??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
ó
ßUdac @` sÿ d d l m Z m Z m Z e Z d d l Z d d l Z d d l m Z
d d l m Z d d l m
Z
d d l m Z d d l m Z d d l m Z m Z d d l m Z d d
l m Z m Z m Z d d l m Z e ƒ Z d e
f d
„ ƒ YZ d S( i ( t absolute_importt divisiont print_functionN( t constants( t context( t CLI( t option_helpers( t AnsibleOptionsError( t to_textt to_bytes( t
DataLoader( t VaultEditort VaultLibt match_encrypt_secret( t Displayt VaultCLIc B` s¤ e Z d Z d Z d Z d Z d „ Z d „ Z d „ Z d „ Z d „ Z
e d d d „ ƒ Z
d
„ Z d d „ Z d „ Z d
„ Z d „ Z d „ Z d „ Z RS( s9 can encrypt any structured data file used by Ansible.
This can include *group_vars/* or *host_vars/* inventory variables,
variables loaded by *include_vars* or *vars_files*, or variable files
passed on the ansible-playbook command line with *-e @file.yml* or *-e @file.json*.
Role variables and defaults are also included!
Because Ansible tasks, handlers, and other objects are data, these can also be encrypted with vault.
If you'd like to not expose what variables you are using, you can keep an individual task file entirely encrypted.
t stdins the command line argss the interactive promptc C` sY d | _ d | _ t | _ d | _ d | _ d | _ d | _ t t
| ƒ j | ƒ d S( N( t Nonet b_vault_passt b_new_vault_passt Falset encrypt_string_read_stdint encrypt_secrett encrypt_vault_idt new_encrypt_secrett new_encrypt_vault_idt superR t __init__( t selft args( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyR ' s c
C` s t t | ƒ j d d d d t j j t j d ƒ ƒ t j j
d t ƒ } t j | ƒ t j
| ƒ | j j d d ƒ } t | _ t j j
d t ƒ } | j d d
d d d d d
d t j ƒ ƒt j j
d t ƒ } | j d d
g d d d d d t d d ƒ| j d d d d | | g ƒ} | j d | j ƒ | j d d d d d d d ƒ| j d d d d | | g ƒ} | j d | j ƒ | j d d d d d d d ƒ| j d d d d | | g ƒ} | j d | j ƒ | j d d d d d d d ƒ| j d! d d" d | g ƒ} | j d | j ƒ | j d d d d d d d ƒ| j d# d d$ d | | | g ƒ} | j d | j ƒ | j d d d d d d d ƒ| j d% d d& d | | | g ƒ}
|
j d | j ƒ |
j d d d' d d( d d ƒ|
j d) d* d d+ d d, d d- ƒ|
j d. d/ d d0 d d1 d d2 ƒ|
j d3 d d4 d
d d d5 ƒ| j d6 d d7 d | | g ƒ} | j d | j ƒ | j ƒ } | j d8 d
d d d9 d d: d t j ƒ ƒ| j d; d
d d d< d t d d= ƒ| j d d d d d d d ƒd S(> Nt descs4 encryption/decryption utility for Ansible data filest epilogsH
See '%s --help' for more information on a specific command.
