Module cisco.ios.ios_acls freeze work

[mik0s]

Hi all.

I'm trying to use the ios_acls module to manage ACL on a Cisco Catalyst 6500, but the task fails. The debug logs show that the task successfully logged in to the device, sends requests and receives answers to them and does nothing else:

2022-11-02 00:09:43,321 p=55097 u=user n=ansible | <ds1.local> ANSIBLE_NETWORK_IMPORT_MODULES: running ios_acls
2022-11-02 00:09:43,322 p=55080 u=user n=ansible | jsonrpc request: b'{"jsonrpc": "2.0", "method": "get_capabilities", "id": "4b897d7b-ef61-4f11-ac81-985ea96c7d10", "params": [[], {}]}'
2022-11-02 00:09:43,323 p=55080 u=user n=ansible | jsonrpc response: {"jsonrpc": "2.0", "id": "4b897d7b-ef61-4f11-ac81-985ea96c7d10", "result": "{\"rpc\": [\"get_config\", \"edit_config\", \"get_capabilities\", \"get\", \"enable_response_logging\", \"disable_response_logging\", \"edit_banner\", \"get_diff\", \"run_commands\", \"get_defaults_flag\", \"edit_banner\", \"get_diff\", \"run_commands\", \"get_defaults_flag\"], \"device_info\": {\"network_os\": \"ios\", \"network_os_version\": \"15.1(2)SY11\", \"network_os_model\": \"WS-C6509-E\", \"network_os_hostname\": \" ds1\", \"network_os_image\": \"sup-bootdisk:s72033-adventerprisek9-mz.151-2.SY11.bin\", \"network_os_type\": \"L2\"}, \"network_api\": \"cliconf\", \"device_operations\": {\"supports_diff_replace\": true, \"supports_commit\": false, \"supports_rollback\": false, \"supports_defaults\": true, \"supports_onbox_diff\": false, \"supports_commit_comment\": false, \"supports_multiline_delimiter\": true, \"supports_diff_match\": true, \"supports_diff_ignore_lines\": true, \"supports_generate_diff\": true, \"supports_replace\": false}, \"format\": [\"text\"], \"diff_match\": [\"line\", \"strict\", \"exact\", \"none\"], \"diff_replace\": [\"line\", \"block\"], \"output\": []}"}
2022-11-02 00:09:43,323 p=55080 u=user n=ansible | jsonrpc request: b'{"jsonrpc": "2.0", "method": "get", "id": "18e1741b-3fea-4a47-a918-d4def700a988", "params": [["show access-list"], {}]}'
2022-11-02 00:09:43,599 p=55080 u=user n=ansible | jsonrpc response: {"jsonrpc": "2.0", "id": "18e1741b-3fea-4a47-a918-d4def700a988", "result": "Standard IP access list 10\n    10 permit 192.168.20.2\nStandard IP access list test2\n....
2022-11-02 00:09:43,601 p=55080 u=user n=ansible | jsonrpc request: b'{"jsonrpc": "2.0", "method": "get", "id": "4ee3bc32-cf44-48a9-a810-f18905a4b00d", "params": [["show running-config | include ip(v6)* access-list|remark"], {}]}'
2022-11-02 00:09:53,055 p=55080 u=user n=ansible | jsonrpc response: {"jsonrpc": "2.0", "id": "4ee3bc32-cf44-48a9-a810-f18905a4b00d", "result": "ip access-list standard test2\n....
2022-11-02 00:14:53,210 p=55080 u=user n=ansible | Response received, triggered 'persistent_buffer_read_timeout' timer of 0.1 seconds
2022-11-02 00:14:53,210 p=55080 u=user n=ansible | closing ssh connection to device
2022-11-02 00:14:53,210 p=55080 u=user n=ansible | firing event: on_close_shell()
2022-11-02 00:14:53,210 p=55080 u=user n=ansible | cli session is now closed
2022-11-02 00:14:53,210 p=55080 u=user n=ansible | ssh connection has been closed successfully
2022-11-02 00:14:53,210 p=55080 u=user n=ansible | shutdown complete

After the timeout expires close persistent connection and terminates with an error

fatal: [ds1.local]: FAILED! => {
    "changed": false,
    "module_stderr": "socket path /home/user/.ansible/pc/dcba2a10b8 does not exist or cannot be found. See Troubleshooting socket path issues in the Network Debug and Troubleshooting Guide",
    "module_stdout": "",
    "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error"
}

I tried increasing the timeout but that didn't change anything. After any timeout, this error occurs and ios.acls does nothing.

I try for this test ACL

# cat ./test/test.acl
Extended IP access list test
    10 permit ip any any
    20 permit icmp any any 0

And this test playbook

---
- name: test ios
  hosts: ios

  tasks:

    - name: parse acl
      ios_acls:
        running_config: "{{ lookup('file', './test/test.acl') }}"
        state: parsed
      register: acl_parsed

    - name: Do reconciliation of parsed ACL
      ios_acls:
        config: "{{ acl_parsed.parsed }}"
        state: replaced
      register: acl_ran

The hosts file contains one host in the ios group

# cat hosts
[ios:children]
ds1

[ds1]
ds1.local

My environment

ansible [core 2.11.5]
  config file = /home/user/sources/acl/ansible/ansible.cfg
  configured module search path = ['/home/user/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /home/user/.local/lib/python3.6/site-packages/ansible
  ansible collection location = /home/user/.ansible/collections:/usr/share/ansible/collections
  executable location = /home/user/.local/bin/ansible
  python version = 3.6.8 (default, Nov 16 2020, 16:55:22) [GCC 4.8.5 20150623 (Red Hat 4.8.5-44)]
  jinja version = 3.0.1
  libyaml = True

# /home/user/.local/lib/python3.6/site-packages/ansible_collections
Collection Version
---------- -------
cisco.ios  2.4.0

# /home/user/.ansible/collections/ansible_collections
Collection Version
---------- -------
cisco.ios  4.0.0

PS: To check the connection to cisco, I tried the ios_command module and found no problems with it.

What am I doing wrong?