ACIL FM

Nama	Ukuran	Aksi
__pycache__	-	Open
config.py	5.75 MB	View DL Edit
csvfile.py	6.15 MB	View DL Edit
dict.py	2.2 MB	View DL Edit
env.py	2.67 MB	View DL Edit
file.py	2.93 MB	View DL Edit
fileglob.py	2.96 MB	View DL Edit
first_found.py	8.52 MB	View DL Edit
indexed_items.py	1.55 MB	View DL Edit
ini.py	7.6 MB	View DL Edit
inventory_hostnames.py	1.73 MB	View DL Edit
items.py	1.82 MB	View DL Edit
lines.py	2.16 MB	View DL Edit
list.py	1.12 MB	View DL Edit
nested.py	2.64 MB	View DL Edit
password.py	17.67 MB	View DL Edit
pipe.py	2.93 MB	View DL Edit
random_choice.py	1.54 MB	View DL Edit
sequence.py	8.96 MB	View DL Edit
subelements.py	6.18 MB	View DL Edit
template.py	6.83 MB	View DL Edit
together.py	2.11 MB	View DL Edit
unvault.py	1.93 MB	View DL Edit
url.py	8.8 MB	View DL Edit
varnames.py	2.31 MB	View DL Edit
vars.py	3.4 MB	View DL Edit
__init__.py	4.6 MB	View DL Edit

Edit file: /usr/lib/python3.9/site-packages/ansible/plugins/lookup/pipe.py

# (c) 2012, Daniel Hokka Zakrisson <daniel@hozac.com>
# (c) 2017 Ansible Project
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
from __future__ import (absolute_import, division, print_function)
__metaclass__ = type

DOCUMENTATION = r"""
    name: pipe
    author: Daniel Hokka Zakrisson (!UNKNOWN) <daniel@hozac.com>
    version_added: "0.9"
    short_description: read output from a command
    description:
      - Run a command and return the output.
    options:
      _terms:
        description: command(s) to run.
        required: True
    notes:
      - Like all lookups this runs on the Ansible controller and is unaffected by other keywords, such as become,
        so if you need to different permissions you must change the command or run Ansible as another user.
      - Alternatively you can use a shell/command task that runs against localhost and registers the result.
      - Pipe lookup internally invokes Popen with shell=True (this is required and intentional).
        This type of invocation is considered a security issue if appropriate care is not taken to sanitize any user provided or variable input.
        It is strongly recommended to pass user input or variable input via quote filter before using with pipe lookup.
        See example section for this.
        Read more about this L(Bandit B602 docs,https://bandit.readthedocs.io/en/latest/plugins/b602_subprocess_popen_with_shell_equals_true.html)
"""

EXAMPLES = r"""
- name: raw result of running date command
  ansible.builtin.debug:
    msg: "{{ lookup('ansible.builtin.pipe', 'date') }}"

- name: Always use quote filter to make sure your variables are safe to use with shell
  ansible.builtin.debug:
    msg: "{{ lookup('ansible.builtin.pipe', 'getent passwd ' + myuser | quote ) }}"
"""

RETURN = r"""
  _string:
    description:
      - stdout from command
    type: list
    elements: str
"""

import subprocess

from ansible.errors import AnsibleError
from ansible.plugins.lookup import LookupBase

class LookupModule(LookupBase):

def run(self, terms, variables, **kwargs):

ret = []
        for term in terms:
            '''
            https://docs.python.org/3/library/subprocess.html#popen-constructor

The shell argument (which defaults to False) specifies whether to use the
            shell as the program to execute. If shell is True, it is recommended to pass
            args as a string rather than as a sequence

https://github.com/ansible/ansible/issues/6550
            '''
            term = str(term)

p = subprocess.Popen(term, cwd=self._loader.get_basedir(), shell=True, stdin=subprocess.PIPE, stdout=subprocess.PIPE)
            (stdout, stderr) = p.communicate()
            if p.returncode == 0:
                ret.append(stdout.decode("utf-8").rstrip())
            else:
                raise AnsibleError("lookup_plugin.pipe(%s) returned %d" % (term, p.returncode))
        return ret

Batal