a

�)g1 
�@sz
dd
lm
Z
mZmZ
eZdZdZddlm	Z	
ddl
mZ
ddlm
Z
mZ
ddlmZmZ
ddlmZ
dd	lmZmZ
dd
lZdd
lZdd
lZdd
lZdd
lZzdd
lZdZWney�


dZYn0zdd
lZdZ Wney�


dZ Yn0z(dd
l!m"Z"m#Z#
ddl$m%Z%m&Z&
dZ'Wne�
y,


dZ'Yn0ddl(m)Z)
ddlm*Z*
dZ+d
a,Gdd�de�Z-dd�Z.e/dk�
rve.�
d
S)�)�absolute_import�division�print_functiona�.
---
module: yum
version_added: historical
short_description: Manages packages with the I(yum) package manager
description:
     - Installs, upgrade, downgrades, removes, and lists packages and groups with the I(yum) package manager.
     - This module only works on Python 2. If you require Python 3 support see the M(ansible.builtin.dnf) module.
options:
  use_backend:
    description:
      - This module supports C(yum) (as it always has), this is known as C(yum3)/C(YUM3)/C(yum-deprecated) by
        upstream yum developers. As of Ansible 2.7+, this module also supports C(YUM4), which is the
        "new yum" and it has an C(dnf) backend.
      - By default, this module will select the backend based on the C(ansible_pkg_mgr) fact.
    default: "auto"
    choices: [ auto, yum, yum4, dnf ]
    type: str
    version_added: "2.7"
  name:
    description:
      - A package name or package specifier with version, like C(name-1.0).
      - Comparison operators for package version are valid here C(>), C(<), C(>=), C(<=). Example - C(name>=1.0)
      - If a previous version is specified, the task also needs to turn C(allow_downgrade) on.
        See the C(allow_downgrade) documentation for caveats with downgrading packages.
      - When using state=latest, this can be C('*') which means run C(yum -y update).
      - You can also pass a url or a local path to a rpm file (using state=present).
        To operate on several packages this can accept a comma separated string of packages or (as of 2.0) a list of packages.
    aliases: [ pkg ]
    type: list
    elements: str
  exclude:
    description:
      - Package name(s) to exclude when state=present, or latest
    type: list
    elements: str
    version_added: "2.0"
  list:
    description:
      - "Package name to run the equivalent of C(yum list --show-duplicates <package>) against. In addition to listing packages,
        use can also list the following: C(installed), C(updates), C(available) and C(repos)."
      - This parameter is mutually exclusive with I(name).
    type: str
  state:
    description:
      - Whether to install (C(present) or C(installed), C(latest)), or remove (C(absent) or C(removed)) a package.
      - C(present) and C(installed) will simply ensure that a desired package is installed.
      - C(latest) will update the specified package if it's not of the latest available version.
      - C(absent) and C(removed) will remove the specified package.
      - Default is C(None), however in effect the default action is C(present) unless the C(autoremove) option is
        enabled for this module, then C(absent) is inferred.
    type: str
    choices: [ absent, installed, latest, present, removed ]
  enablerepo:
    description:
      - I(Repoid) of repositories to enable for the install/update operation.
        These repos will not persist beyond the transaction.
        When specifying multiple repos, separate them with a C(",").
      - As of Ansible 2.7, this can alternatively be a list instead of C(",")
        separated string
    type: list
    elements: str
    version_added: "0.9"
  disablerepo:
    description:
      - I(Repoid) of repositories to disable for the install/update operation.
        These repos will not persist beyond the transaction.
        When specifying multiple repos, separate them with a C(",").
      - As of Ansible 2.7, this can alternatively be a list instead of C(",")
        separated string
    type: list
    elements: str
    version_added: "0.9"
  conf_file:
    description:
      - The remote yum configuration file to use for the transaction.
    type: str
    version_added: "0.6"
  disable_gpg_check:
    description:
      - Whether to disable the GPG checking of signatures of packages being
        installed. Has an effect only if state is I(present) or I(latest).
    type: bool
    default: "no"
    version_added: "1.2"
  skip_broken:
    description:
      - Skip all unavailable packages or packages with broken dependencies
        without raising an error. Equivalent to passing the --skip-broken option.
    type: bool
    default: "no"
    version_added: "2.3"
  update_cache:
    description:
      - Force yum to check if cache is out of date and redownload if needed.
        Has an effect only if state is I(present) or I(latest).
    type: bool
    default: "no"
    aliases: [ expire-cache ]
    version_added: "1.9"
  validate_certs:
    description:
      - This only applies if using a https url as the source of the rpm. e.g. for localinstall. If set to C(false), the SSL certificates will not be validated.
      - This should only set to C(false) used on personally controlled sites using self-signed certificates as it avoids verifying the source site.
      - Prior to 2.1 the code worked as if this was set to C(true).
    type: bool
    default: "yes"
    version_added: "2.1"
  sslverify:
    description:
      - Disables SSL validation of the repository server for this transaction.
      - This should be set to C(false) if one of the configured repositories is using an untrusted or self-signed certificate.
    type: bool
    default: "yes"
    version_added: "2.13"
  update_only:
    description:
      - When using latest, only update installed packages. Do not install packages.
      - Has an effect only if state is I(latest)
    default: "no"
    type: bool
    version_added: "2.5"

