blocks|key|1129372|text|您可以使用反引号：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1129373|`ls`|code-block|syntax|javascript|1129374|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You use backticks:

<pre><code>`ls`
</code></pre>

blocks|key|3747094|text|另一种方式是：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3747095|f+=+open("%7Cls")
foo+=+f.read()|code-block|syntax|javascript|3747096|请注意，这是open中"ls“之前的”管道“字符。这也可用于将数据输入到程序的标准输入以及读取其标准输出。|3747097|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

Another way is:

<pre><code>f = open("|ls")
foo = f.read()
</code></pre>

Note that's the "pipe" character before "ls" in open. This can also be used to feed data into the programs standard input as well as reading its standard output.

blocks|key|526977|text|我想对chaos's+answer做一点扩展和澄清。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|526978|如果您用反引号将命令括起来，那么您根本不需要(显式地)调用system()。反引号执行命令并以字符串的形式返回输出。然后，您可以将该值赋给变量，如下所示：|526979|output+=+`ls`
p+output|code-block|syntax|javascript|526980|或|526981|printf+output+#+escapes+newline+chars|526982|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/690174/56763^0|3|E|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|11|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|9|@]|C|$]]|$1|M|3|N|5|H|7|13|8|@]|9|@]|C|$I|J]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|C|$]]]|P|$Q|$5|R|S|T|C|$U|V]]]]

I'd like to expand &amp; clarify <a href="https://stackoverflow.com/a/690174/56763">chaos's answer</a> a bit.

If you surround your command with backticks, then you don't need to (explicitly) call system() at all. The backticks execute the command and return the output as a string. You can then assign the value to a variable like so:

<pre><code>output = `ls`
p output
</code></pre>

or

<pre><code>printf output # escapes newline chars
</code></pre>

blocks|key|4591806|text|我发现如果你需要返回值，下面的代码会很有用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4591807|result+=+%25x[ls]
puts+result|code-block|syntax|javascript|4591808|我特别想列出我机器上所有Java进程的pids，并使用以下代码：|4591809|ids+=+%25x[ps+ax+%7C+grep+java+%7C+awk+'{+print+$1+}'+%7C+xargs]|4591810|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

I found that the following is useful if you need the return value:

<pre><code>result = %x[ls]
puts result
</code></pre>

I specifically wanted to list the pids of all the Java processes on my machine, and used this:

<pre><code>ids = %x[ps ax | grep java | awk '{ print $1 }' | xargs]
</code></pre>

blocks|key|4591840|text|作为直接系统(...)替换您可以使用Open3.popen3(...)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4591841|进一步讨论：http://tech.natemurray.com/2007/03/ruby-shell-commands.html|offset|length|4591842|entityMap|0|LINK|mutability|MUTABLE|url|http://tech.natemurray.com/2007/03/ruby-shell-commands.html^0|0|6|1N|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

As a direct system(...) replacement you may use Open3.popen3(...)

Further discussion:
<a href="http://tech.natemurray.com/2007/03/ruby-shell-commands.html" rel="noreferrer">http://tech.natemurray.com/2007/03/ruby-shell-commands.html</a>

blocks|key|3747269|text|仅供记录，如果您想要(输出和操作结果)，您可以这样做：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3747270|output=`ls+no_existing_file`+;++result=$?.success?|code-block|syntax|javascript|3747271|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Just for the record, if you want both (output and operation result) you can do:

<pre><code>output=`ls no_existing_file` ; result=$?.success?
</code></pre>

blocks|key|4591886|text|您可以使用system()或%25x[]，这取决于您需要的结果类型。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4591887|如果找到并成功运行命令，则system()返回true，否则返回false。|4591888|>>+s+=+system+'uptime'
10:56++up+3+days,+23:10,+2+users,+load+averages:+0.17+0.17+0.14
=>+true
>>+s.class
=>+TrueClass
>>+$?.class
=>+Process::Status|code-block|syntax|javascript|4591889|%25x..另一方面，将命令的结果保存为字符串：|4591890|>>+result+=+%25x[uptime]
=>+"13:16++up+4+days,++1:30,+2+users,+load+averages:+0.39+0.29+0.23\n"
>>+p+result+
"13:16++up+4+days,++1:30,+2+users,+load+averages:+0.39+0.29+0.23\n"
>>+result.class
=>+String|4591891|此blog+post+by+Jay+Fields详细说明了使用system、exec和%25x之间的区别。。|offset|length|4591892|entityMap|0|LINK|mutability|MUTABLE|url|http://blog.jayfields.com/2006/06/ruby-kernel-system-exec-and-x.html^0|0|0|0|0|0|1|N|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Z|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|10|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|11|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|12|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|13|8|@]|9|@$O|14|P|15|1|16]]|A|$]]|$1|Q|3|-4|5|6|7|17|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|X]]]]

You can use system() or %x[] depending what kind of result you need.

system() returning true if the command was found and ran successfully, false otherwise.

