Python3 pass secrets over named-pipe

write_secrets_to_named_pipe.py

#!/usr/bin/env python3

# this is handy if you need to pass secrets between two processes
# the secrets are not written to disk and can only be read once

from os import mkfifo
from pathlib import Path
from os import remove as remove_file
from threading import Thread


def write_pipe_0600(file: (str, Path), content: str):
    mkfifo(file, mode=0o600)

    def pipe_writer(f: (str, Path), c: str):
        # will be blocked until ansible connects to the other end of the pipe
        with open(f, 'wb') as fh:
            fh.write(c.encode('utf-8'))

        remove_file(file)

    Thread(target=pipe_writer, args=(file, content)).start()