ansible-collections / ansible.posix

Ansible Collection for Posix
Other
155 stars 149 forks source link

Module ansible.posix.firewalld returns permission denied even with a success change of settings #232

Open lucas-benedito opened 3 years ago

lucas-benedito commented 3 years ago
SUMMARY

When setting rich_rule using the module ansible.posix.firewalld, an error is displayed and the task is changed successfully.

ISSUE TYPE
COMPONENT NAME

firewall

ANSIBLE VERSION
2.9.7
COLLECTION VERSION
v1.2.0
OS / ENVIRONMENT

Red Hat Enterprise Linux Server release 7.9 (Maipo)

STEPS TO REPRODUCE

Execute playbook below against an RHEL 7.9 machine.

- name: set rich rule
  become: yes
  hosts: all
  tasks:
  - name: Permit incoming connections on port 10050/tcp
    ansible.posix.firewalld:
      rich_rule: rule family="ipv4" source address="xxx.xxx.x.xxx" port port="10050" protocol="tcp" accept
      permanent: yes
      immediate: yes
      state: enabled

redacted source_address

EXPECTED RESULTS

A changed task without errors.

ACTUAL RESULTS
<testing.example.com> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/home/ansible/.ansible/cp/xxxxxxxxxx testing.example.com '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /home/ansible/.ansible/tmp `"&& mkdir /home/ansible/.ansible/tmp/ansible-tmp-13548324684.54-97652-135482648752469542 && echo ansible-tmp-13548324684.54-97652-135482648752469542="` echo /home/ansible/.ansible/tmp/ansible-tmp-13548324684.54-97652-135482648752469542 `" ) && sleep 0'"'"''
<testing.example.com> (0, 'ansible-tmp-13548324684.54-97652-135482648752469542=/home/ansible/.ansible/tmp/ansible-tmp-13548324684.54-97652-135482648752469542\n', '')
ERROR: Failed to load '/etc/firewalld/firewalld.conf': [Errno 13] Permission denied: '/etc/firewalld/firewalld.conf'
WARNING: Using fallback firewalld configuration settings.
Using module file /home/ansible/.ansible/collections/ansible_collections/ansible/posix/plugins/modules/firewalld.py
<testing.example.com>
...
TASK [Permit incoming connections on port 10050/tcp] 
changed: [testing.example.com] => {
    "changed": false,
...
saito-hideki commented 3 years ago

Hi @lucas-benedito, Thank you for reporting this issue. I'm thinking that the root cause of this issue is settings of selinux-policy for /etc/firewalld/firewalld.conf. So if it is possible, can you confirm it using the following command on your RHEL7.9 managed node?

# getenforce
# ls -Z /etc/firewalld/firewalld.conf
# semanage fcontext -l|grep firewalld
mzycki commented 3 years ago

Hi Saito,

It's me who originally opened this case in RH. Here is the output of requested commands:

# getenforce
Enforcing
# ls -Z /etc/firewalld/firewalld.conf
-rw-r--r--. root root system_u:object_r:firewalld_etc_rw_t:s0 /etc/firewalld/firewalld.conf
# semanage fcontext -l | grep firewalld
/etc/firewalld(/.*)?                               all files          system_u:object_r:firewalld_etc_rw_t:s0
/var/log/firewalld.*                               regular file       system_u:object_r:firewalld_var_log_t:s0
/var/run/firewalld(/.*)?                           all files          system_u:object_r:firewalld_var_run_t:s0
/usr/lib/systemd/system/firewalld.*                regular file       system_u:object_r:firewalld_unit_file_t:s0
/usr/sbin/firewalld                                regular file       system_u:object_r:firewalld_exec_t:s0
/var/run/firewalld\.pid                            regular file       system_u:object_r:firewalld_var_run_t:s0
/etc/rc\.d/init\.d/firewalld                       regular file       system_u:object_r:firewalld_initrc_exec_t:s0

Kind regards, Michal Zycki

saito-hideki commented 3 years ago

@mzycki thank you for the information! I just wanted to make sure that you already restart firewalld service on your RHEL7.9 managed node or not. If you already did, was it successful without errors?

# systemctl restart firewalld
# systemctl status firewalld
mzycki commented 3 years ago

@saito-hideki Yes, it looks like a successful restart:

# systemctl restart firewalld
# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Tue 2021-08-03 10:35:21 CEST; 2s ago
     Docs: man:firewalld(1)
 Main PID: 77588 (firewalld)
   CGroup: /system.slice/firewalld.service
           └─77588 /usr/bin/python2 -Es /usr/sbin/firewalld --nofork --nopid

Aug 03 10:35:21 sf160lx00128.res.bec.dk systemd[1]: Starting firewalld - dynamic firewall daemon...
Aug 03 10:35:21 sf160lx00128.res.bec.dk systemd[1]: Started firewalld - dynamic firewall daemon.
Aug 03 10:35:21 sf160lx00128.res.bec.dk firewalld[77588]: WARNING: AllowZoneDrifting is enabled. This is considered an insecure configuration option. It will be removed in a future release. P...ling it now.
Aug 03 10:35:22 sf160lx00128.res.bec.dk firewalld[77588]: WARNING: ip6tables not usable, disabling IPv6 firewall.
Hint: Some lines were ellipsized, use -l to show in full.
saito-hideki commented 3 years ago

@maxamillion @Akasurde I think this error occurred on firewalld on the RHEL7.9 managed node. So it probably has not related with tthe ansible.posix.firewalld.py module directly. Please give us some advice on this matter.

https://github.com/firewalld/firewalld/blob/stable-0.6/src/firewall/core/io/firewalld_conf.py#L68-L73

Thanks!

exelanz commented 2 years ago

Hi @saito-hideki , I have the same error. Target OS: Oracle Linux 8.4. It occurs after setting SELinux to enforcing. I need to test with SElinux disabled. See below as well.

exelanz commented 2 years ago

Hi, I have tested with SELinux in "Permissive Mode". Same error occurs: Screenshot 2021-11-06 at 08 39 12

exelanz commented 2 years ago

Output of the commands asked above to other users:

Screenshot 2021-11-06 at 08 55 06

saito-hideki commented 2 years ago

@exelanz thank you for reporting the valuable information! If it is possible, can you provide the following output as well?

# rpm -qa|grep firewall
# rpm -V firewalld
# rpm -V python-firewall
# stat /etc/
# stat /etc/firewalld
# stat /etc/firewalld/firewalld.conf
gzuaps commented 2 years ago

I'm seeing the same issue in Rocky 8

#rpm -qa | grep firewall
firewalld-filesystem-0.9.3-7.el8.noarch
firewalld-0.9.3-7.el8.noarch
python3-firewall-0.9.3-7.el8.noarch

# rpm -V firewalld
#

# rpm -V python3-firewall
#

#stat /etc/
  File: /etc/
  Size: 8192            Blocks: 24         IO Block: 4096   directory
Device: fd00h/64768d    Inode: 33554561    Links: 93
Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:etc_t:s0
Access: 2022-02-08 12:45:04.571804095 +1100
Modify: 2022-02-08 12:42:11.844392267 +1100
Change: 2022-02-08 12:42:11.844392267 +1100
 Birth: 2021-07-21 09:17:39.560974415 +1000

#stat /etc/firewalld
  File: /etc/firewalld
  Size: 149             Blocks: 0          IO Block: 4096   directory
Device: fd00h/64768d    Inode: 67710958    Links: 8
Access: (0750/drwxr-x---)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:firewalld_etc_rw_t:s0
Access: 2021-12-23 10:58:03.272934695 +1100
Modify: 2021-11-16 11:14:27.821588332 +1100
Change: 2021-11-16 11:14:27.821588332 +1100
 Birth: 2021-07-21 09:18:59.198329957 +1000

 #stat /etc/firewalld/firewalld.conf
  File: /etc/firewalld/firewalld.conf
  Size: 2840            Blocks: 8          IO Block: 4096   regular file
Device: fd00h/64768d    Inode: 67711100    Links: 1
Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:firewalld_etc_rw_t:s0
Access: 2022-02-08 12:01:23.915108068 +1100
Modify: 2021-11-10 01:43:01.000000000 +1100
Change: 2021-11-16 11:14:27.821588332 +1100
 Birth: 2021-11-16 11:14:27.820588346 +1100
exelanz commented 2 years ago

@saito-hideki @maxamillion please find here the output of the requested commands (problem persists):

[root@anakin firewalld]# rpm -qa|grep firewall firewalld-0.9.3-7.0.2.el8.noarch firewalld-filesystem-0.9.3-7.0.2.el8.noarch fail2ban-firewalld-0.11.2-1.el8.noarch python3-firewall-0.9.3-7.0.2.el8.noarch

[root@anakin firewalld]# rpm -V firewalld [root@anakin firewalld]#

[root@anakin firewalld]# rpm -V python-firewall package python-firewall is not installed [root@anakin firewalld]#

[root@anakin firewalld]# rpm -V python3-firewall [root@anakin firewalld]#

[root@anakin firewalld]# stat /etc/ File: /etc/ Size: 8192 Blocks: 24 IO Block: 4096 directory Device: fc00h/64512d Inode: 100663425 Links: 114 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Context: system_u:object_r:etc_t:s0 Access: 2022-02-19 22:33:01.321683620 +0100 Modify: 2022-02-19 22:08:49.991900688 +0100 Change: 2022-02-19 22:08:49.991900688 +0100 Birth: 2021-12-01 02:38:29.539797660 +0100

[root@anakin firewalld]# stat /etc/firewalld File: /etc/firewalld Size: 167 Blocks: 0 IO Block: 4096 directory Device: fc00h/64512d Inode: 67621562 Links: 8 Access: (0750/drwxr-x---) Uid: ( 0/ root) Gid: ( 0/ root) Context: system_u:object_r:firewalld_etc_rw_t:s0 Access: 2022-02-20 10:52:35.352116080 +0100 Modify: 2022-02-20 10:51:45.091187746 +0100 Change: 2022-02-20 10:51:45.091187746 +0100 Birth: 2021-12-01 02:40:11.683286699 +0100

[root@anakin firewalld]# stat /etc/firewalld/firewalld.conf File: /etc/firewalld/firewalld.conf Size: 2840 Blocks: 8 IO Block: 4096 regular file Device: fc00h/64512d Inode: 67621564 Links: 1 Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) Context: system_u:object_r:firewalld_etc_rw_t:s0 Access: 2022-02-19 19:27:34.941946623 +0100 Modify: 2021-11-12 13:44:07.000000000 +0100 Change: 2021-12-01 02:40:11.684284627 +0100 Birth: 2021-12-01 02:40:11.683286699 +0100

exelanz commented 2 years ago

Added error message:

TASK [Set Firewall services at anakin] **** ERROR: Failed to load '/etc/firewalld/firewalld.conf': [Errno 13] Permission denied: '/etc/firewalld/firewalld.conf' WARNING: [Errno 13] Permission denied: '/etc/firewalld/firewalld.conf' WARNING: Using fallback firewalld configuration settings.

exelanz commented 2 years ago

@saito-hideki @maxamillion please see above. Thanks.

saito-hideki commented 2 years ago

@exelanz is there any chance to provide the output of your playbook with -vvvv option?

exelanz commented 2 years ago

@saito-hideki here it is:

[vagrant@localhost anakin_code_ansible]$ ansible-playbook -i hosts -vvvv firewall_test.yml 
ansible-playbook 2.9.27
  config file = /etc/ansible/ansible.cfg
  configured module search path = ['/home/vagrant/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python3.6/site-packages/ansible
  executable location = /usr/bin/ansible-playbook
  python version = 3.6.8 (default, Nov 10 2021, 06:50:23) [GCC 8.5.0 20210514 (Red Hat 8.5.0-3.0.2)]
Using /etc/ansible/ansible.cfg as config file
setting up inventory plugins
host_list declined parsing /anakin_code_ansible/hosts as it did not pass its verify_file() method
script declined parsing /anakin_code_ansible/hosts as it did not pass its verify_file() method
auto declined parsing /anakin_code_ansible/hosts as it did not pass its verify_file() method
Set default localhost to localhost
Parsed /anakin_code_ansible/hosts inventory source with ini plugin
Loading callback plugin default of type stdout, v2.0 from /usr/lib/python3.6/site-packages/ansible/plugins/callback/default.py
Skipping callback 'actionable', as we already have a stdout callback.
Skipping callback 'counter_enabled', as we already have a stdout callback.
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'full_skip', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'null', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
Skipping callback 'selective', as we already have a stdout callback.
Skipping callback 'skippy', as we already have a stdout callback.
Skipping callback 'stderr', as we already have a stdout callback.
Skipping callback 'unixy', as we already have a stdout callback.
Skipping callback 'yaml', as we already have a stdout callback.

