Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to...
Transcript of Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to...
![Page 1: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/1.jpg)
Ansible Module Schreiben
Martin Schütte12. April 2019
Frühjahrsfachgespräch
![Page 2: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/2.jpg)
Assumptions
You …
• configure servers or other IT systems• have already used (or tried) Ansible• can write shell or Python scripts• have some “special” device or APIor a CLI that does not fit into a simple command
This talk …
• is no Ansible introduction• has too many slides, I will skip some• is available online at noti.st
Martin Schütte | Ansible Modules | GUUG FFG’19 2/55
![Page 3: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/3.jpg)
Outline
1. Concepts
2. Writing Modules
3. Module Execution – In-Depth
4. Beyond Python
5. Conclusion
Martin Schütte | Ansible Modules | GUUG FFG’19 3/55
![Page 4: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/4.jpg)
Concepts
![Page 5: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/5.jpg)
ConceptsIntro
![Page 6: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/6.jpg)
Ansible – Concepts and Naming
Ansible is a radically simple IT automation platform.
• controller• target host• playbook• role• task• module
Martin Schütte | Ansible Modules | GUUG FFG’19 4/55
![Page 7: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/7.jpg)
Example: Simple Playbook
---- hosts: webservervars:
apache_version: latesttasks:- name: ensure apache is at given version
yum:name: httpdstate: ”{{ apache_version }}”
- hosts: dbserverroles:
- ansible-role-postgresql
Martin Schütte | Ansible Modules | GUUG FFG’19 5/55
![Page 8: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/8.jpg)
ConceptsModule Basics
![Page 9: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/9.jpg)
What is a Module?
some code snippet to run on the (remote) host
executable with input and output
Martin Schütte | Ansible Modules | GUUG FFG’19 6/55
![Page 10: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/10.jpg)
Minimal Module
#!/bin/sh
echo ’{”foo”: ”bar”}’exit 0
#!/usr/bin/python
if __name__ == ’__main__’:print(’{”foo”: ”bar”}’)exit(0)
Martin Schütte | Ansible Modules | GUUG FFG’19 7/55
![Page 11: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/11.jpg)
Action Plugins call Modules
• plugins run on the controller• may prepare input for modules• may handle “special” connections (non SSH or WinRM)• may implement actions on the controller, e. g. debug• defaults to normal to run module on target host
Martin Schütte | Ansible Modules | GUUG FFG’19 8/55
![Page 12: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/12.jpg)
Writing Modules
![Page 13: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/13.jpg)
Writing ModulesDon’t
![Page 14: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/14.jpg)
Avoid Writing Own Code
• get_url – Downloads files• uri – Interacts with webservices• wait_for – Waits for a condition before continuing• set_fact – Set host facts from a task
- name: Wait for port 8000 to become open on the hostwait_for:port: 8000delay: 10
- name: wait for service to become availableuri:url: ’https://{{ inventory_hostname }}:{{ svc_port }}/service’return_content: yes
register: contentuntil: content.status == 200retries: 60delay: 10when: not ansible_check_mode
Martin Schütte | Ansible Modules | GUUG FFG’19 9/55
![Page 15: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/15.jpg)
Writing ModulesSimple Example: Ping
![Page 16: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/16.jpg)
Documentation
ANSIBLE_METADATA = {’metadata_version’: ’1.1’,’status’: [’stableinterface’],’supported_by’: ’core’}
DOCUMENTATION = ’’’---module: pingversion_added: historicalshort_description: Try to connect to host, verify a usablepython and return C(pong) on success...’’’
EXAMPLES = ’’’# Induce an exception to see what happens- ping:
data: crash’’’
RETURN = ’’’ping:
description: value provided with the data parameterreturned: successtype: stringsample: pong
’’’
Martin Schütte | Ansible Modules | GUUG FFG’19 10/55
![Page 17: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/17.jpg)
ansible-doc
$ ansible-doc --snippet ping- name: Try to connect to host, verify a usable python and return ‘pong’ on successping:
data: # Data to return for the ‘ping’ return value. If thisparameter is set to ‘crash’, the module will cause anexception.
$ ansible-doc ping> PING (.../site-packages/ansible/modules/system/ping.py)
A trivial test module, this module always returns ‘pong’ onsuccessful contact. It does not make sense in playbooks, butit is useful from ‘/usr/bin/ansible’ to verify the ability tologin and that a usable Python is configured. This is NOT ICMPping, this is just a trivial test module that requires Pythonon the remote-node. For Windows targets, use the [win_ping]module instead. For Network targets, use the [net_ping] moduleinstead.
OPTIONS (= is mandatory):
- dataData to return for the ‘ping’ return value.
...
