HTTP, HTTPS, or FTP URL in the form (http|https|ftp)://[user[:pass]]@host.domain[:port]/path type: str required: true dest: description: - Absolute path of where to download the file to. - If C(dest) is a directory, either the server provided filename or, if none provided, the base name of the URL on the remote server will be used. If a directory, C(force) has no effect. - If C(dest) is a directory, the file will always be downloaded (regardless of the C(force) and C(checksum) option), but replaced only if the contents changed. type: path required: true tmp_dest: description: - Absolute path of where temporary file is downloaded to. - When run on Ansible 2.5 or greater, path defaults to ansible's remote_tmp setting - When run on Ansible prior to 2.5, it defaults to C(TMPDIR), C(TEMP) or C(TMP) env variables or a platform specific value. - U(https://docs.python.org/3/library/tempfile.html#tempfile.tempdir) type: path version_added: '2.1' force: description: - If C(true) and C(dest) is not a directory, will download the file every time and replace the file if the contents change. If C(false), the file will only be downloaded if the destination does not exist. Generally should be C(true) only for small local files. - Prior to 0.6, this module behaved as if C(true) was the default. type: bool default: no version_added: '0.7' backup: description: - Create a backup file including the timestamp information so you can get the original file back if you somehow clobbered it incorrectly. type: bool default: no version_added: '2.1' checksum: description: - 'If a checksum is passed to this parameter, the digest of the destination file will be calculated after it is downloaded to ensure its integrity and verify that the transfer completed successfully. Format: <algorithm>:<checksum|url>, e.g. checksum="sha256:D98291AC[...]B6DC7B97", checksum="sha256:http://example.com/path/sha256sum.txt"' - If you worry about portability, only the sha1 algorithm is available on all platforms and python versions. - The third party hashlib library can be installed for access to additional algorithms. - Additionally, if a checksum is passed to this parameter, and the file exist under the C(dest) location, the I(destination_checksum) would be calculated, and if checksum equals I(destination_checksum), the file download would be skipped (unless C(force) is true). If the checksum does not equal I(destination_checksum), the destination file is deleted. type: str default: '' version_added: "2.0" use_proxy: description: - if C(false), it will not use a proxy, even if one is defined in an environment variable on the target hosts. type: bool default: yes validate_certs: description: - If C(false), SSL certificates will not be validated. - This should only be used on personally controlled sites using self-signed certificates. type: bool default: yes timeout: description: - Timeout in seconds for URL request. type: int default: 10 version_added: '1.8' headers: description: - Add custom HTTP headers to a request in hash/dict format. - The hash/dict format was added in Ansible 2.6. - Previous versions used a C("key:value,key:value") string format. - The C("key:value,key:value") string format is deprecated and has been removed in version 2.10. type: dict version_added: '2.0' url_username: description: - The username for use in HTTP basic authentication. - This parameter can be used without C(url_password) for sites that allow empty passwords. - Since version 2.8 you can also use the C(username) alias for this option. type: str aliases: ['username'] version_added: '1.6' url_password: description: - The password for use in HTTP basic authentication. - If the C(url_username) parameter is not specified, the C(url_password) parameter will not be