- 28 Jul, 2015 14 commits
-
-
When stretching the key for vault files, use PBKDF2HMAC() from the cryptography package instead of pycrypto. This will speed up the opening of vault files by ~10x. The problem is here in lib/ansible/utils/vault.py: hash_function = SHA256 # make two keys and one iv pbkdf2_prf = lambda p, s: HMAC.new(p, s, hash_function).digest() derivedkey = PBKDF2(password, salt, dkLen=(2 * keylength) + ivlength, count=10000, prf=pbkdf2_prf) `PBKDF2()` calls a Python callback function (`pbkdf2_pr()`) 10000 times. If one has several vault files, this will cause excessive start times with `ansible` or `ansible-playbook` (we experience ~15 second startup times). Testing the original implementation in 1.9.2 with a vault file: In [2]: %timeit v.decrypt(encrypted_data) 1 loops, best of 3: 265 ms per loop Having a recent OpenSSL version and using the vault.py changes in this commit: In [2]: %timeit v.decrypt(encrypted_data) 10 loops, best of 3: 23.2 ms per loopVilmos Nebehaj committed -
James Cammarata committed
-
Brian Coca committed
-
Brian Coca committed
-
Add pciid to LinuxNetwork interface fact
Brian Coca committed -
output now defaults back to having indent=4
Brian Coca committed -
This commit adds pciid to the LinuxNetwork fact object. pciid is gathered if the symlink /sys/class/net/*/device exists. Example [>>>> emphasis <<<<]: $ readlink /sys/class/net/eth0/device ../../../0000:01:00.0 $ ansible localhost --ask-pass -i /tmp/hosts -m setup -a "filter=ansible_eth0" SSH password: localhost | success >> { "ansible_facts": { "ansible_eth0": { "active": false, "device": "eth0", "macaddress": "0c:d2:92:5d:6e:8e", "module": "alx", "mtu": 1500, >>>> "pciid": "0000:01:00.0", <<<< "promisc": true, "type": "ether" } }, "changed": false }Trapier Marshall committed -
fixes #11528
Brian Coca committed -
Brian Coca committed
-
Brian Coca committed
-
Brian Coca committed
-
Brian Coca committed
-
Added OpenVZ Inventory python script
Brian Coca committed -
Encrypt the vault file after editing only if the contents changed
Brian Coca committed
-
- 27 Jul, 2015 20 commits
-
-
Toshio Kuratomi committed
-
changelog: fix typos
Brian Coca committed -
Rene Moser committed
-
James Cammarata committed
-
add distutils package classifiers
Brian Coca committed -
Handle quoting of values in dict parameters
Brian Coca committed -
I was particularly interested in the programming language ones, but the others might be useful to others browsing PyPI. Now with GPLv3+, and Utilities topic.
billwanjohi committed -
Toshio Kuratomi committed
-
Fixes #10194
James Cammarata committed -
James Cammarata committed
-
A better error message for «ansible playbook.yml»
Brian Coca committed -
Fix incorrect example of vars_prompt
James Cammarata committed -
James Cammarata committed
-
Fixes #11746
James Cammarata committed -
This is a very conservative change: we add the hint only if we're definitely going to die already.
Abhijit Menon-Sen committed -
Fixes #11470
James Cammarata committed -
Abhijit Menon-Sen committed
-
only set ansible_ssh_host if not already set
James Cammarata committed -
Brian Coca committed
-
functions to do difs.
Brian Coca committed
-
- 26 Jul, 2015 6 commits
-
-
Add several DNS-related facts by parsing /etc/resolv.conf
James Cammarata committed -
James Cammarata committed
-
James Cammarata committed
-
Regex escape filter
James Cammarata committed -
James Cammarata committed
-
Facts include nameservers, domain, search path, sortlist, and options.
Reed Loden committed
-