Martin Schütte | Ansible Modules | GUUG FFG’19 11/55
![Page 18: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/18.jpg)
ping.py
from ansible.module_utils.basic import AnsibleModule
def main():module = AnsibleModule(
argument_spec=dict(data=dict(type=’str’, default=’pong’),
),supports_check_mode=True
)
if module.params[’data’] == ’crash’:raise Exception(”boom”)
result = dict(ping=module.params[’data’],
)module.exit_json(**result)
if __name__ == ’__main__’:main()
Martin Schütte | Ansible Modules | GUUG FFG’19 12/55
![Page 19: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/19.jpg)
Writing ModulesStart Your Own
![Page 20: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/20.jpg)
my_module.py
from ansible.module_utils.basic import AnsibleModule
def main():module = AnsibleModule(
argument_spec=dict( # ...)
)
rc = do_something()result = {
”msg”: ”Hello World”,”rc”: rc,”failed”: False,”changed”: False,
}module.exit_json(**result)
if __name__ == ’__main__’:main()
Martin Schütte | Ansible Modules | GUUG FFG’19 13/55
![Page 21: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/21.jpg)
File Locations: library and module_utils
my_role/metadefaultstaskslibrary
my_module.pymodule_utils
my_util_lib.py
• role can use Ansible module my_module in tasks• import * from my_util_libfinds Python module in module_utils
• for “larger” libraries use packages (pip/rpm/dpkg)
Martin Schütte | Ansible Modules | GUUG FFG’19 14/55
![Page 22: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/22.jpg)
AnsibleModule argument_spec
module = AnsibleModule(argument_spec=dict(
config=dict(required=False),name=dict(required=True),password=dict(required=False,
no_log=True),state=dict(required=False,
choices=[’present’, ’absent’],default=”present”),
enabled=dict(required=False,type=’bool’),
token=dict(required=False,no_log=True),
url=dict(required=False,default=”http://localhost:8080”),
user=dict(required=False)),mutually_exclusive=[
[’password’, ’token’],[’config’, ’enabled’],
],supports_check_mode=True,
)
# Create a jenkins job using the token- jenkins_job:
config: ”{{ lookup(...) }}”name: testtoken: asdfasfasfasdfasdfadfurl: http://localhost:8080user: admin
# Disable a jenkins job using basic auth- jenkins_job:
name: testpassword: adminenabled: Falseurl: http://localhost:8080user: admin
Martin Schütte | Ansible Modules | GUUG FFG’19 15/55
![Page 23: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/23.jpg)
Common Return Values/Result Attributes
Common• changed• failed• rc• msg• results• invocation• skipped• stderr, stderr_lines• stdout, stdout_lines• backup_file
Internal use• ansible_facts• exception• warnings• deprecations
Martin Schütte | Ansible Modules | GUUG FFG’19 16/55
![Page 24: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/24.jpg)
get_release.py function
def read_os_file(item_name):filename = ”/etc/os-release”
result = {”msg”: ”unknown”,”failed”: True,”changed”: False,
}
with open(filename, ”r”) as f:for line in f:
key,value = line.split(’=’, 1)if key == item_name:
result[”msg”] = value.strip().strip(’”’)result[”failed”] = Falsebreak
return result
Martin Schütte | Ansible Modules | GUUG FFG’19 17/55
![Page 25: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/25.jpg)
get_release.pymain
def main():m = AnsibleModule(
argument_spec=dict(line=dict(type=’str’, default=”PRETTY_NAME”),
),supports_check_mode=False
)
result = read_os_file(m.params[”line”])m.exit_json(**result)
if __name__ == ’__main__’:main()
Martin Schütte | Ansible Modules | GUUG FFG’19 18/55
![Page 26: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/26.jpg)
get_release.py usage
- name: my_role | get_release nameget_release: {}register: rc_get_dist
- name: my_role | get_release likeget_release:line: ID_LIKE
register: rc_get_like
- name: my_role | debugdebug:msg: ”{{ rc_get_dist.msg }} -- {{ rc_get_like.msg }}”
TASK [role-pymod : my_role | debug] **********************ok: [server] => {
”msg”: ”CentOS Linux 7 (Core) -- rhel fedora”}
Martin Schütte | Ansible Modules | GUUG FFG’19 19/55
![Page 27: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/27.jpg)
Common Module Pattern