used. - Since version 2.8 you can also use the 'password' alias for this option. type: str aliases: ['password'] version_added: '1.6' force_basic_auth: description: - Force the sending of the Basic authentication header upon initial request. - httplib2, the library used by the uri module only sends authentication information when a webservice responds to an initial request with a 401 status. Since some basic auth services do not properly send a 401, logins will fail. type: bool default: no version_added: '2.0' client_cert: description: - PEM formatted certificate chain file to be used for SSL client authentication. - This file can also include the key as well, and if the key is included, C(client_key) is not required. type: path version_added: '2.4' client_key: description: - PEM formatted file that contains your private key to be used for SSL client authentication. - If C(client_cert) contains both the certificate and key, this option is not required. type: path version_added: '2.4' http_agent: description: - Header to identify as, generally appears in web server logs. type: str default: ansible-httpget unredirected_headers: description: - A list of header names that will not be sent on subsequent redirected requests. This list is case insensitive. By default all headers will be redirected. In some cases it may be beneficial to list headers such as C(Authorization) here to avoid potential credential exposure. default: [] type: list elements: str version_added: '2.12' use_gssapi: description: - Use GSSAPI to perform the authentication, typically this is for Kerberos or Kerberos through Negotiate authentication. - Requires the Python library L(gssapi,https://github.com/pythongssapi/python-gssapi) to be installed. - Credentials for GSSAPI can be specified with I(url_username)/I(url_password) or with the GSSAPI env var C(KRB5CCNAME) that specified a custom Kerberos credential cache. - NTLM authentication is I(not) supported even if the GSSAPI mech for NTLM has been installed. type: bool default: no version_added: '2.11' use_netrc: description: - Determining whether to use credentials from ``~/.netrc`` file - By default .netrc is used with Basic authentication headers - When set to False, .netrc credentials are ignored type: bool default: true version_added: '2.14' # informational: requirements for nodes extends_documentation_fragment: - files - action_common_attributes attributes: check_mode: details: the changed status will reflect comparison to an empty source file support: partial diff_mode: support: none platform: platforms: posix notes: - For Windows targets, use the M(ansible.windows.win_get_url) module instead. seealso: - module: ansible.builtin.uri - module: ansible.windows.win_get_url author: - Jan-Piet Mens (@jpmens) a� - name: Download foo.conf ansible.builtin.get_url: url: http://example.com/path/file.conf dest: /etc/foo.conf mode: '0440' - name: Download file and force basic auth ansible.builtin.get_url: url: http://example.com/path/file.conf dest: /etc/foo.conf force_basic_auth: yes - name: Download file with custom HTTP headers ansible.builtin.get_url: url: http://example.com/path/file.conf dest: /etc/foo.conf headers: key1: one key2: two - name: Download file with check (sha256) ansible.builtin.get_url: url: http://example.com/path/file.conf dest: /etc/foo.conf checksum: sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c - name: Download file with check (md5) ansible.builtin.get_url: url: http://example.com/path/file.conf dest: /etc/foo.conf checksum: md5:66dffb5228a211e61d6d7ef4a86f5758 - name: Download file with checksum url (sha256) ansible.builtin.get_url: url: http://example.com/path/file.conf dest: /etc/foo.conf checksum: sha256:http://example.com/path/sha256sum.txt - name: Download file from a file path ansible.builtin.get_url: url: file:///tmp/afile.txt dest: /tmp/afilecopy.txt - name: < Fetch file that requires authentication. username/password only available since 2.8, in older versions you need to use url_username/url_password ansible.builtin.get_url: url: http://example.com/path/file.conf dest: /etc/foo.conf username: bar password: '{{ mysecret }}' a� backup_file: description: name of backup file created after download returned: changed and if backup=yes type: str sample: /path/to/file.txt.2015-02-12@22:09~ checksum_dest: description: sha1 checksum of the file after copy returned: success type: str sample: 6e642bb8dd5c2e027bf21dd923337cbb4214f827 checksum_src: description: sha1 checksum of the file returned: success type: str sample: 6e642bb8dd5c2e027bf21dd923337cbb4214f827 dest: description: destination file/path returned: success type: str sample: /path/to/file.txt elapsed: description: The number of seconds that elapsed while performing the download returned: always type: int sample: 23 gid: description: group id of the file returned: success type: int sample: 100 group: description: group of the file returned: success type: str sample: "httpd" md5sum: description: md5 checksum of the file after download returned: when supported type: str sample: "2a5aeecc61dc98c4d780b14b330e3282" mode: description: permissions of the target returned: success type: str sample: "0644" msg: description: the HTTP message from the request returned: always type: str sample: OK (unknown bytes) owner: description: owner of the file returned: success type: str sample: httpd secontext: description: the SELinux security context of the file returned: success type: str sample: unconfined_u:object_r:user_tmp_t:s0 size: description: size of the target returned: success type: int sample: 1220 src: description: source file used after download returned: always type: str sample: /tmp/tmpAdFLdV state: description: state of the target returned: success type: str sample: file status_code: description: the HTTP status code from the request returned: always type: int sample: 200 uid: description: owner id of the file, after execution returned: success type: int sample: 100 url: description: the actual URL used for the request returned: always type: str sample: https://www.ansible.com/ N)� AnsibleModule)�urlsplit)� to_native)� fetch_url�url_argument_specc C s$ t j�t| �d �}|dkr dS |S )N� � z index.html)�os�path�basenamer )�url�fn� r �;/usr/lib/python3.9/site-packages/ansible/modules/get_url.py� url_filename s r � r �GETTc C s� t j �� }t| ||||||| | | | | d� \}}t j �� | j}|d dkrl| j||d|�dd�|d |d� |d dkr�| j|d |||d � |d d kr�|�d �s�|�d �r�|�dd��d �s�| jd|d |d |||d� |�r,tj � |�}|�s2tj � |��r| jd| |d� n| jd| |d� n| j }t j|d�\}}t�|d�}zt�||� W nL t�y� } z2t�|� | jdt|� |t�� d� W Y d}~n d}~0 0 |�� |�� ||fS )zr Download data from the url and store in a temporary file. Return (tempfile, info about the request) ) � use_proxy�force� last_mod_time�timeout�headers�method�unredirected_headers� decompress�ciphers� use_netrc�statusi0 F�msgr )r �dest�changedr! � status_code�elapsed���)r! r r" r% �� zfile:/zftp:/ZOK�Request failed)r! r$ �responser r" r% z'%s is a file but should be a directory.)r! r% z %s directory does not exist.)�dir�wbz+failed to create temporary content file: %s)r! r% � exceptionN)�datetime�utcnowr �seconds� exit_json�get� fail_json� startswithr r �isdir�existsZtmpdir�tempfileZmkstemp�fdopen�shutil� copyfileobj� Exception�remover � traceback� format_exc�close)�moduler r" r r r r r �tmp_destr r r r r �startZrsp�infor% Ztmp_dest_is_dir�fdZtempname�f�er r r �url_get� s8 � " 2 2rF c C sB d}d}d| v r>| d }t �||�}|r>|�d�}tj�|�}|S )z� Extracts a filename from the given dict of HTTP headers. Looks for the content-disposition header and applies a regex. Returns the filename if successful, else None.z attachment; ?filename="?