VhP6ddlmZmZmZeZdZdZdZddl m Z ddl Z ddl Z ddl Z dadZe j d Zdd Zd Zdd Zd ZddZdZedk(reyy))absolute_importdivisionprint_functiona module: dnf_versionlock version_added: '4.0.0' short_description: Locks package versions in C(dnf) based systems description: - Locks package versions using the C(versionlock) plugin in C(dnf) based systems. This plugin takes a set of name and versions for packages and excludes all other versions of those packages. This allows you to for example protect packages from being updated by newer versions. The state of the plugin that reflects locking of packages is the C(locklist). extends_documentation_fragment: - community.general.attributes attributes: check_mode: support: partial details: - The logics of the C(versionlock) plugin for corner cases could be confusing, so please take in account that this module will do its best to give a C(check_mode) prediction on what is going to happen. In case of doubt, check the documentation of the plugin. - Sometimes the module could predict changes in C(check_mode) that will not be such because C(versionlock) concludes that there is already a entry in C(locklist) that already matches. diff_mode: support: none options: name: description: - Package name spec to add or exclude to or delete from the C(locklist) using the format expected by the C(dnf repoquery) command. - This parameter is mutually exclusive with O(state=clean). type: list required: false elements: str default: [] raw: description: - Do not resolve package name specs to NEVRAs to find specific version to lock to. Instead the package name specs are used as they are. This enables locking to not yet available versions of the package. type: bool default: false state: description: - Whether to add (V(present) or V(excluded)) to or remove (V(absent) or V(clean)) from the C(locklist). - V(present) will add a package name spec to the C(locklist). If there is a installed package that matches, then only that version will be added. Otherwise, all available package versions will be added. - V(excluded) will add a package name spec as excluded to the C(locklist). It means that packages represented by the package name spec will be excluded from transaction operations. All available package versions will be added. - V(absent) will delete entries in the C(locklist) that match the package name spec. - V(clean) will delete all entries in the C(locklist). This option is mutually exclusive with O(name). choices: ['absent', 'clean', 'excluded', 'present'] type: str default: present notes: - In an ideal world, the C(versionlock) plugin would have a dry-run option to know for sure what is going to happen. So far we have to work with a best guess as close as possible to the behaviour inferred from its code. - For most of cases where you want to lock and unlock specific versions of a package, this works fairly well. - Does not work with C(dnf5). requirements: - dnf - dnf-plugin-versionlock author: - Roberto Moreda (@moreda) a - name: Prevent installed nginx from being updated community.general.dnf_versionlock: name: nginx state: present - name: Prevent multiple packages from being updated community.general.dnf_versionlock: name: - nginx - haproxy state: present - name: Remove lock from nginx to be updated again community.general.dnf_versionlock: package: nginx state: absent - name: Exclude bind 32:9.11 from installs or updates community.general.dnf_versionlock: package: bind-32:9.11* state: excluded - name: Keep bash package in major version 4 community.general.dnf_versionlock: name: bash-0:4.