class Controller(object):def __init__(module)def do_something()
def main():module = AnsibleModule(...)ctl = Controller(module)result = ctl.do_something()module.exit_json(**result)
if __name__ == ’__main__’:main()
• simple access to input parameters• access to util functions (e. g. module.run_command())• difficult to unit test without module context
Martin Schütte | Ansible Modules | GUUG FFG’19 20/55
![Page 28: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/28.jpg)
Writing ModulesPatterns & Misc. Hints
![Page 29: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/29.jpg)
Use AnsibleModule
Useful common methods:
• argument_spec for parameters• supports_check_mode• exit_json(), fail_json()• atomic_move(), run_command()• bytes_to_human(), human_to_bytes()
Other module_utils:
• api: function/decorator @rate_limit()• timeout: function/decorator @timeout(secs)• _text: new and unstable to_text()
Martin Schütte | Ansible Modules | GUUG FFG’19 21/55
![Page 30: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/30.jpg)
Pattern: Idempotency
• Playbooks can run many times• As few changes as possible• Only perform required actions
1. Get spec parameters2. Check actual state of system
if =: done, do nothingif ̸=: action to change state
Martin Schütte | Ansible Modules | GUUG FFG’19 22/55
![Page 31: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/31.jpg)
Pattern: Check Dependencies
try:import psycopg2import psycopg2.extras
except ImportError:HAS_PSYCOPG2 = False
else:HAS_PSYCOPG2 = True
def main():module = AnsibleModule()# ...if not HAS_PSYCOPG2:
module.fail_json(msg=”the python psycopg2 module is required”)
Martin Schütte | Ansible Modules | GUUG FFG’19 23/55
![Page 32: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/32.jpg)
Check Mode/“Dry Run”
• Return information but never apply changes• Optional but recommended for modules• Interface provided by AnsibleModule
Example without support:m = AnsibleModule(
argument_spec=...,supports_check_mode=False
)
$ ansible-playbook -v --check playbook.yml...TASK [role-pymod : my_role | get_release] **************skipping: [server] => {”changed”: false, ”msg”: ”remote module
(get_release) does not support check mode”}
Martin Schütte | Ansible Modules | GUUG FFG’19 24/55
![Page 33: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/33.jpg)
Check Mode/“Dry Run”
def update_permanent_hostname(self):name = self.module.params[’name’]permanent_name = self.get_permanent_hostname()if permanent_name != name:
if not self.module.check_mode:self.set_permanent_hostname(name)
self.changed = True
Important: Modules without AnsibleModule (or non-Python)have to handle this on their own!⇒ test the _ansible_check_mode parameter
Martin Schütte | Ansible Modules | GUUG FFG’19 25/55
![Page 34: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/34.jpg)
Other Common Return Value: Diff
Example from hostname:if changed:
kw[’diff’] = {’after’: ’hostname = ’ + name + ’\n’,’before’: ’hostname = ’ + name_before + ’\n’}
Example output, sample module:TASK [role-minimal : role_minimal | py_sample_08] ************task path: /vagrant/roles/role-minimal/tasks/main.yml:23--- before+++ after@@ -1,3 +1,3 @@common line-old value+new valecommon line
changed: [server] => {”changed”: ”true”, ”foo”: ”bar”}
Martin Schütte | Ansible Modules | GUUG FFG’19 26/55
![Page 35: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/35.jpg)
Example: Set Facts
In a playbook:- do_something:
# ...register: result_var
- set_fact:foo: ”{{ result_var.results | list }}”
In a module (from hostname):kw = dict(changed=changed, name=name,
ansible_facts=dict(ansible_hostname=name.split(’.’)[0],ansible_nodename=name,ansible_fqdn=socket.getfqdn(),ansible_domain=’.’.join(
socket.getfqdn().split(’.’)[1:])))module.exit_json(**kw)
Martin Schütte | Ansible Modules | GUUG FFG’19 27/55
![Page 36: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/36.jpg)
Example: String Formatting
When Jinja2 is not enough for variables and formatting …
Random example:- name: calculate cluster config linescalc_some_cluster_config:hostname: ”{{ ansible_fqdn }}”port: ”{{ application_port }}”group: ”{{ groups[’appserver’] }}”
