Using Encrypted Ansible Password in Python Script

Question

I am using Ansible to run a python script with parameters. One of these parameters are a user password

script: "{{ path_to_setup_py }} --username {{ username }} --password {{ password }} --ip {{ ip }} --hostname {{ hostname }}"

This is able to pull everything but the password, the password is a user input that is then encrypted.

name: password
prompt: Enter your password
private: yes
encrypt: sha512_crypt
confirm: yes
salt_size: 7

When the python script is ran, the password comes up as the hash value and doesn't use the actual password. How would I get this to decrypt the hash and then run it on the script?

Any help would be appreciated, I am a beginner.

mdaniel · Accepted Answer · 2021-12-10 02:55:20Z

1

As the fine manual says, using encrypt: is really a specialization for when you are going to just send that value down into the user: module, and not interact with it further.

If you merely want the password to not echo to the screen, that is what the private: yes controls

In short, unless you have a requirement that you didn't disclose in your question, the solution is to just remove the encrypt: and salt_size: parameters:

  name: password
  prompt: Enter your password
  private: yes
  confirm: yes

answered Dec 10, 2021 at 2:55

mdaniel

33.5k6 gold badges61 silver badges66 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Using Encrypted Ansible Password in Python Script

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related