# Ansible cannot find passlib when creating a user through Github Action **URL:** \ **Category:** Get Help\ **Tags:** vmware, playbook, aws\ **Created:** [August 15, 2024, 1:57pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874 "2024-08-15T13:57:42Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![brad1](https://avatars.discourse-cdn.com/v4/letter/b/77aa72/32.png) [@brad1](https://forum.ansible.com/u/brad1)\ **Post date:** [August 15, 2024, 1:57pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/1 "2024-08-15T13:57:42Z")
Hi Folks, I am stuck and need help with my ansible playbook. I created a playbook that will configure a vm image for me on AWS, QEMU, or VMware, and the playbook is triggered by vagrant or packer. When I run the playbook locally, it works fine to create/configure the images. I wanted to automate the system further by having github actions run packer and create my images on AWS. This is failing with the following: ```auto FAILED! => {"msg": "Unable to encrypt nor hash%!(PACKER_COMMA) passlib must be installed. No module named 'passlib'. Unable to encrypt nor hash%!(PACKER_COMMA) passlib must be installed. No module named 'passlib'"} ``` I’ve tried various things to fix this with no luck. I added this to me github runner: ```auto python3 -m pip show passlib ansible-config dump | grep DEFAULT_MODULE_PATH ansible --version ``` And this is what it returns: ```auto Name: passlib Version: 1.7.4 Summary: comprehensive password hashing framework supporting over 30 schemes Home-page: https://passlib.readthedocs.io Author: Eli Collins Author-email: elic@assurancetechnologies.com License: BSD Location: /usr/lib/python3/dist-packages Requires: Required-by: DEFAULT_MODULE_PATH(default) = ['/home/runner/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible [core 2.17.2] config file = None configured module search path = ['/home/runner/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /opt/pipx/venvs/ansible-core/lib/python3.10/site-packages/ansible ansible collection location = /home/runner/.ansible/collections:/usr/share/ansible/collections executable location = /opt/pipx_bin/ansible python version = 3.10.12 (main, Jul 29 2024, 16:56:48) [GCC 11.4.0] (/opt/pipx/venvs/ansible-core/bin/python) jinja version = 3.1.4 libyaml = True ``` And finally, this is what I use to create the user/pass: ```auto - name: create new user with password user: name: "{{ item }}" password: "{{ user_pw | password_hash('sha512')}}" groups: "adm" expires: "{{ '%s' | strftime( (ansible_date_time.epoch | int) + (86400 * 356) ) }}" password_expire_max: 356 password_expire_min: 356 shell: /bin/bash ``` Any help would be greatly appreciated. ---
**Author:** ![bcoca](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/bcoca/32/9269_2.png) [@bcoca](https://forum.ansible.com/u/bcoca)\ **Post date:** [August 15, 2024, 2:08pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/2 "2024-08-15T14:08:13Z")
There can be multiple pythons, make sure the one executing Ansible is the same one that has passlib installed On one side you are showing `python3` but Ansible is specifically using python 3.10 from a venv (/opt/pipx/venvs/ansible-core/bin/python), those might not be the same. ---
**Author:** ![brad1](https://avatars.discourse-cdn.com/v4/letter/b/77aa72/32.png) [@brad1](https://forum.ansible.com/u/brad1)\ **Post date:** [August 15, 2024, 2:22pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/3 "2024-08-15T14:22:43Z")
Thanks Brian. I install python3 + passlib from within the playbook and try to set the interpreter for the playbook. See the following: ```auto - name: Install Python3 apt: pkg: - python3 - python3-pip - python3-passlib become: true environment: DEBIAN_FRONTEND: noninteractive - name: Create a symbolic link from python3 to python file: src: /usr/bin/python3 dest: /usr/bin/python state: link - name: Set ansible_python_interpreter to use the installed Python set_fact: ansible_python_interpreter: /usr/bin/python3 ``` I’m at a loss on how to get ansible to use the right python version ---