register: cluster_config
- name: cluster configlineinfile:path: ”{{ basedir }}/cluster/config”line: ”{{ item }}”
with_items:- ”hosts={{ cluster_config.tcp_hostlist | join(’,’) }}”- ”exclude={{ cluster_config.exclude_roles | join(’,’) }}”
notify: appserver restart
Martin Schütte | Ansible Modules | GUUG FFG’19 28/55
![Page 37: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/37.jpg)
Pattern: Provider Dict
- name: apply IOS configios_config:provider: ”{{ ios_creds }}”src: my_config2b.txt
- name: Import Zabbix json template configurationlocal_action:module: zabbix_templateserver_url: http://127.0.0.1login_user: usernamelogin_password: passwordtemplate_name: Apache2template_json: ”{{ lookup(’file’, ’apache2.json’) }}”template_groups:- Webservers
Martin Schütte | Ansible Modules | GUUG FFG’19 29/55
![Page 38: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/38.jpg)
Module Execution – In-Depth
![Page 39: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/39.jpg)
Module Execution – In-DepthLow Level Module Execution
![Page 40: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/40.jpg)
Minimal Module
#!/bin/sh
echo ’{”foo”: ”bar”}’exit 0
#!/usr/bin/python
if __name__ == ’__main__’:print(’{”foo”: ”bar”}’)exit(0)
Martin Schütte | Ansible Modules | GUUG FFG’19 30/55
![Page 41: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/41.jpg)
Minimal Module – Verbose Output
TASK [role-minimal : role_minimal | bash_sample_01] ****************************task path: /vagrant/roles/role-minimal/tasks/main.yml:5<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o ’IdentityFile=”/vagrant/.vagrant/machines/server/virtualbox/private_key”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=vagrant -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/19f50d7a0e 192.168.56.202 ’/bin/sh -c ’”’”’echo ~vagrant && sleep 0’”’”’’<192.168.56.202> (0, ’/home/vagrant\n’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o ’IdentityFile=”/vagrant/.vagrant/machines/server/virtualbox/private_key”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=vagrant -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/19f50d7a0e 192.168.56.202 ’/bin/sh -c ’”’”’( umask 77 && mkdir -p ”‘ echo /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627 ‘” && echo ansible-tmp-1548772995.78-225807547469627=”‘ echo /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627 ‘” ) && sleep 0’”’”’’<192.168.56.202> (0, ’ansible-tmp-1548772995.78-225807547469627=/home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627\n’, ’’)Using module file /vagrant/roles/role-minimal/library/bash_sample_01<192.168.56.202> PUT /home/vagrant/.ansible/tmp/ansible-local-32044a_dXdg/tmpnrj9rd TO /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/AnsiballZ_bash_sample_01<192.168.56.202> SSH: EXEC sftp -b - -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o ’IdentityFile=”/vagrant/.vagrant/machines/server/virtualbox/private_key”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=vagrant -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/19f50d7a0e ’[192.168.56.202]’<192.168.56.202> (0, ’sftp> put /home/vagrant/.ansible/tmp/ansible-local-32044a_dXdg/tmpnrj9rd /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/AnsiballZ_bash_sample_01\n’, ’’)<192.168.56.202> PUT /home/vagrant/.ansible/tmp/ansible-local-32044a_dXdg/tmpgN3ZKr TO /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/args<192.168.56.202> SSH: EXEC sftp -b - -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o ’IdentityFile=”/vagrant/.vagrant/machines/server/virtualbox/private_key”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=vagrant -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/19f50d7a0e ’[192.168.56.202]’<192.168.56.202> (0, ’sftp> put /home/vagrant/.ansible/tmp/ansible-local-32044a_dXdg/tmpgN3ZKr /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/args\n’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o ’IdentityFile=”/vagrant/.vagrant/machines/server/virtualbox/private_key”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=vagrant -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/19f50d7a0e 192.168.56.202 ’/bin/sh -c ’”’”’chmod u+x /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/ /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/AnsiballZ_bash_sample_01 /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/args && sleep 0’”’”’’<192.168.56.202> (0, ’’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o ’IdentityFile=”/vagrant/.vagrant/machines/server/virtualbox/private_key”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=vagrant -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/19f50d7a0e -tt 192.168.56.202 ’/bin/sh -c ’”’”’sudo -H -S -n -u root /bin/sh -c ’”’”’”’”’”’”’”’”’echo BECOME-SUCCESS-uxckhkctwvojevrlrjkvtjxppufrfoae; /bin/sh /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/AnsiballZ_bash_sample_01 /home/vagrant/.ansible/tmp/ansible-tmp-1548772995.78-225807547469627/args’”’”’”’”’”’”’”’”’ && sleep 0’”’”’’Escalation succeeded<192.168.56.202> (0, ’{”foo”:”bar”}\r\n’, ’Shared connection to 192.168.56.202 closed.\r\n’)ok: [server] => {
”changed”: false,”foo”: ”bar”
}
TASK [role-minimal : role_minimal | bash_sample_01] ****************************task path: /vagrant/roles/role-minimal/tasks/main.yml:5<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS 192.168.56.202 ’/bin/sh -c ’”’”’echo ~vagrant && sleep 0’”’”’’<192.168.56.202> (0, ’/home/vagrant\n’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS 192.168.56.202 ’/bin/sh -c ’”’”’( umask 77 && mkdir -p ”‘ echo $TMPDIR ‘” && echo ansible-tmp-1548772995.78-225807547469627=”‘ echo $TMPDIR ‘” ) && sleep 0’”’”’’<192.168.56.202> (0, ’ansible-tmp-1548772995.78-225807547469627=$TMPDIR\n’, ’’)Using module file /vagrant/roles/role-minimal/library/bash_sample_01<192.168.56.202> PUT $CTL_TMP/tmpnrj9rd TO $TMPDIR/AnsiballZ_bash_sample_01<192.168.56.202> SSH: EXEC sftp -b - $SSH_OPTS ’[192.168.56.202]’<192.168.56.202> (0, ’sftp> put $CTL_TMP/tmpnrj9rd $TMPDIR/AnsiballZ_bash_sample_01\n’, ’’)<192.168.56.202> PUT $CTL_TMP/tmpgN3ZKr TO $TMPDIR/args<192.168.56.202> SSH: EXEC sftp -b - $SSH_OPTS ’[192.168.56.202]’<192.168.56.202> (0, ’sftp> put $CTL_TMP/tmpgN3ZKr $TMPDIR/args\n’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS 192.168.56.202 ’/bin/sh -c ’”’”’chmod u+x $TMPDIR/ $TMPDIR/AnsiballZ_bash_sample_01 $TMPDIR/args && sleep 0’”’”’’<192.168.56.202> (0, ’’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS -tt 192.168.56.202 ’/bin/sh -c ’”’”’sudo -H -S -n -u root /bin/sh -c ’”’”’”’”’”’”’”’”’echo BECOME-SUCCESS-uxckhkctwvojevrlrjkvtjxppufrfoae; /bin/sh $TMPDIR/AnsiballZ_bash_sample_01 $TMPDIR/args’”’”’”’”’”’”’”’”’ && sleep 0’”’”’’Escalation succeeded<192.168.56.202> (0, ’{”foo”:”bar”}\r\n’, ’Shared connection to 192.168.56.202 closed.\r\n’)ok: [server] => {
”changed”: false,”foo”: ”bar”
}
TASK [role-minimal : role_minimal | bash_sample_01] ****************************task path: /vagrant/roles/role-minimal/tasks/main.yml:5<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS 192.168.56.202 ’/bin/sh -c ’”’”’echo ~vagrant && sleep 0’”’”’’<192.168.56.202> (0, ’/home/vagrant\n’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS 192.168.56.202 ’/bin/sh -c ’”’”’( umask 77 && mkdir -p ”‘ echo $TMPDIR ‘” && echo ansible-tmp-1548772995.78-225807547469627=”‘ echo $TMPDIR ‘” ) && sleep 0’”’”’’<192.168.56.202> (0, ’ansible-tmp-1548772995.78-225807547469627=$TMPDIR\n’, ’’)Using module file /vagrant/roles/role-minimal/library/bash_sample_01<192.168.56.202> PUT $CTL_TMP/tmpnrj9rd TO $TMPDIR/AnsiballZ_bash_sample_01<192.168.56.202> SSH: EXEC sftp -b - $SSH_OPTS ’[192.168.56.202]’<192.168.56.202> (0, ’sftp> put $CTL_TMP/tmpnrj9rd $TMPDIR/AnsiballZ_bash_sample_01\n’, ’’)<192.168.56.202> PUT $CTL_TMP/tmpgN3ZKr TO $TMPDIR/args<192.168.56.202> SSH: EXEC sftp -b - $SSH_OPTS ’[192.168.56.202]’<192.168.56.202> (0, ’sftp> put $CTL_TMP/tmpgN3ZKr $TMPDIR/args\n’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS 192.168.56.202 ’/bin/sh -c ’”’”’chmod u+x $TMPDIR/ $TMPDIR/AnsiballZ_bash_sample_01 $TMPDIR/args && sleep 0’”’”’’<192.168.56.202> (0, ’’, ’’)<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS -tt 192.168.56.202 ’/bin/sh -c ’”’”’sudo -H -S -n -u root /bin/sh -c ’”’”’”’”’”’”’”’”’echo BECOME-SUCCESS-uxckhkctwvojevrlrjkvtjxppufrfoae; /bin/sh $TMPDIR/AnsiballZ_bash_sample_01 $TMPDIR/args’”’”’”’”’”’”’”’”’ && sleep 0’”’”’’Escalation succeeded<192.168.56.202> (0, ’{”foo”:”bar”}\r\n’, ’Shared connection to 192.168.56.202 closed.\r\n’)ok: [server] => {
