Vh[JddlmZmZmZeZdZddlZddlZddl Z ddl Z ddl m Z m Z mZddlmZmZmZddlmZddlmZddlmZdd lmZeZ dd lmZdd lm Z m!Z!dd l"m#Z#d Z$dZ&e jNdZ(Gdde)Z*iZ+iZ,GddeZ-y#e%$rdZ$Y8wxYw))absolute_importdivisionprint_functionaW author: - Ansible Networking Team (@ansible-network) name: libssh short_description: Run tasks using libssh for ssh connection description: - Use the ansible-pylibssh python bindings to connect to targets - The python bindings use libssh C library (https://www.libssh.org/) to connect to targets - This plugin borrows a lot of settings from the ssh plugin as they both cover the same protocol. version_added: 1.1.0 options: remote_addr: description: - Address of the remote target type: string default: inventory_hostname vars: - name: inventory_hostname - name: ansible_host - name: ansible_ssh_host - name: ansible_libssh_host remote_user: description: - User to login/authenticate as - Can be set from the CLI via the C(--user) or C(-u) options. type: string vars: - name: ansible_user - name: ansible_ssh_user - name: ansible_libssh_user env: - name: ANSIBLE_REMOTE_USER - name: ANSIBLE_LIBSSH_REMOTE_USER ini: - section: defaults key: remote_user - section: libssh_connection key: remote_user password: description: - Secret used to either login the ssh server or as a passphrase for ssh keys that require it - Can be set from the CLI via the C(--ask-pass) option. type: string vars: - name: ansible_password - name: ansible_ssh_pass - name: ansible_ssh_password - name: ansible_libssh_pass - name: ansible_libssh_password password_prompt: description: - Text to match when using keyboard-interactive authentication to determine if the prompt is for the password. - Requires ansible-pylibssh version >= 1.0.0 type: string vars: - name: ansible_libssh_password_prompt version_added: 3.1.0 host_key_auto_add: description: 'TODO: write it' env: [{name: ANSIBLE_LIBSSH_HOST_KEY_AUTO_ADD}] ini: - {key: host_key_auto_add, section: libssh_connection} type: boolean look_for_keys: default: True description: 'TODO: write it' env: [{name: ANSIBLE_LIBSSH_LOOK_FOR_KEYS}] ini: - {key: look_for_keys, section: libssh_connection} type: boolean proxy_command: default: '' description: - Proxy information for running the connection via a jumphost. - Also this plugin will scan 'ssh_args', 'ssh_extra_args' and 'ssh_common_args' from the 'ssh' plugin settings for proxy information if set. type: string env: - name: ANSIBLE_LIBSSH_PROXY_COMMAND ini: - {key: proxy_command, section: libssh_connection} vars: - name: ansible_paramiko_proxy_command - name: ansible_libssh_proxy_command pty: default: True description: 'TODO: write it' env: - name: ANSIBLE_LIBSSH_PTY ini: - section: libssh_connection key: pty type: boolean publickey_accepted_algorithms: default: '' description: - List of algorithms to forward to SSH_OPTIONS_PUBLICKEY_ACCEPTED_TYPES. type: string env: - name: ANSIBLE_LIBSSH_PUBLICKEY_ALGORITHMS ini: - {key: publickey_algorithms, section: libssh_connection} vars: - name: ansible_libssh_publickey_algorithms hostkeys: default: '' description: Set the preferred server host key types as a comma-separated list (e.g., ssh-rsa,ssh-dss,ecdh-sha2-nistp256). type: string env: - name: ANSIBLE_LIBSSH_HOSTKEYS ini: - {key: hostkeys, section: libssh_connection} vars: - name: ansible_libssh_hostkeys host_key_checking: description: 'Set this to "False" if you want to avoid host key checking by the underlying tools Ansible uses to connect to the host' type: boolean default: True env: - name: ANSIBLE_HOST_KEY_CHECKING - name: ANSIBLE_SSH_HOST_KEY_CHECKING - name: ANSIBLE_LIBSSH_HOST_KEY_CHECKING ini: - section: defaults key: host_key_checking - section: libssh_connection key: host_key_checking