**Author:** ![bcoca](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/bcoca/32/9269_2.png) [@bcoca](https://forum.ansible.com/u/bcoca)\ **Post date:** [August 15, 2024, 2:43pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/4 "2024-08-15T14:43:46Z")
Setting the interpreter ONLY affects module execution, not any other plugin as they always use the interpreter Ansible itself was installed under. `passowrd_hash` is a lookup plugin, which runs in Jinja, executed inside Ansible, not a module, so setting the interpreter won’t affect it. Ansible is using the ‘right’ Python version as it is the version you installed it with, in this case a venv, using `apt` will install libraries in the system’s Python. You have 2 options, install the packages in the venv OR reconfigure the venv to use system packages also. ---
**Author:** ![konstruktoid](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/konstruktoid/32/10207_2.png) [@konstruktoid](https://forum.ansible.com/u/konstruktoid)\ **Post date:** [August 22, 2024, 5:53am UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/5 "2024-08-22T05:53:50Z")
I install passlib and dependencies when using GHA like this: [ansible-role-hardening/.github/workflows/molecule.yml at c62d9d4254cdf0dffdc63c28354a6a7c861199ed · konstruktoid/ansible-role-hardening · GitHub](https://github.com/konstruktoid/ansible-role-hardening/blob/c62d9d4254cdf0dffdc63c28354a6a7c861199ed/.github/workflows/molecule.yml) ```yaml - name: Install system dependencies run: | sudo apt-get update sudo apt-get --assume-yes --no-install-recommends install python3-pip python3 -m pip install --user -U ansible ansible-lint \ jmespath molecule-plugins[docker] passlib python3 -m pip install --user 'requests==2.28.1' ``` ---
**Author:** ![darsh12](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/darsh12/32/5322_2.png) [@darsh12](https://forum.ansible.com/u/darsh12)\ **Post date:** [November 2, 2024, 3:16pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/6 "2024-11-02T15:16:58Z")
Apologies for reviving this thread but I have been having the same issues of trying to get ansible to use passlib on the client machine. # Host Machine ```bash 07:57:29 in ansible ➜ ansible --version ansible [core 2.17.5] config file = None configured module search path = ['/home/user/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /home/user/.local/lib/python3.12/site-packages/ansible ansible collection location = /home/user/.ansible/collections:/usr/share/ansible/collections executable location = /home/user/.local/bin/ansible python version = 3.12.3 (main, Sep 11 2024, 14:17:37) [GCC 13.2.0] (/usr/bin/python3) jinja version = 3.1.2 libyaml = True ``` # Client Machine ## Client Machine Details ```bash root@instance:/# cat /etc/*-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=24.04 DISTRIB_CODENAME=noble DISTRIB_DESCRIPTION="Ubuntu 24.04.1 LTS" PRETTY_NAME="Ubuntu 24.04.1 LTS" NAME="Ubuntu" VERSION_ID="24.04" VERSION="24.04.1 LTS (Noble Numbat)" VERSION_CODENAME=noble ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/" SUPPORT_URL="https://help.ubuntu.com/" BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" UBUNTU_CODENAME=noble LOGO=ubuntu-logo root@instance:/# python3 -V Python 3.12.3 ``` ## Installed passlib using apt and pip ```bash root@instance:/# apt install python3-passlib Reading package lists... Done Building dependency tree... Done Reading state information... Done python3-passlib is already the newest version (1.7.4-4). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. root@instance:/# dpkg -l| grep passlib ii python3-passlib 1.7.4-4 all comprehensive password hashing framework root@instance:/# pip3 install passlib Requirement already satisfied: passlib in /usr/lib/python3/dist-packages (1.7.4) WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv root@instance:/# pip3 show passlib Name: passlib Version: 1.7.4 Summary: comprehensive password hashing framework supporting over 30 schemes Home-page: https://passlib.readthedocs.io Author: Eli Collins Author-email: elic@assurancetechnologies.com License: BSD Location: /usr/lib/python3/dist-packages Requires: Required-by: root@instance:/# which python3 /usr/bin/python3 ``` I