* raw: true state: present - name: Delete all entries in the locklist of versionlock community.general.dnf_versionlock: state: clean a locklist_pre: description: Locklist before module execution. returned: success type: list elements: str sample: ['bash-0:4.4.20-1.el8_4.*', '!bind-32:9.11.26-4.el8_4.*'] locklist_post: description: Locklist after module execution. returned: success and (not check mode or state is clean) type: list elements: str sample: ['bash-0:4.4.20-1.el8_4.*'] specs_toadd: description: Package name specs meant to be added by versionlock. returned: success type: list elements: str sample: ['bash'] specs_todelete: description: Package name specs meant to be deleted by versionlock. returned: success type: list elements: str sample: ['bind'] ) AnsibleModuleNz /usr/bin/dnfz!/etc/dnf/plugins/versionlock.confzK^(?P.+)-(?P\d+):(?P.+)-(?P.+)\.(?P.+)$c|sgn|}|rdgng}|rSg}|D]9}|jtdd|g|z|gzd\}}} |j|;dj|}|S|jtdd|gd\}}} |S)Nz--raw-q versionlockTcheck_rc ) run_commandDNF_BINappendjoin) modulecommandpatternsraw raw_parameteroutsprcouterrs u/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/dnf_versionlock.pydo_versionlockrs!rxH!$WI"M A!--$ w7-G1#M.LBS KK    iio J)) dM7 3d*D C Jc|jd}||k(rytj|}|syd|dz|dd|d|dd|d |dd|d d|d |dd|d d |d |dd|d d|d d|d|dd|d d |d d|d |d d |dd|d d|d d|d |dd|d d |d d|d d|d f D]}tj||syy) N!TFz%sname.arch-versionreleaseepoch:)lstripNEVRA_REmatchfnmatch)entrypatternmr s rr*r*s2 LL E uA  qyV9ai(V9a l+i9q|<i7Qy\:6AiL!I,& J6AgJ) a lKgJ& 1Y<9fI 'fIqz1Y<9fI '  ??4 ) rcri}|jtddg|rdgngz|zd\}}}|jD]x}tj |}|s|j d|z||||dd |d d |d } |j |d t||d j| z|S)Nr repoqueryz --installedTr zfailed to parse nevra for %s)msgrrrr&r'r$r#r%r ) r rsplitr)r* fail_json setdefaultsetadd) rronly_installed packages_available_map_name_evrsrrrrr.evrs r get_packagesr:s')$%% $ $*- 4  &LBS YY[ = NN1    2Q63C  )gJiLiL* )33AfIsuE(6377< = ,+rctfD]K}tjj|s#tjj |dk(rdcSdcSy)Nz /usr/bin/dnf5dnf5dnf)rospathexistsrealpath)bin_paths rget_package_mgrrCsLJV 77>>( #WW--h7?J6 UPU UV rcN|dk(rt|djSg}|dk(rd}d}t|djD]}|jdr|jdred}|jdd \}}|j }t ||g }|d ||j d }|r||vr|j||jd s|jdd \}} | j } |s|r||vr|j|d}|S)Nr=listr<F)# z Package name:Tr')rr#.*r9=)rr2 splitlines startswithstripr:popr) r package_mgr package_list stanza_start package_namelinedummyr pkg_namepackage_versions rget_package_listrWs)eff-3355Lf  "662==? )Dz*/# "jja0 tzz|'$@,0(4.2D2D2FG L $D '' 5u%)-C);&"1"7"7"9# L(H$++L9#(L# )$ rc :tttddgtddtddgd  d }|jd }|jd}|jd}d}d}|jdd at }|dk(r5t jjts|jd|dk(r|r|jd|dk7r|s|jd|zt||}g}g} |dvr|r(|D]"} |dk(r| nd| z|vs|j| $ndt||} t||d } | j| | D]4} | | D]*}| d|d}|dk(r|nd|z|vs|j|,6|r|js|dk(rdnd}t!|||| }n|d!k(rj|r|D]} | |vs| j| n,|D]'} |D] }t#|| s| j| ")| r=|js1t!|d"| | }n!|dk(r|} | r|js t!|d#}|s| rd }||||| d$}|jst|||d%<n |dk(rg|d%<|j$d&i|y)'NrEstr)typeelementsdefaultboolF)rZr\present)r^absentexcludedclean)rZr\choices)r rstateT) argument_specsupports_check_moder rrcr=zplugin versionlock is required)r1raz,clean state is incompatible with a name listz"name list is required for %s state)rO)r^r`r)r7r#rIz!%sr6exclude)rrr_deleteclear)changedr1 locklist_pre specs_toaddspecs_todelete locklist_post)rdictparams get_bin_pathrrCr>r?r@VERSIONLOCK_CONFr3rWrr:update check_moderr* exit_json)rrrrcrjr1rOrkrlrmrpackages_map_name_evrs packages_installed_map_name_evrsr r9locklist_entrycmderesponses rmainr}s 6E2>&%0E9IK !F}}V$H -- C MM' "EG C!!%.G!#KeBGGNN3C$D=> HKL AEIJ#F DLKN ''  *9,Q#'+,&&q) * &2& " 0<#0% , # ) )*J K. ;1$7;C26%: ; ; v00 I-%9C {LC (   - $"))!, -  1%1AQ{&--a01 1 &"3"3 >sDC ' % &"3"3 1Cn$"( H   $4V$U! G (*H_ %F x r__main__)NF)F)r=) __future__rrrrZ __metaclass__ DOCUMENTATIONEXAMPLESRETURNansible.module_utils.basicrr+r>rerrscompiler)rr*r:rCrWr}__name__rorrrsCB ; z D 65 6 2::8 9>2,2:r!j zFr