PLAYBOOK: firewall_test.yml *************************************************************************
Positional arguments: firewall_test.yml
verbosity: 4
connection: smart
timeout: 10
become_method: sudo
tags: ('all',)
inventory: ('/anakin_code_ansible/hosts',)
forks: 5
1 plays in firewall_test.yml
Read vars_file 'variables.yml'
Read vars_file 'variables.yml'
Read vars_file 'variables.yml'

PLAY [Setup Monit Monitoring] ***********************************************************************
Read vars_file 'variables.yml'

TASK [Gathering Facts] ******************************************************************************
task path: /anakin_code_ansible/firewall_test.yml:19
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'echo ~opc && sleep 0'"'"''
<anakin.schots.xyz> (0, b'/home/opc\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /home/opc/.ansible/tmp `"&& mkdir "` echo /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982 `" && echo ansible-tmp-1646744531.0491078-13544-126710528788982="` echo /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982 `" ) && sleep 0'"'"''
<anakin.schots.xyz> (0, b'ansible-tmp-1646744531.0491078-13544-126710528788982=/home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> Attempting python interpreter discovery
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'echo PLATFORM; uname; echo FOUND; command -v '"'"'"'"'"'"'"'"'/usr/bin/python'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.7'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.6'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.5'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python2.7'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python2.6'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'/usr/libexec/platform-python'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'/usr/bin/python3'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python'"'"'"'"'"'"'"'"'; echo ENDFOUND && sleep 0'"'"''
<anakin.schots.xyz> (0, b'PLATFORM\nLinux\nFOUND\n/usr/bin/python\n/usr/bin/python3.6\n/usr/bin/python2.7\n/usr/libexec/platform-python\n/usr/bin/python3\n/usr/bin/python\nENDFOUND\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'/usr/bin/python && sleep 0'"'"''
<anakin.schots.xyz> (0, b'{"platform_dist_result": ["oracle", "8.5", ""], "osrelease_content": "NAME=\\"Oracle Linux Server\\"\\nVERSION=\\"8.5\\"\\nID=\\"ol\\"\\nID_LIKE=\\"fedora\\"\\nVARIANT=\\"Server\\"\\nVARIANT_ID=\\"server\\"\\nVERSION_ID=\\"8.5\\"\\nPLATFORM_ID=\\"platform:el8\\"\\nPRETTY_NAME=\\"Oracle Linux Server 8.5\\"\\nANSI_COLOR=\\"0;31\\"\\nCPE_NAME=\\"cpe:/o:oracle:linux:8:5:server\\"\\nHOME_URL=\\"https://linux.oracle.com/\\"\\nBUG_REPORT_URL=\\"https://bugzilla.oracle.com/\\"\\n\\nORACLE_BUGZILLA_PRODUCT=\\"Oracle Linux 8\\"\\nORACLE_BUGZILLA_PRODUCT_VERSION=8.5\\nORACLE_SUPPORT_PRODUCT=\\"Oracle Linux\\"\\nORACLE_SUPPORT_PRODUCT_VERSION=8.5\\n"}\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> Python interpreter discovery fallback (unsupported Linux distribution: oracle)
Using module file /usr/lib/python3.6/site-packages/ansible/modules/system/setup.py
<anakin.schots.xyz> PUT /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmp9gmuxyi6 TO /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/AnsiballZ_setup.py
<anakin.schots.xyz> SSH: EXEC sftp -b - -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 '[anakin.schots.xyz]'
<anakin.schots.xyz> (0, b'sftp> put /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmp9gmuxyi6 /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/AnsiballZ_setup.py\n', b'OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for \'final all\' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched \'final\'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for \'final all\' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched \'final\'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug2: Remote version: 3\r\ndebug2: Server supports extension "posix-rename@openssh.com" revision 1\r\ndebug2: Server supports extension "statvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "fstatvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "hardlink@openssh.com" revision 1\r\ndebug2: Server supports extension "fsync@openssh.com" revision 1\r\ndebug2: Server supports extension "lsetstat@openssh.com" revision 1\r\ndebug3: Sent message fd 3 T:16 I:1\r\ndebug3: SSH_FXP_REALPATH . -> /home/opc size 0\r\ndebug3: Looking up /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmp9gmuxyi6\r\ndebug3: Sent message fd 3 T:17 I:2\r\ndebug3: Received stat reply T:101 I:2\r\ndebug1: Couldn\'t stat remote file: No such file or directory\r\ndebug3: Sent message SSH2_FXP_OPEN I:3 P:/home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/AnsiballZ_setup.py\r\ndebug3: Sent message SSH2_FXP_WRITE I:4 O:0 S:32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 4 32768 bytes at 0\r\ndebug3: Sent message SSH2_FXP_WRITE I:5 O:32768 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:6 O:65536 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:7 O:98304 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:8 O:131072 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:9 O:163840 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:10 O:196608 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:11 O:229376 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:12 O:262144 S:3634\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 5 32768 bytes at 32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 6 32768 bytes at 65536\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 7 32768 bytes at 98304\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 8 32768 bytes at 131072\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 9 32768 bytes at 163840\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 10 32768 bytes at 196608\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 11 32768 bytes at 229376\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 12 3634 bytes at 262144\r\ndebug3: Sent message SSH2_FXP_CLOSE I:4\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n')
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'chmod u+x /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/ /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/AnsiballZ_setup.py && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 -tt anakin.schots.xyz '/bin/sh -c '"'"'sudo -H -S -n  -u root /bin/sh -c '"'"'"'"'"'"'"'"'echo BECOME-SUCCESS-bieqatvylkmqeoltuwrrnkotzogbqykz ; /usr/bin/python /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/AnsiballZ_setup.py'"'"'"'"'"'"'"'"' && sleep 0'"'"''
Escalation succeeded
<anakin.schots.xyz> (0, b'\r\n{"ansible_facts": {"ansible_fips": false, "ansible_system": "Linux", "ansible_kernel": "5.4.17-2136.301.1.3.el8uek.x86_64", "ansible_kernel_version": "#2 SMP Mon Nov 29 21:03:24 PST 2021", "ansible_machine": "x86_64", "ansible_python_version": "3.6.8", "ansible_fqdn": "anakin.schots.net", "ansible_hostname": "anakin", "ansible_nodename": "anakin.schots.net", "ansible_domain": "schots.net", "ansible_userspace_bits": "64", "ansible_architecture": "x86_64", "ansible_userspace_architecture": "x86_64", "ansible_machine_id": "f9f1381a3630481c8487ab44b5fbc60e", "ansible_user_id": "root", "ansible_user_uid": 0, "ansible_user_gid": 0, "ansible_user_gecos": "root", "ansible_user_dir": "/root", "ansible_user_shell": "/bin/bash", "ansible_real_user_id": 0, "ansible_effective_user_id": 0, "ansible_real_group_id": 0, "ansible_effective_group_id": 0, "ansible_ssh_host_key_rsa_public": "AAAAB3NzaC1yc2EAAAADAQABAAABgQDKHwtEOd3q1cmPUIrSulMdE65kGfI1btzparfVo2MDHlv3O7RvpYIzXtXkhm0NhVrhwoNbiQWKpvuJ00cyPc2nPocxqYHY7F9Vm9qOFpjvVsO0RLjSIgjjXo397e+Q5LawJBNaJlZ0v7+qLwBpdwdRP0Y8wLflrlfZwp+zwBgi9XmfVSHP7ch1/kR2Oj6QGRC1ys7P3CfFwpygZwIdeQl/zEeKZZmqfipjpZbc+PcjNz4Tm9csaPsABAtaUxrgqFKYSqrIL8hkdknz+bihOTCL4Ec8n+S6TUHf4L841zXCQb75DfKprb8fR9VL6z10Fk18IZL7gEcGQcceMMkTaW5jzcNnk88ZbupZ6/BnlAe/nmf1FYPnjijzCZcDAdAXCyzY1ev3y7m6HtMtfqbHlTpfs5g9xlN/TMfkVTs0sHZTCbyoyiUQQjDS0YZ2Jq0rzQw7isBG5xYo417N2bEmX/3wAoCP+LgSLWt5r3VAH4YoJ5THa1oKQZ74byw9Y6xlM5s=", "ansible_ssh_host_key_ecdsa_public": "AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBK3pA34yb1qZkD2wnfRj6o8Im52oZds5icAGW5zx9DGwkswL8fSosjvJuQo70bvusFCNb9QRQjXFHkJE6/iWSo4=", "ansible_ssh_host_key_ed25519_public": "AAAAC3NzaC1lZDI1NTE5AAAAIHtUkXhj3gBZ+uVaCD5iDwRiFcX/E0mMMaftraDZT1v2", "ansible_fibre_channel_wwn": [], "ansible_env": {"LS_COLORS": "rs=0:di=38;5;33:ln=38;5;51:mh=00:pi=40;38;5;11:so=38;5;13:do=38;5;5:bd=48;5;232;38;5;11:cd=48;5;232;38;5;3:or=48;5;232;38;5;9:mi=01;05;37;41:su=48;5;196;38;5;15:sg=48;5;11;38;5;16:ca=48;5;196;38;5;226:tw=48;5;10;38;5;16:ow=48;5;10;38;5;21:st=48;5;21;38;5;15:ex=38;5;40:*.tar=38;5;9:*.tgz=38;5;9:*.arc=38;5;9:*.arj=38;5;9:*.taz=38;5;9:*.lha=38;5;9:*.lz4=38;5;9:*.lzh=38;5;9:*.lzma=38;5;9:*.tlz=38;5;9:*.txz=38;5;9:*.tzo=38;5;9:*.t7z=38;5;9:*.zip=38;5;9:*.z=38;5;9:*.dz=38;5;9:*.gz=38;5;9:*.lrz=38;5;9:*.lz=38;5;9:*.lzo=38;5;9:*.xz=38;5;9:*.zst=38;5;9:*.tzst=38;5;9:*.bz2=38;5;9:*.bz=38;5;9:*.tbz=38;5;9:*.tbz2=38;5;9:*.tz=38;5;9:*.deb=38;5;9:*.rpm=38;5;9:*.jar=38;5;9:*.war=38;5;9:*.ear=38;5;9:*.sar=38;5;9:*.rar=38;5;9:*.alz=38;5;9:*.ace=38;5;9:*.zoo=38;5;9:*.cpio=38;5;9:*.7z=38;5;9:*.rz=38;5;9:*.cab=38;5;9:*.wim=38;5;9:*.swm=38;5;9:*.dwm=38;5;9:*.esd=38;5;9:*.jpg=38;5;13:*.jpeg=38;5;13:*.mjpg=38;5;13:*.mjpeg=38;5;13:*.gif=38;5;13:*.bmp=38;5;13:*.pbm=38;5;13:*.pgm=38;5;13:*.ppm=38;5;13:*.tga=38;5;13:*.xbm=38;5;13:*.xpm=38;5;13:*.tif=38;5;13:*.tiff=38;5;13:*.png=38;5;13:*.svg=38;5;13:*.svgz=38;5;13:*.mng=38;5;13:*.pcx=38;5;13:*.mov=38;5;13:*.mpg=38;5;13:*.mpeg=38;5;13:*.m2v=38;5;13:*.mkv=38;5;13:*.webm=38;5;13:*.ogm=38;5;13:*.mp4=38;5;13:*.m4v=38;5;13:*.mp4v=38;5;13:*.vob=38;5;13:*.qt=38;5;13:*.nuv=38;5;13:*.wmv=38;5;13:*.asf=38;5;13:*.rm=38;5;13:*.rmvb=38;5;13:*.flc=38;5;13:*.avi=38;5;13:*.fli=38;5;13:*.flv=38;5;13:*.gl=38;5;13:*.dl=38;5;13:*.xcf=38;5;13:*.xwd=38;5;13:*.yuv=38;5;13:*.cgm=38;5;13:*.emf=38;5;13:*.ogv=38;5;13:*.ogx=38;5;13:*.aac=38;5;45:*.au=38;5;45:*.flac=38;5;45:*.m4a=38;5;45:*.mid=38;5;45:*.midi=38;5;45:*.mka=38;5;45:*.mp3=38;5;45:*.mpc=38;5;45:*.ogg=38;5;45:*.ra=38;5;45:*.wav=38;5;45:*.oga=38;5;45:*.opus=38;5;45:*.spx=38;5;45:*.xspf=38;5;45:", "LANG": "en_GB.UTF-8", "SUDO_GID": "1000", "SUDO_COMMAND": "/bin/sh -c echo BECOME-SUCCESS-bieqatvylkmqeoltuwrrnkotzogbqykz ; /usr/bin/python /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/AnsiballZ_setup.py", "USER": "root", "PWD": "/home/opc", "HOME": "/root", "SUDO_USER": "opc", "SUDO_UID": "1000", "MAIL": "/var/mail/root", "SHELL": "/bin/bash", "TERM": "xterm-256color", "SHLVL": "1", "LOGNAME": "root", "PATH": "/sbin:/bin:/usr/sbin:/usr/bin", "_": "/usr/bin/python"}, "ansible_virtualization_role": "guest", "ansible_virtualization_type": "kvm", "ansible_selinux_python_present": true, "ansible_selinux": {"status": "enabled", "policyvers": 31, "config_mode": "enforcing", "mode": "enforcing", "type": "targeted"}, "ansible_is_chroot": false, "ansible_apparmor": {"status": "disabled"}, "ansible_date_time": {"year": "2022", "month": "03", "weekday": "Tuesday", "weekday_number": "2", "weeknumber": "10", "day": "08", "hour": "14", "minute": "02", "second": "13", "epoch": "1646744533", "date": "2022-03-08", "time": "14:02:13", "iso8601_micro": "2022-03-08T13:02:13.075631Z", "iso8601": "2022-03-08T13:02:13Z", "iso8601_basic": "20220308T140213075631", "iso8601_basic_short": "20220308T140213", "tz": "CET", "tz_offset": "+0100"}, "ansible_local": {}, "ansible_cmdline": {"BOOT_IMAGE": "(hd0,gpt2)/vmlinuz-5.4.17-2136.301.1.3.el8uek.x86_64", "root": "/dev/mapper/ocivolume-root", "ro": true, "crashkernel": "auto", "LANG": "en_US.UTF-8", "console": "ttyS0,115200", "rd.luks": "0", "rd.md": "0", "rd.dm": "0", "rd.lvm.vg": "ocivolume", "rd.lvm.lv": "ocivolume/root", "rd.net.timeout.carrier": "5", "netroot": "iscsi:169.254.0.2:::1:iqn.2015-02.oracle.boot:uefi", "rd.iscsi.param": "node.session.timeo.replacement_timeout=6000", "net.ifnames": "1", "nvme_core.shutdown_timeout": "10", "ipmi_si.tryacpi": "0", "ipmi_si.trydmi": "0", "libiscsi.debug_libiscsi_eh": "1", "loglevel": "4", "ip": "single-dhcp", "crash_kexec_post_notifiers": true}, "ansible_proc_cmdline": {"BOOT_IMAGE": "(hd0,gpt2)/vmlinuz-5.4.17-2136.301.1.3.el8uek.x86_64", "root": "/dev/mapper/ocivolume-root", "ro": true, "crashkernel": "auto", "LANG": "en_US.UTF-8", "console": ["tty0", "ttyS0,115200"], "rd.luks": "0", "rd.md": "0", "rd.dm": "0", "rd.lvm.vg": "ocivolume", "rd.lvm.lv": "ocivolume/root", "rd.net.timeout.carrier": "5", "netroot": "iscsi:169.254.0.2:::1:iqn.2015-02.oracle.boot:uefi", "rd.iscsi.param": "node.session.timeo.replacement_timeout=6000", "net.ifnames": "1", "nvme_core.shutdown_timeout": "10", "ipmi_si.tryacpi": "0", "ipmi_si.trydmi": "0", "libiscsi.debug_libiscsi_eh": "1", "loglevel": "4", "ip": "single-dhcp", "crash_kexec_post_notifiers": true}, "ansible_distribution": "OracleLinux", "ansible_distribution_release": "NA", "ansible_distribution_version": "8.5", "ansible_distribution_major_version": "8", "ansible_distribution_file_path": "/etc/oracle-release", "ansible_distribution_file_variety": "OracleLinux", "ansible_distribution_file_parsed": true, "ansible_distribution_file_search_string": "Oracle Linux", "ansible_os_family": "RedHat", "ansible_dns": {"search": ["anakinvcn.oraclevcn.com", "schots.net"], "nameservers": ["169.254.169.254"]}, "ansible_system_capabilities_enforced": "True", "ansible_system_capabilities": ["cap_chown", "cap_dac_override", "cap_dac_read_search", "cap_fowner", "cap_fsetid", "cap_kill", "cap_setgid", "cap_setuid", "cap_setpcap", "cap_linux_immutable", "cap_net_bind_service", "cap_net_broadcast", "cap_net_admin", "cap_net_raw", "cap_ipc_lock", "cap_ipc_owner", "cap_sys_module", "cap_sys_rawio", "cap_sys_chroot", "cap_sys_ptrace", "cap_sys_pacct", "cap_sys_admin", "cap_sys_boot", "cap_sys_nice", "cap_sys_resource", "cap_sys_time", "cap_sys_tty_config", "cap_mknod", "cap_lease", "cap_audit_write", "cap_audit_control", "cap_setfcap", "cap_mac_override", "cap_mac_admin", "cap_syslog", "cap_wake_alarm", "cap_block_suspend", "cap_audit_read+ep"], "ansible_iscsi_iqn": "iqn.1988-12.com.oracle:d4d6cfe1c3d", "ansible_python": {"version": {"major": 