@ -16,221 +16,283 @@
# You should have received a copy of the GNU General Public License
# along with Ansible. If not, see <http://www.gnu.org/licenses/>.
$ErrorActionPreference = " Stop "
# WANT_JSON
# POWERSHELL_COMMON
New-PSDrive -PSProvider registry -Root HKEY_CLASSES_ROOT -Name HKCR -ErrorAction SilentlyContinue | Out-Null
New-PSDrive -PSProvider registry -Root HKEY_USERS -Name HKU -ErrorAction SilentlyContinue | Out-Null
New-PSDrive -PSProvider registry -Root HKEY_CURRENT_CONFIG -Name HCCC -ErrorAction SilentlyContinue | Out-Null
# TODO: Add missing REG_NONE support
$ErrorActionPreference = " Stop "
$params = Parse-Args $args -supports_check_mode $true
$check_mode = Get-AnsibleParam -obj $params -name " _ansible_check_mode " -type " bool " -default $false
$params = Parse-Args $args ;
$result = New-Object PSObject ;
Set-Attr $result " changed " $false ;
Set-Attr $result " data_changed " $false ;
Set-Attr $result " data_type_changed " $false ;
$pa th = Get-AnsibleParam -obj $params -name " path " -type " string " -failifempty $true -aliases " key "
$ name = Get-AnsibleParam -obj $params -name " name " -type " string " -aliases " entry " , " value "
$data = Get-AnsibleParam -obj $params -name " data "
$type = Get-AnsibleParam -obj $params -name " type " -type " string " -validateSet " binary " , " dword " , " expandstring " , " multistring " , " string " , " qword " -aliases " datatype " -default " string "
$state = Get-AnsibleParam -obj $params -name " state " -type " string " -validateSet " present " , " absent " -default " present "
$registryKey = Get-Attr -obj $params -name " key " -failifempty $true
$registryValue = Get-Attr -obj $params -name " value " -default $null
$state = Get-Attr -obj $params -name " state " -validateSet " present " , " absent " -default " present "
$registryData = Get-Attr -obj $params -name " data " -default $null
$registryDataType = Get-Attr -obj $params -name " datatype " -validateSet " binary " , " dword " , " expandstring " , " multistring " , " string " , " qword " -default " string "
$result = @ {
changed = $false
data_changed = $false
data_type_changed = $false
diff = @ {
prepared = " "
}
warnings = @ ( )
}
If ( $state -eq " present " -and $registryData -eq $null -and $registryValue -ne $null )
{
if ( $state -eq " present " -and $data -eq $null -and $name -ne $null ) {
Fail-Json $result " missing required argument: data "
}
# check the registry key is in powershell ps-drive format: HKLM, HKCU, HKU, HKCR, HCCC
If ( -not ( $registryKey -match " ^H[KC][CLU][MURC]{0,1}:\\ " ) )
{
Fail-Json $result " key: $registryKey is not a valid powershell path, see module documentation for examples. "
# Fix HCCC:\ PSDrive for pre-2.3 compatibility
if ( $path -match " ^HCCC:\\ " ) {
$result . warnings + = " Please use path: HKCC:\... instead of path: $path \n "
$path = $path -replace " HCCC:\\ " , " HKCC:\\ "
}
# Check that the registry path is in PSDrive format: HKCC, HKCR, HKCU, HKLM, HKU
if ( -not ( $path -match " ^HK(CC|CR|CU|LM|U):\\ " ) ) {
Fail-Json $result " path: $path is not a valid powershell path, see module documentation for examples. "
}
Function Test-RegistryValueData {
# Allow empty values as the "(default)" value
if ( $name -eq " " ) {
$registryValue = " (default) "
}
Function Test-ValueData {
Param (
[ parameter ( Mandatory = $true ) ]
[ ValidateNotNullOrEmpty ( ) ] $Path ,
[ parameter ( Mandatory = $true ) ]
[ ValidateNotNullOrEmpty ( ) ] $Value
[ parameter ( Mandatory = $true ) ] [ ValidateNotNullOrEmpty ( ) ] $Path ,
[ parameter ( Mandatory = $true ) ] [ ValidateNotNullOrEmpty ( ) ] $Name
)
