Vh ~ddlmZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z m Z ddl mZddlmZddlmZmZmZmZmZddlmZddlmZmZdd lmZdd lm Z dd l!m"Z"dd l#m$Z$m%Z%m&Z&dd l'm(Z(m)Z)m*Z*ddl+m,Z,ddl-m.Z.ddl/m0Z0ddl1m2Z2ddl3m4Z4m5Z5ddl6m7Z7ddl8m9Z9e2Z:dZ;Gdde Z|j|j||Sr)rr4rs r.get_connection_optionz ActionBase.get_connection_options %%d&6&6%PPr/cR|j|jj||Sr)rr4rWrs r.get_shell_optionzActionBase.get_shell_optionrr/c|jjj|}|j|d}|ddk(ryy)NT)cmdsudoablercrF)r4rWexists_low_level_execute_command)rApathrr]s r._remote_file_existszActionBase._remote_file_existssE%%,,T200S40H $<1 r/c|jjr)|jd|jj}n|}|jd}t |dkDrdj |ddnd}t |}|jjD]J}|dk(rd} gd} |d vr%|| vr!|jj|k7r| d |}n|d k(r || vr| d|}|d vrY|rWt|jjd r7dD]2} | |vs|jjj|| || <4|jjj|||jj } | j"sN| j$rBt | j$dkDr*| j$d} t'dj)|| | j*}|sKnt'd|zt-}|j/|i}|jj0rd|d<|jj0j2|d<|jj0j5d|j6|d<|jj0j5d|j6|d<|jj0j5d|j6|d<dD]x} t9||||j:f|t<j>jAd||jjB|tEtG|jdd d!|\}}}n|fS#tH$r}tKtM||jN|jP|"|_)d#|jNz}|jR|d$|<|jjr|jjTr|jR|d$|<||_+n,|jR|d|jjd$|<Yd%}~Td%}~wwxYw)&zu Handles the loading and templating of the module code through the modify_module() function. ansible_delegated_vars.rz.ps1zansible.windows)zansible.builtinzansible.legacyr)statfilergpingz.win_ async_status)win_statwin_filewin_copyslurp_unquote)srcdestr)collection_listz@The module {0} was redirected to {1}, which could not be loaded.z6The module %s was not found in configured module pathsTr become_method become_user) playcontext become_passbecome_password become_flags)rrDEFAULT_MODULE_COMPRESSION variables_remote_is_localF)r\module_compression async_timeout environmentremote_is_local)rNinterpreter_namediscovery_moder\zdiscovered_interpreter_%s ansible_factsN),r3 delegate_togetsplitlenrVrr4!module_implementation_preferencesrNhasattrrWrr8 module_loaderfind_plugin_with_context collectionsresolved redirect_listrformatplugin_resolved_pathr'_compute_environment_stringrnameryr5r r7Cconfigget_config_valuerLboolgetattrrrrrrr;delegate_factsr:)rA module_name module_argsr\use_varssplit_module_namecollection_nameleaf_module_namemod_typewin_collectionrewrite_collection_nameskeyr]target_module_name module_pathfinal_environment become_kwargsdummy module_data module_stylemodule_shebangidrediscovered_keys r._configure_modulezActionBase._configure_modules :: ! ! }}%=>tzz?U?UVH H'--c2>ABS>TWX>X#((#4Qq#9:^`-k:((JJ( iH6!"3+T( $'GG'+CC HYHY]hHh1?AQ"RK%7OOgKKYdfqswtAtA?]V^_`_g_g_x_xzVDM`y`NZ^ZdZdZnZnXi\`ahimiyiy|NPUbV]W ?]O\?];lN" PHnk;GG35 P/@AU%)%:%:#'#6#6& B(0),"=t?T?T!T=A7ED4swtPtPI67 8N8NOP_`aop/ Ps1A4M.. Q7CQQc rt}|jj|jj}t|ts|g}|D]j}|t |dk(r|j j|}t|tstd|dt|d|j|lt |dkDr|j j|}t|tr!|j|j||jjjdi|S)zZ Builds the environment string to be used when executing the remote task. rz+environment must be a dictionary, received z ())r'r3rr%r*rr7templatertypericlearr4rW env_prefix)rAraw_environment_outr environmentsrtemp_environments r.rz&ActionBase._compute_environment_stringLs+ !F :: ! ! -::11LlD1 ,~ , ; &#k*:a*?