3, "minor": 6, "micro": 8, "releaselevel": "final", "serial": 0}, "version_info": [3, 6, 8, "final", 0], "executable": "/usr/bin/python", "has_sslcontext": true, "type": "cpython"}, "ansible_pkg_mgr": "dnf", "ansible_lsb": {}, "ansible_hostnqn": "nqn.2014-08.org.nvmexpress:uuid:080020ff-ffff-ffff-ffff-0010e0bf1a7e", "ansible_interfaces": ["lo", "ens3"], "ansible_lo": {"device": "lo", "mtu": 65536, "active": true, "type": "loopback", "promisc": false, "ipv4": {"address": "127.0.0.1", "broadcast": "", "netmask": "255.0.0.0", "network": "127.0.0.0"}, "ipv6": [{"address": "::1", "prefix": "128", "scope": "host"}], "features": {"rx_checksumming": "on [fixed]", "tx_checksumming": "on", "tx_checksum_ipv4": "off [fixed]", "tx_checksum_ip_generic": "on [fixed]", "tx_checksum_ipv6": "off [fixed]", "tx_checksum_fcoe_crc": "off [fixed]", "tx_checksum_sctp": "on [fixed]", "scatter_gather": "on", "tx_scatter_gather": "on [fixed]", "tx_scatter_gather_fraglist": "on [fixed]", "tcp_segmentation_offload": "on", "tx_tcp_segmentation": "on", "tx_tcp_ecn_segmentation": "on", "tx_tcp_mangleid_segmentation": "on", "tx_tcp6_segmentation": "on", "generic_segmentation_offload": "on", "generic_receive_offload": "on", "large_receive_offload": "off [fixed]", "rx_vlan_offload": "off [fixed]", "tx_vlan_offload": "off [fixed]", "ntuple_filters": "off [fixed]", "receive_hashing": "off [fixed]", "highdma": "on [fixed]", "rx_vlan_filter": "off [fixed]", "vlan_challenged": "on [fixed]", "tx_lockless": "on [fixed]", "netns_local": "on [fixed]", "tx_gso_robust": "off [fixed]", "tx_fcoe_segmentation": "off [fixed]", "tx_gre_segmentation": "off [fixed]", "tx_gre_csum_segmentation": "off [fixed]", "tx_ipxip4_segmentation": "off [fixed]", "tx_ipxip6_segmentation": "off [fixed]", "tx_udp_tnl_segmentation": "off [fixed]", "tx_udp_tnl_csum_segmentation": "off [fixed]", "tx_gso_partial": "off [fixed]", "tx_sctp_segmentation": "on", "tx_esp_segmentation": "off [fixed]", "tx_udp_segmentation": "off [fixed]", "fcoe_mtu": "off [fixed]", "tx_nocache_copy": "off [fixed]", "loopback": "on [fixed]", "rx_fcs": "off [fixed]", "rx_all": "off [fixed]", "tx_vlan_stag_hw_insert": "off [fixed]", "rx_vlan_stag_hw_parse": "off [fixed]", "rx_vlan_stag_filter": "off [fixed]", "l2_fwd_offload": "off [fixed]", "hw_tc_offload": "off [fixed]", "esp_hw_offload": "off [fixed]", "esp_tx_csum_hw_offload": "off [fixed]", "rx_udp_tunnel_port_offload": "off [fixed]", "tls_hw_tx_offload": "off [fixed]", "tls_hw_rx_offload": "off [fixed]", "rx_gro_hw": "off [fixed]", "tls_hw_record": "off [fixed]", "rx_gro_list": "off [fixed]"}, "timestamping": ["tx_software", "rx_software", "software"], "hw_timestamp_filters": []}, "ansible_ens3": {"device": "ens3", "macaddress": "02:00:17:02:34:e2", "mtu": 9000, "active": true, "module": "virtio_net", "type": "ether", "pciid": "virtio0", "speed": -1, "promisc": false, "ipv4": {"address": "10.0.0.41", "broadcast": "10.0.0.255", "netmask": "255.255.255.0", "network": "10.0.0.0"}, "ipv6": [{"address": "fe80::17ff:fe02:34e2", "prefix": "64", "scope": "link"}], "features": {"rx_checksumming": "on [fixed]", "tx_checksumming": "on", "tx_checksum_ipv4": "off [fixed]", "tx_checksum_ip_generic": "on", "tx_checksum_ipv6": "off [fixed]", "tx_checksum_fcoe_crc": "off [fixed]", "tx_checksum_sctp": "off [fixed]", "scatter_gather": "on", "tx_scatter_gather": "on", "tx_scatter_gather_fraglist": "off [fixed]", "tcp_segmentation_offload": "on", "tx_tcp_segmentation": "on", "tx_tcp_ecn_segmentation": "on", "tx_tcp_mangleid_segmentation": "off", "tx_tcp6_segmentation": "on", "generic_segmentation_offload": "on", "generic_receive_offload": "on", "large_receive_offload": "off [fixed]", "rx_vlan_offload": "off [fixed]", "tx_vlan_offload": "off [fixed]", "ntuple_filters": "off [fixed]", "receive_hashing": "off [fixed]", "highdma": "on [fixed]", "rx_vlan_filter": "on [fixed]", "vlan_challenged": "off [fixed]", "tx_lockless": "off [fixed]", "netns_local": "off [fixed]", "tx_gso_robust": "on [fixed]", "tx_fcoe_segmentation": "off [fixed]", "tx_gre_segmentation": "off [fixed]", "tx_gre_csum_segmentation": "off [fixed]", "tx_ipxip4_segmentation": "off [fixed]", "tx_ipxip6_segmentation": "off [fixed]", "tx_udp_tnl_segmentation": "off [fixed]", "tx_udp_tnl_csum_segmentation": "off [fixed]", "tx_gso_partial": "off [fixed]", "tx_sctp_segmentation": "off [fixed]", "tx_esp_segmentation": "off [fixed]", "tx_udp_segmentation": "off [fixed]", "fcoe_mtu": "off [fixed]", "tx_nocache_copy": "off", "loopback": "off [fixed]", "rx_fcs": "off [fixed]", "rx_all": "off [fixed]", "tx_vlan_stag_hw_insert": "off [fixed]", "rx_vlan_stag_hw_parse": "off [fixed]", "rx_vlan_stag_filter": "off [fixed]", "l2_fwd_offload": "off [fixed]", "hw_tc_offload": "off [fixed]", "esp_hw_offload": "off [fixed]", "esp_tx_csum_hw_offload": "off [fixed]", "rx_udp_tunnel_port_offload": "off [fixed]", "tls_hw_tx_offload": "off [fixed]", "tls_hw_rx_offload": "off [fixed]", "rx_gro_hw": "on", "tls_hw_record": "off [fixed]", "rx_gro_list": "off [fixed]"}, "timestamping": ["tx_software", "rx_software", "software"], "hw_timestamp_filters": []}, "ansible_default_ipv4": {"gateway": "10.0.0.1", "interface": "ens3", "address": "10.0.0.41", "broadcast": "10.0.0.255", "netmask": "255.255.255.0", "network": "10.0.0.0", "macaddress": "02:00:17:02:34:e2", "mtu": 9000, "type": "ether", "alias": "ens3"}, "ansible_default_ipv6": {}, "ansible_all_ipv4_addresses": ["10.0.0.41"], "ansible_all_ipv6_addresses": ["fe80::17ff:fe02:34e2"], "ansible_processor": ["0", "AuthenticAMD", "AMD EPYC 7J13 64-Core Processor", "1", "AuthenticAMD", "AMD EPYC 7J13 64-Core Processor"], "ansible_processor_count": 1, "ansible_processor_cores": 1, "ansible_processor_threads_per_core": 2, "ansible_processor_vcpus": 2, "ansible_memtotal_mb": 1689, "ansible_memfree_mb": 265, "ansible_swaptotal_mb": 2047, "ansible_swapfree_mb": 263, "ansible_memory_mb": {"real": {"total": 1689, "used": 1424, "free": 265}, "nocache": {"free": 892, "used": 797}, "swap": {"total": 2047, "free": 263, "used": 1784, "cached": 89}}, "ansible_bios_date": "06/16/2021", "ansible_bios_version": "1.5.1", "ansible_form_factor": "Other", "ansible_product_name": "Standard PC (i440FX + PIIX, 1996)", "ansible_product_serial": "NA", "ansible_product_uuid": "f9f1381a-3630-481c-8487-ab44b5fbc60e", "ansible_product_version": "pc-i440fx-4.2", "ansible_system_vendor": "QEMU", "ansible_devices": {"dm-1": {"virtual": 1, "links": {"ids": ["dm-name-ocivolume-oled", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvHWBDgo9u2z1vVZfhVaHdmQiYq9roB7EF"], "uuids": ["a8c9a3f3-5052-445e-8868-5c1249ae071e"], "labels": [], "masters": []}, "vendor": null, "model": null, "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "partitions": {}, "rotational": "1", "scheduler_mode": "", "sectors": "20971520", "sectorsize": "512", "size": "10.00 GB", "host": "", "holders": []}, "sdb": {"virtual": 1, "links": {"ids": ["scsi-3606a8a8864604d04876611a28c99e0c3", "wwn-0x606a8a8864604d04876611a28c99e0c3"], "uuids": [], "labels": [], "masters": []}, "vendor": "ORACLE", "model": "BlockVolume", "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "wwn": "0x606a8a8864604d04876611a28c99e0c3", "partitions": {}, "rotational": "1", "scheduler_mode": "mq-deadline", "sectors": "209715200", "sectorsize": "512", "size": "100.00 GB", "host": "SCSI storage controller: Red Hat, Inc. Virtio SCSI", "holders": []}, "dm-0": {"virtual": 1, "links": {"ids": ["dm-name-ocivolume-root", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvUgBP51Axc7NmH0DR27wo9pUZLeCPTJuX"], "uuids": ["25dae1d1-c678-45b2-bd0c-c308e8c950cc"], "labels": [], "masters": []}, "vendor": null, "model": null, "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "partitions": {}, "rotational": "1", "scheduler_mode": "", "sectors": "74391552", "sectorsize": "512", "size": "35.47 GB", "host": "", "holders": []}, "sda": {"virtual": 1, "links": {"ids": ["scsi-360be2f00009b428389342872ef3fc878", "wwn-0x60be2f00009b428389342872ef3fc878"], "uuids": [], "labels": [], "masters": []}, "vendor": "ORACLE", "model": "BlockVolume", "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "wwn": "0x60be2f00009b428389342872ef3fc878", "partitions": {"sda2": {"links": {"ids": ["scsi-360be2f00009b428389342872ef3fc878-part2", "wwn-0x60be2f00009b428389342872ef3fc878-part2"], "uuids": ["70b15dc2-5ada-4399-9df5-b48c348cd4f1"], "labels": [], "masters": []}, "start": "206848", "sectors": "2097152", "sectorsize": 512, "size": "1.00 GB", "uuid": "70b15dc2-5ada-4399-9df5-b48c348cd4f1", "holders": []}, "sda3": {"links": {"ids": ["lvm-pv-uuid-VxgtY1-3gar-4ACy-JeJI-YAJf-A7MK-gFdAOT", "scsi-360be2f00009b428389342872ef3fc878-part3", "wwn-0x60be2f00009b428389342872ef3fc878-part3"], "uuids": [], "labels": [], "masters": ["dm-0", "dm-1"]}, "start": "2304000", "sectors": "95371264", "sectorsize": 512, "size": "45.48 GB", "uuid": null, "holders": ["ocivolume-oled", "ocivolume-root"]}, "sda1": {"links": {"ids": ["scsi-360be2f00009b428389342872ef3fc878-part1", "wwn-0x60be2f00009b428389342872ef3fc878-part1"], "uuids": ["20D9-FA96"], "labels": [], "masters": []}, "start": "2048", "sectors": "204800", "sectorsize": 512, "size": "100.00 MB", "uuid": "20D9-FA96", "holders": []}}, "rotational": "1", "scheduler_mode": "mq-deadline", "sectors": "97677312", "sectorsize": "512", "size": "46.58 GB", "host": "SCSI storage controller: Red Hat, Inc. Virtio SCSI", "holders": []}}, "ansible_device_links": {"ids": {"sdb": ["scsi-3606a8a8864604d04876611a28c99e0c3", "wwn-0x606a8a8864604d04876611a28c99e0c3"], "dm-1": ["dm-name-ocivolume-oled", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvHWBDgo9u2z1vVZfhVaHdmQiYq9roB7EF"], "dm-0": ["dm-name-ocivolume-root", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvUgBP51Axc7NmH0DR27wo9pUZLeCPTJuX"], "sda2": ["scsi-360be2f00009b428389342872ef3fc878-part2", "wwn-0x60be2f00009b428389342872ef3fc878-part2"], "sda1": ["scsi-360be2f00009b428389342872ef3fc878-part1", "wwn-0x60be2f00009b428389342872ef3fc878-part1"], "sda3": ["lvm-pv-uuid-VxgtY1-3gar-4ACy-JeJI-YAJf-A7MK-gFdAOT", "scsi-360be2f00009b428389342872ef3fc878-part3", "wwn-0x60be2f00009b428389342872ef3fc878-part3"], "sda": ["scsi-360be2f00009b428389342872ef3fc878", "wwn-0x60be2f00009b428389342872ef3fc878"]}, "uuids": {"dm-1": ["a8c9a3f3-5052-445e-8868-5c1249ae071e"], "dm-0": ["25dae1d1-c678-45b2-bd0c-c308e8c950cc"], "sda2": ["70b15dc2-5ada-4399-9df5-b48c348cd4f1"], "sda1": ["20D9-FA96"]}, "labels": {}, "masters": {"sda3": ["dm-0", "dm-1"]}}, "ansible_uptime_seconds": 443185, "ansible_lvm": {"lvs": {"oled": {"size_g": "10.00", "vg": "ocivolume"}, "root": {"size_g": "35.47", "vg": "ocivolume"}}, "vgs": {"ocivolume": {"size_g": "45.47", "free_g": "0", "num_lvs": "2", "num_pvs": "1"}}, "pvs": {"/dev/sda3": {"size_g": "45.47", "free_g": "0", "vg": "ocivolume"}}}, "ansible_mounts": [{"mount": "/", "device": "/dev/mapper/ocivolume-root", "fstype": "xfs", "options": "rw,seclabel,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota", "size_total": 38069878784, "size_available": 29174411264, "block_size": 4096, "block_total": 9294404, "block_available": 7122659, "block_used": 2171745, "inode_total": 18597888, "inode_available": 18429530, "inode_used": 168358, "uuid": "25dae1d1-c678-45b2-bd0c-c308e8c950cc"}, {"mount": "/boot", "device": "/dev/sda2", "fstype": "xfs", "options": "rw,seclabel,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota", "size_total": 1063256064, "size_available": 747925504, "block_size": 4096, "block_total": 259584, "block_available": 182599, "block_used": 76985, "inode_total": 524288, "inode_available": 524262, "inode_used": 26, "uuid": "70b15dc2-5ada-4399-9df5-b48c348cd4f1"}, {"mount": "/var/oled", "device": "/dev/mapper/ocivolume-oled", "fstype": "xfs", "options": "rw,seclabel,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota", "size_total": 10726932480, "size_available": 10602401792, "block_size": 4096, "block_total": 2618880, "block_available": 2588477, "block_used": 30403, "inode_total": 5242880, "inode_available": 5242166, "inode_used": 714, "uuid": "a8c9a3f3-5052-445e-8868-5c1249ae071e"}, {"mount": "/boot/efi", "device": "/dev/sda1", "fstype": "vfat", "options": "rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=winnt,errors=remount-ro", "size_total": 104634368, "size_available": 99350528, "block_size": 2048, "block_total": 51091, "block_available": 48511, "block_used": 2580, "inode_total": 0, "inode_available": 0, "inode_used": 0, "uuid": "20D9-FA96"}], "ansible_service_mgr": "systemd", "gather_subset": ["all"], "module_setup": true}, "invocation": {"module_args": {"gather_subset": ["all"], "gather_timeout": 10, "filter": "*", "fact_path": "/etc/ansible/facts.d"}}}\r\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\nShared connection to anakin.schots.xyz closed.\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'rm -f -r /home/opc/.ansible/tmp/ansible-tmp-1646744531.0491078-13544-126710528788982/ > /dev/null 2>&1 && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
[WARNING]: Platform linux on host anakin.schots.xyz is using the discovered Python interpreter at
/usr/bin/python, but future installation of another Python interpreter could change this. See
https://docs.ansible.com/ansible/2.9/reference_appendices/interpreter_discovery.html for more
information.
ok: [anakin.schots.xyz]
META: ran handlers
Read vars_file 'variables.yml'