Try {
Get-ItemProperty -Path $Path -Name $Value
Return $tru
}
C {
R eturn $false
try {
Get-ItemProperty -Path $Path -Name $Nam
return $true
} c {
r eturn $false
}
}
# Returns true if registry data matches.
# Handles binary, integer(dword) and string registry data
Function Compare- Registry Data {
Function Compare- Data {
Param (
[ parameter ( Mandatory = $true ) ]
[ AllowEmptyString ( ) ] $ReferenceData ,
[ parameter ( Mandatory = $true ) ]
[ AllowEmptyString ( ) ] $DifferenceData
)
if ( $ReferenceData -is [ String ] -or $ReferenceData -is [ int ] ) {
if ( $ReferenceData -eq $DifferenceData ) {
return $true
} else {
return $false
}
} elseif ( $ReferenceData -is [ Object[] ] ) {
if ( @ ( Compare-Object $ReferenceData $DifferenceData -SyncWindow 0 ) . Length -eq 0 ) {
return $true
} else {
return $false
}
[ parameter ( Mandatory = $true ) ] [ AllowEmptyString ( ) ] $ReferenceData ,
[ parameter ( Mandatory = $true ) ] [ AllowEmptyString ( ) ] $DifferenceData
)
if ( $ReferenceData -is [ String ] -or $ReferenceData -is [ int ] ) {
if ( $ReferenceData -eq $DifferenceData ) {
return $true
} else {
return $false
}
} elseif ( $ReferenceData -is [ Object[] ] ) {
if ( @ ( Compare-Object $ReferenceData $DifferenceData -SyncWindow 0 ) . Length -eq 0 ) {
return $true
} else {
return $false
}
}
}
# Simplified version of Convert-HexStringToByteArray from
# https://cyber-defense.sans.org/blog/2010/02/11/powershell-byte-array-hex-convert
# Expects a hex in the format you get when you run reg.exe export,
# and converts to a byte array so powershell can modify binary registry entries
function Convert-RegExportHexStringToByteArray
{
function Convert-RegExportHexStringToByteArray {
Param (
[ parameter ( Mandatory = $true ) ] [ String ] $String
[ parameter ( Mandatory = $true ) ] [ String ] $String
)
# r
$String = $String . ToLower ( ) -replace '^hex\:' , ''
# R emove 'hex:' from the front of the string if present
$String = $String . ToLower ( ) -replace '^hex\:' , ''
#r
$String = $String . ToLower ( ) -replace '[^a-f0-9\\,x\-\:]' , ''
# R emove whitespace and any other non-hex crud.
$String = $String . ToLower ( ) -replace '[^a-f0-9\\,x\-\:]' , ''
# t
$String = $String -replace ',' , ':'
# T urn commas into colons
$String = $String -replace ',' , ':'
#Maybe there's nothing left over to convert...
if ( $String . Length -eq 0 ) { , @ ( ) ; return }
# Maybe there's nothing left over to convert...
if ( $String . Length -eq 0 ) {
return , @ ( )
}
#Split string with or without colon delimiters.
if ( $String . Length -eq 1 )
{ , @ ( [ System.Convert ] :: ToByte ( $String , 16 ) ) }
elseif ( ( $String . Length % 2 -eq 0 ) -and ( $String . IndexOf ( " : " ) -eq -1 ) )
{ , @ ( $String -split '([a-f0-9]{2})' | foreach-object { if ( $_ ) { [ System.Convert ] :: ToByte ( $_ , 16 ) } } ) }
elseif ( $String . IndexOf ( " : " ) -ne -1 )
{ , @ ( $String -split ':+' | foreach-object { [ System.Convert ] :: ToByte ( $_ , 16 ) } ) }