#'==#9#9+#F !"2D9&_oquwGrH(IJJ"(()9: ;  !A % $ 6 67H I  )4 0  % % '  & &'8 91t&&11F4EFFr/ct|ddS)z[ Determines if a tmp path should be created before the action is executed. TRANSFERS_FILESF)rrAs r.rYz ActionBase._early_needs_tmp_pathms t.66r/c |jjd}|jj}|jjr |jjjnddk7}|jj|xs||dk(tj | xs||g}t|S#tttf$r|j j }YwxYw)zE Determines if we are required and can do pipelining pipeliningrsunew)r4ryr{rz ValueErrorr5ralways_pipeline_modulesrrhas_pipeliningrDEFAULT_KEEP_REMOTE_FILESall)rAr wrap_async is_enabledalways_pipelinebecome_exception conditionss r._is_pipelining_enabledz!ActionBase._is_pipelining_enabledts  7))44\BJ **BB=AA>=A>c|jjsy|j}|j}|j d}t |xr|||gzvS)z} The user is not the same as the connection user and is not part of the shell configured admin users Fr)r4rrr rr)rArr rs r._is_become_unprivilegedz"ActionBase._is_become_unprivilegeds`&&++- ++- ,,]; KRK{k]7R$RSSr/cFt|jddrtj}n$|j |j ddd}|j }|jjj}|jjj|||}|j|d}|dd k7r|dd k(rd }n[|dd k(r<|jjd vr$tjdkDrd|d|d}nd}nd|dvr|d}n d||dfz}d|vr|ddk7r |d|dzz}tjdkDrd|vr|ddk7r |d|dzz }t|d|_ |dj!j#d|zd}|jjj%|ddj'd} | dk(rt+d|d|d| |jj_| S#t($rd} YAwxYw) zE Create and return a temporary path on a remote box. rF remote_tmp~/.ansible/tmprr)basefilesystemrXrrzAuthentication failure.)sshz2SSH encountered an unknown error. The output was: stdoutstderrzSSH encountered an unknown error during the connection. We recommend you re-run the command using -vvvv, which will enable SSH debugging output to help diagnose the issuezNo space left on devicea5Failed to create temporary directory. In some cases, you may have been able to authenticate and did not have permissions on the target directory. Consider changing the remote tmp path in ansible.cfg to a path rooted in "/tmp", for more error information use -vvv. Failed command was: %s, exited with result %drz, stdout output: %sz, stderr output: %sTz%s=rr/z2failed to resolve remote temporary directory from z: `z` returned empty string)rr4rDEFAULT_LOCAL_TMP_remote_expand_userrrrW_generate_temp_dir_namemkdtempr transportr? verbosityr r9stripr join_path splitlinesrkrrX) rAr rXbecome_unprivilegedrrr]output stdout_partsrs r.rZzActionBase._make_tmp_paths{ 4##%7 ?((F--d.C.CLZj.C.kv{-|F"::<##**BBD%%--xH[dj-k00u0E $<1 d|q 2$)9)9)C)Cx)O$$q([abj[kmst|m}~FSF,vh/??)JNQRXY]R^L_`6!fX&6#&="86(;K"KK  1$V);x@PTW@W06(3CCC*62 2'+D $ !(+11399%(:JANL!!((22<3CSITTVWYZB 9u}@C DE E)+&  B s>A H H H cT|xr%|jxrtj xrd|vS)zLDetermine if temporary path should be deleted or kept by user request/configz-tmp-)r9rr)rAtmp_paths r._should_remove_tmp_pathz"ActionBase._should_remove_tmp_paths-pD44pQ=X=X9Xp]dhp]ppr/c |@|jjjr |jjj}|s|j|r|jjj |d}|j |d}|j dddk7r >''..55H D00:""))0040HC88u8MJ~~dA&!+#->>$#7Rn9o!qr26  ''.;r/c>|jj|||S)a Copy a file from the controller to a remote path :arg local_path: Path on controller to transfer :arg remote_path: Path on the remote system to transfer into .. warning:: * When you use this function you likely want to use use fixup_perms2() on the remote_path to make sure that the remote file is readable when the user becomes a non-privileged user. * If you use fixup_perms2() on the file and copy or move the file into place, you will need to then remove filesystem acls on the file once it has been copied into place by the module. See how the copy module implements this for help. )r4put_file)rA local_path remote_paths r._transfer_filezActionBase._transfer_files  !!*k:r/ct|tr t|}tjt j \}}tj|d} t|d}|j||j|j |j!||tj"||S#t$r}tdt|zd}~wwxYw#tj"|wxYw)zJ Copies the module data out to the temporary module path. )dirwbsurrogate_or_strictr$z>failure writing module data to temporary file for transfer: %sN)r%r'rtempfilemkstemprrosfdopenrwrite Exceptionrrflushcloser4unlink)rAr3dataafdafileafoes r._transfer_datazActionBase._transfer_data/s dD !4=D%%!