vars: - name: ansible_host_key_checking - name: ansible_ssh_host_key_checking - name: ansible_libssh_host_key_checking use_persistent_connections: description: 'Toggles the use of persistence for connections' type: boolean default: False env: - name: ANSIBLE_USE_PERSISTENT_CONNECTIONS ini: - section: defaults key: use_persistent_connections ssh_args: version_added: 3.2.0 description: - Arguments to pass to all ssh CLI tools. - ProxyCommand is the only supported argument. - This option is deprecated in favor of I(proxy_command) and will be removed in a release after 2026-01-01. type: string ini: - section: 'ssh_connection' key: 'ssh_args' env: - name: ANSIBLE_SSH_ARGS vars: - name: ansible_ssh_args cli: - name: ssh_args ssh_common_args: version_added: 3.2.0 description: - Common extra arguments for all ssh CLI tools. - ProxyCommand is the only supported argument. - This option is deprecated in favor of I(proxy_command) and will be removed in a release after 2026-01-01. type: string ini: - section: 'ssh_connection' key: 'ssh_common_args' env: - name: ANSIBLE_SSH_COMMON_ARGS vars: - name: ansible_ssh_common_args cli: - name: ssh_common_args ssh_extra_args: version_added: 3.2.0 description: - Extra arguments exclusive to the 'ssh' CLI tool. - ProxyCommand is the only supported argument. - This option is deprecated in favor of I(proxy_command) and will be removed in a release after 2026-01-01. type: string vars: - name: ansible_ssh_extra_args env: - name: ANSIBLE_SSH_EXTRA_ARGS ini: - key: ssh_extra_args section: ssh_connection cli: - name: ssh_extra_args config_file: version_added: 5.1.0 description: Alternate SSH config file location type: path env: - name: ANSIBLE_LIBSSH_CONFIG_FILE ini: - section: libssh_connection key: config_file vars: - name: ansible_libssh_config_file # TODO: #timeout=self._play_context.timeout, N)AnsibleConnectionFailure AnsibleErrorAnsibleFileNotFound)to_bytes to_nativeto_text)missing_required_lib)ConnectionBase)Display)Version) __version__)LibsshSCPExceptionLibsshSessionException)SessionTFz libssh: The authenticity of host '%s' can't be established due to '%s'. The %s key fingerprint is %s. Are you sure you want to continue connecting (yes/no)? z(\w+)(?:\s*=\s*|\s+)(.+)ceZdZdZdZdZy) MyAddPolicya  Based on AutoAddPolicy in paramiko so we can determine when keys are added and also prompt for input. Policy for automatically adding the hostname and new host key to the local L{HostKeys} object, and saving it. This is used by L{SSHClient}. c4||_|j|_yN) connection_options)selfrs o/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/ansible/netcommon/plugins/connection/libssh.py__init__zMyAddPolicy.__init__s$"++ c t|jd|jd fr|jjds|jjr)t t jddd||||fzttjt ||||fzdd }|jj|d vr t d |j|y) Nhost_key_checkinghost_key_auto_adduse_persistent_connections rF)privatesurrogate_or_stricterrors)yesyz host connection rejected by user) allrr get_optionforce_persistencerAUTHENTICITY_MSGrsplitr display prompt_untilconnection_unlockhostkey_auto_add)rsessionhostnameusernamekey_type fingerprintmessageinps rmissing_host_keyzMyAddPolicy.missing_host_key s  12MM"566  **+GH??44#$++D!4Q78WhXc:dd$$$'8['QQ[`%- C OO - - /**"#EFF  *rN)__name__ __module__ __qualname____doc__rr;rrrrs,+rrcveZdZdZdZdZdZdZdZddZ dZ dfd Z dfd Z d Z dfd Zd ZdZxZS) Connectionz#SSH based connections with Paramikozansible.netcommon.libsshNcb|jjd|jjdSN__) _play_context remote_addr remote_userrs r _cache_keyzConnection._cache_key6s*    * *    * *  rc|j}|tvrt||_|S|jx|_t|<|Sr)rJSSH_CONNECTION_CACHEssh_connect_uncachedr cache_keys r_connectzConnection._connect<sLOO% , ,+I6DH :>9O9O9Q QDH+I6 rc||_yr) _log_channel)rnames r_set_log_channelzConnection._set_log_channelDs  rcd}|jdxsd|jdxsd|jdxsdg}t|rtjd|j dj |}t |D]o\}}|jdk(r ||dz}nJtj|}|r3|jdjdk(r|jd }|son|xs|jd }|ra|jj||jjd }|jD] \} } |j| t!