have verified that when running ansible it uses the `/usr/bin/python3` in the client machine ![image](https://us1.discourse-cdn.com/ansible/original/2X/4/4c4098785330c67932277e5bd1dae924d187973e.png) I have also tried install installing passlib using ansible tasks with both the apt module and pip module to no avail. Also debugged to check if ansible can see the module ```plaintext TASK [Debug passlib installation output] *************************************** task path: /mnt/c/Users/User/Documents/ansible/ansible-bootstrap/molecule/adduser/prepare.yml:20 ok: [instance] => { "verify_passlib.stdout_lines": [ "Name: passlib", "Version: 1.7.4", "Summary: comprehensive password hashing framework supporting over 30 schemes", "Home-page: https://passlib.readthedocs.io", "Author: Eli Collins", "Author-email: elic@assurancetechnologies.com", "License: BSD", "Location: /usr/lib/python3/dist-packages", "Requires: ", "Required-by: " ] } ``` Despite all this I still get the error that passlib is not found ```plaintext TASK [darsh12.bootstrap : Add the user to the system] ************************** task path: /mnt/c/Users/User/Documents/ansible/ansible-bootstrap/tasks/adduser.yml:20 fatal: [instance]: FAILED! => { "msg": "Unable to encrypt nor hash, passlib must be installed. No module named 'passlib'. Unable to encrypt nor hash, passlib must be installed. No module named 'passlib'" } ``` ## User Add Task ```yaml - name: Add the user to the system ansible.builtin.user: name: "{{ new_username }}" shell: /bin/bash groups: sudo append: yes create_home: yes uid: "{{ user_uid | default(omit) }}" password: "{{ user_password | password_hash('sha512') }}" when: new_username is defined become: yes ``` I also followed the advise [above](http://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/5) to use the run module to invoke python3 but still nothing. ---
**Author:** ![dnmvisser](https://avatars.discourse-cdn.com/v4/letter/d/8e8cbc/32.png) [@dnmvisser](https://forum.ansible.com/u/dnmvisser)\ **Post date:** [November 2, 2024, 5:20pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/7 "2024-11-02T17:20:18Z")
You should not mix python packages from apt and from the system’s pip. The warning below is pretty explicit about that. Reinstantiate the VM and use one strategy only. Probably apt is the easiest in this case. Dick ---
**Author:** ![darsh12](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/darsh12/32/5322_2.png) [@darsh12](https://forum.ansible.com/u/darsh12)\ **Post date:** [November 2, 2024, 6:08pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/8 "2024-11-02T18:08:08Z")
Hi, Thank you for that. I have reinitialized the vm and installed passlib using apt. ```bash root@instance:/# dpkg -l | grep passlib root@instance:/# pip3 show passlib WARNING: Package(s) not found: passlib root@instance:/# apt install python3-passlib Reading package lists... Done Building dependency tree... Done Reading state information... Done The following NEW packages will be installed: python3-passlib 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 476 kB of archives. After this operation, 2091 kB of additional disk space will be used. Get:1 http://archive.ubuntu.com/ubuntu noble/main amd64 python3-passlib all 1.7.4-4 [476 kB] Fetched 476 kB in 2s (316 kB/s) debconf: unable to initialize frontend: Dialog debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog.pm line 79, line 1.) debconf: falling back to frontend: Readline Selecting previously unselected package python3-passlib. (Reading database ... 18571 files and directories currently installed.) Preparing to unpack .../python3-passlib_1.7.4-4_all.deb ... Unpacking python3-passlib (1.7.4-4) ... Setting up python3-passlib (1.7.4-4) ... root@instance:/# pip3 show passlib Name: passlib Version: 1.7.4 Summary: comprehensive password hashing framework supporting over 30 schemes Home-page: https://passlib.readthedocs.io Author: Eli Collins Author-email: elic@assurancetechnologies.com License: BSD Location: /usr/lib/python3/dist-packages Requires: Required-by: root@instance:/# dpkg -l | grep passlib ii python3-passlib 1.7.4-4 all comprehensive password hashing framework ``` Note I did not install passlib using pip, but since apt install passlib in the `/usr/lib/python3/dist-packages` pip has access to it. After this I tried again and still I get the same error ```plaintext TASK [darsh12.bootstrap : Add the user to the system] ************************** fatal: [instance]: FAILED! => {"msg": "Unable to encrypt nor hash, passlib must be installed. No module named 'passlib'. Unable to encrypt nor hash, passlib must be installed. No module named 'passlib'"} ``` ---