*=*=> UiiT" pD)>?D IIdO      { 3 IIe  p_bklmbnno o p IIe s$CC* C' C""C'*Dc ||j}t|jjddr|S|j sH|rD|j |d}|ddk7r*t dj|dt|d|S|jd }|r'd }d }d j|}d j|} n&d}d}dj|}dj|} |j|||}|ddk(r|S|rD|j |d}|ddk7r*t dj|dt|d|j||}|ddk(r|S||jvr t d |j |gt|zd}|ddk(r|S|j || }|ddk(r|Std} |j!d} | f|j#|| }|ddk(rL|j!drt$j'd| z|rd} nd} |j || }|ddk(r|S|j!drat$j'd| z|j |d|z}|ddk(r|St dj|dt|dt d|ddt|dd | d!#t$r } Yd} ~ Ed} ~ wwxYw)"a% We need the files we upload to be readable (and sometimes executable) by the user being sudo'd to but we want to limit other people's access (because the files could contain passwords or other private information. We achieve this in one of these ways: * If no sudo is performed or the remote_user is sudo'ing to themselves, we don't have to change permissions. * If the remote_user sudo's to a privileged user (for instance, root), we don't have to change permissions * If the remote_user sudo's to an unprivileged user then we attempt to grant the unprivileged user access via file system acls. * If granting file system acls fails we try to change the owner of the file with chown which only works in case the remote_user is privileged or the remote systems allows chown calls by unprivileged users (e.g. HP-UX) * If the above fails, we next try 'chmod +a' which is a macOS way of setting ACLs on files. * If the above fails, we check if ansible_common_remote_group is set. If it is, we attempt to chgrp the file to its value. This is useful if the remote_user has a group in common with the become_user. As the remote_user, we can chgrp the file to that group and allow the become_user to read it. * If (the chown fails AND ansible_common_remote_group is not set) OR (ansible_common_remote_group is set AND the chgrp (or following chmod) returned non-zero), we can set the file to be world readable so that the second unprivileged user can read the file. Since this could allow other users to get access to private information we only do this if ansible is configured with "allow_world_readable_tmpfiles" in the ansible.cfg. Also note that when ansible_common_remote_group is set this final fallback is very unlikely to ever be triggered, so long as chgrp was successful. But just because the chgrp was successful, does not mean Ansible can necessarily access the files (if, for example, the variable was set to a group that remote_user is in, and can chgrp to, but does not have in common with become_user). N _IS_WINDOWSFzu+rwxrrz=Failed to set permissions on remote files (rc: {0}, err: {1})rrrxzr-xz{0} allow read,executezA+user:{0}:rx:allowrXzr-Xz{0} allow readzA+user:{0}:r:allowzLFailed to set file mode or acl on remote temporary files (rc: {0}, err: {1})zFailed to change ownership of the temporary files Ansible (via chmod nor setfacl) needs to create despite connecting as a privileged user. Unprivileged become user would be unable to read the file.z+az2playbook_guide/playbooks_privilege_escalation.htmlcommon_remote_groupworld_readable_tempaBoth common_remote_group and allow_world_readable_tmpfiles are set. chgrp was successful, but there is no guarantee that Ansible will be able to read the files after this operation, particularly