TASK [ansible.posix.firewalld] **********************************************************************
task path: /anakin_code_ansible/firewall_test.yml:25
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'echo ~opc && sleep 0'"'"''
<anakin.schots.xyz> (0, b'/home/opc\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /home/opc/.ansible/tmp `"&& mkdir "` echo /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420 `" && echo ansible-tmp-1646744533.8097765-13555-7696519113420="` echo /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420 `" ) && sleep 0'"'"''
<anakin.schots.xyz> (0, b'ansible-tmp-1646744533.8097765-13555-7696519113420=/home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
ERROR: Failed to load '/etc/firewalld/firewalld.conf': [Errno 13] Permission denied: '/etc/firewalld/firewalld.conf'
WARNING: [Errno 13] Permission denied: '/etc/firewalld/firewalld.conf'
WARNING: Using fallback firewalld configuration settings.
Using module file /home/vagrant/.ansible/collections/ansible_collections/ansible/posix/plugins/modules/firewalld.py
<anakin.schots.xyz> PUT /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmpxb1niha9 TO /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py
<anakin.schots.xyz> SSH: EXEC sftp -b - -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 '[anakin.schots.xyz]'
<anakin.schots.xyz> (0, b'sftp> put /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmpxb1niha9 /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py\n', b'OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for \'final all\' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched \'final\'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for \'final all\' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched \'final\'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug2: Remote version: 3\r\ndebug2: Server supports extension "posix-rename@openssh.com" revision 1\r\ndebug2: Server supports extension "statvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "fstatvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "hardlink@openssh.com" revision 1\r\ndebug2: Server supports extension "fsync@openssh.com" revision 1\r\ndebug2: Server supports extension "lsetstat@openssh.com" revision 1\r\ndebug3: Sent message fd 3 T:16 I:1\r\ndebug3: SSH_FXP_REALPATH . -> /home/opc size 0\r\ndebug3: Looking up /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmpxb1niha9\r\ndebug3: Sent message fd 3 T:17 I:2\r\ndebug3: Received stat reply T:101 I:2\r\ndebug1: Couldn\'t stat remote file: No such file or directory\r\ndebug3: Sent message SSH2_FXP_OPEN I:3 P:/home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py\r\ndebug3: Sent message SSH2_FXP_WRITE I:4 O:0 S:32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 4 32768 bytes at 0\r\ndebug3: Sent message SSH2_FXP_WRITE I:5 O:32768 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:6 O:65536 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:7 O:98304 S:27795\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 5 32768 bytes at 32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 6 32768 bytes at 65536\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 7 27795 bytes at 98304\r\ndebug3: Sent message SSH2_FXP_CLOSE I:4\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n')
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'chmod u+x /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/ /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 -tt anakin.schots.xyz '/bin/sh -c '"'"'sudo -H -S -n  -u root /bin/sh -c '"'"'"'"'"'"'"'"'echo BECOME-SUCCESS-uhpesujubadaeydvtmrwmlqmnoznkwcc ; /usr/bin/python /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py'"'"'"'"'"'"'"'"' && sleep 0'"'"''
Escalation succeeded
<anakin.schots.xyz> (0, b'\r\n{"changed": true, "msg": "Permanent and Non-Permanent(immediate) operation, Changed port 2812-2812/tcp to enabled", "invocation": {"module_args": {"port": "2812-2812/tcp", "permanent": true, "state": "enabled", "immediate": true, "timeout": 0, "icmp_block": null, "icmp_block_inversion": null, "service": null, "port_forward": null, "rich_rule": null, "zone": null, "source": null, "interface": null, "masquerade": null, "offline": null, "target": null}}}\r\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\nShared connection to anakin.schots.xyz closed.\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 anakin.schots.xyz '/bin/sh -c '"'"'rm -f -r /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/ > /dev/null 2>&1 && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: not matched 'final'\r\ndebug2: match not found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: configuration requests final Match pass\r\ndebug1: re-parsing configuration\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug2: checking match for 'final all' host anakin.schots.xyz originally anakin.schots.xyz\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 3: matched 'final'\r\ndebug2: match found\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 13537\r\ndebug3: mux_client_request_session: session request sent\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
changed: [anakin.schots.xyz] => {
    "changed": true,
    "invocation": {
        "module_args": {
            "icmp_block": null,
            "icmp_block_inversion": null,
            "immediate": true,
            "interface": null,
            "masquerade": null,
            "offline": null,
            "permanent": true,
            "port": "2812-2812/tcp",
            "port_forward": null,
            "rich_rule": null,
            "service": null,
            "source": null,
            "state": "enabled",
            "target": null,
            "timeout": 0,
            "zone": null
        }
    },
    "msg": "Permanent and Non-Permanent(immediate) operation, Changed port 2812-2812/tcp to enabled"
}
META: ran handlers
META: ran handlers

