cmdbsyncer 4.1.0.dev19__tar.gz → 4.1.0.dev21__tar.gz

{cmdbsyncer-4.1.0.dev19 → cmdbsyncer-4.1.0.dev21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev19
+Version: 4.1.0.dev21
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

cmdbsyncer-4.1.0.dev21/application/buildinfo.txt

@@ -0,0 +1 @@
+BUILD_DATE=2026-05-13T08:04:42Z

{cmdbsyncer-4.1.0.dev19 → cmdbsyncer-4.1.0.dev21}/application/changelog/v4.1.md

@@ -14,6 +14,8 @@
 - FEAT: CLI moved under `cmdbsyncer ansible …` with backward-compat shims
 - FIX: Inventory URL now resolves at `/api/v1/ansible/inventory/<provider>`
 - FIX: `ansible/inventory`, `ansible/inventory_single` and `ansible/cmk_server_inventory` find the pip-installed `cmdbsyncer` on PATH instead of failing with "No such file or directory" when ansible/ lives at `/opt/cmdbsyncer/ansible/`, and they export `CMDBSYNCER_CONFIG_DIR` pointing at the shim's parent directory so the called CLI loads `local_config.py` regardless of ansible-playbook's cwd. The `CMDBSYNCER_CONFIG_DIR` lookup is now honored at package-import time (not only inside the CLI entry point), which is when `local_config.py` is actually loaded — so the shim's env var really does its job and `ansible-playbook` from `/opt/cmdbsyncer/ansible/` no longer fails with "CRYPTOGRAPHY_KEY is not set"
+- FIX: Ansible Playbook Runner finds `playbooks.yml` at `<install-root>/ansible/` on pip installs (e.g. `/opt/cmdbsyncer/ansible/`) instead of pointing at the unused `<site-packages>/ansible/` path
+- FIX: GUI playbook runs under mod_wsgi/gunicorn use a per-run temp directory for Ansible's local scratch state instead of inheriting the web user's read-only `$HOME` — fixes "Permission denied: /usr/share/httpd/.ansible/tmp"
 - FIX: Offline bundle `install.sh` no longer swallows the playbook copy when `pip install` fails — both steps run independently and report their own status, and `ANSIBLE_TARGET` is replaced by default (no more `FORCE=1` dance for re-installs)
 
 ### Hosts

{cmdbsyncer-4.1.0.dev19 → cmdbsyncer-4.1.0.dev21}/application/plugins/ansible/runner.py

@@ -8,7 +8,10 @@ captured log.
 """
 import os
 import shlex
+import shutil
 import subprocess
+import sys
+import tempfile
 import threading
 from collections import OrderedDict
 from datetime import datetime
@@ -28,11 +31,26 @@ DEFAULT_PROVIDER = 'ansible'
 def _ansible_dir() -> Path:
     """
     Directory containing playbooks and the inventory script. Resolution
-    order: explicit config override → `<repo>/ansible/`.
+    order:
+      1. explicit config override (`ANSIBLE_DIR` / `CMDBSYNCER_ANSIBLE_DIR`)
+      2. `<dirname(sys.prefix)>/ansible/` — pip-install convention where
+         the venv lives inside the deployment dir
+         (e.g. `/opt/cmdbsyncer/venv` → `/opt/cmdbsyncer/ansible`)
+      3. `<repo>/ansible/` — source-checkout fallback, derived from the
+         `application` package location
+
+    The first existing directory wins. Pip-install layouts previously
+    fell straight through to `Path(app.root_path).parent / 'ansible'`,
+    which resolves to `<site-packages>/ansible/` — that directory doesn't
+    exist on a normal install, so the runner reported "No playbooks
+    declared" pointing at the wrong path.
     """
     override = app.config.get('ANSIBLE_DIR') or os.environ.get('CMDBSYNCER_ANSIBLE_DIR')
     if override:
         return Path(override)
+    deploy_root = Path(sys.prefix).parent / 'ansible'
+    if deploy_root.is_dir():
+        return deploy_root
     return Path(app.root_path).parent / 'ansible'
 
 
@@ -147,6 +165,17 @@ def _execute(stats_id, cmd: list[str], cwd: Path, provider: str):
         env = os.environ.copy()
         env['CMDBSYNCER_INVENTORY_PROVIDER'] = provider
         env.setdefault('CMDBSYNCER_INVENTORY_MODE', 'local')
+        # Ansible writes scratch files under ``$HOME/.ansible/tmp`` and
+        # respects ``ANSIBLE_LOCAL_TEMP`` for the same path. Under mod_wsgi
+        # / gunicorn the process inherits the web user's $HOME (e.g.
+        # ``/usr/share/httpd/`` on RHEL Apache), which is not writable and
+        # makes every playbook abort with "Unable to create local
+        # directories(/usr/share/httpd/.ansible/tmp): Permission denied".
+        # Give each run its own temp dir, point both vars at it, and
+        # clean up afterwards so we don't leak under /tmp.
+        run_tmp = tempfile.mkdtemp(prefix='cmdbsyncer-ansible-')
+        env['ANSIBLE_LOCAL_TEMP'] = run_tmp
+        env['HOME'] = run_tmp
         try:
             proc = subprocess.Popen(  # pylint: disable=consider-using-with
                 cmd,
@@ -172,6 +201,7 @@ def _execute(stats_id, cmd: list[str], cwd: Path, provider: str):
             stats.exit_code = -1
             stats.status = 'failure'
         finally:
+            shutil.rmtree(run_tmp, ignore_errors=True)
             stats.ended_at = datetime.now()
             stats.save()
 

{cmdbsyncer-4.1.0.dev19 → cmdbsyncer-4.1.0.dev21}/cmdbsyncer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev19
+Version: 4.1.0.dev21
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

{cmdbsyncer-4.1.0.dev19 → cmdbsyncer-4.1.0.dev21}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cmdbsyncer"
-version = "4.1.0.dev19"
+version = "4.1.0.dev21"
 description = "Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems"
 readme = "README.md"
 license = { text = "MIT" }

cmdbsyncer-4.1.0.dev19/application/buildinfo.txt

@@ -1 +0,0 @@
-BUILD_DATE=2026-05-13T07:27:17Z