if common_remote_group was set to a group of which the unprivileged become user is not a member. In this situation, allow_world_readable_tmpfiles is a no-op. See this URL for more details: %s#risks-of-becoming-an-unprivileged-userzg+rwxzg+rwzUsing world-readable permissions for temporary files Ansible needs to create when becoming an unprivileged user. This may be insecure. For information on securing this, see %s#risks-of-becoming-an-unprivileged-userza+%sz;Failed to set file mode on remote files (rc: {0}, err: {1})zqFailed to set permissions on the temporary files Ansible needs to create when becoming an unprivileged user (rc: z, err: z0}). For information on working around this, see z'#risks-of-becoming-an-unprivileged-user)r rr4rWr _remote_chmodrrrr_remote_set_user_facl _remote_chownrr*r r r _remote_chgrpr?rJ)rA remote_pathsr executeresr chmod_mode setfacl_modechmod_acl_modeposix_acl_moderG become_linkgroup group_modes r. _fixup_perms2zActionBase._fixup_perms2IsL  //1K 4##**M5 A ++-((w?t9>&..4fI%c(m4/677  ,,];  J L5<<[IN399+FNJ!L-44[AN188EN((    t9>  $$\7;C4yA~"**0&D !#h-0+233  {; t9>  $//1 1  $$$n%5\8J%JDQC4yA~##  ~> t9> ,,`a %%&;<  $$\59C4yA~(()>?OO BEP P Q!(J!'J((zBt9>''  !6 7 OO:=HH I $$\6J3FGC4yA~##&&,fIc(m,'./ /  D #h-(+  78 8e,   s K** K>9K>cx|jjj||}|j||}|S)z. Issue a remote chmod command r)r4rWchmodr)rApathsmoderrrUs r.rOzActionBase._remote_chmod$<%%++E48--cH-E r/cx|jjj||}|j||}|S)z. Issue a remote chown command r)r4rWchownr)rAr`userrrrUs r.rQzActionBase._remote_chown,rbr/cx|jjj||}|j||}|S)z. Issue a remote chgrp command r)r4rWchgrpr)rAr`r[rrrUs r.rRzActionBase._remote_chgrp4s<%%++E59--cH-E r/cz|jjj|||}|j||}|S)z0 Issue a remote call to setfacl r)r4rW set_user_faclr)rAr`rerarrrUs r.rPz ActionBase._remote_set_user_facl<s>%%33E4F--cH-E r/c|tjd~t|||dd}|jd||dd}|j drH|j d }|s|j d }|s|j d }t d |d ||ddsd|dd<d|dvr d|dd<|dSt |ddtst dt|ddz|dS)z3 Get information from remote file. z_execute_remote_stat no longer honors the tmp parameter. Action plugins should set self._connection._shell.tmpdir to share the tmpdirFsha1)rfollow get_checksumget_sizechecksum_algorithmzansible.legacy.statT)rrr\rignore_unknown_optsfailed module_stderr module_stdoutrlz*Failed to get information on remote file (z): rr1checksumrzDInvalid checksum returned by stat: expected a string type but got %s) r?rJr'_execute_modulerrr%rr) rArall_varsrlr[rurmystatrls r._execute_remote_statzActionBase._execute_remote_statDsH ? OO* + !%  %%2GU`lt16D&R ::h **_-Cjj1jj'VZ\_`a af~h'),F6N: & VF^ +)+F6N: &f~F6N:6 Eehlmstzm{}GnHiI IJ Jf~r/c|jds|S|jtjjd}|d}|dk(r`|j d}t |jddrn7|r|jjr|rd|z}nd|jxsdz}|jjj|}|j|d } |d jjd } | s]|jjj!}|j|d j#d dj} | r| } n>|} n;t%|dkDr+|jjj&| g|dd } n| } d tjj)| jdvrt+d|j-iz| S#t$rd } YwxYw)zK takes a remote path and performs tilde/$HOME expansion on the remote host ~rrrrFz~%srrrrNz..rzE'%s' returned an invalid relative home directory path containing '..') startswithrr<rseprrr4rr rW expand_userrr#r%rkpwdrrr$dirnamerr ) rArrpathsep split_path expand_pathrrrCinitial_fragmentrexpandeds r.rzActionBase._remote_expand_usernss#KZZ Q/  m # 00?Kt'');UCd..55+#k1 $t'<'<'>'D"E %%11+>..sU.C $#H~335@@B2F  ""))--/C11#1FJJ8UWX^^`C _q 8t''..889I[JWXWYN[H'H 277??8,2237 7fimi~i~@BjC CD D+ $#  $s!