  installroot:
    description:
      - Specifies an alternative installroot, relative to which all packages
        will be installed.
    default: "/"
    type: str
    version_added: "2.3"
  security:
    description:
      - If set to C(true), and C(state=latest) then only installs updates that have been marked security related.
    type: bool
    default: "no"
    version_added: "2.4"
  bugfix:
    description:
      - If set to C(true), and C(state=latest) then only installs updates that have been marked bugfix related.
    default: "no"
    type: bool
    version_added: "2.6"
  allow_downgrade:
    description:
      - Specify if the named package and version is allowed to downgrade
        a maybe already installed higher version of that package.
        Note that setting allow_downgrade=True can make this module
        behave in a non-idempotent way. The task could end up with a set
        of packages that does not match the complete list of specified
        packages to install (because dependencies between the downgraded
        package and others can cause changes to the packages which were
        in the earlier transaction).
    type: bool
    default: "no"
    version_added: "2.4"
  enable_plugin:
    description:
      - I(Plugin) name to enable for the install/update operation.
        The enabled plugin will not persist beyond the transaction.
    type: list
    elements: str
    version_added: "2.5"
  disable_plugin:
    description:
      - I(Plugin) name to disable for the install/update operation.
        The disabled plugins will not persist beyond the transaction.
    type: list
    elements: str
    version_added: "2.5"
  releasever:
    description:
      - Specifies an alternative release from which all packages will be
        installed.
    type: str
    version_added: "2.7"
  autoremove:
    description:
      - If C(true), removes all "leaf" packages from the system that were originally
        installed as dependencies of user-installed packages but which are no longer
        required by any such package. Should be used alone or when state is I(absent)
      - "NOTE: This feature requires yum >= 3.4.3 (RHEL/CentOS 7+)"
    type: bool
    default: "no"
    version_added: "2.7"
  disable_excludes:
    description:
      - Disable the excludes defined in YUM config files.
      - If set to C(all), disables all excludes.
      - If set to C(main), disable excludes defined in [main] in yum.conf.
      - If set to C(repoid), disable excludes defined for given repo id.
    type: str
    version_added: "2.7"
  download_only:
    description:
      - Only download the packages, do not install them.
    default: "no"
    type: bool
    version_added: "2.7"
  lock_timeout:
    description:
      - Amount of time to wait for the yum lockfile to be freed.
    required: false
    default: 30
    type: int
    version_added: "2.8"
  install_weak_deps:
    description:
      - Will also install all packages linked by a weak dependency relation.
      - "NOTE: This feature requires yum >= 4 (RHEL/CentOS 8+)"
    type: bool
    default: "yes"
    version_added: "2.8"
  download_dir:
    description:
      - Specifies an alternate directory to store packages.
      - Has an effect only if I(download_only) is specified.
    type: str
    version_added: "2.8"
  install_repoquery:
    description:
      - If repoquery is not available, install yum-utils. If the system is
        registered to RHN or an RHN Satellite, repoquery allows for querying
        all channels assigned to the system. It is also required to use the
        'list' parameter.
      - "NOTE: This will run and be logged as a separate yum transation which
        takes place before any other installation or removal."
      - "NOTE: This will use the system's default enabled repositories without
        regard for disablerepo/enablerepo given to the module."
    required: false
    version_added: "1.5"
    default: "yes"
    type: bool
  cacheonly:
    description:
      - Tells yum to run entirely from system cache; does not download or update metadata.
    default: "no"
    type: bool
    version_added: "2.12"
extends_documentation_fragment:
- action_common_attributes
- action_common_attributes.flow
attributes:
    action:
        details: In the case of yum, it has 2 action plugins that use it under the hood, M(ansible.builtin.yum) and M(ansible.builtin.package).
        support: partial
    async:
        support: none
    bypass_host_loop:
        support: none
    check_mode:
        support: full
    diff_mode:
        support: full
    platform:
        platforms: rhel
notes:
  - When used with a C(loop:) each package will be processed individually,
    it is much more efficient to pass the list directly to the I(name) option.
  - In versions prior to 1.9.2 this module installed and removed each package
    given to the yum module separately. This caused problems when packages
    specified by filename or url had to be installed or removed together. In
    1.9.2 this was fixed so that packages are installed in one yum
    transaction. However, if one of the packages adds a new yum repository
    that the other packages come from (such as epel-release) then that package
    needs to be installed in a separate task. This mimics yum's command line
    behaviour.
  - 'Yum itself has two types of groups.  "Package groups" are specified in the
    rpm itself while "environment groups" are specified in a separate file
    (usually by the distribution).  Unfortunately, this division becomes
    apparent to ansible users because ansible needs to operate on the group
    of packages in a single transaction and yum requires groups to be specified
    in different ways when used in that way.  Package groups are specified as
    "@development-tools" and environment groups are "@^gnome-desktop-environment".
    Use the "yum group list hidden ids" command to see which category of group the group
    you want to install falls into.'
  - 'The yum module does not support clearing yum cache in an idempotent way, so it
    was decided not to implement it, the only method is to use command and call the yum
    command directly, namely "command: yum clean all"
    https://github.com/ansible/ansible/pull/31450#issuecomment-352889579'
# informational: requirements for nodes
requirements:
- yum
author:
    - Ansible Core Team
    - Seth Vidal (@skvidal)
    - Eduard Snesarev (@verm666)
    - Berend De Schouwer (@berenddeschouwer)
    - Abhijeet Kasurde (@Akasurde)
    - Adam Miller (@maxamillion)
a	
- name: Install the latest version of Apache
  ansible.builtin.yum:
    name: httpd
    state: latest

- name: Install Apache >= 2.4
  ansible.builtin.yum:
    name: httpd>=2.4
    state: present

- name: Install a list of packages (suitable replacement for 2.11 loop deprecation warning)
  ansible.builtin.yum:
    name:
      - nginx
      - postgresql
      - postgresql-server
    state: present

- name: Install a list of packages with a list variable
  ansible.builtin.yum:
    name: "{{ packages }}"
  vars:
    packages:
    - httpd
    - httpd-tools