<pre><code>&gt;&gt; s = system 'uptime'
10:56 up 3 days, 23:10, 2 users, load averages: 0.17 0.17 0.14
=&gt; true
&gt;&gt; s.class
=&gt; TrueClass
&gt;&gt; $?.class
=&gt; Process::Status
</code></pre>

%x[..] on the other hand saves the results of the command as a string:

<pre><code>&gt;&gt; result = %x[uptime]
=&gt; "13:16 up 4 days, 1:30, 2 users, load averages: 0.39 0.29 0.23\n"
&gt;&gt; p result 
"13:16 up 4 days, 1:30, 2 users, load averages: 0.39 0.29 0.23\n"
&gt;&gt; result.class
=&gt; String
</code></pre>

Th <a href="http://blog.jayfields.com/2006/06/ruby-kernel-system-exec-and-x.html" rel="noreferrer">blog post by Jay Fields</a> explains in detail the differences between using system, exec and %x[..] .

blocks|key|527184|text|请注意，将包含用户提供的值的字符串传递给system、%25x[]等的所有解决方案都是不安全的！不安全实际上意味着:用户可能会触发代码在上下文中运行，并具有程序的所有权限。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|527185|据我所知，只有system和Open3.popen3在Ruby1.8中提供了一个安全/转义的变体。在Ruby1.9中，IO::popen也接受数组。|527186|只需将每个选项和参数作为数组传递给其中一个调用。|527187|如果您不仅需要退出状态，而且还需要结果，那么您可能希望使用Open3.popen3|527188|require+'open3'
stdin,+stdout,+stderr,+wait_thr+=+Open3.popen3('usermod',+'-p',+@options['shadow'],+@options['username'])
stdout.gets(nil)
stdout.close
stderr.gets(nil)
stderr.close
exit_code+=+wait_thr.value|code-block|syntax|javascript|527189|请注意，块形式将自动关闭stdin、stdout和stderr-否则它们必须为closed+explicitly。|527190|更多信息请点击此处：Forming+sanitary+shell+commands+or+system+calls+in+Ruby|527191|entityMap|0|LINK|mutability|MUTABLE|url|http://www.ruby-doc.org/stdlib-2.0/libdoc/open3/rdoc/Open3.html#method-c-popen3|1|https://stackoverflow.com/questions/4650636/forming-sanitary-shell-commands-or-system-calls-in-ruby^0|K|6|R|4|0|7|6|E|C|1N|9|0|0|T|C|0|0|13|H|0|0|A|1J|1|0^^$0|@$1|2|3|4|5|6|7|14|8|@$9|15|A|16|B|C]|$9|17|A|18|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|19|8|@$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]|$9|1E|A|1F|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|1G|8|@]|D|@]|E|$]]|$1|J|3|K|5|6|7|1H|8|@$9|1I|A|1J|B|C]]|D|@]|E|$]]|$1|L|3|M|5|N|7|1K|8|@]|D|@]|E|$O|P]]|$1|Q|3|R|5|6|7|1L|8|@]|D|@$9|1M|A|1N|1|1O]]|E|$]]|$1|S|3|T|5|6|7|1P|8|@]|D|@$9|1Q|A|1R|1|1S]]|E|$]]|$1|U|3|-4|5|6|7|1T|8|@]|D|@]|E|$]]]|V|$W|$5|X|Y|Z|E|$10|11]]|12|$5|X|Y|Z|E|$10|13]]]]

Be aware that all the solutions where you pass a string containing user provided values to <code>system</code>, <code>%x[]</code> etc. are unsafe! Unsafe actually means: the user may trigger code to run in the context and with all permissions of the program.

As far as I can say only <code>system</code> and <code>Open3.popen3</code> do provide a secure/escaping variant in Ruby 1.8. In Ruby 1.9 <code>IO::popen</code> also accepts an array.

Simply pass every option and argument as an array to one of these calls.