PLAY RECAP ******************************************************************************************
anakin.schots.xyz          : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
saito-hideki commented 2 years ago

@exelanz thank you for the playbook output. Sorry if I missed something but looking at the verbosity 4 level output, it seems that the error(Errno 13] Permission denied: '/etc/firewalld/firewalld.conf) occurred around the transmit AnsiballZ file process(sftp). So I think the cause of this problem is possibly outside of firewalld module:

...snip...
debug3: mux_client_request_alive: done pid = 13537\r\n
debug3: mux_client_request_session: session request sent\r\n
debug3: mux_client_read_packet: read header failed: Broken pipe\r\n
debug2: Received exit status from master 0\r\n")
ERROR: Failed to load '/etc/firewalld/firewalld.conf': [Errno 13] Permission denied: '/etc/firewalld/firewalld.conf'
WARNING: [Errno 13] Permission denied: '/etc/firewalld/firewalld.conf'
WARNING: Using fallback firewalld configuration settings.
Using module file /home/vagrant/.ansible/collections/ansible_collections/ansible/posix/plugins/modules/firewalld.py
<anakin.schots.xyz> PUT /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmpxb1niha9 TO /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py
<anakin.schots.xyz> SSH: EXEC sftp -b - -vvv \
-C \
-o ControlMaster=auto \
-o ControlPersist=60s \
-o KbdInteractiveAuthentication=no \
-o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey \
-o PasswordAuthentication=no \
-o 'User="opc"' \
-o ConnectTimeout=10 \
-o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 '[anakin.schots.xyz]'
<anakin.schots.xyz> (0, b'sftp> put /home/vagrant/.ansible/tmp/ansible-local-13538kmo7emoj/tmpxb1niha9 /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py\n', b'OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\n
debug1: Reading configuration data /etc/ssh/ssh_config\r\n
debug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\n
debug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\n
debug2: checking match for \'final all\' host anakin.schots.xyz originally anakin.schots.xyz\r\n
...snip...

Eventually, firewalld module succeeded without any issues like below:

...snip...
debug3: mux_client_request_alive: entering\r\n
debug3: mux_client_request_alive: done pid = 13537\r\n
debug3: mux_client_request_session: session request sent\r\n
debug3: mux_client_read_packet: read header failed: Broken pipe\r\n
debug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C \
-o ControlMaster=auto \
-o ControlPersist=60s \
-o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no \
-o 'User="opc"' \
-o ConnectTimeout=10 \
-o ControlPath=/home/vagrant/.ansible/cp/b482d96a35 -tt anakin.schots.xyz \
'/bin/sh -c '"'"'sudo -H -S -n  -u root /bin/sh -c '"'"'"'"'"'"'"'"'echo BECOME-SUCCESS-uhpesujubadaeydvtmrwmlqmnoznkwcc ; /usr/bin/python /home/opc/.ansible/tmp/ansible-tmp-1646744533.8097765-13555-7696519113420/AnsiballZ_firewalld.py'"'"'"'"'"'"'"'"' && sleep 0'"'"''
Escalation succeeded
<anakin.schots.xyz> (0, b'\r\n{"changed": true, "msg": "Permanent and Non-Permanent(immediate) operation, Changed port 2812-2812/tcp to enabled", "invocation": {"module_args": {"port": "2812-2812/tcp", "permanent": true, "state": "enabled", "immediate": true, "timeout": 0, "icmp_block": null, "icmp_block_inversion": null, "service": null, "port_forward": null, "rich_rule": null, "zone": null, "source": null, "interface": null, "masquerade": null, "offline": null, "target": null}}}\r\n', b"OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021\r\n
...snip...

@maxamillion @Akasurde What do you guys think about this error?

exelanz commented 2 years ago

@saito-hideki I have ran the playbook on my Mac and the error did not occur. Maybe some issue with Linux OS I am using normally? I have included -vvvv output for your reference:

ansible-playbook -i hosts -vvvv firewall_test.yml
ansible-playbook [core 2.12.2]
  config file = None
  configured module search path = ['/Users/arnoschots/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/Cellar/ansible/5.3.0/libexec/lib/python3.10/site-packages/ansible
  ansible collection location = /Users/arnoschots/.ansible/collections:/usr/share/ansible/collections
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.10.2 (main, Feb  2 2022, 06:19:27) [Clang 13.0.0 (clang-1300.0.29.3)]
  jinja version = 3.0.3
  libyaml = True
No config file found; using defaults
setting up inventory plugins
host_list declined parsing /Users/arnoschots/DevelopmentLab/anakin.schots.net/hosts as it did not pass its verify_file() method
script declined parsing /Users/arnoschots/DevelopmentLab/anakin.schots.net/hosts as it did not pass its verify_file() method
auto declined parsing /Users/arnoschots/DevelopmentLab/anakin.schots.net/hosts as it did not pass its verify_file() method
Set default localhost to localhost
Parsed /Users/arnoschots/DevelopmentLab/anakin.schots.net/hosts inventory source with ini plugin
Loading collection ansible.posix from /usr/local/Cellar/ansible/5.3.0/libexec/lib/python3.10/site-packages/ansible_collections/ansible/posix
Loading callback plugin default of type stdout, v2.0 from /usr/local/Cellar/ansible/5.3.0/libexec/lib/python3.10/site-packages/ansible/plugins/callback/default.py
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.

PLAYBOOK: firewall_test.yml *****************************************************************************************************
Positional arguments: firewall_test.yml
verbosity: 4
connection: smart
timeout: 10
become_method: sudo
tags: ('all',)
inventory: ('/Users/arnoschots/DevelopmentLab/anakin.schots.net/hosts',)
forks: 5
1 plays in firewall_test.yml
Read vars_file 'variables.yml'
Read vars_file 'variables.yml'
Read vars_file 'variables.yml'

PLAY [Setup Monit Monitoring] ***************************************************************************************************
Read vars_file 'variables.yml'