- name: Remove the Apache package
  ansible.builtin.yum:
    name: httpd
    state: absent

- name: Install the latest version of Apache from the testing repo
  ansible.builtin.yum:
    name: httpd
    enablerepo: testing
    state: present

- name: Install one specific version of Apache
  ansible.builtin.yum:
    name: httpd-2.2.29-1.4.amzn1
    state: present

- name: Upgrade all packages
  ansible.builtin.yum:
    name: '*'
    state: latest

- name: Upgrade all packages, excluding kernel & foo related packages
  ansible.builtin.yum:
    name: '*'
    state: latest
    exclude: kernel*,foo*

- name: Install the nginx rpm from a remote repo
  ansible.builtin.yum:
    name: http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm
    state: present

- name: Install nginx rpm from a local file
  ansible.builtin.yum:
    name: /usr/local/src/nginx-release-centos-6-0.el6.ngx.noarch.rpm
    state: present

- name: Install the 'Development tools' package group
  ansible.builtin.yum:
    name: "@Development tools"
    state: present

- name: Install the 'Gnome desktop' environment group
  ansible.builtin.yum:
    name: "@^gnome-desktop-environment"
    state: present

- name: List ansible packages and register result to print with debug later
  ansible.builtin.yum:
    list: ansible
  register: result

- name: Install package with multiple repos enabled
  ansible.builtin.yum:
    name: sos
    enablerepo: "epel,ol7_latest"

- name: Install package with multiple repos disabled
  ansible.builtin.yum:
    name: sos
    disablerepo: "epel,ol7_latest"

- name: Download the nginx package but do not install it
  ansible.builtin.yum:
    name:
      - nginx
    state: latest
    download_only: true
)
�
AnsibleModule)
�get_best_parsable_locale)�
has_respawned�respawn_module)�	to_native�to_text)
�	fetch_url)�YumDnf�yumdnf_argument_specNTF)�find_unfinished_transactions�find_ts_remaining)�
splitFilename�
compareEVR)
�contextmanager)
�
fetch_filez.%{epoch}:%{name}-%{version}-%{release}.%{arch}cs
eZ
dZd
Z�f
dd�Zdd�Zdd�Zedd	��
Zd
d�Z	dd
�Z
d7dd�
Zef
dd�
Z
ef
dd�
Zef
dd�
Zdd�Zdd�Zedd��
Zdd�Zd8d!d"�
Zd#d$�Zd%d&�Zd'd(�Zd)d*�Zd+d,�Zed-d.��
Zd/d0�Zd1d2�Zed3d4��
Zd5d6�Z �Z!S)9�	YumModulez4
    Yum Ansible module back-end implementation
    cs&tt
|��|
�

d
|_d|_d|_dS)N�yumz/var/run/yum.pid)�superr�__init__Zpkg_mgr_name�lockfile�	_yum_base)�self�module�
�	__class__��7/usr/lib/python3.9/site-packages/ansible/modules/yum.pyr�
s

zYumModule.__init__c
Cs�t|j
�
d
kr|z|jj�|j
d�

Wq�tjjyx
}

z6dt|
�
vr`|j	j
d|j
dd�

n|
�
WYd}
~
q�d}
~
00nj|j
D]b}z|jj�|�

Wq�tjjy�
}

z.dt|
�
vr�|j	�d|�

n|
�
WYd}
~
q�d}
~
00q�dS)N�
r
zrepository not foundzRepository %s not found.�
�msg)�len�
enablerepo�yum_base�reposZ
enableRepor�Errors�YumBaseErrorr
r�	fail_json�warn)r�
e�ridrrr� _enablerepos_with_error_checking�
s










z*YumModule._enablerepos_with_error_checkingc

Cs�
�
zxz<t|j
d
��}
t|
���
}Wd�
n1s40


Y
Wn"tyb


t�|j
�

YWdS0|t��kr�t�|j
�

WdSz^td|d
��}
|
��}Wd�
n1s�0


Y
|��ddkr�t�|j
�

WWdSWn�t	�
yv


zt�
|d�
Wnpt�
yp
}
zV|jtj
k�
r>t�|j
�

WYd}~YWdS|jjd||j
t|�
fd�

WYd}~n
d}~00Yn0Wn,t	tf�
y�
}
zWYd}~dSd}~00d	S)
N�
rFz
/proc/%d/stat��
Zr
z!Unable to check PID %s in  %s: %sr!T)�openr�int�readline�
ValueError�os�unlink�getpid�split�IOError�kill�OSError�errnoZESRCHrr)r	)r�
fZoldpid�statr+rrr�is_lockfile_pid_valid�
s6



.





&




>
zYumModule.is_lockfile_pid_validc

Csx
|jr|jSt
��|_d
|jj_d
|jj_d|jj_|j|jj_|j	|jj_
|jr^|j|jj_|jdkr�|j|jj_
|j|jj_|jr�tj�|j�
r�|j|jj_t��d
kr�t|jd�r�|j��
n"t
j��}
|jj�|
�

d
|jj_|jr�|j|jj_|j|jj_|jj
z(|jD]}|jj�|�

�
q|� �
Wn<t!�
yp
}
z"|j"j#dt$|�
d�

WYd}~n
d}~00|jS)Nr
T�
/�setCacheDir�Failure talking to yum: %sr!)%rrZYumBaseZpreconfZ
debuglevelZ
errorlevel�plugins�
enable_pluginZenabled_plugins�disable_pluginZdisabled_plugins�
releasever�installroot�root�conf�	conf_filer5�path�exists�fn�geteuid�hasattrrAZmiscZgetCacheDirr&�cache�disable_excludes�	sslverifyr%�disablerepoZdisableRepor-�	Exceptionrr)r	)rZcachedirr,r+rrrr%s@





