**Author:** ![dnmvisser](https://avatars.discourse-cdn.com/v4/letter/d/8e8cbc/32.png) [@dnmvisser](https://forum.ansible.com/u/dnmvisser)\ **Post date:** [November 2, 2024, 6:25pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/9 "2024-11-02T18:25:59Z")
What is the task that you’re executing? ---
**Author:** ![darsh12](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/darsh12/32/5322_2.png) [@darsh12](https://forum.ansible.com/u/darsh12)\ **Post date:** [November 2, 2024, 6:46pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/10 "2024-11-02T18:46:42Z")
I want to add a user ```yaml - name: Add the user to the system ansible.builtin.user: name: "{{ new_username }}" shell: /bin/bash groups: sudo append: yes create_home: yes uid: "{{ user_uid | default(omit) }}" password: "{{ user_password | password_hash('sha512') }}" when: new_username is defined become: yes ``` It is the `password: "{{ user_password | password_hash('sha512') }}"` task that is requiring the passlib library. Specifically the password\_hash expression. If I remove that the task completes successfully ---
**Author:** ![darsh12](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/darsh12/32/5322_2.png) [@darsh12](https://forum.ansible.com/u/darsh12)\ **Post date:** [November 2, 2024, 11:52pm UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/11 "2024-11-02T23:52:00Z")
# Solution I have been to find a solution to this. All this time I had been installing passlib in the client machine and also played with custom `filter_plugins`. I then decided to install passlib on the ansible host/controller machine and what do you know it works. TLDR; Installing passlib on the ansible host fixed the issue. ---
**Author:** ![jborean](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jborean/32/1525_2.png) [@jborean](https://forum.ansible.com/u/jborean)\ **Post date:** [November 4, 2024, 5:09am UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/12 "2024-11-04T05:09:29Z")
The reason why it fixed is the problem is the error was coming from the template > “{{ user\_password | password\_hash(‘sha512’) }}” So before the `user` module ran on the target host it was trying to run `password_hash` and all filters/plugins that aren’t modules are run in the same python instance as Ansible itself. ---
**Author:** ![darsh12](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/darsh12/32/5322_2.png) [@darsh12](https://forum.ansible.com/u/darsh12)\ **Post date:** [November 4, 2024, 6:03am UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/13 "2024-11-04T06:03:24Z")
Thank you for the explanation, that’s helps ---
**Author:** ![dnmvisser](https://avatars.discourse-cdn.com/v4/letter/d/8e8cbc/32.png) [@dnmvisser](https://forum.ansible.com/u/dnmvisser)\ **Post date:** [November 4, 2024, 7:56am UTC](https://forum.ansible.com/t/ansible-cannot-find-passlib-when-creating-a-user-through-github-action/7874/14 "2024-11-04T07:56:30Z")
The docs on [https://docs.ansible.com/ansible/latest/collections/ansible/builtin/user\_module.html#parameter-password](https://docs.ansible.com/ansible/latest/collections/ansible/builtin/user_module.html#parameter-password) do have a link to [https://docs.ansible.com/ansible/latest/reference\_appendices/faq.html#how-do-i-generate-encrypted-passwords-for-the-user-module](https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-generate-encrypted-passwords-for-the-user-module). But the latter does not make it very explicit that it has to be installed on the management node. This highlights the importance of showing all the relevant information, in this case the task.