| }"|S) Nssh_extra_argsr*ssh_common_argsssh_argszThe ssh_*_args options are deprecated and will be removed in a release after 2026-01-01. Please use the proxy_command option instead. proxycommandr# proxy_command)z%hz%pz%r)r,anyr0warning_split_ssh_argsjoin enumeratelowerSETTINGS_REGEXmatchgrouprFrGrHitemsreplacestr) rportr]rYargsiargre replacersfindrhs r_get_proxy_commandzConnection._get_proxy_commandGsj  OO, - 3 OO- . 4" OOJ ' -2  x= OOX ''(:;D#D/ 399;.0$(QKM+005E ;;q>//1^C,1KKNM  &I)I ((44((44I "+!2 J g - 5 5dCL I  Jrc tsttdtj dt z|j ji}|jd}|jd}|j jxsd}tj d|d|d ||t|_ tjd kDr)|jjtjt j"j%d |_|j)|} d }|j j*rbt-t j"j%|j j*5}|j/}t1|d }d d d |r||d<|jdr|jd|d<|jdr$t3t dkrtdt z|jdr|jd|d<|jdr|jd|d<|jj5t7||jj8d|j;||jd|jd|jd|jd||j j<|d |tj dtG|jz|jS#1swYxYw#t>$r} dtA| z} tC| d } ~ wtD$r} tCtA| d } ~ wwxYw)zactivates the connection objectzansible-pylibsshzUSING PYLIBSSH VERSION %shostrHrGz&ESTABLISH LIBSSH CONNECTION FOR USER: z on PORT  TO z~/.ssh/known_hostsNr%r&r[ config_filepassword_promptz1.0.0zConfiguring password prompt is not supported in ansible-pylibssh version %s. Please upgrade to ansible-pylibssh 1.0.0 or newer.publickey_accepted_algorithmshostkeys look_for_keysrpassword) rsuserr{rr|rx private_keytimeoutrjzssh connection failed: zssh connection is OK: r@)$ HAS_PYLIBSSHrr r0vvvPYLIBSSH_VERSIONrFrGr,rjrrM verbosity set_log_levelloggingINFOospath expanduserkeyfilerpprivate_key_fileopenreadr rset_missing_host_key_policyrconnectrcrrr r Exceptionri) rssh_connect_kwargsrHrGrjr]r~fp b_contentemsgs rrNzConnection._connect_uncachedps 34FGH H '*: :##//   oom4 oom4 !!&&," D+ /  9   q HH " "7<< 0ww))*>? //5 - 7K!!22"'',,T-?-?-P-PQRTVX " I"*9=R"SKT5B">2}-48OOM4R"=101w?O7PSZ7Z"IK[\ >?FJoo3G"#BCz*151L":. HH 0 0T1B C DHH    &&( "ooo>"&//2E"F4 $0A B'**22 % $  ,s488}<=xx[TTL& 0+gaj8C*3/ / 7*71:6 6 7s>,AL=L0EL=0L:5L== NM N+M??Nctt| ||||r tdd} |jj |_|jdr|r|j jtjd|z|jj t#|d }d}d } d } d } d } d } |j$r|j$j'rd }d }|j j)||s|stj+d|j j-|jj.|j j1|}tj+d|z|sCd| vr>t|j$jd|j}td|zn_| |z } | j3dD]@}|j$j5|rd}n!|j$j7|s>d}n|s|s|rh|j$rQ|j$jd|j}|j j)t#|d dzn} n|j jA}|| | fS#t$r0}t|}d}|r|d|zz }tt|d}~wwxYw#t8j.$rtd| zwxYw)z run a command on the remote host)in_datasudoablezHInternal Error: this module does not support optimized module pipeliningizFailed to open sessionz: %sNptyzEXEC %srrr%r&rFz&Waiting for Privilege Escalation input)rz chunk is: %ss unknown user become_user) playcontextzuser %s does not existT become_pass z,A password is required but none was suppliedz0ssh timed out waiting for privilege escalation. )!superrB exec_commandrrM new_channelchanrr rr r, request_shellr0rrFrGr become expect_promptsendalldebugpollrrecv splitlines check_successcheck_password_promptsocket returncodestdoutstderrget_channel_exit_status)rcmdrrbufsizertext_erresult no_prompt_out no_prompt_err become_outputouterr passprompt become_sucesschunk n_become_userlinerrc __class__s rrzConnection.exec_commands0 j$,S'H,U Z  ;,,.DI ??5 !h II # # % IO$*<*<*H*H Is#89   2 d{{t{{88:" %  !!#&(JMM"JKIINN4+=+=+E+ENF IINN73EMM.5"89 *m;,5 $ 6 6$1040B0B!7!"-M #//G-/W"XX!!U*M!. 8 8 >";;44T:,0M!;;<: :  ;R~~ dRUbbc c ds1Lr? transportrSrJrQrUrprNrrrrrr __classcell__)rs@rrBrB0sP-*IL !'RN``D![F ![F rrB). __future__rrrtype __metaclass__ DOCUMENTATIONrrreransible.errorsrrransible.module_utils._textr r r ansible.module_utils.basicr ansible.plugins.connectionr ansible.utils.displayrBansible_collections.ansible.netcommon.plugins.plugin_utils.versionrr0 pylibsshextrrpylibsshext.errorsrrpylibsshext.sessionrr ImportErrorr.compilerdobjectrrLrrBr@rrrs A@ L Z VVCC;5)V );M+L 78*+&*+bW W GLsBB"!B"