,zYumModule.yum_basecCs,t|
d
�r|
j
Sd|
j|
j|
j|
j|
jfS)N�ui_envra�%s:%s-%s-%s.%s)rOrU�epoch�name�version�release�arch)rZporrr�po_to_envraCs


zYumModule.po_to_envracCs�|
��}t
jd
kr"|jjdd�
}n
|j��}|d}|D]*}|�|j���
s\|�|j���
r8
dSq8t
jd
kr�|d}|D]*}|�|j���
s�|�|j���
rz
dSqzdS)N)��T)
Z
return_evgrpsr
r/F)	�lowerrZ__version_info__r%ZdoGroupLists�endswithrXZgroupidZ
environmentid)rrXZ
name_lowerZgroups_list�groups�groupZenvs�envrrr�is_group_env_installedIs





 



 
z YumModule.is_group_env_installedNFc
s,|durd
}|
s�g}z<�jj
�|g
�
\}}}||}|sN|sN|��j�|�
�

Wn:ty�
}
z"�jjdt|�
d�

WYd}~n
d}~00�f
dd�|D�
St	s��jj
ddd�a	t	d	d
||g}	d|vr�|	�d�

�jd
kr�|	�d�jg�

t
�j�
}
t|
|
|
d�}�jj|	|d�\}}
}|dk�
rDd|
v
�
rD�jjd|	|fd�

d|
v�
rRd}
dd�|
�dd��d�
D�
}|�
s�|�
s�t	d	d
|d|g}	�jd
k�
r�|	�d�jg�

�jj|	|d�\}}}n
d\}}}|dk�
r�d|v
�
r��jjd|	||fd�

d|v�rd}|dd�|�dd��d�
D�
7}|SgS)Nz/%{epoch}:%{name}-%{version}-%{release}.%{arch}
rBr!c
sg|]}
��|
�
�qSr�
r\��.0�
p�
rrr�
<listcomp>n�z*YumModule.is_installed.<locals>.<listcomp>�rpmT�
�requiredz-q�--qf�
*�-ar@z--root��LANG�LC_ALL�LC_MESSAGES�
Zenviron_updater
zis not installedzError from rpm: %s: %s�c
Ssg|]}
|
��r|
�qSr�
�striprfrrrrj�rkz(none)�
0�

�--whatprovides�r
rwrwzno package providesc
Ssg|]}
|
��r|
�qSrrxrfrrrrj�rk)r%�rpmdb�matchPackageNames�extend�returnInstalledPackagesByDeprTrr)r	�rpmbin�get_bin_path�appendrGr�dict�run_command�replacer8)r�repoq�pkgspec�qf�is_pkg�pkgsr+�
m�
_�cmd�locale�lang_env�rc�out�err�rc2�out2�err2rrir�is_installed`sP









,

























 
zYumModule.is_installedc
s8
|
s�g}z8�jj
�|g
�
\}}}||}|s>|��j�|�
�

Wn:tyz
}
z"�jjd
t|�
d�

WYd}~n
d}~00�f
dd�|D�
St	|
�
}dd�
�j�
g}	|�|	�

dd�
�j�
g}	|�|	�

�j
r�|�d�j
�

|d	||g}
�j�|
�
\}}}
|d
k�
rdd�|�d�
D�
S�jjd
|
|
fd�

gS)NrBr!c
sg|]}
��|
�
�qSrrerfrirrrj�rkz*YumModule.is_available.<locals>.<listcomp>�
--disablerepo�
,�--enablerepo�--releasever=%sror
c
Ssg|]}
|
��r|
�qSrrxrfrrrrj�rkr{�Error from repoquery: %s: %s)r%�pkgSackrr��returnPackagesByDeprTrr)r	�list�joinrSr$rFr�r8)rr�r�r�r�r+r�r��myrepoq�r_cmdr�r�r�r�rrir�is_available�s.







,








zYumModule.is_availablec
sr
|
s�g}g�
zN�j�
|�
�j�|�
}|sH�jj�|g
�
\}}}||}�jjd
d�
j�
Wn:ty�
}
z"�jj	dt
|�
d�

WYd}~n
d}~00�
f
dd�|D�
}t�f
dd�|D�
�
St|
�
}	dd	�
�j�
g}
|	�|
�

d
d	�
�j�
g}
|	�|
�

�j�
r|	�d�j�

|	dd
||g}�j�|�
\}}
}|dk�
rVtdd�|
�d�
D�
�
S�jj	d||fd�

t�S)N�updates)
Z	pkgnarrowrBr!c
3s|]}
|
�vr|
V
qdS�
Nr�rg�pkg)
r�rr�	<genexpr>�rkz&YumModule.is_update.<locals>.<genexpr>c
3s|]}
��|
�
V
qdSr�rerfrirrr��rkr�r�r�r�z--pkgnarrow=updatesror
c
ss|]}
|
��r|
V
qdSr�rxrfrrrr��rkr{r�)r%r�r�r�rZdoPackageListsr�rTrr)r	�setr�r�rSr�r$rFr�r8)rr�r�r�r�r+r�r�Zretpkgsr�r�r�r�r�r�r)rr�r�	is_update�s8