If you need not just the exit status but also the result you probably want to use <code>Open3.popen3</code>:

<pre><code>require 'open3'
stdin, stdout, stderr, wait_thr = Open3.popen3('usermod', '-p', @options['shadow'], @options['username'])
stdout.gets(nil)
stdout.close
stderr.gets(nil)
stderr.close
exit_code = wait_thr.value
</code></pre>

Note that the block form will auto-close stdin, stdout and stderr- otherwise they'd have to be <a href="http://www.ruby-doc.org/stdlib-2.0/libdoc/open3/rdoc/Open3.html#method-c-popen3" rel="noreferrer">closed explicitly</a>.

More information here: <a href="https://stackoverflow.com/questions/4650636/forming-sanitary-shell-commands-or-system-calls-in-ruby">Forming sanitary shell commands or system calls in Ruby</a>

blocks|key|4591941|text|如果你需要对参数进行转义，在Ruby1.9中，IO.popen也接受数组：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4591942|p+IO.popen(["echo",+"it's+escaped"]).read|code-block|syntax|javascript|4591943|在早期版本中，您可以使用Open3.popen3|4591944|require+"open3"

Open3.popen3("echo",+"it's+escaped")+{+%7Ci,+o%7C+p+o.read+}|4591945|如果您还需要传递stdin，这应该在1.9和1.8中都有效：|4591946|out+=+IO.popen("xxd+-p",+"r%2B")+{+%7Cio%7C
++++io.print+"xyz"
++++io.close_write
++++io.read.chomp
}
p+out+#+"78797a"|4591947|entityMap|0|LINK|mutability|MUTABLE|url|http://www.ruby-doc.org/core-1.9.3/IO.html#method-c-popen|1|http://www.ruby-doc.org/stdlib-1.9.3/libdoc/open3/rdoc/Open3.html#method-c-popen3^0|N|8|0|0|0|C|C|1|0|0|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@$A|11|B|12|1|13]]|C|$]]|$1|D|3|E|5|F|7|14|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|15|8|@]|9|@$A|16|B|17|1|18]]|C|$]]|$1|K|3|L|5|F|7|19|8|@]|9|@]|C|$G|H]]|$1|M|3|N|5|6|7|1A|8|@]|9|@]|C|$]]|$1|O|3|P|5|F|7|1B|8|@]|9|@]|C|$G|H]]|$1|Q|3|-4|5|6|7|1C|8|@]|9|@]|C|$]]]|R|$S|$5|T|U|V|C|$W|X]]|Y|$5|T|U|V|C|$W|Z]]]]

If you need to escape the arguments, in Ruby 1.9 <a href="http://www.ruby-doc.org/core-1.9.3/IO.html#method-c-popen">IO.popen</a> also accepts an array:

<pre><code>p IO.popen(["echo", "it's escaped"]).read
</code></pre>

In earlier versions you can use <a href="http://www.ruby-doc.org/stdlib-1.9.3/libdoc/open3/rdoc/Open3.html#method-c-popen3">Open3.popen3</a>:

<pre><code>require "open3"

Open3.popen3("echo", "it's escaped") { |i, o| p o.read }
</code></pre>

If you also need to pass stdin, this should work in both 1.9 and 1.8:

<pre><code>out = IO.popen("xxd -p", "r+") { |io|
 io.print "xyz"
 io.close_write
 io.read.chomp
}
p out # "78797a"
</code></pre>

blocks|key|4591985|text|虽然使用反引号或popen通常是你真正想要的，但它实际上并没有回答所提出的问题。捕获system输出可能有合理的理由(可能是为了自动化测试)。我在谷歌上搜索了一下turned+up+an+answer，我想我应该把它贴在这里，以便于其他人受益。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4591986|因为我需要这个来测试，所以我的示例使用一个块设置来捕获标准输出，因为实际的system调用隐藏在被测试的代码中：|4591987|require+'tempfile'