”changed”: false,”foo”: ”bar”
}
<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS -tt 192.168.56.202 C
’/bin/sh -c ’”’”’sudo -H -S -n -u root C/bin/sh -c ’”’”’”’”’”’”’”’”’ Cecho BECOME-SUCCESS-uxckhkctwvojevrlrjkvtjxppufrfoae; C/bin/sh $TMPDIR/AnsiballZ_bash_sample_01 $TMPDIR/args C’”’”’”’”’”’”’”’”’ && sleep 0’”’”’’
Escalation succeeded<192.168.56.202> (0, ’{”foo”:”bar”}\r\n’, C
’Shared connection to 192.168.56.202 closed.\r\n’)
ok: [server] => {”changed”: false,”foo”: ”bar”
}
Martin Schütte | Ansible Modules | GUUG FFG’19 31/55
![Page 42: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/42.jpg)
Argument File Format
Old-style default: key=value
[vagrant@server ~]$ cat $TMPDIR/args_ansible_version=2.7.5
_ansible_selinux_special_fs=’[’”’”’fuse’”’”’,’”’”’nfs’”’”’, ’”’”’vboxsf’”’”’, ’”’”’ramfs’”’”’,’”’”’9p’”’”’]’ _ansible_no_log=False_ansible_module_name=py_sample_01_ansible_tmpdir=/home/vagrant/.ansible/tmp/ansible-tmp-1548756932.8-240778677026680/ _ansible_verbosity=3_ansible_keep_remote_files=True_ansible_syslog_facility=LOG_USER _ansible_socket=None_ansible_remote_tmp=’~/.ansible/tmp’ _ansible_diff=False_ansible_debug=False _ansible_shell_executable=/bin/sh_ansible_check_mode=False foo=baz
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
Martin Schütte | Ansible Modules | GUUG FFG’19 32/55
![Page 43: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/43.jpg)
Want JSON Option
#!/bin/sh
# WANT_JSON
echo ’{”foo”:”bar”}’exit 0
#!/usr/bin/python
# WANT_JSON
if __name__ == ’__main__’:print(’{”foo”:”bar”}’)exit(0)
Martin Schütte | Ansible Modules | GUUG FFG’19 33/55
![Page 44: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/44.jpg)
Argument File Format
With WANT_JSON flag:[vagrant@server ~]$ cat $TMPDIR/args{”_ansible_version”: ”2.7.5”, ”_ansible_selinux_special_fs”:
[”fuse”, ”nfs”, ”vboxsf”, ”ramfs”, ”9p”],”_ansible_no_log”: false, ”_ansible_module_name”:”bash_sample_02”, ”_ansible_tmpdir”:”/home/vagrant/.ansible/tmp/ansible-tmp-1548756933.19-248002152304605/”, ”_ansible_verbosity”: 3,”_ansible_keep_remote_files”: true,”_ansible_syslog_facility”: ”LOG_USER”, ”_ansible_socket”:null, ”_ansible_remote_tmp”: ”~/.ansible/tmp”,”_ansible_diff”: false, ”_ansible_debug”: false,”_ansible_shell_executable”: ”/bin/sh”,”_ansible_check_mode”: false, ”foo”: ”baz”}
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
Martin Schütte | Ansible Modules | GUUG FFG’19 34/55
![Page 45: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/45.jpg)
Remove Argument File: JSONARGS
#!/bin/sh
ARGS=’<<INCLUDE_ANSIBLE_MODULE_JSON_ARGS>>’echo ”arguments: $ARGS” | logger --tag $(basename ”$0”)
echo ’{”foo”:”bar”}’exit 0
#!/usr/bin/pythonimport syslog
args=”””<<INCLUDE_ANSIBLE_MODULE_JSON_ARGS>>”””
if __name__ == ’__main__’:syslog.openlog()syslog.syslog(args)
print(’{”foo”:”bar”}’)exit(0)
Martin Schütte | Ansible Modules | GUUG FFG’19 35/55
![Page 46: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/46.jpg)
JSONARGS – Verbose Output
<192.168.56.202> ESTABLISH SSH CONNECTION FOR USER: vagrant<192.168.56.202> SSH: EXEC ssh $SSH_OPTS -tt 192.168.56.202 C
’/bin/sh -c ’”’”’/bin/sh $TMPDIR/AnsiballZ_bash_sample_03 C&& sleep 0’”’”’’
<192.168.56.202> (0, ’{”foo”:”bar”}\r\n’, C’Shared connection to 192.168.56.202 closed.\r\n’)
ok: [server] => {”changed”: false,”foo”: ”bar”
}
Martin Schütte | Ansible Modules | GUUG FFG’19 36/55
![Page 47: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/47.jpg)
JSONARGS – Argument in Script File
[vagrant@server ~]$ cat $TMPDIR/AnsiballZ_bash_sample_03#!/bin/sh
ARGS=’{”_ansible_version”: ”2.7.5”,”_ansible_selinux_special_fs”: [”fuse”, ”nfs”, ”vboxsf”,”ramfs”, ”9p”], ”_ansible_no_log”: false,”_ansible_module_name”: ”bash_sample_03”,”_ansible_tmpdir”: ”/home/vagrant/.ansible/tmp/ansible-tmp-1548797622.11-222413844288764/”, ”_ansible_verbosity”: 3,”_ansible_keep_remote_files”: true,”_ansible_syslog_facility”: ”LOG_USER”, ”_ansible_socket”:null, ”_ansible_remote_tmp”: ”~/.ansible/tmp”,”_ansible_diff”: false, ”_ansible_debug”: false,”_ansible_shell_executable”: ”/bin/sh”,”_ansible_check_mode”: false, ”foo”: ”baz”}’