�




,








zYumModule.is_updatec
sp|
�
spg}�
zz�j�
|�
�j�|�
}Wn�ty�
}
zpd
t|�
vr��jrl�j��jddd�jg�

n�j��jddg�

�j�
|�
�j�|�
}n�WYd}~n
d}~00|�
s�jj	�
|g
�
dd�\}}|�|�

|�|�

�jj�
|g
�
dd�\}}|�|�

|�|�

Wn<t�
yX
}
z"�jj
dt|�
d�

WYd}~n
d}~00t�f
d	d
�|D�
�
St|
�
}dd��j�
g}	|�|	�

d
d��j�
g}	|�|	�

�j�
r�|�d�j�

|d|d|g}
�j�|
�
\}}}
|d||g}
�j�|
�
\}}}|dk�rP|dk�rP||7}dd�|�d�
D�
}|�sL�j|
||d�}|S�jj
d|
|
|fd�

t�S)Nz*repomd.xml signature could not be verifiedZ	makecacheZfastr�r
r/rBr!c
3s|]}
��|
�
V
qdSr�rerfrirrr�rkz*YumModule.what_provides.<locals>.<genexpr>r�r�r�ror|c
Ssh|]}
|
��r|
�qSrrxrfrrr�	<setcomp>rkz*YumModule.what_provides.<locals>.<setcomp>r{�
r�r�)r%r�r�rTr	rFrr��yum_basecmdr�rr�r~r)r�r�r�rSr$r8r�)rr�Zreq_specr�r�r+Z
exact_matchesZglob_matchesr�r�r�r�r�r�r�r�r�rrir�
what_provides�sZ






�

 



�











,














zYumModule.what_providescCs�g}ts|Sd
d�|
D�
}t
�}|D]|}t|�
}|D]j}|\}}	t|	�
\}
}}}
}|D]F}d|
|f}|
|dkrV||dkrV||v
r�|�d|
|f�


q4qVq4q$|S)zr
        checks the package list to see if any packages are
        involved in an incomplete transaction
        c
ss|]}
t|
�
V
qdSr�)
rr�rrrr�+rkz/YumModule.transaction_exists.<locals>.<genexpr>z%s-%sr
r^)�transaction_helpersrrrr�)r�pkglist�	conflictsZpkglist_nvreasZunfinished_transactionsZtransZsteps�step�actionZ	step_spec�
n�
vr.r+�
ar�Zlabelrrr�transaction_existss"











zYumModule.transaction_existsc
Cs�t�
�}|�tj�

t�|
tj�}zRz|�|�
}Wn4tjyf
}
zWYd
}~Wt�	|�

d
Sd
}~00Wt�	|�

nt�	|�

0d|tj
p�d|tj|tj|tj
|tjfS)z%return envra of a local rpm passed inNrVrz)rlZTransactionSetZ
setVSFlagsZ_RPMVSF_NOSIGNATURESr5r1�O_RDONLYZhdrFromFdno�error�closeZRPMTAG_EPOCHZRPMTAG_NAMEZRPMTAG_VERSIONZRPMTAG_RELEASEZRPMTAG_ARCH)rrK�ts�fd�headerr+rrr�local_envraDs"






�




�zYumModule.local_envrac
cs�
d
}
ddg}t�
d�
t�
d�
g}�
zxz�|jjj�
r|jjjdv
�
r|jjjr�|
|jjj}
|jjj}|jjjr�|
d|jjj}
nDd|jjjvr�|jjj�d�
d	�d
�
d}
|jjj�d�	|
�
d
�}|
r�|
d}
|D] }t
�d
d|
|�tj|d<q�n|D]}|jjjtj|d<q�dV
Wnt
jj�
y:


�Yn0W|D]&}t�
d�	|�
�
�
rBtjd�	|�
=�
qB|d	�
r�|d	tjd<|d�
r�|dtjd<n^|D]&}t�
d�	|�
�
�
r�tjd�	|�
=�
q�|d	�
r�|d	tjd<|d�
r�|dtjd<0dS)Nrw�http�httpsZ
http_proxyZhttps_proxy)
Z_none_�
:�
@r
z//���z{0}@z	(http://)z\g<1>�_proxyz	{0}_proxyr )r5�getenvr%rI�proxyZproxy_usernameZproxy_passwordr8r��format�re�sub�environrr'r()rZnamepass�schemeZ
old_proxy_envZ	proxy_url�itemrrr�
set_env_proxyYsN


















�













�







zYumModule.set_env_proxyc	Csv|
��r.|
�
d
�
dkr.|
�d
�
\}}}}}}nd|
i
S||||||d|||||fd�}|dkrjd|d<nd|d<|S)	N�
|�Z
error_parsingrV)rXr[rWrZrY�repo�envra�	installedZyumstate�	available)ry�countr8)	rZpkgstrr�r+r�r.r�r��
drrr�pkg_to_dict�s







�


zYumModule.pkg_to_dict�	%{repoid}cCs`|
d
|dg}|jr&|�
d|jg
�

|j�|�
\}}}|dkrXtdd�|�d�
D�
�
SgSdS)Nrorqr�r
c
ss|]}
|
��r|
V
qdSr�rxrfrrrr��rkz%YumModule.repolist.<locals>.<genexpr>r{)rFr�rr�r�r8)rr�r�r�r�r�r�rrr�repolist�s





zYumModule.repolistcs\
d
}d}|
dddg}�jr0|�
dd��j�
g�

�jrL|�
dd��j�
g�

�jd	krf|�
d
�jg�

�jr�tj��j�
r�|d�jg7}|dkr��f
d
d�t	�j
|d|d��
D�
S|dkr܇f
dd�t	�j|d|d��
D�
S|dk�
r�f
dd�t	�j|d|d��
D�
S|dk�
r*dd�t	��
|�
�
D�
S�f
dd�t	�j
|||d��j|||d��
D�
S)Nz8%{name}|%{epoch}|%{version}|%{release}|%{arch}|%{repoid}z9%{name}|%{epoch}|%{version}|%{release}|%{arch}|installed
�--show-duplicates�	--plugins�--quietr�r�r�r@�
--installroot�-cr�c
sg|]}
|
��r��
|
�
�qSr�ryr�rfrirrrj�rkz(YumModule.list_stuff.<locals>.<listcomp>rqr�r�c
sg|]}
|
��r��
|
�
�qSrr�rfrirrrj�rkr�c
sg|]}
|
��r��
|
�
�qSrr�rfrirrrj�rkr&c
Ss g|]}
|
��rt
|
dd
��qS)Zenabled)�repoid�state)ryr�)rgrXrrrrj�rkc
sg|]}
|
��r��
|
�
�qSrr�rfrirrrj�s
�)rSr�r�r$rGrJr5rKrL�sortedr�r�r�r�)r�repoquerybin�stuffr�Zis_installed_qfr�rrir�
list_stuff�s,