TASK [Gathering Facts] **********************************************************************************************************
task path: /Users/arnoschots/DevelopmentLab/anakin.schots.net/firewall_test.yml:19
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'echo ~opc && sleep 0'"'"''
<anakin.schots.xyz> (0, b'/home/opc\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /home/opc/.ansible/tmp `"&& mkdir "` echo /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653 `" && echo ansible-tmp-1646829438.5634298-11588-86585488773653="` echo /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653 `" ) && sleep 0'"'"''
<anakin.schots.xyz> (0, b'ansible-tmp-1646829438.5634298-11588-86585488773653=/home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> Attempting python interpreter discovery
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'echo PLATFORM; uname; echo FOUND; command -v '"'"'"'"'"'"'"'"'python3.10'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.9'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.8'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.7'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.6'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python3.5'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'/usr/bin/python3'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'/usr/libexec/platform-python'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python2.7'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python2.6'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'/usr/bin/python'"'"'"'"'"'"'"'"'; command -v '"'"'"'"'"'"'"'"'python'"'"'"'"'"'"'"'"'; echo ENDFOUND && sleep 0'"'"''
<anakin.schots.xyz> (0, b'PLATFORM\nLinux\nFOUND\n/usr/bin/python3.6\n/usr/bin/python3\n/usr/libexec/platform-python\n/usr/bin/python2.7\n/usr/bin/python\n/usr/bin/python\nENDFOUND\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'/usr/bin/python3.6 && sleep 0'"'"''
<anakin.schots.xyz> (0, b'{"platform_dist_result": ["oracle", "8.5", ""], "osrelease_content": "NAME=\\"Oracle Linux Server\\"\\nVERSION=\\"8.5\\"\\nID=\\"ol\\"\\nID_LIKE=\\"fedora\\"\\nVARIANT=\\"Server\\"\\nVARIANT_ID=\\"server\\"\\nVERSION_ID=\\"8.5\\"\\nPLATFORM_ID=\\"platform:el8\\"\\nPRETTY_NAME=\\"Oracle Linux Server 8.5\\"\\nANSI_COLOR=\\"0;31\\"\\nCPE_NAME=\\"cpe:/o:oracle:linux:8:5:server\\"\\nHOME_URL=\\"https://linux.oracle.com/\\"\\nBUG_REPORT_URL=\\"https://bugzilla.oracle.com/\\"\\n\\nORACLE_BUGZILLA_PRODUCT=\\"Oracle Linux 8\\"\\nORACLE_BUGZILLA_PRODUCT_VERSION=8.5\\nORACLE_SUPPORT_PRODUCT=\\"Oracle Linux\\"\\nORACLE_SUPPORT_PRODUCT_VERSION=8.5\\n"}\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
Using module file /usr/local/Cellar/ansible/5.3.0/libexec/lib/python3.10/site-packages/ansible/modules/setup.py
<anakin.schots.xyz> PUT /Users/arnoschots/.ansible/tmp/ansible-local-1158562p6xxbf/tmpwcjqsql0 TO /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/AnsiballZ_setup.py
<anakin.schots.xyz> SSH: EXEC sftp -b - -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' '[anakin.schots.xyz]'
<anakin.schots.xyz> (0, b'sftp> put /Users/arnoschots/.ansible/tmp/ansible-local-1158562p6xxbf/tmpwcjqsql0 /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/AnsiballZ_setup.py\n', b'OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile \'~/.ssh/known_hosts\' -> \'/Users/arnoschots/.ssh/known_hosts\'\r\ndebug3: expanded UserKnownHostsFile \'~/.ssh/known_hosts2\' -> \'/Users/arnoschots/.ssh/known_hosts2\'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug2: Remote version: 3\r\ndebug2: Server supports extension "posix-rename@openssh.com" revision 1\r\ndebug2: Server supports extension "statvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "fstatvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "hardlink@openssh.com" revision 1\r\ndebug2: Server supports extension "fsync@openssh.com" revision 1\r\ndebug2: Server supports extension "lsetstat@openssh.com" revision 1\r\ndebug3: Sent message fd 3 T:16 I:1\r\ndebug3: SSH_FXP_REALPATH . -> /home/opc size 0\r\ndebug3: Looking up /Users/arnoschots/.ansible/tmp/ansible-local-1158562p6xxbf/tmpwcjqsql0\r\ndebug3: Sent message fd 3 T:17 I:2\r\ndebug3: Received stat reply T:101 I:2\r\ndebug1: Couldn\'t stat remote file: No such file or directory\r\ndebug3: Sent message SSH2_FXP_OPEN I:3 P:/home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/AnsiballZ_setup.py\r\ndebug3: Sent message SSH2_FXP_WRITE I:4 O:0 S:32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 4 32768 bytes at 0\r\ndebug3: Sent message SSH2_FXP_WRITE I:5 O:32768 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:6 O:65536 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:7 O:98304 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:8 O:131072 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:9 O:163840 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:10 O:196608 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:11 O:229376 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:12 O:262144 S:29785\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 5 32768 bytes at 32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 6 32768 bytes at 65536\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 7 32768 bytes at 98304\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 8 32768 bytes at 131072\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 9 32768 bytes at 163840\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 10 32768 bytes at 196608\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 11 32768 bytes at 229376\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 12 29785 bytes at 262144\r\ndebug3: Sent message SSH2_FXP_CLOSE I:4\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n')
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'chmod u+x /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/ /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/AnsiballZ_setup.py && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' -tt anakin.schots.xyz '/bin/sh -c '"'"'sudo -H -S -n  -u root /bin/sh -c '"'"'"'"'"'"'"'"'echo BECOME-SUCCESS-niceqcvgkicorxotgwxtdmacfpwevdaa ; /usr/libexec/platform-python /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/AnsiballZ_setup.py'"'"'"'"'"'"'"'"' && sleep 0'"'"''
Escalation succeeded
<anakin.schots.xyz> (0, b'\r\n{"ansible_facts": {"ansible_system": "Linux", "ansible_kernel": "5.4.17-2136.301.1.3.el8uek.x86_64", "ansible_kernel_version": "#2 SMP Mon Nov 29 21:03:24 PST 2021", "ansible_machine": "x86_64", "ansible_python_version": "3.6.8", "ansible_fqdn": "anakin.schots.net", "ansible_hostname": "anakin", "ansible_nodename": "anakin.schots.net", "ansible_domain": "schots.net", "ansible_userspace_bits": "64", "ansible_architecture": "x86_64", "ansible_userspace_architecture": "x86_64", "ansible_machine_id": "f9f1381a3630481c8487ab44b5fbc60e", "ansible_hostnqn": "nqn.2014-08.org.nvmexpress:uuid:080020ff-ffff-ffff-ffff-0010e0bf1a7e", "ansible_ssh_host_key_rsa_public": "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", "ansible_ssh_host_key_rsa_public_keytype": "ssh-rsa", "ansible_ssh_host_key_ecdsa_public": "AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBK3pA34yb1qZkD2wnfRj6o8Im52oZds5icAGW5zx9DGwkswL8fSosjvJuQo70bvusFCNb9QRQjXFHkJE6/iWSo4=", "ansible_ssh_host_key_ecdsa_public_keytype": "ecdsa-sha2-nistp256", "ansible_ssh_host_key_ed25519_public": "AAAAC3NzaC1lZDI1NTE5AAAAIHtUkXhj3gBZ+uVaCD5iDwRiFcX/E0mMMaftraDZT1v2", "ansible_ssh_host_key_ed25519_public_keytype": "ssh-ed25519", "ansible_virtualization_role": "guest", "ansible_virtualization_type": "kvm", "ansible_virtualization_tech_guest": ["kvm"], "ansible_virtualization_tech_host": ["kvm"], "ansible_is_chroot": false, "ansible_system_capabilities_enforced": "True", "ansible_system_capabilities": ["cap_chown", "cap_dac_override", "cap_dac_read_search", "cap_fowner", "cap_fsetid", "cap_kill", "cap_setgid", "cap_setuid", "cap_setpcap", "cap_linux_immutable", "cap_net_bind_service", "cap_net_broadcast", "cap_net_admin", "cap_net_raw", "cap_ipc_lock", "cap_ipc_owner", "cap_sys_module", "cap_sys_rawio", "cap_sys_chroot", "cap_sys_ptrace", "cap_sys_pacct", "cap_sys_admin", "cap_sys_boot", "cap_sys_nice", "cap_sys_resource", "cap_sys_time", "cap_sys_tty_config", "cap_mknod", "cap_lease", "cap_audit_write", "cap_audit_control", "cap_setfcap", "cap_mac_override", "cap_mac_admin", "cap_syslog", "cap_wake_alarm", "cap_block_suspend", "cap_audit_read+ep"], "ansible_user_id": "root", "ansible_user_uid": 0, "ansible_user_gid": 0, "ansible_user_gecos": "root", "ansible_user_dir": "/root", "ansible_user_shell": "/bin/bash", "ansible_real_user_id": 0, "ansible_effective_user_id": 0, "ansible_real_group_id": 0, "ansible_effective_group_id": 0, "ansible_distribution": "OracleLinux", "ansible_distribution_release": "NA", "ansible_distribution_version": "8.5", "ansible_distribution_major_version": "8", "ansible_distribution_file_path": "/etc/oracle-release", "ansible_distribution_file_variety": "OracleLinux", "ansible_distribution_file_parsed": true, "ansible_distribution_file_search_string": "Oracle Linux", "ansible_os_family": "RedHat", "ansible_date_time": {"year": "2022", "month": "03", "weekday": "Wednesday", "weekday_number": "3", "weeknumber": "10", "day": "09", "hour": "13", "minute": "37", "second": "20", "epoch": "1646829440", "epoch_int": "1646829440", "date": "2022-03-09", "time": "13:37:20", "iso8601_micro": "2022-03-09T12:37:20.830695Z", "iso8601": "2022-03-09T12:37:20Z", "iso8601_basic": "20220309T133720830695", "iso8601_basic_short": "20220309T133720", "tz": "CET", "tz_dst": "CEST", "tz_offset": "+0100"}, "ansible_dns": {"search": ["anakinvcn.oraclevcn.com", "schots.net"], "nameservers": ["169.254.169.254"]}, "ansible_iscsi_iqn": "iqn.1988-12.com.oracle:d4d6cfe1c3d", "ansible_fips": false, "ansible_local": {}, "ansible_env": {"LS_COLORS": "rs=0:di=38;5;33:ln=38;5;51:mh=00:pi=40;38;5;11:so=38;5;13:do=38;5;5:bd=48;5;232;38;5;11:cd=48;5;232;38;5;3:or=48;5;232;38;5;9:mi=01;05;37;41:su=48;5;196;38;5;15:sg=48;5;11;38;5;16:ca=48;5;196;38;5;226:tw=48;5;10;38;5;16:ow=48;5;10;38;5;21:st=48;5;21;38;5;15:ex=38;5;40:*.tar=38;5;9:*.tgz=38;5;9:*.arc=38;5;9:*.arj=38;5;9:*.taz=38;5;9:*.lha=38;5;9:*.lz4=38;5;9:*.lzh=38;5;9:*.lzma=38;5;9:*.tlz=38;5;9:*.txz=38;5;9:*.tzo=38;5;9:*.t7z=38;5;9:*.zip=38;5;9:*.z=38;5;9:*.dz=38;5;9:*.gz=38;5;9:*.lrz=38;5;9:*.lz=38;5;9:*.lzo=38;5;9:*.xz=38;5;9:*.zst=38;5;9:*.tzst=38;5;9:*.bz2=38;5;9:*.bz=38;5;9:*.tbz=38;5;9:*.tbz2=38;5;9:*.tz=38;5;9:*.deb=38;5;9:*.rpm=38;5;9:*.jar=38;5;9:*.war=38;5;9:*.ear=38;5;9:*.sar=38;5;9:*.rar=38;5;9:*.alz=38;5;9:*.ace=38;5;9:*.zoo=38;5;9:*.cpio=38;5;9:*.7z=38;5;9:*.rz=38;5;9:*.cab=38;5;9:*.wim=38;5;9:*.swm=38;5;9:*.dwm=38;5;9:*.esd=38;5;9:*.jpg=38;5;13:*.jpeg=38;5;13:*.mjpg=38;5;13:*.mjpeg=38;5;13:*.gif=38;5;13:*.bmp=38;5;13:*.pbm=38;5;13:*.pgm=38;5;13:*.ppm=38;5;13:*.tga=38;5;13:*.xbm=38;5;13:*.xpm=38;5;13:*.tif=38;5;13:*.tiff=38;5;13:*.png=38;5;13:*.svg=38;5;13:*.svgz=38;5;13:*.mng=38;5;13:*.pcx=38;5;13:*.mov=38;5;13:*.mpg=38;5;13:*.mpeg=38;5;13:*.m2v=38;5;13:*.mkv=38;5;13:*.webm=38;5;13:*.ogm=38;5;13:*.mp4=38;5;13:*.m4v=38;5;13:*.mp4v=38;5;13:*.vob=38;5;13:*.qt=38;5;13:*.nuv=38;5;13:*.wmv=38;5;13:*.asf=38;5;13:*.rm=38;5;13:*.rmvb=38;5;13:*.flc=38;5;13:*.avi=38;5;13:*.fli=38;5;13:*.flv=38;5;13:*.gl=38;5;13:*.dl=38;5;13:*.xcf=38;5;13:*.xwd=38;5;13:*.yuv=38;5;13:*.cgm=38;5;13:*.emf=38;5;13:*.ogv=38;5;13:*.ogx=38;5;13:*.aac=38;5;45:*.au=38;5;45:*.flac=38;5;45:*.m4a=38;5;45:*.mid=38;5;45:*.midi=38;5;45:*.mka=38;5;45:*.mp3=38;5;45:*.mpc=38;5;45:*.ogg=38;5;45:*.ra=38;5;45:*.wav=38;5;45:*.oga=38;5;45:*.opus=38;5;45:*.spx=38;5;45:*.xspf=38;5;45:", "LANG": "en_US.UTF-8", "SUDO_GID": "1000", "SUDO_COMMAND": "/bin/sh -c echo BECOME-SUCCESS-niceqcvgkicorxotgwxtdmacfpwevdaa ; /usr/libexec/platform-python /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/AnsiballZ_setup.py", "USER": "root", "PWD": "/home/opc", "HOME": "/root", "LC_CTYPE": "C.UTF-8", "SUDO_USER": "opc", "SUDO_UID": "1000", "MAIL": "/var/mail/root", "SHELL": "/bin/bash", "TERM": "xterm-256color", "SHLVL": "1", "LOGNAME": "root", "PATH": "/sbin:/bin:/usr/sbin:/usr/bin", "_": "/usr/libexec/platform-python"}, "ansible_apparmor": {"status": "disabled"}, "ansible_fibre_channel_wwn": [], "ansible_python": {"version": {"major": 3, "minor": 6, "micro": 8, "releaselevel": "final", "serial": 0}, "version_info": [3, 6, 8, "final", 0], "executable": "/usr/libexec/platform-python", "has_sslcontext": true, "type": "cpython"}, "ansible_cmdline": {"BOOT_IMAGE": "(hd0,gpt2)/vmlinuz-5.4.17-2136.301.1.3.el8uek.x86_64", "root": "/dev/mapper/ocivolume-root", "ro": true, "crashkernel": "auto", "LANG": "en_US.UTF-8", "console": "ttyS0,115200", "rd.luks": "0", "rd.md": "0", "rd.dm": "0", "rd.lvm.vg": "ocivolume", "rd.lvm.lv": "ocivolume/root", "rd.net.timeout.carrier": "5", "netroot": "iscsi:169.254.0.2:::1:iqn.2015-02.oracle.boot:uefi", "rd.iscsi.param": "node.session.timeo.replacement_timeout=6000", "net.ifnames": "1", "nvme_core.shutdown_timeout": "10", "ipmi_si.tryacpi": "0", "ipmi_si.trydmi": "0", "libiscsi.debug_libiscsi_eh": "1", "loglevel": "4", "ip": "single-dhcp", "crash_kexec_post_notifiers": true}, "ansible_proc_cmdline": {"BOOT_IMAGE": "(hd0,gpt2)/vmlinuz-5.4.17-2136.301.1.3.el8uek.x86_64", "root": "/dev/mapper/ocivolume-root", "ro": true, "crashkernel": "auto", "LANG": "en_US.UTF-8", "console": ["tty0", "ttyS0,115200"], "rd.luks": "0", "rd.md": "0", "rd.dm": "0", "rd.lvm.vg": "ocivolume", "rd.lvm.lv": "ocivolume/root", "rd.net.timeout.carrier": "5", "netroot": "iscsi:169.254.0.2:::1:iqn.2015-02.oracle.boot:uefi", "rd.iscsi.param": "node.session.timeo.replacement_timeout=6000", "net.ifnames": "1", "nvme_core.shutdown_timeout": "10", "ipmi_si.tryacpi": "0", "ipmi_si.trydmi": "0", "libiscsi.debug_libiscsi_eh": "1", "loglevel": "4", "ip": "single-dhcp", "crash_kexec_post_notifiers": true}, "ansible_lsb": {}, "ansible_selinux_python_present": true, "ansible_selinux": {"status": "enabled", "policyvers": 31, "config_mode": "enforcing", "mode": "enforcing", "type": "targeted"}, "ansible_processor": ["0", "AuthenticAMD", "AMD EPYC 7J13 64-Core Processor", "1", "AuthenticAMD", "AMD EPYC 7J13 64-Core Processor"], "ansible_processor_count": 1, "ansible_processor_cores": 1, "ansible_processor_threads_per_core": 2, "ansible_processor_vcpus": 2, "ansible_processor_nproc": 2, "ansible_memtotal_mb": 1689, "ansible_memfree_mb": 160, "ansible_swaptotal_mb": 2047, "ansible_swapfree_mb": 195, "ansible_memory_mb": {"real": {"total": 1689, "used": 1529, "free": 160}, "nocache": {"free": 678, "used": 1011}, "swap": {"total": 2047, "free": 195, "used": 1852, "cached": 98}}, "ansible_bios_date": "06/16/2021", "ansible_bios_vendor": "EFI Development Kit II / OVMF", "ansible_bios_version": "1.5.1", "ansible_board_asset_tag": "NA", "ansible_board_name": "NA", "ansible_board_serial": "NA", "ansible_board_vendor": "NA", "ansible_board_version": "NA", "ansible_chassis_asset_tag": "OracleCloud.com", "ansible_chassis_serial": "NA", "ansible_chassis_vendor": "QEMU", "ansible_chassis_version": "pc-i440fx-4.2", "ansible_form_factor": "Other", "ansible_product_name": "Standard PC (i440FX + PIIX, 1996)", "ansible_product_serial": "NA", "ansible_product_uuid": "f9f1381a-3630-481c-8487-ab44b5fbc60e", "ansible_product_version": "pc-i440fx-4.2", "ansible_system_vendor": "QEMU", "ansible_devices": {"dm-1": {"virtual": 1, "links": {"ids": ["dm-name-ocivolume-oled", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvHWBDgo9u2z1vVZfhVaHdmQiYq9roB7EF"], "uuids": ["a8c9a3f3-5052-445e-8868-5c1249ae071e"], "labels": [], "masters": []}, "vendor": null, "model": null, "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "partitions": {}, "rotational": "1", "scheduler_mode": "", "sectors": "20971520", "sectorsize": "512", "size": "10.00 GB", "host": "", "holders": []}, "sdb": {"virtual": 1, "links": {"ids": ["scsi-3606a8a8864604d04876611a28c99e0c3", "wwn-0x606a8a8864604d04876611a28c99e0c3"], "uuids": [], "labels": [], "masters": []}, "vendor": "ORACLE", "model": "BlockVolume", "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "wwn": "0x606a8a8864604d04876611a28c99e0c3", "partitions": {}, "rotational": "1", "scheduler_mode": "mq-deadline", "sectors": "209715200", "sectorsize": "512", "size": "100.00 GB", "host": "SCSI storage controller: Red Hat, Inc. Virtio SCSI", "holders": []}, "dm-0": {"virtual": 1, "links": {"ids": ["dm-name-ocivolume-root", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvUgBP51Axc7NmH0DR27wo9pUZLeCPTJuX"], "uuids": ["25dae1d1-c678-45b2-bd0c-c308e8c950cc"], "labels": [], "masters": []}, "vendor": null, "model": null, "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "partitions": {}, "rotational": "1", "scheduler_mode": "", "sectors": "74391552", "sectorsize": "512", "size": "35.47 GB", "host": "", "holders": []}, "sda": {"virtual": 1, "links": {"ids": ["scsi-360be2f00009b428389342872ef3fc878", "wwn-0x60be2f00009b428389342872ef3fc878"], "uuids": [], "labels": [], "masters": []}, "vendor": "ORACLE", "model": "BlockVolume", "sas_address": null, "sas_device_handle": null, "removable": "0", "support_discard": "0", "wwn": "0x60be2f00009b428389342872ef3fc878", "partitions": {"sda2": {"links": {"ids": ["scsi-360be2f00009b428389342872ef3fc878-part2", "wwn-0x60be2f00009b428389342872ef3fc878-part2"], "uuids": ["70b15dc2-5ada-4399-9df5-b48c348cd4f1"], "labels": [], "masters": []}, "start": "206848", "sectors": "2097152", "sectorsize": 512, "size": "1.00 GB", "uuid": "70b15dc2-5ada-4399-9df5-b48c348cd4f1", "holders": []}, "sda3": {"links": {"ids": ["lvm-pv-uuid-VxgtY1-3gar-4ACy-JeJI-YAJf-A7MK-gFdAOT", "scsi-360be2f00009b428389342872ef3fc878-part3", "wwn-0x60be2f00009b428389342872ef3fc878-part3"], "uuids": [], "labels": [], "masters": ["dm-0", "dm-1"]}, "start": "2304000", "sectors": "95371264", "sectorsize": 512, "size": "45.48 GB", "uuid": null, "holders": ["ocivolume-oled", "ocivolume-root"]}, "sda1": {"links": {"ids": ["scsi-360be2f00009b428389342872ef3fc878-part1", "wwn-0x60be2f00009b428389342872ef3fc878-part1"], "uuids": ["20D9-FA96"], "labels": [], "masters": []}, "start": "2048", "sectors": "204800", "sectorsize": 512, "size": "100.00 MB", "uuid": "20D9-FA96", "holders": []}}, "rotational": "1", "scheduler_mode": "mq-deadline", "sectors": "97677312", "sectorsize": "512", "size": "46.58 GB", "host": "SCSI storage controller: Red Hat, Inc. Virtio SCSI", "holders": []}}, "ansible_device_links": {"ids": {"sdb": ["scsi-3606a8a8864604d04876611a28c99e0c3", "wwn-0x606a8a8864604d04876611a28c99e0c3"], "dm-1": ["dm-name-ocivolume-oled", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvHWBDgo9u2z1vVZfhVaHdmQiYq9roB7EF"], "dm-0": ["dm-name-ocivolume-root", "dm-uuid-LVM-iLtzhqOetFzovGA1TkheTOzJHdI0VcFvUgBP51Axc7NmH0DR27wo9pUZLeCPTJuX"], "sda2": ["scsi-360be2f00009b428389342872ef3fc878-part2", "wwn-0x60be2f00009b428389342872ef3fc878-part2"], "sda1": ["scsi-360be2f00009b428389342872ef3fc878-part1", "wwn-0x60be2f00009b428389342872ef3fc878-part1"], "sda3": ["lvm-pv-uuid-VxgtY1-3gar-4ACy-JeJI-YAJf-A7MK-gFdAOT", "scsi-360be2f00009b428389342872ef3fc878-part3", "wwn-0x60be2f00009b428389342872ef3fc878-part3"], "sda": ["scsi-360be2f00009b428389342872ef3fc878", "wwn-0x60be2f00009b428389342872ef3fc878"]}, "uuids": {"dm-1": ["a8c9a3f3-5052-445e-8868-5c1249ae071e"], "dm-0": ["25dae1d1-c678-45b2-bd0c-c308e8c950cc"], "sda2": ["70b15dc2-5ada-4399-9df5-b48c348cd4f1"], "sda1": ["20D9-FA96"]}, "labels": {}, "masters": {"sda3": ["dm-0", "dm-1"]}}, "ansible_uptime_seconds": 528093, "ansible_lvm": {"lvs": {"oled": {"size_g": "10.00", "vg": "ocivolume"}, "root": {"size_g": "35.47", "vg": "ocivolume"}}, "vgs": {"ocivolume": {"size_g": "45.47", "free_g": "0", "num_lvs": "2", "num_pvs": "1"}}, "pvs": {"/dev/sda3": {"size_g": "45.47", "free_g": "0", "vg": "ocivolume"}}}, "ansible_mounts": [{"mount": "/", "device": "/dev/mapper/ocivolume-root", "fstype": "xfs", "options": "rw,seclabel,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota", "size_total": 38069878784, "size_available": 29065756672, "block_size": 4096, "block_total": 9294404, "block_available": 7096132, "block_used": 2198272, "inode_total": 18597888, "inode_available": 18429505, "inode_used": 168383, "uuid": "25dae1d1-c678-45b2-bd0c-c308e8c950cc"}, {"mount": "/boot", "device": "/dev/sda2", "fstype": "xfs", "options": "rw,seclabel,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota", "size_total": 1063256064, "size_available": 747925504, "block_size": 4096, "block_total": 259584, "block_available": 182599, "block_used": 76985, "inode_total": 524288, "inode_available": 524262, "inode_used": 26, "uuid": "70b15dc2-5ada-4399-9df5-b48c348cd4f1"}, {"mount": "/var/oled", "device": "/dev/mapper/ocivolume-oled", "fstype": "xfs", "options": "rw,seclabel,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota", "size_total": 10726932480, "size_available": 10594029568, "block_size": 4096, "block_total": 2618880, "block_available": 2586433, "block_used": 32447, "inode_total": 5242880, "inode_available": 5242166, "inode_used": 714, "uuid": "a8c9a3f3-5052-445e-8868-5c1249ae071e"}, {"mount": "/boot/efi", "device": "/dev/sda1", "fstype": "vfat", "options": "rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=winnt,errors=remount-ro", "size_total": 104634368, "size_available": 99350528, "block_size": 2048, "block_total": 51091, "block_available": 48511, "block_used": 2580, "inode_total": 0, "inode_available": 0, "inode_used": 0, "uuid": "20D9-FA96"}], "ansible_interfaces": ["lo", "ens3"], "ansible_lo": {"device": "lo", "mtu": 65536, "active": true, "type": "loopback", "promisc": false, "ipv4": {"address": "127.0.0.1", "broadcast": "", "netmask": "255.0.0.0", "network": "127.0.0.0"}, "ipv6": [{"address": "::1", "prefix": "128", "scope": "host"}], "features": {"rx_checksumming": "on [fixed]", "tx_checksumming": "on", "tx_checksum_ipv4": "off [fixed]", "tx_checksum_ip_generic": "on [fixed]", "tx_checksum_ipv6": "off [fixed]", "tx_checksum_fcoe_crc": "off [fixed]", "tx_checksum_sctp": "on [fixed]", "scatter_gather": "on", "tx_scatter_gather": "on [fixed]", "tx_scatter_gather_fraglist": "on [fixed]", "tcp_segmentation_offload": "on", "tx_tcp_segmentation": "on", "tx_tcp_ecn_segmentation": "on", "tx_tcp_mangleid_segmentation": "on", "tx_tcp6_segmentation": "on", "generic_segmentation_offload": "on", "generic_receive_offload": "on", "large_receive_offload": "off [fixed]", "rx_vlan_offload": "off [fixed]", "tx_vlan_offload": "off [fixed]", "ntuple_filters": "off [fixed]", "receive_hashing": "off [fixed]", "highdma": "on [fixed]", "rx_vlan_filter": "off [fixed]", "vlan_challenged": "on [fixed]", "tx_lockless": "on [fixed]", "netns_local": "on [fixed]", "tx_gso_robust": "off [fixed]", "tx_fcoe_segmentation": "off [fixed]", "tx_gre_segmentation": "off [fixed]", "tx_gre_csum_segmentation": "off [fixed]", "tx_ipxip4_segmentation": "off [fixed]", "tx_ipxip6_segmentation": "off [fixed]", "tx_udp_tnl_segmentation": "off [fixed]", "tx_udp_tnl_csum_segmentation": "off [fixed]", "tx_gso_partial": "off [fixed]", "tx_sctp_segmentation": "on", "tx_esp_segmentation": "off [fixed]", "tx_udp_segmentation": "off [fixed]", "fcoe_mtu": "off [fixed]", "tx_nocache_copy": "off [fixed]", "loopback": "on [fixed]", "rx_fcs": "off [fixed]", "rx_all": "off [fixed]", "tx_vlan_stag_hw_insert": "off [fixed]", "rx_vlan_stag_hw_parse": "off [fixed]", "rx_vlan_stag_filter": "off [fixed]", "l2_fwd_offload": "off [fixed]", "hw_tc_offload": "off [fixed]", "esp_hw_offload": "off [fixed]", "esp_tx_csum_hw_offload": "off [fixed]", "rx_udp_tunnel_port_offload": "off [fixed]", "tls_hw_tx_offload": "off [fixed]", "tls_hw_rx_offload": "off [fixed]", "rx_gro_hw": "off [fixed]", "tls_hw_record": "off [fixed]", "rx_gro_list": "off [fixed]"}, "timestamping": ["tx_software", "rx_software", "software"], "hw_timestamp_filters": []}, "ansible_ens3": {"device": "ens3", "macaddress": "02:00:17:02:34:e2", "mtu": 9000, "active": true, "module": "virtio_net", "type": "ether", "pciid": "virtio0", "speed": -1, "promisc": false, "ipv4": {"address": "10.0.0.41", "broadcast": "10.0.0.255", "netmask": "255.255.255.0", "network": "10.0.0.0"}, "ipv6": [{"address": "fe80::17ff:fe02:34e2", "prefix": "64", "scope": "link"}], "features": {"rx_checksumming": "on [fixed]", "tx_checksumming": "on", "tx_checksum_ipv4": "off [fixed]", "tx_checksum_ip_generic": "on", "tx_checksum_ipv6": "off [fixed]", "tx_checksum_fcoe_crc": "off [fixed]", "tx_checksum_sctp": "off [fixed]", "scatter_gather": "on", "tx_scatter_gather": "on", "tx_scatter_gather_fraglist": "off [fixed]", "tcp_segmentation_offload": "on", "tx_tcp_segmentation": "on", "tx_tcp_ecn_segmentation": "on", "tx_tcp_mangleid_segmentation": "off", "tx_tcp6_segmentation": "on", "generic_segmentation_offload": "on", "generic_receive_offload": "on", "large_receive_offload": "off [fixed]", "rx_vlan_offload": "off [fixed]", "tx_vlan_offload": "off [fixed]", "ntuple_filters": "off [fixed]", "receive_hashing": "off [fixed]", "highdma": "on [fixed]", "rx_vlan_filter": "on [fixed]", "vlan_challenged": "off [fixed]", "tx_lockless": "off [fixed]", "netns_local": "off [fixed]", "tx_gso_robust": "on [fixed]", "tx_fcoe_segmentation": "off [fixed]", "tx_gre_segmentation": "off [fixed]", "tx_gre_csum_segmentation": "off [fixed]", "tx_ipxip4_segmentation": "off [fixed]", "tx_ipxip6_segmentation": "off [fixed]", "tx_udp_tnl_segmentation": "off [fixed]", "tx_udp_tnl_csum_segmentation": "off [fixed]", "tx_gso_partial": "off [fixed]", "tx_sctp_segmentation": "off [fixed]", "tx_esp_segmentation": "off [fixed]", "tx_udp_segmentation": "off [fixed]", "fcoe_mtu": "off [fixed]", "tx_nocache_copy": "off", "loopback": "off [fixed]", "rx_fcs": "off [fixed]", "rx_all": "off [fixed]", "tx_vlan_stag_hw_insert": "off [fixed]", "rx_vlan_stag_hw_parse": "off [fixed]", "rx_vlan_stag_filter": "off [fixed]", "l2_fwd_offload": "off [fixed]", "hw_tc_offload": "off [fixed]", "esp_hw_offload": "off [fixed]", "esp_tx_csum_hw_offload": "off [fixed]", "rx_udp_tunnel_port_offload": "off [fixed]", "tls_hw_tx_offload": "off [fixed]", "tls_hw_rx_offload": "off [fixed]", "rx_gro_hw": "on", "tls_hw_record": "off [fixed]", "rx_gro_list": "off [fixed]"}, "timestamping": ["tx_software", "rx_software", "software"], "hw_timestamp_filters": []}, "ansible_default_ipv4": {"gateway": "10.0.0.1", "interface": "ens3", "address": "10.0.0.41", "broadcast": "10.0.0.255", "netmask": "255.255.255.0", "network": "10.0.0.0", "macaddress": "02:00:17:02:34:e2", "mtu": 9000, "type": "ether", "alias": "ens3"}, "ansible_default_ipv6": {}, "ansible_all_ipv4_addresses": ["10.0.0.41"], "ansible_all_ipv6_addresses": ["fe80::17ff:fe02:34e2"], "ansible_pkg_mgr": "dnf", "ansible_service_mgr": "systemd", "gather_subset": ["all"], "module_setup": true}, "invocation": {"module_args": {"gather_subset": ["all"], "gather_timeout": 10, "filter": [], "fact_path": "/etc/ansible/facts.d"}}}\r\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\nShared connection to anakin.schots.xyz closed.\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'rm -f -r /home/opc/.ansible/tmp/ansible-tmp-1646829438.5634298-11588-86585488773653/ > /dev/null 2>&1 && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
ok: [anakin.schots.xyz]
Read vars_file 'variables.yml'
META: ran handlers
Read vars_file 'variables.yml'

