# -*- coding: utf-8 -*- # (c) 2015, Matt Martz # GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt) from __future__ import annotations DOCUMENTATION = r''' --- module: expect version_added: '2.0' short_description: Executes a command and responds to prompts description: - The M(ansible.builtin.expect) module executes a command and responds to prompts. - The given command will be executed on all selected nodes. It will not be processed through the shell, so variables like C($HOME) and operations like C("<"), C(">"), C("|"), and C("&") will not work. options: command: description: - The command module takes command to run. required: true type: str creates: type: path description: - A filename, when it already exists, this step will B(not) be run. removes: type: path description: - A filename, when it does not exist, this step will B(not) be run. chdir: type: path description: - Change into this directory before running the command. responses: type: dict description: - Mapping of prompt regular expressions and corresponding answer(s). - Each key in O(responses) is a Python regex U(https://docs.python.org/3/library/re.html#regular-expression-syntax). - The value of each key is a string or list of strings. If the value is a string and the prompt is encountered multiple times, the answer will be repeated. Provide the value as a list to give different answers for successive matches. required: true timeout: type: raw description: - Amount of time in seconds to wait for the expected strings. Use V(null) to disable timeout. default: 30 echo: description: - Whether or not to echo out your response strings. default: false type: bool requirements: - python >= 2.6 - pexpect >= 3.3 extends_documentation_fragment: action_common_attributes attributes: check_mode: support: none diff_mode: support: none platform: support: full platforms: posix notes: - If you want to run a command through the shell (say you are using C(<), C(>), C(|), and so on), you must specify a shell in the command such as C(/bin/bash -c "/path/to/something | grep else"). - Case insensitive searches are indicated with a prefix of C(?i). - The C(pexpect) library used by this module operates with a search window of 2000 bytes, and does not use a multiline regex match. To perform a start of line bound match, use a pattern like ``(?m)^pattern`` - The M(ansible.builtin.expect) module is designed for simple scenarios. For more complex needs, consider the use of expect code with the M(ansible.builtin.shell) or M(ansible.builtin.script) modules. (An example is part of the M(ansible.builtin.shell) module documentation). - If the command returns non UTF-8 data, it must be encoded to avoid issues. One option is to pipe the output through C(base64). seealso: - module: ansible.builtin.script - module: ansible.builtin.shell author: "Matt Martz (@sivel)" ''' EXAMPLES = r''' - name: Case insensitive password string match ansible.builtin.expect: command: passwd username responses: (?i)password: "MySekretPa$$word" # you don't want to show passwords in your logs no_log: true - name: Match multiple regular expressions and demonstrate individual and repeated responses ansible.builtin.expect: command: /path/to/custom/command responses: Question: # give a unique response for each of the 3 hypothetical prompts matched - response1 - response2 - response3 # give the same response for every matching prompt "^Match another prompt$": "response" - name: Multiple questions with responses ansible.builtin.expect: command: /path/to/custom/command responses: "Please provide your name": - "Anna" "Database user": - "{{ db_username }}" "Database password": - "{{ db_password }}" ''' import datetime import os import traceback PEXPECT_IMP_ERR = None try: import pexpect HAS_PEXPECT = True except ImportError: PEXPECT_IMP_ERR = traceback.format_exc() HAS_PEXPECT = False from ansible.module_utils.basic import AnsibleModule, missing_required_lib from ansible.module_utils.common.text.converters import to_bytes, to_native from ansible.module_utils.common.validation import check_type_int def response_closure(module, question, responses): resp_gen = (b'%s\n' % to_bytes(r).rstrip(b'\n') for r in responses) def wrapped(info): try: return next(resp_gen) except StopIteration: module.fail_json(msg="No remaining responses for '%s', " "output was '%s'" % (question, info['child_result_list'][-1])) return wrapped def main(): module = AnsibleModule( argument_spec=dict( command=dict(required=True), chdir=dict(type='path'), creates=dict(type='path'), removes=dict(type='path'), responses=dict(type='dict', required=True), timeout=dict(type='raw', default=30), echo=dict(type='bool', default=False), ) ) if not HAS_PEXPECT: module.fail_json(msg=missing_required_lib("pexpect"), exception=PEXPECT_IMP_ERR) chdir = module.params['chdir'] args = module.params['command'] creates = module.params['creates'] removes = module.params['removes'] responses = module.params['responses'] timeout = module.params['timeout'] if timeout is not None: try: timeout = check_type_int(timeout) except TypeError as te: module.fail_json(msg=f"argument 'timeout' is of type {type(timeout)} and we were unable to convert to int: {te}") echo = module.params['echo'] events = dict() for key, value in responses.items(): if isinstance(value, list): response = response_closure(module, key, value) else: response = b'%s\n' % to_bytes(value).rstrip(b'\n') events[to_bytes(key)] = response if args.strip() == '': module.fail_json(rc=256, msg="no command given") if chdir: chdir = os.path.abspath(chdir) os.chdir(chdir) if creates: # do not run the command if the line contains creates=filename # and the filename already exists. This allows idempotence # of command executions. if os.path.exists(creates): module.exit_json( cmd=args, stdout="skipped, since %s exists" % creates, changed=False, rc=0 ) if removes: # do not run the command if the line contains removes=filename # and the filename does not exist. This allows idempotence # of command executions. if not os.path.exists(removes): module.exit_json( cmd=args, stdout="skipped, since %s does not exist" % removes, changed=False, rc=0 ) startd = datetime.datetime.now() try: try: # Prefer pexpect.run from pexpect>=4 b_out, rc = pexpect.run(args, timeout=timeout, withexitstatus=True, events=events, cwd=chdir, echo=echo, encoding=None) except TypeError: # Use pexpect._run in pexpect>=3.3,<4 # pexpect.run doesn't support `echo` # pexpect.runu doesn't support encoding=None b_out, rc = pexpect._run(args, timeout=timeout, withexitstatus=True, events=events, extra_args=None, logfile=None, cwd=chdir, env=None, _spawn=pexpect.spawn, echo=echo) except (TypeError, AttributeError) as e: # This should catch all insufficient versions of pexpect # We deem them insufficient for their lack of ability to specify # to not echo responses via the run/runu functions, which would # potentially leak sensitive information module.fail_json(msg='Insufficient version of pexpect installed ' '(%s), this module requires pexpect>=3.3. ' 'Error was %s' % (pexpect.__version__, to_native(e))) except pexpect.ExceptionPexpect as e: module.fail_json(msg='%s' % to_native(e), exception=traceback.format_exc()) endd = datetime.datetime.now() delta = endd - startd if b_out is None: b_out = b'' result = dict( cmd=args, stdout=to_native(b_out).rstrip('\r\n'), rc=rc, start=str(startd), end=str(endd), delta=str(delta), changed=True, ) if rc is None: module.fail_json(msg='command exceeded timeout', **result) elif rc != 0: module.fail_json(msg='non-zero return code', **result) module.exit_json(**result) if __name__ == '__main__': main()