"
"

"


"�zYumModule.list_stuffcCs�
|j|g
|}|j
r(|�d
|j
g
�

|js<|�ddg�

|jjrb|jjd|dt|d�
d�
nt|d�
|d<t|j�
}t|||d	�}|jj	||d
�\}}	}
|dkr�|
D]>}d|vr�d
||	vs�d||
vr�d|}
|jj
d|
|d�
q�||d<|d�|	�

|d|
7<d|d<d|	v�
r,|dk�
s6d|
v�
r>d|d<|dk�
rbd|d<|jj
fi|�
�

d|	�
pl|
v�
r�d|d<d|d<|jj
fi|�
�

|S)Nr�z--setoptzsslverify=0T�results)
r���changedr��changesr�rrrvr �://zNo package %s available.zCannot open: %s. Skipping.z$Package at %s could not be installedF)r�r"r�r�r"r�z
Nothing to dor
zdoes not have any packageszNo space left on device)r�rFr�rRr�
check_mode�	exit_jsonr�rr�r)r�)r�itemsr�r��resr�r�r�r�r�r��specrrr�exec_install�s<








 











zYumModule.exec_installc(	Cs�g}g}i}g|d
<d|d<d|d<d|d<|
D�]v}d}d}|�d�
sRd	|v�r�d	|v
r�t
j�|�
s�|dd
|7<|d
�d
|�

d|d<|jjfi|�
�

d	|v�
r|���>
t|j|�}	|	�d�
s�d|	}
t
�	|	|
�
|
}	Wd�
n1s�0


Y
n|}	|�
|	�
}|du�
r2|jjd
|d�

|�||�}|�
r`|d
�d|d|	f�

q0t|�
\}
}}}}|�||
�}t
|�
dk�rt|d�
\}}}}}t|d�
\}}}}}|�
p�d}|�
p�d}t|||f|||f�}|dk�r||k�r|D]}|�|�
�
r�|g
}�
q�t
|�
dk�r�|d}t|�
\}}} }!}"|!�pDd}!t|!|| f|||f�}|dk�rt|j�rtd}n|dk�r�q0|	}�
n�|�d�
�r�|�|�
�r�q0|}�
n�tddg�
�t|�
�
�s�|j||dd�}|�r�|d
�d|d|f�

q0|�||�}#|#�sF|dd|7<|d
�d|�

d|d<|jjfi|�
�

|�|#�
}$|$�r�|ddd�|$�
7<d|d<|jjfi|�
�

d}%|#D]8}&|j||&dd��r�d}%|d
�d|&|f�


�q̐q�|%�s�|�||��r�d}%|d
�d|�

|%�r�q0|j�r�|#D]t}	t|	�
\}
}}}}|j||
dd�}'|'�r
t|'d�
\}}} }!}"t|!|| f|||f�}|dk�rrd}n
d}
�q��q
|}|�r�|j�r�|�|�

q0|�|�

q0|�r�|�|
d||�}|�r�|�|
d||�}|S) Nr�rwr"r
r�Fr��.rpmr��)No RPM file matching '%s' found on system�z%s.rpm�4Failed to get envra information from RPM package: %sr!z$%s providing %s is already installedr/r rzTr�rp�
?�
r��>No package matching '%s' found available, installed or updated�~�4The following packages have pending transactions: %s�, �}z)package providing %s is already installedZ	downgrade�install)r`r5rKrLr�rr)r�r�renamer�r�rr#rZallow_downgrade�
startswithrdr��intersectionr�r�r�r�)(rr�r�r�Zdowngrade_pkgsr�r�r�Zdowngrade_candidate�packageZnew_package_pathr�Zinstalled_pkgsrXZver�relrWr[Z	cur_name0Zcur_ver0Zcur_rel0Z
cur_epoch0Z	cur_arch0Z	cur_name1Zcur_ver1Zcur_rel1Z
cur_epoch1Z	cur_arch1ZcompareZ
installed_pkgZcur_nameZcur_verZcur_relZ	cur_epochZcur_archr�r��found�thisZ	inst_pkgsrrrr��s�





















$



































































zYumModule.installcCs�
g}i}g|d
<d|d<d|d<d|d<|
D]H}|�d�
rF|�
|�
}n|�||�}|rb|�|�

q,|d
�d	|�

q,|�
r�|jjr�|jjd
|d
t|d�
d�
nt|d�
|d
<|jr�|j	dg
|}n|j	dg
|}|j�
|�
\}}	}
||d<|d
�|	�

|
|d<|dk�
rF|j�
r4d|	v�
r4|jjdd�

n|jjfi|�
�

d|_|D]R}|�d�
�
rl|�
|�
}n|j||d
d�}|�
rPd||d<|jjfi|�
�

�
qPd
|d<|S)Nr�rwr"Fr�r
r�r�z%s is not installedT)
�removedr�r��
autoremove�removezNo such commandzJVersion of YUM too old for autoremove: Requires yum 3.4.3 (RHEL/CentOS 7+)r!r�z!Package '%s' couldn't be removed!)
r�rdr�r�rr�r�r�r
r�r�r)r)rr�r�r�r�r�r�r�r�r�r�rrrr
�sL





















