cmdbsyncer 4.1.0.dev20__tar.gz → 4.1.0.dev21__tar.gz

{cmdbsyncer-4.1.0.dev20 → cmdbsyncer-4.1.0.dev21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev20
+Version: 4.1.0.dev21
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

cmdbsyncer-4.1.0.dev21/application/buildinfo.txt

@@ -0,0 +1 @@
+BUILD_DATE=2026-05-13T08:04:42Z

{cmdbsyncer-4.1.0.dev20 → cmdbsyncer-4.1.0.dev21}/application/changelog/v4.1.md

@@ -15,6 +15,7 @@
 - FIX: Inventory URL now resolves at `/api/v1/ansible/inventory/<provider>`
 - FIX: `ansible/inventory`, `ansible/inventory_single` and `ansible/cmk_server_inventory` find the pip-installed `cmdbsyncer` on PATH instead of failing with "No such file or directory" when ansible/ lives at `/opt/cmdbsyncer/ansible/`, and they export `CMDBSYNCER_CONFIG_DIR` pointing at the shim's parent directory so the called CLI loads `local_config.py` regardless of ansible-playbook's cwd. The `CMDBSYNCER_CONFIG_DIR` lookup is now honored at package-import time (not only inside the CLI entry point), which is when `local_config.py` is actually loaded — so the shim's env var really does its job and `ansible-playbook` from `/opt/cmdbsyncer/ansible/` no longer fails with "CRYPTOGRAPHY_KEY is not set"
 - FIX: Ansible Playbook Runner finds `playbooks.yml` at `<install-root>/ansible/` on pip installs (e.g. `/opt/cmdbsyncer/ansible/`) instead of pointing at the unused `<site-packages>/ansible/` path
+- FIX: GUI playbook runs under mod_wsgi/gunicorn use a per-run temp directory for Ansible's local scratch state instead of inheriting the web user's read-only `$HOME` — fixes "Permission denied: /usr/share/httpd/.ansible/tmp"
 - FIX: Offline bundle `install.sh` no longer swallows the playbook copy when `pip install` fails — both steps run independently and report their own status, and `ANSIBLE_TARGET` is replaced by default (no more `FORCE=1` dance for re-installs)
 
 ### Hosts

{cmdbsyncer-4.1.0.dev20 → cmdbsyncer-4.1.0.dev21}/application/plugins/ansible/runner.py

@@ -8,8 +8,10 @@ captured log.
 """
 import os
 import shlex
+import shutil
 import subprocess
 import sys
+import tempfile
 import threading
 from collections import OrderedDict
 from datetime import datetime
@@ -163,6 +165,17 @@ def _execute(stats_id, cmd: list[str], cwd: Path, provider: str):
         env = os.environ.copy()
         env['CMDBSYNCER_INVENTORY_PROVIDER'] = provider
         env.setdefault('CMDBSYNCER_INVENTORY_MODE', 'local')
+        # Ansible writes scratch files under ``$HOME/.ansible/tmp`` and
+        # respects ``ANSIBLE_LOCAL_TEMP`` for the same path. Under mod_wsgi
+        # / gunicorn the process inherits the web user's $HOME (e.g.
+        # ``/usr/share/httpd/`` on RHEL Apache), which is not writable and
+        # makes every playbook abort with "Unable to create local
+        # directories(/usr/share/httpd/.ansible/tmp): Permission denied".
+        # Give each run its own temp dir, point both vars at it, and
+        # clean up afterwards so we don't leak under /tmp.
+        run_tmp = tempfile.mkdtemp(prefix='cmdbsyncer-ansible-')
+        env['ANSIBLE_LOCAL_TEMP'] = run_tmp
+        env['HOME'] = run_tmp
         try:
             proc = subprocess.Popen(  # pylint: disable=consider-using-with
                 cmd,
@@ -188,6 +201,7 @@ def _execute(stats_id, cmd: list[str], cwd: Path, provider: str):
             stats.exit_code = -1
             stats.status = 'failure'
         finally:
+            shutil.rmtree(run_tmp, ignore_errors=True)
             stats.ended_at = datetime.now()
             stats.save()
 

{cmdbsyncer-4.1.0.dev20 → cmdbsyncer-4.1.0.dev21}/cmdbsyncer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev20
+Version: 4.1.0.dev21
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

{cmdbsyncer-4.1.0.dev20 → cmdbsyncer-4.1.0.dev21}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cmdbsyncer"
-version = "4.1.0.dev20"
+version = "4.1.0.dev21"
 description = "Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems"
 readme = "README.md"
 license = { text = "MIT" }

cmdbsyncer-4.1.0.dev20/application/buildinfo.txt

@@ -1 +0,0 @@
-BUILD_DATE=2026-05-13T07:47:06Z