([^"]+)Nzcontent-disposition� )�re�match�groupr r r )r Zcont_disp_regex�resZ cont_disprI r r r � extract_filename_from_headers� s rL c C s d}t | �j|v S )zI Returns True if checksum value has supported URL scheme, else False.)�http�https�ftp�file)r �scheme)�checksumZsupported_schemesr r r �is_url� s rS c & s$ t � } dg| d d< dg| d d< | jtddd�td dd�td d d �tdd d �tddd �tdd�td d�tddg d�td dd �tddd�td dd �d� t| ddd�}|jd }|jd }|jd }|jd }|jd }|jd }|jd }|jd } |jd } |jd } |jd! } |jd" } |jd# }td d d |d$|d%�}tj�|�}d }|�r>z|�d&d'�\}}W n( t �y� |j f d(d)i|�� Y n0 t |��r�|}t |||||||| | | | |d*� \}}t |�� }d+d,� |D �}W d � n1 �s�0 Y t�|� g }t|�� t|�d'k�rHt|d$ �� �d'k�rH|�|d$ � f� nf|D ]`}|�d-d'�}t|�d.k�rL|d' �d/��r�|d' d'd � |d'< |�|d$ |d' �d0�f� �qL� fd1d2�|D �D ]}|} �qq�d }|d u �r�|j d3� |f d4� t�d5d |��� }zt|d6� W n( t �y< |j f d(d7i|�� Y n0 |�stj�|��rd } |�s�|d k�r�|�||�} || k�r�d} |�s�|�r�| �s�|j|j|d8�} |�| d �|d9< |d9 �r�|j f d(d:i|�� |j f d(d;i|�� tj� |�} t j � | �}| �rd}t j � � } |j!�r d<nd=}!t |||||||| | |!| | | |d>�\}"}#t j � � | j"|d?< |"|d@< |�r�t#|#�� � �s�t|#d �� tj�$|� �}||d< tj�|"��s�t�|"� |j f dA|#dB |#d( dC�|�� t�%|"tj&��st�|"� |j f d(dD|" i|�� |�'|"�|dE< tj�|��r�t�%|tj(��sRt�|"� |j f d(dF| i|�� t�%|tj&��s�t�|"� |j f d(dG| i|�� |�'|�|dH< n�tj�tj�)|���s�t�|"� |j f d(dItj�)|� i|�� t�%tj�)|�tj(��st�|"� |j f d(dFtj�)|� i|�� |j!�rptj�|"��r6t�|"� dH|v�pN|dE |dH k|d9< |j f d(|#�*d(d �i|�� d }$|dE |dH k�r0z8|�r�tj�|��r�|�+|�}$|j,|"||jdJ dK� W nf t-�y$ }% zLtj�|"��r�t�|"� |j f dL|"|t.|%�f t/�0� dM�|�� W Y d }%~%n d }%~%0 0 d|d9< n d |d9< tj�|"��rPt�|"� |d k�r�|�||�} || k�r�t�|� |j f d(dN||| f i|�� |j|j|d8�} |�| |d9 �|d9< z|�1|�|dO< W n t �y� d |dO< Y n0 |$�r�|$|dP< |j f |#�*d(d �|#�*dBd �dQ�|�� d S )RN�usernameZ url_username�aliases�passwordZ url_password�strT)�type�requiredr �boolF)rX �defaultr �intr �dict)rX �list)rX �elementsr[ )rX r_ ) r r" �backuprR r r r@ r r r r )� argument_specZadd_file_common_argsZsupports_check_moder r" r` r rR r r r r@ r r r r r )r# � checksum_dest� checksum_srcr" r% r �:rG r! zAThe checksum parameter has to be in format <algorithm>:<checksum>)r r r c S s g | ]}|� d ��qS )� )�rstrip)�.0�liner r r � <listcomp> � zmain.<locals>.<listcomp>� r )rk �*z./c 3 s | ]\}}|� kr|V qd S )Nr )rg �srD ��filenamer r � <genexpr>0 rj zmain.<locals>.<genexpr>z/Unable to find a checksum for file '%s' in '%s')r! z\W+� z The checksum format is invalid)r r# z/file already exists but file attributes changedzfile already existsZHEADr )r r r r r% �srcr( r )r! r$ r) zSource %s is not readablerc z Destination %s is not writablez Destination %s is not readablerb z Destination %s does not exist� unsafe_writes)rs zfailed to copy %s to %s: %s)r! r, z0The checksum for %s did not match %s; it was %s.Zmd5sum� backup_file)r! r$ )2r �updater] r �paramsr r r4 �split� ValueErrorr2 rS rF �openr; r �len�appendr3 �lstriprH �sub�lowerr\ r5 Zdigest_from_fileZload_file_common_argumentsZ set_fs_attributes_if_differentr0 �getmtimer- Zutcfromtimestampr. Z check_moder/ rL �join�access�R_OKZsha1�W_OK�dirnamer1 Z backup_localZ atomic_mover: r r< r= Zmd5)&ra r? r r" r` r rR r r r r@ r r r r �resultZ dest_is_dirr � algorithmZ checksum_urlZchecksum_tmpsrcZ checksum_inforD �linesZ checksum_maprh �partsZcksumZchecksum_mismatchZdestination_checksumZ file_args�mtimerA r ZtmpsrcrB rt rE r rn r �main� sP �� � � . $ � � �� r� �__main__)r Nr r NTNT) Z __future__r r r rX Z __metaclass__Z DOCUMENTATIONZEXAMPLESZRETURNr- r rH r8 r6 r< Zansible.module_utils.basicr Z+ansible.module_utils.six.moves.urllib.parser Zansible.module_utils._textr Zansible.module_utils.urlsr r r rF rL rS r� �__name__r r r r �<module> s2 T5] � 0 m