class

Krikri::TaskExecutor

TaskExecutor - Executes tasks on hosts Orchestrates task execution, variable substitution, and handler management

Constants

INLINE_COPY_MAX_BYTES = (8 * 1024) * 1024

copy.cr runs on the target host (uploaded there like every other plugin, unlike template: - an action plugin that runs on the controller and already handles this correctly by reading its own src: file locally before dispatch). A copy: task's src: names a file on the controller, so copy.cr's own File.exists?(src) check - a plain local filesystem check, from the perspective of wherever it's actually running - can never find it once the play targets a genuinely remote host: the file was never transferred there. Found via konstruktoid-hardening's "Add cracklib password list" (its only copy: task with a real src: file, previously entirely untested territory) - failed with "Source file not found" citing the exact real (and really-existing-on-the-controller) path.

Read here, on the controller, and forwarded as content: instead - copy.cr already has a fully-working content-write path (used by any copy: {content: ..., dest: ...} task), so this reuses it rather than needing a separate upload mechanism. Left alone for remote_src: true (real Ansible's own remote-to-remote copy, where src: already refers to a path on the target, not the controller - reading it here would be wrong) and for a local connection (copy.cr already runs on the same filesystem as the controller in that case, so src: already resolves correctly as-is - converting it anyway would only change check-mode's message ("Would copy SRC to DEST" -> a generic content message) for no actual correctness gain). Above this size, embedding the file as a content param string would make the JSON config too large to safely round-trip through #execute_remote_plugin's own base64 encoding of the whole config (see the comment on that call): a real bug found benchmarking ansible-community.ansible-vault's own "Install Vault" task, which copy:s a ~530MB downloaded Vault release binary - Crystal stdlib's Base64.encode_size computes str_size * 4 as native Int32 arithmetic before the final .to_i, and a base64'd-then- JSON-escaped-then-base64'd-again 530MB payload comfortably clears 2^31, crashing the whole engine with an unhandled OverflowError partway through a run - not a graceful per-task failure.

Constructors

new(hosts : Array(Krikri::Host), tasks : Array(Krikri::Task), handlers : Array(Krikri::Task) = [] of Task, check_mode : Bool = false, diff_mode : Bool = false, verbosity : Int32 = 0, play_vars : Hash(String, JSON::Any) = {} of String => JSON::Any, all_role_defaults : Hash(String, JSON::Any) = {} of String => JSON::Any, all_role_vars : Hash(String, JSON::Any) = {} of String => JSON::Any, gather_facts : Bool = true, inventory : Nil | Krikri::Inventory = nil, inventory_path : Nil | String = nil, batching_enabled : Bool = true, forks : Int32 = 5, smart_gathering : Bool = false, fact_store : Hash(String, Hash(String, JSON::Any)) | Nil = nil, set_fact_store : Hash(String, Hash(String, JSON::Any)) | Nil = nil, adhoc : Bool = false, extra_vars : Hash(String, JSON::Any) = {} of String => JSON::Any, force_handlers : Bool = false, vars_files : Array(Array(String)) = [] of Array(String), vars_files_dir : String = ".", playbook_dir : String = ".", any_errors_fatal : Bool = false, max_fail_percentage : Float64 | Nil = nil, unreachable_hosts : Set(String) = Set(String).new, strategy : String | Nil = nil, gather_subset : Array(String) = [] of String, gather_timeout : Int64 | Nil = nil, fact_path : String | Nil = nil, remote_user : String | Nil = nil, debugger : String | Nil = nil, playbook_file : String | Nil = nil)

Constants

Constructors

Instance methods

Nested types