From 9a493ef3881ba1153a1894c6fb19a5a54da24183 Mon Sep 17 00:00:00 2001 From: Maykel Moya Date: Sun, 17 Feb 2013 03:29:52 +0100 Subject: [PATCH] Add support for running modules chrooted in a local dir Adds 'chroot' connection for executing modules chrooted to a local dir. Requires running ansible as root. chroot dirs should be specified in the inventory like any other host. You can do things like: $ sudo -E ansible -vvv -f 1 "./chroot1,./chroot2" -c chroot \ all -m setup $ sudo -E ansible-playbook -vvv -f 1 -i "./chroot1,./chroot2" \ -c chroot some-playbook.yml some-playbook.yml: --- - hosts: all tasks: - name: echo something shell: echo "Yaaay!" >/tmp/foobar.txt - name: install less apt: pkg=less state=latest --- .../runner/connection_plugins/chroot.py | 122 ++++++++++++++++++ 1 file changed, 122 insertions(+) create mode 100644 lib/ansible/runner/connection_plugins/chroot.py diff --git a/lib/ansible/runner/connection_plugins/chroot.py b/lib/ansible/runner/connection_plugins/chroot.py new file mode 100644 index 00000000000..bb898acbc75 --- /dev/null +++ b/lib/ansible/runner/connection_plugins/chroot.py @@ -0,0 +1,122 @@ +# (c) 2012, Michael DeHaan +# +# This file is part of Ansible +# +# Ansible is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# Ansible is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with Ansible. If not, see . + +import traceback +import os +import pipes +import shutil +import subprocess +import select +import fcntl +from ansible import errors +from ansible import utils +from ansible.callbacks import vvv + +class Connection(object): + ''' Local based connections ''' + + def __init__(self, runner, host, port, **kwargs): + self.chroot = host + + if os.geteuid() != 0: + raise errors.AnsibleError("chroot connection requires running as root") + + # we're running as root on the local system so do some + # trivial checks for ensuring 'host' is actually a chroot'able dir + if not os.path.isdir(self.chroot): + raise errors.AnsibleError("%s is not a directory" % self.chroot) + + chrootsh = os.path.join(self.chroot, 'bin/sh') + if not utils.is_executable(chrootsh): + raise errors.AnsibleError("%s does not look like a chrootable dir (/bin/sh missing)" % self.chroot) + + self.runner = runner + self.host = host + # port is unused, since this is local + self.port = port + + def connect(self, port=None): + ''' connect to the chroot; nothing to do here ''' + + vvv("THIS IS A LOCAL CHROOT DIR", host=self.chroot) + + return self + + def exec_command(self, cmd, tmp_path, sudo_user, sudoable=False, executable='/bin/sh'): + ''' run a command on the chroot ''' + + # We enter chroot as root so sudo stuff can be ignored + + chroot_cmd = '/usr/sbin/chroot' + + if executable: + local_cmd = [chroot_cmd, self.chroot, executable, '-c', cmd] + else: + local_cmd = '%s "%s" %s' % (chroot_cmd, self.chroot, cmd) + + vvv("EXEC %s" % (local_cmd), host=self.chroot) + p = subprocess.Popen(local_cmd, shell=isinstance(local_cmd, basestring), + cwd=self.runner.basedir, + stdin=subprocess.PIPE, + stdout=subprocess.PIPE, stderr=subprocess.PIPE) + + stdout, stderr = p.communicate() + return (p.returncode, '', stdout, stderr) + + def put_file(self, in_path, out_path): + ''' transfer a file from local to chroot ''' + + if not out_path.startswith(os.path.sep): + out_path = os.path.join(os.path.sep, out_path) + normpath = os.path.normpath(out_path) + out_path = os.path.join(self.chroot, normpath[1:]) + + vvv("PUT %s TO %s" % (in_path, out_path), host=self.chroot) + if not os.path.exists(in_path): + raise errors.AnsibleFileNotFound("file or module does not exist: %s" % in_path) + try: + shutil.copyfile(in_path, out_path) + except shutil.Error: + traceback.print_exc() + raise errors.AnsibleError("failed to copy: %s and %s are the same" % (in_path, out_path)) + except IOError: + traceback.print_exc() + raise errors.AnsibleError("failed to transfer file to %s" % out_path) + + def fetch_file(self, in_path, out_path): + ''' fetch a file from chroot to local ''' + + if not in_path.startswith(os.path.sep): + in_path = os.path.join(os.path.sep, in_path) + normpath = os.path.normpath(in_path) + in_path = os.path.join(self.chroot, normpath[1:]) + + vvv("FETCH %s TO %s" % (in_path, out_path), host=self.chroot) + if not os.path.exists(in_path): + raise errors.AnsibleFileNotFound("file or module does not exist: %s" % in_path) + try: + shutil.copyfile(in_path, out_path) + except shutil.Error: + traceback.print_exc() + raise errors.AnsibleError("failed to copy: %s and %s are the same" % (in_path, out_path)) + except IOError: + traceback.print_exc() + raise errors.AnsibleError("failed to transfer file to %s" % out_path) + + def close(self): + ''' terminate the connection; nothing to do here ''' + pass