debug statements trigger security check error "A variable inserted a new parameter into the module args"
Kesten Broughton
I'm running into several cases where debug statements trigger the security check error:
A variable inserted a new parameter into the module args. Be sure to quote variables if they contain equal signs (for example: "{{var}}").
There are a few issues that seem related,
https://github.com/ansible/ansible/issues/8260
But none of them are my case which simply outputting a registered variable. Interestingly, i seem to be able to debug-access all fields of the registered variable, just not the whole object.
Is there a convention i can follow to avoid this sort of thing?
The offending lines are
- name: Check for attached volumes
shell: "fdisk -l"
register: register_fdisk
- debug: msg="{{register_fdisk.changed}}" # no problem
- debug: msg="{{register_fdisk.stdout}}"
- debug: msg="{{register_fdisk.keys}}"
- debug: msg="{{register_fdisk}}" # only this fails
TASK: [hardware | Check for attached volumes] *********************************
<127.0.0.1> ESTABLISH CONNECTION FOR USER: vagrant
<127.0.0.1> REMOTE_MODULE command fdisk -l #USE_SHELL
<127.0.0.1> EXEC ['ssh', '-C', '-tt', '-vvv', '-o', 'ControlMaster=auto', '-o', 'ControlPersist=60s', '-o', 'ControlPath=/Users/kbroughton/.ansible/cp/ansible-ssh-%h-%p-%r', '-o', 'Port=2211', '-o', 'IdentityFile="/Users/kbroughton/.vagrant.d/insecure_private_key"', '-o', 'KbdInteractiveAuthentication=no', '-o', 'PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey', '-o', 'PasswordAuthentication=no', '-o', 'User=vagrant', '-o', 'ConnectTimeout=10', '127.0.0.1', "/bin/sh -c 'mkdir -p $HOME/.ansible/tmp/ansible-tmp-1409764530.2-166440363117817 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1409764530.2-166440363117817 && echo $HOME/.ansible/tmp/ansible-tmp-1409764530.2-166440363117817'"]
<127.0.0.1> PUT /var/folders/t2/h22337c12hn279xwd4s9fk7s8_088c/T/tmpbca0cf TO /home/vagrant/.ansible/tmp/ansible-tmp-1409764530.2-166440363117817/command
<127.0.0.1> EXEC ['ssh', '-C', '-tt', '-vvv', '-o', 'ControlMaster=auto', '-o', 'ControlPersist=60s', '-o', 'ControlPath=/Users/kbroughton/.ansible/cp/ansible-ssh-%h-%p-%r', '-o', 'Port=2211', '-o', 'IdentityFile="/Users/kbroughton/.vagrant.d/insecure_private_key"', '-o', 'KbdInteractiveAuthentication=no', '-o', 'PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey', '-o', 'PasswordAuthentication=no', '-o', 'User=vagrant', '-o', 'ConnectTimeout=10', '127.0.0.1', u'/bin/sh -c \'sudo -k && sudo -H -S -p "[sudo via ansible, key=pgapabqrdqjcybxpgqhegcclfoxafxzx] password: " -u root /bin/sh -c \'"\'"\'echo SUDO-SUCCESS-pgapabqrdqjcybxpgqhegcclfoxafxzx; LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/vagrant/.ansible/tmp/ansible-tmp-1409764530.2-166440363117817/command; rm -rf /home/vagrant/.ansible/tmp/ansible-tmp-1409764530.2-166440363117817/ >/dev/null 2>&1\'"\'"\'\'']
changed: [allinone-1] => {"changed": true, "cmd": "fdisk -l", "delta": "0:00:00.018536", "end": "2014-09-03 17:15:30.573009", "rc": 0, "start": "2014-09-03 17:15:30.554473", "stderr": "Disk /dev/sdb doesn't contain a valid partition table\nDisk /dev/sdc doesn't contain a valid partition table\nDisk /dev/mapper/vg0-root doesn't contain a valid partition table\nDisk /dev/mapper/vg0-swap doesn't contain a valid partition table", "stdout": "\nDisk /dev/sda: 44.0 GB, 44040192000 bytes\n255 heads, 63 sectors/track, 5354 cylinders, total 86016000 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x0007137a\n\n Device Boot Start End Blocks Id System\n/dev/sda1 * 2048 1757183 877568 83 Linux\n/dev/sda2 1759230 86013951 42127361 5 Extended\n/dev/sda5 1759232 86013951 42127360 8e Linux LVM\n\nDisk /dev/sdb: 1073 MB, 1073741824 bytes\n255 heads, 63 sectors/track, 130 cylinders, total 2097152 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000\n\n\nDisk /dev/sdc: 10.7 GB, 10737418240 bytes\n255 heads, 63 sectors/track, 1305 cylinders, total 20971520 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000\n\n\nDisk /dev/mapper/vg0-root: 40.0 GB, 39996882944 bytes\n255 heads, 63 sectors/track, 4862 cylinders, total 78118912 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000\n\n\nDisk /dev/mapper/vg0-swap: 3137 MB, 3137339392 bytes\n255 heads, 63 sectors/track, 381 cylinders, total 6127616 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000", "warnings": []}
TASK: [hardware | debug msg="{{register_fdisk.changed}}"] *********************
<127.0.0.1> ESTABLISH CONNECTION FOR USER: vagrant
ok: [allinone-1] => {
"msg": "True"
}
TASK: [hardware | debug msg="{{register_fdisk.stdout}}"] **********************
<127.0.0.1> ESTABLISH CONNECTION FOR USER: vagrant
ok: [allinone-1] => {
"msg": "\nDisk /dev/sda: 44.0 GB, 44040192000 bytes\n255 heads, 63 sectors/track, 5354 cylinders, total 86016000 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x0007137a\n\n Device Boot Start End Blocks Id System\n/dev/sda1 * 2048 1757183 877568 83 Linux\n/dev/sda2 1759230 86013951 42127361 5 Extended\n/dev/sda5 1759232 86013951 42127360 8e Linux LVM\n\nDisk /dev/sdb: 1073 MB, 1073741824 bytes\n255 heads, 63 sectors/track, 130 cylinders, total 2097152 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000\n\n\nDisk /dev/sdc: 10.7 GB, 10737418240 bytes\n255 heads, 63 sectors/track, 1305 cylinders, total 20971520 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000\n\n\nDisk /dev/mapper/vg0-root: 40.0 GB, 39996882944 bytes\n255 heads, 63 sectors/track, 4862 cylinders, total 78118912 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000\n\n\nDisk /dev/mapper/vg0-swap: 3137 MB, 3137339392 bytes\n255 heads, 63 sectors/track, 381 cylinders, total 6127616 sectors\nUnits = sectors of 1 * 512 = 512 bytes\nSector size (logical/physical): 512 bytes / 512 bytes\nI/O size (minimum/optimal): 512 bytes / 512 bytes\nDisk identifier: 0x00000000"
}
TASK: [hardware | debug msg="{{register_fdisk.keys}}"] ************************
<127.0.0.1> ESTABLISH CONNECTION FOR USER: vagrant
ok: [allinone-1] => {
"msg": "<built-in method keys of dict object at 0x7ffdfbd570c0>"
}
TASK: [hardware | debug msg="{{register_fdisk}}"] *****************************
<127.0.0.1> ESTABLISH CONNECTION FOR USER: vagrant
fatal: [allinone-1] => A variable inserted a new parameter into the module args. Be sure to quote variables if they contain equal signs (for example: "{{var}}").
Michael DeHaan
--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAO2fFsUrsg_TD6-CKS6X9Hof_Wbmvx%2BTAbvFpQW4g%2BSxzOOZmQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.