pass password to a Python script on prompt

Question

How can I pass a password to my python script when it prompts for a password. I do not want the user to enter the password when it prompts. It should be passed directly from the script.

subprocess.run(['ansible-vault', 'decrypt', 'main.yml', 'linux.yml','--ask-vault-pass'])

While running the script it prompts for the password. I want the password to be passed from script only not by the user or passing a password file.

Is there a way to pass the password here? I have other ansible vault option like vault-password etc but that doesn't serve my purpose.

Answer 1

Instead of using the cmdline ansible-vault, you can use the Python package - ansible-vault which will allow you to hardcode the password inside the script itself:

from ansible_vault import Vault

vault = Vault('password')
main_data = vault.load(open('main.yml').read())
linux_data = vault.load(open('linux.yaml').read())

As you are hardcoding the password inside the code, ensure you don't commit this code anywhere or send it to anyone, it's a serious security risk.