mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 12:47:04 +00:00
kevinveenbirkenbachandClaude Opus 5
52b798094a
Drop a return-only temporary and state autoescape explicitly — the test renders a dnsmasq config, where html escaping would corrupt the output. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
46 lines
1.6 KiB
Python
46 lines
1.6 KiB
Python
from __future__ import annotations
|
|
|
|
from typing import Any
|
|
|
|
from ansible.plugins.lookup import LookupBase
|
|
|
|
_TOR_ROLE = "svc-net-tor"
|
|
|
|
|
|
def resolve_container_dns(variables: dict[str, Any]) -> list[str]:
|
|
"""Return the resolver list for the container runtime, most specific first.
|
|
|
|
On a Tor node the node dnsmasq resolves ``.onion`` through Tor's DNSPort
|
|
and everything else through the clearnet upstream, which is what makes
|
|
per-app proxy settings unnecessary. It is only reachable on the docker
|
|
bridge address because docker discards loopback resolvers, and it is
|
|
absent before docker itself is installed, hence the guard.
|
|
|
|
The clearnet resolver stays as a second entry so that losing dnsmasq costs
|
|
onion names rather than all name resolution.
|
|
"""
|
|
facts = variables.get("ansible_facts") or {}
|
|
bridge = ((facts.get("docker0") or {}).get("ipv4") or {}).get("address") or ""
|
|
on_tor_node = _TOR_ROLE in (variables.get("group_names") or [])
|
|
|
|
clearnet = ((variables.get("networks") or {}).get("internet") or {}).get(
|
|
"dns"
|
|
) or ""
|
|
|
|
return [str(r) for r in (bridge if on_tor_node else "", clearnet) if r]
|
|
|
|
|
|
class LookupModule(LookupBase):
|
|
"""
|
|
Usage:
|
|
{{ lookup('container_dns') }}
|
|
|
|
Resolver list for the docker daemon's ``dns`` key. Takes no terms.
|
|
"""
|
|
|
|
def run(self, terms, variables: dict[str, Any] | None = None, **kwargs):
|
|
if terms:
|
|
raise ValueError("lookup('container_dns') takes no positional terms.")
|
|
variables = variables or getattr(self._templar, "available_variables", {}) or {}
|
|
return [resolve_container_dns(variables)]
|