TASK [ansible.posix.firewalld] **************************************************************************************************
task path: /Users/arnoschots/DevelopmentLab/anakin.schots.net/firewall_test.yml:25
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'echo ~opc && sleep 0'"'"''
<anakin.schots.xyz> (0, b'/home/opc\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /home/opc/.ansible/tmp `"&& mkdir "` echo /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563 `" && echo ansible-tmp-1646829441.611056-11600-247859422174563="` echo /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563 `" ) && sleep 0'"'"''
<anakin.schots.xyz> (0, b'ansible-tmp-1646829441.611056-11600-247859422174563=/home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
Using module file /usr/local/Cellar/ansible/5.3.0/libexec/lib/python3.10/site-packages/ansible_collections/ansible/posix/plugins/modules/firewalld.py
<anakin.schots.xyz> PUT /Users/arnoschots/.ansible/tmp/ansible-local-1158562p6xxbf/tmpx27_qeo5 TO /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563/AnsiballZ_firewalld.py
<anakin.schots.xyz> SSH: EXEC sftp -b - -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' '[anakin.schots.xyz]'
<anakin.schots.xyz> (0, b'sftp> put /Users/arnoschots/.ansible/tmp/ansible-local-1158562p6xxbf/tmpx27_qeo5 /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563/AnsiballZ_firewalld.py\n', b'OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile \'~/.ssh/known_hosts\' -> \'/Users/arnoschots/.ssh/known_hosts\'\r\ndebug3: expanded UserKnownHostsFile \'~/.ssh/known_hosts2\' -> \'/Users/arnoschots/.ssh/known_hosts2\'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug2: Remote version: 3\r\ndebug2: Server supports extension "posix-rename@openssh.com" revision 1\r\ndebug2: Server supports extension "statvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "fstatvfs@openssh.com" revision 2\r\ndebug2: Server supports extension "hardlink@openssh.com" revision 1\r\ndebug2: Server supports extension "fsync@openssh.com" revision 1\r\ndebug2: Server supports extension "lsetstat@openssh.com" revision 1\r\ndebug3: Sent message fd 3 T:16 I:1\r\ndebug3: SSH_FXP_REALPATH . -> /home/opc size 0\r\ndebug3: Looking up /Users/arnoschots/.ansible/tmp/ansible-local-1158562p6xxbf/tmpx27_qeo5\r\ndebug3: Sent message fd 3 T:17 I:2\r\ndebug3: Received stat reply T:101 I:2\r\ndebug1: Couldn\'t stat remote file: No such file or directory\r\ndebug3: Sent message SSH2_FXP_OPEN I:3 P:/home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563/AnsiballZ_firewalld.py\r\ndebug3: Sent message SSH2_FXP_WRITE I:4 O:0 S:32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 4 32768 bytes at 0\r\ndebug3: Sent message SSH2_FXP_WRITE I:5 O:32768 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:6 O:65536 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:7 O:98304 S:32768\r\ndebug3: Sent message SSH2_FXP_WRITE I:8 O:131072 S:7371\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 5 32768 bytes at 32768\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 6 32768 bytes at 65536\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 7 32768 bytes at 98304\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: In write loop, ack for 8 7371 bytes at 131072\r\ndebug3: Sent message SSH2_FXP_CLOSE I:4\r\ndebug3: SSH2_FXP_STATUS 0\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n')
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'chmod u+x /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563/ /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563/AnsiballZ_firewalld.py && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' -tt anakin.schots.xyz '/bin/sh -c '"'"'sudo -H -S -n  -u root /bin/sh -c '"'"'"'"'"'"'"'"'echo BECOME-SUCCESS-ksmsykazahcximavonsamcnkbwcwyvxf ; /usr/libexec/platform-python /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563/AnsiballZ_firewalld.py'"'"'"'"'"'"'"'"' && sleep 0'"'"''
Escalation succeeded
<anakin.schots.xyz> (0, b'\r\n{"changed": true, "msg": "Permanent and Non-Permanent(immediate) operation, Changed port 2812-2812/tcp to enabled", "invocation": {"module_args": {"port": "2812-2812/tcp", "permanent": true, "state": "enabled", "immediate": true, "timeout": 0, "icmp_block": null, "icmp_block_inversion": null, "service": null, "port_forward": null, "rich_rule": null, "zone": null, "source": null, "interface": null, "masquerade": null, "offline": null, "target": null}}}\r\n', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\nShared connection to anakin.schots.xyz closed.\r\n")
<anakin.schots.xyz> ESTABLISH SSH CONNECTION FOR USER: opc
<anakin.schots.xyz> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="opc"' -o ConnectTimeout=10 -o 'ControlPath="/Users/arnoschots/.ansible/cp/b482d96a35"' anakin.schots.xyz '/bin/sh -c '"'"'rm -f -r /home/opc/.ansible/tmp/ansible-tmp-1646829441.611056-11600-247859422174563/ > /dev/null 2>&1 && sleep 0'"'"''
<anakin.schots.xyz> (0, b'', b"OpenSSH_8.6p1, LibreSSL 2.8.3\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files\r\ndebug1: /etc/ssh/ssh_config line 54: Applying options for *\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/arnoschots/.ssh/known_hosts'\r\ndebug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/arnoschots/.ssh/known_hosts2'\r\ndebug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 11540\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 0\r\n")
changed: [anakin.schots.xyz] => {
    "changed": true,
    "invocation": {
        "module_args": {
            "icmp_block": null,
            "icmp_block_inversion": null,
            "immediate": true,
            "interface": null,
            "masquerade": null,
            "offline": null,
            "permanent": true,
            "port": "2812-2812/tcp",
            "port_forward": null,
            "rich_rule": null,
            "service": null,
            "source": null,
            "state": "enabled",
            "target": null,
            "timeout": 0,
            "zone": null
        }
    },
    "msg": "Permanent and Non-Permanent(immediate) operation, Changed port 2812-2812/tcp to enabled"
}
Read vars_file 'variables.yml'
META: ran handlers
Read vars_file 'variables.yml'
META: ran handlers