zYumModule.removec
CsR|jr.|j
�|jd
g
d|jg
�
\}
}}n|j
�|jd
g
�
\}
}}|
||fS)Nzcheck-updater�)rFrr�r�)rr�r�r�rrr�run_check_update�s
(
zYumModule.run_check_updatec
Cs"
d
�dd�|�
�D�
�
}
t�dd|
�}
i}i}|
�d
�
D]�}|��}d|vs8t|�
dv
s8d|d	v
rfq8|d	|d
|d}}}|�dd
�\}}	||v
r�g||<||�||	|d��

t|�
d
kr8|d|d|d}
}}|
�dd
�\}
}|
|v
�
rg||
<||
�|||d��

q8||fS)Nr{c
ss|]}
|
r|
V
qdSr�r)rg�
lrrrr��rkz/YumModule.parse_check_update.<locals>.<genexpr>z	\n\W+(.*)z \1rp)r]��
.r
r r/)rY�distr�r	
r]r^r�)r��
splitlinesr�r�r8r#�rsplitr�)Zcheck_update_outputr�r��	obsoletes�liner�rYr�rXr
Zobsolete_pkgZobsolete_versionZ
obsolete_repoZ
obsolete_nameZ
obsolete_distrrr�parse_check_update�s(



 






zYumModule.parse_check_updatec
Cs�i}g|d
<d|d<d|d<d|d<i}g|d<g|d	<i}i}d}|jdd�}d
|
vr^d}|�
�\}	}
}|	dkr�|r�|d
�d�

|S|	d
kr�|�|
�
\}}n*|	dkr�||d<|	|d<|jjfi|�
�

|r�|�d�

t|���
}t�}
�n:t�}t�}
|
D�]&}|�	d�
�
r.|d�|�

|�
|�

�
q|�d�
�
r�d|v
�
r�tj
�|�
�
s�|dd|7<|d
�d|�

d|d<|jjfi|�
�

|�|�
}|du�
r�|jjd|d�

|�||��
r�|d�|�

n|d	�|�

�
qd|v�r~|���
t|j|�}Wd�
n1�s0


Y
|�|�
}|du�rN|jjd|d�

|�||��rl|d�|�

n|d	�|�

�
q|�||��r�|d�|�

n|d	�|�

|�||�}|�s�|dd|7<|d
�d|�

d|d<|jjfi|�
�

d}|D]|}||d	v�r.|�||��r.d}
�q�t|�
\}}}}}||dv�r||v�rd}|�
|�

||k�rx||
|<
�q��q|�||��s�|j�r�|d
�d|�

�
q|�r�|d
�d|�

�
q|�|�
}|�
r|ddd�|�
7<|d
�dd�|�
�

d|d<|jjfi|�
�

�
qg}|D]�}|�	d�
�rR|�|df�

nz||v
�r�|
|}||d}|�|d||d|d|d ff�

n4||D]*}|�|d!|d|d|d ff�

�q��q2|j�r�tg|d"�|d#<nt|d	|d"�|d#<|�r||d$<|jj�r2|�s&|d	�r.d|d<|S|j�rL|�d%|jg
�

|�rp|j�|�
\}	}
}d|d<�
n,|j�r|d�r�|dg
|d7}t|j�
}t|||d&�}|jj||d'�\}	}
}|
����}|�d(�
�s�|�d)�
�s�d|d<ngd*�
\}	}
}n�|d	�s|�r�|j�s�|d	g
|d	|d7}t|j�
}t|||d&�}|jj||d'�\}	}
}|
����}|�d(�
�s�|�d)�
�s�d|d<ngd*�
\}	}
}|	|d<|d|7<|d
�|
�

|	�r�d|d+<|S),Nr�rwr"Fr�r
r��updater�rpTz/Nothing to do here, all packages are up to date�dr r�r�r�r�r�r�r!r�r�z@Packages providing %s not installed due to update_only specifiedz(All packages providing %s are up to dater�r��z&because of (at least) %s-%s.%s from %srYr
r�z
%s.%s from %s)r��updatedr�r
r�rrrvzno packages marked for updatez
nothing to dor}Zfailed) r�r
r�r
rr)r��keysr�r��addr`r5rKrLr�r�r�rr�r�r�update_onlyr�r�r�rFr�r�rryr_)rr�r�r�r�r�r
Z
update_allr�r�r�r�Zwill_updateZwill_update_from_other_packager�r�r
r�Z
nothing_to_dor�Zpkgnamer�r�Z	to_update�
wZ	other_pkgr�r�Z	out_lowerrrr�latest sB













































,












































���





���



















�









�



zYumModule.latestc
Csx|j}|js|j
rg}d
|_|jrVtj�|j�
rV|jd|jg7_|
rV|
d|jg7}
|jrj|j�	dg
�

