Handling automated Ansible invocations that have no hostname

[ELLIOTTCABLE]

I'm learning Ansible for the first time, and added my test-host to ssh-ident:

# vim: set ft=bash :
# shellcheck disable=all

MATCH_ARGV = [
  ...
  [r".*my\.domain$", "personal"]
]

DEFAULT_IDENTITY = "MISSING_IDENTITY"

However, having added to this to an Ansible inventory (not that this part really matters to you),

all:
   hosts:
      a-server.my.domain # 123.457.789.012

... invoking Ansible has ssh-ident reporting stuff about my DEFAULT_IDENTITY (MISSING_IDENTITY):

$ ansible all -i hosts.yaml -m ping
[Warn] Warning: no keys found for identity MISSING_IDENTITY in:
[Warn] ['/Users/ec/.ssh/identities/MISSING_IDENTITY']
All keys already loaded
All keys already loaded
All keys already loaded
All keys already loaded
[Warn] Warning: no keys found for identity MISSING_IDENTITY in:
[Warn] ['/Users/ec/.ssh/identities/MISSING_IDENTITY']
All keys already loaded
All keys already loaded
All keys already loaded
a-server.my.domain | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}

How do I debug what's causing ssh-ident to select the DEFAULT_IDENTITY?

[ELLIOTTCABLE]

Ah, okay, so a couple of those outputs are from Ansible invocations of ssh that don't include a hostname, I think?

I'm still not clear on how to silence that error or handle this situation:

$ VERBOSITY='LOG_DEBUG' ansible all -i hosts.yaml -m ping
[debug] Will run '/usr/bin/ssh' as ssh binary - detected based on BINARY_DIR
[debug] MATCH_ARGV #1: ...
[debug] MATCH_ARGV #9: [re.compile('.*my\\.domain$'), 'personal']
[debug] Identity via match: MISSING_IDENTITY
[debug] Will run '/usr/bin/ssh-agent' as ssh-agent binary - detected based on BINARY_DIR
[debug] Will run '/usr/bin/ssh-add' as ssh-add binary - detected based on BINARY_DIR
[debug] PATTERN_KEYS #1: re.compile('^id_')
[debug] PATTERN_KEYS #2: re.compile('^identity')
[debug] PATTERN_KEYS #3: re.compile('^ssh[0-9]-')
[debug] PATTERN_PUBKEYS #1: [re.compile('\\.pub$'), 0]
[debug] PATTERN_PUBKEYS #2: [re.compile('public'), 0]
[debug] PATTERN_PRIVKEYS #1: [re.compile('private'), 0]
[debug] PATTERN_PRIVKEYS #2: [re.compile(''), None]
[Warn] Warning: no keys found for identity MISSING_IDENTITY in:
[Warn] ['/Users/ec/.ssh/identities/MISSING_IDENTITY']
[debug] RunShellCommandInAgent: ['/bin/sh', '-c', '. /Users/ec/.ssh/agents/agent-MISSING_IDENTITY-laptophostname.local >/dev/null 2>/dev/null; /usr/bin/ssh-add -l >/dev/null 2>/dev/null']:
[debug] Agent for identity MISSING_IDENTITY ready
[debug] SSH_OPTIONS: [[[], ['ssh', 'scp', 'sftp'], '-oUseRoaming=no']]
[debug] RunSSH: ['/bin/sh', '-xc', ". /Users/ec/.ssh/agents/agent-MISSING_IDENTITY-laptophostname.local >/dev/null 2>/dev/null; exec /usr/bin/ssh  -oUseRoaming=no '-o' 'ControlPersist'"]:
[debug] Will run '/usr/bin/ssh' as ssh binary - detected based on BINARY_DIR
[debug] MATCH_ARGV #1: ...
[debug] MATCH_ARGV #9: [re.compile('.*my\\.domain$'), 'personal']
[debug] Matching MATCH_ARGV #9: a-server.my.domain
[debug] Identity via match: personal
[debug] Will run '/usr/bin/ssh-agent' as ssh-agent binary - detected based on BINARY_DIR
[debug] Will run '/usr/bin/ssh-add' as ssh-add binary - detected based on BINARY_DIR
[debug] PATTERN_KEYS #1: re.compile('^id_')
[debug] PATTERN_KEYS #2: re.compile('^identity')
[debug] PATTERN_KEYS #3: re.compile('^ssh[0-9]-')
[debug] PATTERN_PUBKEYS #1: [re.compile('\\.pub$'), 0]
[debug] PATTERN_PUBKEYS #2: [re.compile('public'), 0]
[debug] PATTERN_PRIVKEYS #1: [re.compile('private'), 0]
[debug] PATTERN_PRIVKEYS #2: [re.compile(''), None]
[debug] Found key pair #1 /Users/ec/.ssh/identities/personal/identity: {'pub': '/Users/ec/.ssh/identities/personal/identity.pub', 'priv': '/Users/ec/.ssh/identities/personal/identity'}
[debug] RunShellCommandInAgent: ['/bin/sh', '-c', '. /Users/ec/.ssh/agents/agent-personal-laptophostname.local >/dev/null 2>/dev/null; /usr/bin/ssh-add -l >/dev/null 2>/dev/null']:
[debug] Agent for identity personal ready
[debug] RunShellCommandInAgent: ['/bin/sh', '-c', '. /Users/ec/.ssh/agents/agent-personal-laptophostname.local >/dev/null 2>/dev/null; /usr/bin/ssh-add -l']:
All keys already loaded
[debug] SSH_OPTIONS: [[[], ['ssh', 'scp', 'sftp'], '-oUseRoaming=no']]
[debug] RunSSH: ['/bin/sh', '-xc', '. /Users/ec/.ssh/agents/agent-personal-laptophostname.local >/dev/null 2>/dev/null; exec /usr/bin/ssh  -oUseRoaming=no \'-C\' \'-o\' \'ControlMaster=auto\' \'-o\' \'ControlPersist=60s\' \'-o\' \'KbdInteractiveAuthentication=no\' \'-o\' \'PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey\' \'-o\' \'PasswordAuthentication=no\' \'-o\' \'ConnectTimeout=10\' \'-o\' \'ControlPath="/Users/ec/.ansible/cp/8938e6142e"\' \'a-server.my.domain\' \'/bin/sh -c \'"\'"\'echo ~ && sleep 0\'"\'"\'\'']:

[ELLIOTTCABLE]

Aaaaaand I come across this again when googling basically exactly this problem, two years later. Goddamnit.

[maddes-b]

I will get to this next weekend.

[ELLIOTTCABLE]

It may not be an issue; don't waste time on it just yet.

I suspect that, at worst, the absurdly-complicated ssh ... invocations that Ansible uses might confuse the parser; but I actually think everything may be fine. Let me see if I can reproduce before you waste your time; and if there's something actually broken, I'll open an Issue. (=

[maddes-b]

Can you change the regex to r"a-server\.my\.domain" and re-check?
I assume that ansible may give the parameters as a single string, so the regex will not match due to $.
Futher tests:
r"'a-server\.my\.domain'"

[maddes-b]

@ELLIOTTCABLE Any result yet?

[ELLIOTTCABLE]

Hey; apologies, I haven't had a moment to test. I've got this in my unread notifications, so hopefully I can find the time to get around to checking it at some point …