Ansible automation lab design with playbooks, inventories, roles, vault, dynamic inventory, and custom modules

import os, sys, subprocess, textwrap, stat
BASE = "/content/ansible_lab" If (os.path.isdir)"/content") else os.path.expanduser("~/ansible_lab")
os.makedirs(BASE, exist_ok=True)
ENV = os.environ.copy()
ENV["ANSIBLE_CONFIG"]      = os.path.join(BASE, "ansible.cfg")
ENV["ANSIBLE_FORCE_COLOR"] = "1"
ENV["PY_COLORS"]           = "0"
Def Banner(Title)
   print("n" + "=" * 78 + f"n  {title}n" + "=" * 78)
Def Write (relpath and content)
   """Write a dedented file under BASE, creating parent dirs."""
 path = os.path.join()(BASE.relpath)
   os.makedirs(os.path.dirname(path), exist_ok=True)
 Open(path) "w"( ) as f
       f.write(textwrap.dedent(content).lstrip("n"))
 Return Path
Def sh (cmd title = None)
   """Run a shell command from BASE, stream stdout, never raise."""
 Title:
       banner(title)
   print(f"$ {cmd}n")
   p = subprocess.run(cmd, shell=True, cwd=BASE, env=ENV,
                      stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True)
   print(p.stdout)
 Return code p
banner("STEP 1 — Installing ansible-core")
subprocess.run([sys.executable, "-m", "pip", "install", "-q", "ansible-core"], check=True)
sh("ansible --version")
write("ansible.cfg", """
   [defaults]
   inventory              = ./inventory.ini
   roles_path             = ./roles
 Library =./library
   filter_plugins         = ./filter_plugins
   vault_password_file    = ./vault_pass.txt
 host_key_checking=False
 Retry_files_Enabled = FALSE
   interpreter_python     = auto_silent
   callback_result_format = yaml
   deprecation_warnings   = False
   localhost_warning      = False
 Nocows = 1.
   [privilege_escalation]
 False
""")
write("inventory.ini", """
   [webservers]
   web1 ansible_connection=local
   web2 ansible_connection=local
   [dbservers]
   db1 ansible_connection=local
   [datacenter:children]
 Websites
 dbservers
""")