PLAY RECAP **********************************************************************************************************************
anakin.schots.xyz          : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
rkhshan commented 1 year ago

It seems this post is old, but I was trying to figure out the exact same issue. Any updates on this ? Did anyone figure it out ?

exelanz commented 1 year ago

@rkhshan I tested today on Rocky Linux 9 and the issue did not occur. I will test on Oracle Linux as well.

exelanz commented 1 year ago

Oracle Linux 8.7, also no problem.

rkhshan commented 1 year ago

@exelanz I have this problem on both RHEL8 & RHEL9.

exelanz commented 1 year ago

@rkhshan just tested on RHEL9. No issues. I am running Ansible on Mac.

jonathanspw commented 3 months ago

If you run as root you likely won't face any issues.

If you run as an unprivileged user the issue on Fedora/RHEL is caused by stock permissions on directories in, and including /etc/firewalld which lack the world read permission, hence unprivileged users cannot access the files within.

$ ll /etc/firewalld
total 40
lrwxrwxrwx. 1 root root   26 May  4  2022 firewalld.conf -> firewalld-workstation.conf
-rw-r--r--. 1 root root 3410 May  5 19:00 firewalld-server.conf
-rw-r--r--. 1 root root 3404 May  5 19:00 firewalld-standard.conf
-rw-r--r--. 1 root root 3415 May  5 19:00 firewalld-workstation.conf
drwxr-x---. 2 root root 4096 May  5 19:00 helpers
drwxr-x---. 2 root root 4096 May  5 19:00 icmptypes
drwxr-x---. 2 root root 4096 May  5 19:00 ipsets
-rw-r--r--. 1 root root  272 May  5 19:00 lockdown-whitelist.xml
drwxr-x---. 2 root root 4096 May  5 19:00 policies
drwxr-x---. 2 root root 4096 May  5 19:00 services
drwxr-x---. 2 root root 4096 May  5 19:00 zones