|j
r�|j�	dd�|j
�
g
�

|jr�|j�	dd�|j�
g
�

|j
r�|j�	dd�|j
�
g�

|jr�|j�	dd�|j�
g�

|j�
rd	d�|j�
g
}|j�	|�

|j�
r(|j�	d
|jg
�

|j�
r>|j�	dg
�

|j�
rp|j�	dg
�

|j�
rp|j�	d
|jg
�

|j�
r�|j�	d|jg
�

|jdk�
r�d|jg
}|j�	|�

|jdv�r�|j�
r�|j�|jddg�

z�|jjj��}|j�rvzB|jjj��}|D]&}||v
�r|jj�|�
}|jj}�q|}Wn@tj j!�yt
}	
z"|jj"dt#|	�
d�

WYd}	~	n
d}	~	00Wn@tj j!�y�
}	
z"|jj"dt#|	�
d�

WYd}	~	n
d}	~	00|jdk�s�|j$�r|j%�r�|j�&d�

|j'�r�|j�&d�

|j(�r
|j�&d�

|�)||
�}
n\|jdv�rF|j%�r8|j�&d�

|�*||
�}
n.|jdv�r`|�+||
�}
n|jj"dddd d!�
|
S)"N�absentr�z
--skip-brokenz--disablerepo=%sr�z--enablerepo=%sz--enablepluginz--disablepluginz--exclude=%sz--disableexcludes=%sz--cacheonlyz--downloadonlyz--downloaddir=%sr�r@z--installroot=%s)r��presentr
�clean�expire-cachez!Error setting/accessing repos: %sr!zError accessing repos: %sr
z--nogpgcheckz
--securityz--bugfix)r�r
)r
r
z/we should never get here unless this all failedFrwzunexpected state)r"r�r��errors),�namesr
r�rJr5rKrLr�Zskip_brokenr�rSr�r$rDrEZexcluderQZ	cacheonlyZ
download_onlyZdownload_dirrFrG�update_cacherr�r%r&r
ZgetRepoZrepoXMLr�rr'r(r)r	r
Zdisable_gpg_checkr�ZsecurityZbugfixr
r�r
)rr�r�Ze_cmdZ
current_reposZ	new_repos�
ir,r�r+r�rrr�ensures�






























0

,

















�zYumModule.ensurec
CstSr�)
�HAS_YUM_PYTHONrrrr�has_yum�szYumModule.has_yumc

Cstrt
s tjd
kr t�s td
�

g}
ts2|
�d�

t
s@|
�d�

|��
|
r`|jj	d�
|
�
d�

|j�d�
rz|j�d�
}n|j�d�
}|dd	d
g|_|j
r�|js�|js�|j�|jddg�
\}}}|d
kr�|jjdd|gd�
n|jjdd||g
d�
|jjddd�}|j�
rp|�
sp|jj�
sp|j�d�
}|�
r`|j�
rP|j�d||jf�

n|j�d|�

|jjddd�}|j�
r�|�
s�|jj	dd�

d|�||j�i
}�
nTd}	z|jjj}
Wnt�
y�


Y�
n0d|
v�r�|�r�|dddg}	|jdk�r|	�d|jg�

|j�r�zttdd ��}|��}Wd�
n1�s80


Y
tj |jj!dd!�}
|j�"|
j#�

|
�$d"d#�|D�
�

|
�%�
Wn<t&�y�
}
z"|jj	d$t'|�
d�

WYd}~n
d}~00|	�d%|
j#g�

|�(|	�
}|	�r�d&|�)d'd(�d)f|d'<|jjfi|�
�

dS)*z:
        actually execute the module code backend
        z/usr/bin/pythonzThe Python 2 bindings for rpm are needed for this module. If you require Python 3 support use the `dnf` Ansible module instead.zxThe Python 2 yum module is needed for this module. If you require Python 3 support use the `dnf` Ansible module instead.z. r!zyum-deprecatedrz-d�
2z-yr
r
r
Fz
Cache updated)r�r"r�r�zFailed to update cache�	repoqueryrmz'%s -y install yum-utils --releasever %sz%s -y install yum-utilszZrepoquery is required to use list= with this module. Please install the yum-utils package.r�NZ	rhnpluginr�r�r�r@r�z
/etc/yum.confr.)�dir�deletec
Ssg|]}
|
�d�
s|
�qS)
zexclude=)
r�)rg�
crrrrj�rkz!YumModule.run.<locals>.<listcomp>z Failure setting up repoquery: %sr�z%s %sr"rwzxWarning: Due to potential bad behaviour with rhnplugin and certificates, used slower repoquery calls instead of Yum API.)*�HAS_RPM_PYTHONr#
�sys�
executablerrr�Z
wait_for_lockrr)r�r�r�r 
r
r�r�r�Zinstall_repoqueryr�rFr�r%rCZ_plugins�AttributeErrorrGr�rQr1�	readlines�tempfileZNamedTemporaryFileZtmpdirZadd_cleanup_filerX�
writelinesr�rTr	r"
�get)rZ
error_msgsZyumbinr��stdout�stderrr�Zyum_pathr�r&
Zyum_pluginsr=ZcontentZ
tmp_conf_filer+rrr�run�s�















�



�


















(



,





�
z
YumModule.run)NF)
r�)"�__name__�
__module__�__qualname__�__doc__rr-r?�propertyr%r\rdr��def_qfr�r�r�r�r�rr�r�r�r�r�r�r
r
�staticmethodr
r
r"
r$
r4
�
__classcell__rrrrr�
s@
*

3
6#)=%

(

!6.C

-{z

rcCs:td
gd�
d�t
dd<tfit
�
�
}t|�
}
|
��
dS)N�auto)r=
rZyum4Zdnf)�default�choicesZ
argument_specZuse_backend)r�r
rrr4
)rZmodule_implementationrrr�mains
�
r@
�__main__)0Z
__future__rrr�typeZ
__metaclass__Z
DOCUMENTATIONZEXAMPLESZansible.module_utils.basicrZ"ansible.module_utils.common.localerZ#ansible.module_utils.common.respawnrrZansible.module_utils._textr	r
Zansible.module_utils.urlsrZansible.module_utils.yumdnfrr
r<r5r�r+
r/
rlr*
�ImportErrorrr#
Zyum.miscrrZrpmUtils.miscutilsrrr��
contextlibrrr:
r�rr@
r5
rrrr�<module>	sd
%a


























U