i t add_helpt destt actions --outputt defaultt output_filet helps9 output file name for encrypt or decrypt; use - for stdoutt types --encrypt-vault-idR t storesI the vault id used to encrypt (required if more than vault-id is provided)t creates Create new vault encrypted filet parentst funcR t Filenamet metavart file_namet nargst *t decrypts Decrypt vault encrypted filet edits Edit vault encrypted filet views View vault encrypted filet encrypts Encrypt YAML filet encrypt_strings Encrypt a strings String to encryptt string_to_encrypts -ps --promptt encrypt_string_promptt
store_trues Prompt for the string to encrypts -ns --namet encrypt_string_namest appends Specify the variable names --stdin-namet encrypt_string_stdin_names# Specify the variable name for stdint rekeys Re-key a vault encrypted files --new-vault-password-filet new_vault_password_files! new vault password file for rekeys --new-vault-idt new_vault_ids' the new vault identity to use for rekey( R R t init_parsert ost patht basenamet syst argvt opt_helpt argparset ArgumentParserR t add_vault_optionst add_verbosity_optionst parsert add_subparserst Truet requiredt add_argumentR t unfrack_patht strt
add_parsert set_defaultst execute_createt execute_decryptt execute_editt execute_viewt execute_encryptt execute_encrypt_stringt
execute_rekeyt add_mutually_exclusive_group(
R t commont
subparserst outputt vault_idt
create_parsert decrypt_parsert edit_parsert view_parsert encrypt_parsert enc_str_parsert rekey_parsert rekey_new_group( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyR> 4 sf
! ! ! $ $ ! c C` sþ t t | ƒ j | ƒ } | j t _ | j rc x3 | j D]% } d | k r7 t d | ƒ ‚ q7 q7 Wn t | d d ƒ r™ t | j
ƒ d k r™ t d ƒ ‚ n | j d k rú d | j
k sÊ | j
sÊ | j rÖ t
| _ n | j rú | j rú t d ƒ ‚ qú n | S( Nu ;sK '%s' is not a valid vault id. The character ';' is not allowed in vault idsR$ i s; At most one input file may be used with the --output optionR4 t -sE The --prompt option is not supported if also reading input from stdin( R R t post_process_argst verbosityt displayt vault_idsR t getattrR t lenR R" R: RK R R6 ( R t optionsR] ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRg v s '" c
C` sý t t | ƒ j ƒ t ƒ } t j d ƒ } t t j d ƒ } t j
} | | } t j d } | d k r· | j | d | d t t j d ƒ d t j d ƒ} | s· t d
ƒ ‚ q· n | d k r¿d } | d k rî t j d pè t j } n d } | j | d | d t t j d ƒ d t j d d t ƒ} t | ƒ d k r{| r{t d d j g | D] } | d ^ q[ƒ ƒ ‚ n | st d
ƒ ‚ n t | d | ƒ} | d | _ | d | _ n | d k r¶t j d pÞt j } g }
| rö| }
n t j d r|
j t j d ƒ n g } t j d rD| j t j d ƒ n | j | d |
d | d t j d d t ƒ} | s‡t d ƒ ‚ n t | d | ƒ}
|
d | _ |
d | _ n | j | ƒ t | ƒ } t | ƒ | _ t j d ƒ t j | ƒ d S( Ni? Rj R" R0 R2 R; R1 t vault_password_filest ask_vault_passs3 A vault password is required to use Ansible's VaultR3 R4 R( R t create_new_passwordi sb The vault-ids %s are available to encrypt. Specify the vault-id to encrypt with --encrypt-vault-idt ,i R= R< s= A new vault password is required to use Ansible's Vault rekeyR* ( s decrypts views rekeys edit( s encrypts encrypt_strings create( s edit( s rekey( R R t runR
R? t umaskt listR t CLIARGSt Ct DEFAULT_VAULT_IDENTITY_LISTt setup_vault_secretsR R t DEFAULT_VAULT_ENCRYPT_IDENTITYRK Rl t joinR
R R R9 R R t set_vault_secretsR R t editor( R t loadert old_umaskRj t default_vault_idsR" t
vault_secretsR t xR t
new_vault_idst new_vault_password_filest new_vault_secretsR t vault( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRr st
-
c C` s© t j d r3 t j j ƒ r3 t j d d t ƒn xJ t j d pI d g D]2 } | j j | | j d | j
d t j d ƒqJ Wt j j ƒ r¥ t j d d t ƒn d S( s; encrypt the supplied file using the provided vault secret R s" Reading plaintext input from stdint stderrRf R] R$ s Encryption successfulN( R Ru RB R t isattyRi RK R| t encrypt_fileR R t stdout( R t f( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRV õ s c C` s“ | p d } d } | r% d | } n d | } g } t | ƒ } | j | ƒ x/ | j ƒ D]! } | j d d | | f ƒ q[ Wd j | ƒ } | S( Ni
t s %s: s
%s!vault |s %s%st s
( R R9 t