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
↪→
echo ”arguments: $ARGS” | logger --tag $(basename ”$0”)
echo ’{”foo”:”bar”}’exit 0
Martin Schütte | Ansible Modules | GUUG FFG’19 37/55
![Page 48: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/48.jpg)
Module Execution – In-DepthAnsiballZ
![Page 49: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/49.jpg)
Import AnsibleModule
#!/usr/bin/python
from ansible.module_utils.basic import AnsibleModule
if __name__ == ’__main__’:print(’{”foo”:”bar”}’)exit(0)
Martin Schütte | Ansible Modules | GUUG FFG’19 38/55
![Page 50: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/50.jpg)
Import AnsibleModule – Verbose Output
[vagrant@server ~]$ ls -hl $TMPDIR-rwx------. 1 vagrant vagrant 75K Jan 29 14:53 AnsiballZ_py_sample_04.py
[vagrant@server ~]$ head $TMPDIR/AnsiballZ_py_sample_04.py#!/usr/bin/python# -*- coding: utf-8 -*-_ANSIBALLZ_WRAPPER = True # For test-module script to tell this is a ANSIBALLZ_WRAPPER# This code is part of Ansible, but is an independent component.# The code in this particular templatable string, and this templatable string# only, is BSD licensed. Modules which end up using this snippet, which is# dynamically combined together by Ansible still belong to the author of the# module, and they may assign their own license to the complete work.## Copyright (c), James Cammarata, 2016[vagrant@server ~]$
Martin Schütte | Ansible Modules | GUUG FFG’19 39/55
![Page 51: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/51.jpg)
AnsiballZ Wrapper
Python template script for
• helper functions (execute, explode)• zipped data of
• module text• JSON arguments• all module_utils imports
Martin Schütte | Ansible Modules | GUUG FFG’19 40/55
![Page 52: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/52.jpg)
Module Execution – In-DepthDebugging
![Page 53: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/53.jpg)
Debugging Tools and Tips
Dev environment:
• Vagrant• keep_remote_files = True• ansible -vvv
• AnsiballZ code expand• “print to output”• AnsibleModule.log()• q
Martin Schütte | Ansible Modules | GUUG FFG’19 41/55
![Page 54: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/54.jpg)
Debugging – AnsiballZ Explode
[vagrant@server ~]$ ls -hl $TMPDIR-rwx------. 1 vagrant vagrant 75K Jan 29 14:53 AnsiballZ_py_sample_04.py[vagrant@server ~]$ $TMPDIR/AnsiballZ_py_sample_04.py explodeModule expanded into:$TMPDIR/debug_dir[vagrant@server ~]$ cd $TMPDIR/debug_dir; find .../ansible./ansible/__init__.py./ansible/module_utils./ansible/module_utils/__init__.py./ansible/module_utils/basic.py./ansible/module_utils/parsing./ansible/module_utils/parsing/convert_bool.py./ansible/module_utils/parsing/__init__.py./ansible/module_utils/common./ansible/module_utils/common/_collections_compat.py./ansible/module_utils/common/process.py./ansible/module_utils/common/__init__.py./ansible/module_utils/common/file.py./ansible/module_utils/six./ansible/module_utils/six/__init__.py./ansible/module_utils/_text.py./ansible/module_utils/pycompat24.py./__main__.py./args
Martin Schütte | Ansible Modules | GUUG FFG’19 42/55
![Page 55: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/55.jpg)
Debugging – AnsiballZ Explode
[vagrant@server debug_dir]$ cat __main__.py#!/usr/bin/python
from ansible.module_utils.basic import AnsibleModule
if __name__ == ’__main__’:print(’{”foo”:”bar”}’)exit(0)
[vagrant@server debug_dir]$ $TMPDIR/AnsiballZ_py_sample_04.py execute{”foo”:”bar”}
Martin Schütte | Ansible Modules | GUUG FFG’19 43/55
![Page 56: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/56.jpg)
Debugging – printf
• Ansible reads stdin and stdout, expects JSON⇒ cannot use print() to debug
• Use output values instead
# ...debug_msg = ”some_func({}) returned {}”.format(bar, foo)# ...module.exit_json(result=foo, debug_msg=debug_msg)
ok: [server] => {”changed”: false,”debug_msg”: ”some_func(bar) returned foo”,...