$G.. G<;G<cr|jjdrtjdd|}|S)zC Removes the BECOME-SUCCESS message from the data. zBECOME-SUCCESS-z"^((\r)?\n)?BECOME-SUCCESS.*(\r)?\nr)r#r|resub)rArCs r._strip_success_messagez!ActionBase._strip_success_messages1 ::< " "#4 566?TJD r/c|jjr|js tdd|d<nd|d<tj j d|}|jjxs||d<tj|d<|jj|d <tj|d <t|d <||d <|jd tj|d<tj|d<tj |d<t#|j$d|d<|ds|jd|d<|j&j(|d<tj*|d<|j-rd|d<n#|j$j.j0|d<|j3dd|d<||d<tj j d||d<y)Nz.check mode is not supported for this operationT_ansible_check_modeFDEFAULT_NO_TARGET_SYSLOGr_ansible_no_log_ansible_debug _ansible_diff_ansible_verbosity_ansible_version_ansible_module_nameansible_syslog_facility_ansible_syslog_facility_ansible_selinux_special_fs!_ansible_string_conversion_action socket_path_ansible_socketansible_socket_ansible_shell_executable_ansible_keep_remote_files_ansible_tmpdirrrr_ansible_remote_tmp_ansible_ignore_unknown_optsTARGET_LOG_INFO_ansible_target_log_info)r3rOrPrrrrno_log DEFAULT_DEBUGdiffr?r"rrDEFAULT_SYSLOG_FACILITYDEFAULT_SELINUX_SPECIAL_FSSTRING_CONVERSION_ACTIONrr4r5 executablerrrWrXr)rArrr\rpno_target_syslogs r._update_module_argszActionBase._update_module_argss :: ,,"#STT15K- .16K- .88445O[d4e)-):):)N>N %&)* $%(,zz O$-4,=,= ()+6 &'/: *+3<--@Y[\[t[t2u ./675Q5Q 12<=;U;U 78*11A1A=)Q %&,--6]];K-LK) *483E3E3P3P /0564O4O 01  ' ' )-1K) *-1-=-=-D-D-K-KK) *.2-B-B|tj/d|jA}| |jj| =g}| r|r| |g}|r|j!|d}d}d}|ro|jjBsX|j#dt| \}} }}|jjj+|}|jjj-| |}|j3|||j!||jj} dtEjFd}!| jIddjK}"|"||!| |g}#|r|#jMd||r|#j!|n|#j!d|jO| s|#j!ddjQd |#D}nb|j | r|}tj%d!n|}|jjjS|| ||"jK}|r2|D$cgc]}$|$s|$ }}$|jU||jW|jY|||#}%|j[|%}&|&j]d$d%rd%|_/d&|&vrFta|&d&tbrta|&d&tdr |&d&|&d'<|&d&=tjd(tg|&|r d|jj_d|&d)<d*|&vr-d+|&vr)|&jid*dxsd}'|'jk|&d+<d,|&vr-d-|&vr)|&jid,dxsd}'|'jk|&d-<|jlr2|&jid.i|&d.<|jn|&d.|jl<|jpr4|&jid/g|&d/<|&d/js|jp|jtr4|&jid0g|&d0<|&d0js|jttw|&}&tj/d1|d2|d3|&Scc}$w)4zE Transfer and run a module along with its arguments. Nz_execute_module no longer honors the tmp parameter. Action plugins should set self._connection._shell.tmpdir to share the tmpdirz_execute_module no longer honors the delete_remote_tmp parameter. Action plugins should check self._connection._shell.tmpdir to see if a tmpdir existed before they were called to determine if they are responsible for removing it.r)rp async_dirz~/.ansible_asyncrANSIBLE_ASYNC_DIR)rrr\zUsing module file %sbinaryz'module (%s) is missing interpreter linez AnsiballZ_%s)oldnon_native_want_jsonrrSz transferring module to remote %srr= )rrz"done transferring module to remoteTzansible.legacy.async_wrapperjlJ)z#!r_z -preserve_tmpc32K|]}t|ywN)r).0xs r. z-ActionBase._execute_module..ps9!71:9szPipelining is enabled.)arg_path)rin_data_ansible_suppress_tmpdir_deleteFresultsansible_module_resultszSFound internal 'results' key in module return, renamed to 'ansible_module_results'.changedr stdout_linesr stderr_linesrwarnings deprecationszdone with _execute_module (z, r)get_remote_filenamer$debugr4rHr(shlexquoterjsondumpsrrsecrets randbelowreplacer#insertr+rVbuild_module_commandr]r r_parse_returned_datapopr9r%rrrrr%r:r;r=extendr<r)(rArrr[r\ persist_filesdelete_remote_tmprrprXremove_async_dirrrshebangrrremote_module_pathremote_module_filenameargs_file_path args_datakvenvironment_string remote_filesrrrasync_module_styleasync_module_dataasync_module_pathasync_module_remote_filenameremote_async_module_path async_limit async_jid interpreter async_cmdrrUrCtxts( r.rvzActionBase._execute_modulesh ? OO] ^   ( OOH I !!