else
{ , @ ( ) }
# Split string with or without colon delimiters.
if ( $String . Length -eq 1 ) {
return , @ ( [ System.Convert ] :: ToByte ( $String , 16 ) )
} elseif ( ( $String . Length % 2 -eq 0 ) -and ( $String . IndexOf ( " : " ) -eq -1 ) ) {
return , @ ( $String -split '([a-f0-9]{2})' | foreach-object { if ( $_ ) { [ System.Convert ] :: ToByte ( $_ , 16 ) } } )
} elseif ( $String . IndexOf ( " : " ) -ne -1 ) {
return , @ ( $String -split ':+' | foreach-object { [ System.Convert ] :: ToByte ( $_ , 16 ) } )
} else {
return , @ ( )
}
}
# Create the required PSDrives if missing
if ( -not ( Test-Path HKCR : \ ) ) {
New-PSDrive -Name HKCR -PSProvider Registry -Root HKEY_CLASSES_ROOT
}
if ( -not ( Test-Path HKU : \ ) ) {
New-PSDrive -Name HKU -PSProvider Registry -Root HKEY_USERS
}
if ( -not ( Test-Path HKCC : \ ) ) {
New-PSDrive -Name HKCC -PSProvider Registry -Root HKEY_CURRENT_CONFIG
}
if ( $registryDataType -eq " binary " -and $registryData -ne $null -and $registryData -is [ String ] ) {
$registryData = Convert-RegExportHexStringToByteArray ( $registryData )
# Convert HEX string to binary if type binary
if ( $type -eq " binary " -and $data -ne $null -and $data -is [ String ] ) {
$data = Convert-RegExportHexStringToByteArray ( $data )
}
if ( $state -eq " present " ) {
if ( ( Test-Path $registryKey ) -and $registryValue -ne $null )
{
if ( Test-RegistryValueData -Path $registryKey -Value $registryValue )
{
# handle binary data
$currentRegistryData = ( Get-ItemProperty -Path $registryKey | Select-Object -ExpandProperty $registryValue )
if ( $registryValue . ToLower ( ) -eq " (default) " ) {
# Special case handling for the key's default property. Because .GetValueKind() doesn't work for the (default) key property
$oldRegistryDataType = " String "
}
else {
$oldRegistryDataType = ( Get-Item $registryKey ) . GetValueKind ( $registryValue )
# Expand string if type expandstring
if ( $type -eq " expandstring " -and $data -ne $null -and $data -is [ String ] ) {
$data = Expand-Environment ( $data )
$datatype = " string "
}
if ( $state -eq " present " ) {
if ( ( Test-Path $path ) -and $name -ne $null ) {
if ( Test-ValueData -Path $path -Name $name ) {
# Handle binary data
$old_data = ( Get-ItemProperty -Path $path | Select-Object -ExpandProperty $name )