splitlinesRz ( t b_ciphertextt indentt namet block_format_var_namet block_format_headert linest vault_ciphertextt linet yaml_ciphertext( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyt format_ciphertext_yaml s
c C` s d } g } g t j d D] } | d k r | ^ q } t j d rÇ d } d } t j d ƒ } | d k ru | } n t j | ƒ } | d k rŸ t d ƒ ‚ n t | ƒ } | j | | j | f ƒ n | j rTt
j j ƒ rõ t j d d t
ƒn t
j j ƒ } | d k r t d
ƒ ‚ n t | ƒ } t j d } | j | | j | f ƒ n t j j d t ƒ rt t t j d | ƒ ƒ }
t | ƒ t |
ƒ k rÕt j d
d t
ƒt j d t j d d d t
ƒn xM | t |
ƒ D] } |
j d | f ƒ qæWn g | D] } d | f ^ q
}
xZ |
D]R } | \ } }
|
d k rYt d ƒ ‚ n t |
ƒ } | j | | j | f ƒ q,W| j | d | j ƒ} xU | D]M } | j d d ƒ } | j d d ƒ } | rät
j j | ƒ n t | ƒ q¡Wt
j j ƒ rt j d d t
ƒn d S( s= encrypt the supplied string using the provided vault secret R Rf R6 s String to encrypt: s# Variable name (enter for no name): R‹ s@ The plaintext provided from the prompt was empty, not encryptings9 Reading plaintext input from stdin. (ctrl-d to end input)R† s stdin was empty, not encryptingR: R8 s= The number of --name options do not match the number of args.sC The last named variable will be "%s". The rest will not have names.iÿÿÿÿsK The plaintext provided from the command line args was empty, not encryptingR] t errt outs Encryption successfulN( R R Ru Ri t promptR R R9 t FROM_PROMPTR RB R‰ R‡ RK R t readt
FROM_STDINt getR Rt t zipRl t FROM_ARGSt _format_output_vault_stringsR R† t writet print( R t b_plaintextt b_plaintext_listR R t msgR t name_prompt_responset prompt_responset
stdin_textt name_and_text_listt extra_argt
name_and_textt plaintextt outputsR\ R˜ R™ ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRW sb ,
c C` sê t } t | ƒ d k r! t } n g } x¼ t | ƒ D]® \ } } | \ } } } | j j | | j d | ƒ}
| j |
d | ƒ} d } | rÇ | d }
| r´ d | |
| f } qÇ d |
| f } n | j i | d 6| d 6ƒ q4 W| S( Ni R] R sD # The encrypted version of variable ("%s", the string #%d from %s).
s4 # The encrypted version of the string #%d from %s.)
R™ R˜ (
R Rl RK t enumerateR| t
encrypt_bytesR R— R R9 ( R R¥ R] t show_delimiterR\ t indext b_plaintext_infoR¤ t srcR RŽ t yaml_textt err_msgt human_index( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyR¡ w s"
c C` sš t j d r3 t j j ƒ r3 t j d d t ƒn x; t j d pI d g D]# } | j j | d t j d ƒqJ Wt j j ƒ r– t j d d t ƒn d S( s; decrypt the supplied file using the provided vault secret R s# Reading ciphertext input from stdinR† Rf R$ s Decryption successfulN(
R Ru RB R R‡ Ri RK R| t decrypt_fileR‰ ( R RŠ ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRS ™ s !c C` sV t t j d ƒ d k r( t d ƒ ‚ n | j j t j d d | j d | j ƒd S( sf create and open a file in an editor that will be encrypted with the provided vault secret when closedR i s8 ansible-vault create can take only one filename argumenti R] N( Rl R Ru R R| t create_fileR R ( R ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRR ¥ s c C` s, x% t j d D] } | j j | ƒ q Wd S( sa open and decrypt an existing vaulted file in an editor, that will be encrypted again when closedR N( R Ru R| t edit_file( R RŠ ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRT ® s c C` sA x: t j d D]+ } | j j | ƒ } | j t | ƒ ƒ q Wd S( s_ open, decrypt and view an existing vaulted file using a pager using the supplied vault secret R N( R Ru R| R t pagerR ( R RŠ R ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRU ³ s c C` sK x1 t j d D]" } | j j | | j | j ƒ q Wt j d d t ƒd S( sN re-encrypt a vaulted file with a new secret, the previous secret is required R s Rekey successfulR† N( R Ru R| t
rekey_fileR R Ri RK ( R RŠ ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyRX ¿ s N( t __name__t
__module__t __doc__R R R› R R> Rg Rr RV t staticmethodR R— RW R¡ RS RR RT RU RX ( ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyR s$
B h ` " ( t
__future__R R R R& t
__metaclass__R? RB t ansibleR Rv R t ansible.cliR t ansible.cli.argumentsR RD t ansible.errorsR t ansible.module_utils._textR R t ansible.parsing.dataloaderR
t ansible.parsing.vaultR R R
t ansible.utils.displayR Ri R ( ( ( s5 /usr/lib/python2.7/site-packages/ansible/cli/vault.pyt s