}
Martin Schütte | Ansible Modules | GUUG FFG’19 44/55
![Page 57: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/57.jpg)
Debugging – AnsibleModule log()
• AnsibleModule includes method log()with variants debug() and warn()
• Writes to journald or Syslog
module.log(”Hello World”)
# tail /var/log/messages
Feb 9 15:02:59 server ansible-my_module: Invoked with param=...Feb 9 15:02:59 server ansible-my_module: Hello World
Martin Schütte | Ansible Modules | GUUG FFG’19 45/55
![Page 58: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/58.jpg)
Debugging – q
• PyPI q or zestyping/q• Always writes to /tmp/q• function decorators
try:import q
except ImportError:def q(x):
return x
@qdef my_func(params):
q(special_var)# ...
$ tail /tmp/q
0.0s my_func(’VERSION’)0.0s my_func: ’special_value’0.0s -> {’failed’: False, ’msg’: ’...’}
Martin Schütte | Ansible Modules | GUUG FFG’19 46/55
![Page 59: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/59.jpg)
Beyond Python
![Page 60: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/60.jpg)
Ansible Modules in Other Languages
• Python: the default choice, best tools and support• PowerShell: officially supported, but not covered here• Scripting Languages: can use JSON_ARGS• Binary Executables: can use WANT_JSON
Martin Schütte | Ansible Modules | GUUG FFG’19 47/55
![Page 61: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/61.jpg)
Binary Executables, e. g. Go Tools
possible, but not recommended:
• binary in Ansible git repository• should have own build chain and versions• architecture dependent (all the world’s a x86_64?)
better:
• separate packaging and deployment (.deb and .rpm)• thin wrapper module to execute installed file or library• same for binary Python libraries (e. g. DB connectors)
Martin Schütte | Ansible Modules | GUUG FFG’19 48/55
![Page 62: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/62.jpg)
Java
• “executable” JAR file• not architecture dependent• otherwise the same as binaries
Martin Schütte | Ansible Modules | GUUG FFG’19 49/55
![Page 63: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/63.jpg)
Groovy
• JVM scripting language• compromise between Ansible scripts and Java apps• maybe best way to access/use Java libraries with Ansible• may need workarounds to use custom classpath
Martin Schütte | Ansible Modules | GUUG FFG’19 50/55
![Page 64: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/64.jpg)
Groovy – Small Example
#!/usr/bin/env groovyimport groovy.json.*
def jsonArgs=’’’<<INCLUDE_ANSIBLE_MODULE_JSON_ARGS>>’’’def args_object = new JsonSlurper().parseText(jsonArgs)
def checkMode = (boolean) args_object[’_ansible_check_mode’]
// do something useful
def result = [foo: ’bar’,code: 42,did_check_mode: checkMode
]
print JsonOutput.toJson(result)
Martin Schütte | Ansible Modules | GUUG FFG’19 51/55
![Page 65: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/65.jpg)
Scripting Languages
• Perl, Ruby, etc.• need JSON library• works• question: why?
Martin Schütte | Ansible Modules | GUUG FFG’19 52/55
![Page 66: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/66.jpg)
Conclusion
![Page 67: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/67.jpg)
Useful Software Design Principles
Not only for Ansible modules …
• KISS• YAGNI• readability!
Martin Schütte | Ansible Modules | GUUG FFG’19 53/55
![Page 68: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/68.jpg)
Links
• Ansible Docs on Modules:Conventions, tips, and pitfalls
• ansible/ansible• Ansible: Up & Running, 2nd edby Lorin Hochstein & René Moser
Martin Schütte | Ansible Modules | GUUG FFG’19 54/55
![Page 69: Ansible Module Schreiben · ansible-doc $ ansible-doc --snippet ping - name: Try to connect to host, verify a usable python and return ‘pong’ on success ping: data: # Data to](https://reader034.fdocuments.net/reader034/viewer/2022042803/5f4e7e4bb6f9633f2c3be3d9/html5/thumbnails/69.jpg)
The End
Thank You! — Questions?
Martin Schütte@m_schuett
slideshare.net/mschuett/noti.st/mschuett/
Martin Schütte | Ansible Modules | GUUG FFG’19 55/55