((//**5*=&.    !%%,,33F  I  **++K  **//K   k9Zm n ----kCU-VI"4::#9#9:  JJ " " ) )+> *J K=A\rKr!s  D D!--44>>vvNN !6 MM!CC##NDJJ{4KL MM> ?!==?  ' &&'78 ("$67L     / d..FFRVRhRh:ZcSiSe O *;=N+/+;+;+B+B+V+VWh+i ('+'7'7'>'>'H'HQm'n $    8:K L    8 9**..KG--l;<=I"//$399;K$&> ;XjkI!  $67  0  %//7  1((9y99C**<8% 45(""))>>?QSZ\_jx>yBC '39!qA9L9   |T-B-B-D E--cHg-V((- 885u =',D $  ji(&KzZ^_hZikwOx-1)_D) *Y OOq r T" .2D   # # *#DO t d :((8T*1cC#&>>#3D t d :((8T*1cC#&>>#3D   + +xx(0(*_%FJFbFbD !$"B"B C  # #xx #+#%Z   # #D$<$< =  / /xx'/')^$  ' '(L(L M~ k;WX :s ,^4^c t|jddd\}}|D]}tj|t j |}t jr|jdds t|d|d<|S#t$r<td|jjxs|jjdwxYw#t$r}tdd }|jdd|d <d |vr$|d |d <|d j!dr|d |d<d|vr|d j!dr|d |d<d||d<|j"st%j&|j"j)d}t%j*d|z}|j-|d s|j-|d rd|d<|dxxdz cc<d|vr|d|d<Yd}~|Sd}~wwxYw)NrrT) objects_only_ansible_trusted_utf8zModule "z/" returned non UTF-8 data in the JSON response._ansible_parsedF)rqrrsrrr Traceback exceptionzMODULE FAILURE: rlz!#z+%s: (?:No such file or directory|not found)zQThe module failed to execute correctly, you probably need to set the interpreter.z& See stdout/stderr for the exact errorr)rrr?rJrloadsrMODULE_STRICT_UTF8_RESPONSErr)UnicodeEncodeErrorrr3resolved_actionrNr'r|r>rescapelstripcompilesearch) rArUfiltered_outputrwrCrGrmatchs r.rzActionBase._parse_returned_datas, '(>swwxQT?Udh(i %OX #" #::o.D,,TXX>UW[5\'-'+D" #: G*$"4::#=#=#RARAR"ST-- 'tU;D$'GGHc$:D !3(+H _%x=++L9(+H D%$&4+@+K+KL+Y$($9[!-QC0DK%%1 ii(>(>(E(Ed(KL  #PS^#^_<<_ 56%,,tOG\:]"uDK KD DKs{ YT  9 's2A3C6 BCAC  C G/D G**G/ctjd|rAtjd|z|jjj d|z|}|r||jj_|j }|jd}|r|jjrt|jjdk7rqtjs||k7s t||fsOtjd|jjj||jj}|jjr[|<|j j }|jjj |d}|r|dzt#j$|z}tjd ||jjd k(r4t'|j(j+d |j_|jj/||| \} } } t1| t2rt5| | } n=t1| t6s+t5dj9| j;| } n| } t1| t2rt5| | } n=t1| t6s+t5dj9| j;| } n| } | d} |j=| } tjd| | | fzt?| | | jA| | jAS)a7 This is the function which executes the low level shell command, which may be commands to create/remove directories for temporary files, or to run the module code or python directly when pipelining. :kwarg encoding_errors: If the value returned by the command isn't utf-8 then we have to figure out how to transform it to unicode. If the value is just going to be displayed to the user (or discarded) then the default of 'replace' is fine. If the data is used as a key or is going to be written back out to a file verbatim, then this won't work. May have to use some sort of replacement strategy (python3 could use surrogateescape) :kwarg chdir: cd into this directory before executing the command. z&_low_level_execute_command(): startingzA_low_level_execute_command(): changing cwd to %s for this commandzcd %sr network_cliz;_low_level_execute_command(): using become for this commandzsleep 0z -c z)_low_level_execute_command(): executing: localr8r9)rrr/rz>_low_level_execute_command() done: rc=%d, stdout=%s, stderr=%s)rrrrr)!r?rr4rWappend_commandrr rrrr!rBECOME_ALLOW_SAME_USERanybuild_become_commandallow_executabler5rrrr6 get_basedircwd exec_commandr%rrrrV readlinesrr'r%)rArrrrencoding_errorschdirruserbuserrrrouterrs r.rz%ActionBase._low_level_execute_commands  >?  MM]`ee f""))885#NC 1;D   # # .%%'&&}5 ))00"4#3#3#=#=>-O))eunCPUDW MMW X""))>>sDDTDTD[D[\C    , ,!!//:: &&--<