if ( $name . ToLower ( ) -eq " (default) " ) {
# Special case handling for the path's default property.
# Because .GetValueKind() doesn't work for the (default) path property
$old_type = " String "
} else {
$old_type = ( Get-Item $path ) . GetValueKind ( $name )
}
# Changes Data and DataType
if ( $registryDataType -ne $oldRegistryDataType )
{
Try
{
Remove-ItemProperty -Path $registryKey -Name $registryValue
New-ItemProperty -Path $registryKey -Name $registryValue -Value $registryData -PropertyType $registryDataType
$result . changed = $true
$result . data_changed = $true
$result . data_type_changed = $true
if ( $type -ne $old_type ) {
# Changes Data and DataType
if ( -not $check_mode ) {
try {
Remove-ItemProperty -Path $path -Name $name
New-ItemProperty -Path $path -Name $name -Value $data -PropertyType $type -Force
} catch {
Fail-Json $result $_ . Exception . Message
}
}
Catch
{
Fail-Json $result $_ . Exception . Message
$result . changed = $true
$result . data_changed = $true
$result . data_type_changed = $true
$result . diff . prepared + = @ "
[ $path ]
- " $name " = " $old_type ` : $data "
+ " $name " = " $type ` : $data "
" @
} elseif ( -not ( Compare-Data -ReferenceData $old_data -DifferenceData $data ) ) {
# Changes Only Data
if ( -not $check_mode ) {
try {
Set-ItemProperty -Path $path -Name $name -Value $data
} catch {
Fail-Json $result $_ . Exception . Message
}
}
$result . changed = $true
$result . data_changed = $true
$result . diff . prepared + = @ "
[ $path ]
- " $name " = " $type ` : $old_data "
+ " $name " = " $type ` : $data "
" @
} else {
# Nothing to do, everything is already as requested
}
# Changes Only Data
elseif ( -Not ( Compare-RegistryData -ReferenceData $currentRegistryData -DifferenceData $registryData ) )
{
Try {
Set-ItemProperty -Path $registryKey -Name $registryValue -Value $registryData
$result . changed = $true
$result . data_changed = $true
}
Catch
{
} else {
if ( -not $check_mode ) {
try {
New-ItemProperty -Path $path -Name $name -Value $data -PropertyType $type
} Catch {
Fail-Json $result $_ . Exception . Message
}
}
$result . changed = $true
$result . diff . prepared + = @ "
[ $path ]
+ " $name " = " $type ` : $data "
" @
}
else
{
Try
{
New-ItemProperty -Path $registryKey -Name $registryValue -Value $registryData -PropertyType $registryDataType
$result . changed = $true
}
Catch
{
} elseif ( -not ( Test-Path $path ) ) {
if ( -not $check_mode ) {
try {
$new_path = New-Item $path -Type directory -Force
if ( $name -ne $null ) {
$new_path | New-ItemProperty -Name $name -Value $data -PropertyType $type -Force
}
} catch {
throw
Fail-Json $result $_ . Exception . Message
}
}
}
elseif ( -not ( Test-Path $registryKey ) )
{
Try
{
$newRegistryKey = New-Item $registryKey -Force
$result . changed = $true
$result . changed = $true
$result . diff . prepared + = @ "
+ [ $path " ]
if ( $registryValue -ne $null ) {
$newRegistryKey | New-ItemProperty -Name $registryValue -Value $registryData -Force -PropertyType $registryDataType
$result . changed = $true
}
}
Catch
{
Fail-Json $result $_ . Exception . Message
" @
if ( $name -ne $null ) {
$result . diff . prepared + = @ "
+ " $name " = " $type ` : $data "
" @
}
} else {
# FIXME: Value is null, should we silently ignore this and do nothing ?
}
}
else
{
if ( Test-Path $registryKey )
{
if ( $registryValue -eq $null ) {
Try
{
Remove-Item -Path $registryKey -Recurse
$result . changed = $true
}
Catch
{
Fail-Json $result $_ . Exception . Message
}
}
elseif ( Test-RegistryValueData -Path $registryKey -Value $registryValue ) {
Try
{
Remove-ItemProperty -Path $registryKey -Name $registryValue
$result . changed = $true
} elseif ( $state -eq " absent " ) {
if ( Test-Path $path ) {
if ( $name -eq $null ) {
if ( -not $check_mode ) {
try {
Remove-Item -Path $path -Recurse
} catch {
Fail-Json $result $_ . Exception . Message
}
}
Catch
{
Fail-Json $result $_ . Exception . Message
$result . changed = $true
$result . diff . prepared + = @ "
- [ $path ]
- " $name " = " $type ` : $data "
" @
} elseif ( Test-ValueData -Path $path -Value $name ) {
if ( -not $check_mode ) {
try {
Remove-ItemProperty -Path $path -Name $name
} catch {
Fail-Json $result $_ . Exception . Message
}
}
$result . changed = $true
$result . diff . prepared + = @ "
[ $path ]
- " $name " = " $type ` : $data "
" @
}
} else {
# Nothing to do, everything is already as requested
}
}
Dag Wieers
8 years ago