def+capture_stdout
++stdout+=+$stdout.dup
++Tempfile.open+'stdout-redirect'+do+%7Ctemp%7C
++++$stdout.reopen+temp.path,+'w%2B'
++++yield+if+block_given?
++++$stdout.reopen+stdout
++++temp.read
++end
end|code-block|syntax|javascript|4591988|此方法使用tempfile存储实际数据来捕获给定块中的任何输出。示例用法：|4591989|captured_content+=+capture_stdout+do
++system+'echo+foo'
end
puts+captured_content|4591990|您可以用内部调用system的任何内容替换system调用。如果需要，您还可以使用类似的方法来捕获stderr。|4591991|entityMap|0|LINK|mutability|MUTABLE|url|http://www.velocityreviews.com/forums/t812652-redirect-stdout-for-kernel-system.html^0|16|6|29|J|0|0|11|6|0|0|0|0|8|6|L|6|1D|6|0^^$0|@$1|2|3|4|5|6|7|10|8|@$9|11|A|12|B|C]]|D|@$9|13|A|14|1|15]]|E|$]]|$1|F|3|G|5|6|7|16|8|@$9|17|A|18|B|C]]|D|@]|E|$]]|$1|H|3|I|5|J|7|19|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|1A|8|@]|D|@]|E|$]]|$1|O|3|P|5|J|7|1B|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|1C|8|@$9|1D|A|1E|B|C]|$9|1F|A|1G|B|C]|$9|1H|A|1I|B|C]]|D|@]|E|$]]|$1|S|3|-4|5|6|7|1J|8|@]|D|@]|E|$]]]|T|$U|$5|V|W|X|E|$Y|Z]]]]

While using backticks or popen is often what you really want, it doesn't actually answer the question asked. There may be valid reasons for capturing <code>system</code> output (maybe for automated testing). A little Googling <a href="http://www.velocityreviews.com/forums/t812652-redirect-stdout-for-kernel-system.html" rel="noreferrer">turned up an answer</a> I thought I would post here for the benefit of others. 

Since I needed this for testing my example uses a block setup to capture the standard output since the actual <code>system</code> call is buried in the code being tested:

<pre><code>require 'tempfile'

def capture_stdout
 stdout = $stdout.dup
 Tempfile.open 'stdout-redirect' do |temp|
 $stdout.reopen temp.path, 'w+'
 yield if block_given?
 $stdout.reopen stdout
 temp.read
 end
end
</code></pre>

This method captures any output in the given block using a tempfile to store the actual data. Example usage:

<pre><code>captured_content = capture_stdout do
 system 'echo foo'
end
puts captured_content
</code></pre>

You can replace the <code>system</code> call with anything that internally calls <code>system</code>. You could also use a similar method to capture <code>stderr</code> if you wanted.

blocks|key|4592036|text|如果希望使用Kernel#system将输出重定向到文件，可以像这样修改描述符：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4592037|以附加模式将stdout和stderr重定向到文件(/tmp/log)：|4592038|system('ls+-al',+:out+=>+['/tmp/log',+'a'],+:err+=>+['/tmp/log',+'a'])|4592039|对于长时间运行的命令，这将实时存储输出。您还可以使用IO.pipe存储输出，并从Kernel#system重定向它。|4592040|entityMap^0|6|D|0|0|0|1Y|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Q|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|R|8|@$9|S|A|T|B|C]]|D|@]|E|$]]|$1|J|3|K|5|6|7|U|8|@]|D|@]|E|$]]|$1|L|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|M|$]]

If you want the output redirected to a file using <code>Kernel#system</code>, you can do modify descriptors like this:

redirect stdout and stderr to a file(/tmp/log) in append mode:

<code>
system('ls -al', :out =&gt; ['/tmp/log', 'a'], :err =&gt; ['/tmp/log', 'a'])
</code>

For a long running command, this will store the output in real time. You can also, store the output using a IO.pipe and redirect it from Kernel#system.

blocks|key|4592071|text|正确和安全地执行此操作的直接方法是使用Open3.capture2()、Open3.capture2e()或Open3.capture3()。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4592072|使用ruby的反引号和它的%25x别名在任何情况下都是不安全的，如果与不受信任的数据一起使用的话。这就是simple，简单明了：|BOLD|4592073|untrusted+=+";+date;+echo"
out+=+`echo+#{untrusted}`++++++++++++++++++++++++++++++#+BAD

untrusted+=+'";+date;+echo"'
out+=+`echo+"#{untrusted}"`++++++++++++++++++++++++++++#+BAD

untrusted+=+"';+date;+echo'"
out+=+`echo+'#{untrusted}'`++++++++++++++++++++++++++++#+BAD|code-block|syntax|javascript|4592074|相反，如果正确使用，则system函数可以正确地转义参数|4592075|ret+=+system+"echo+#{untrusted}"+++++++++++++++++++++++#+BAD
ret+=+system+'echo',+untrusted+++++++++++++++++++++++++#+good|4592076|问题是，它返回的是退出代码，而不是输出，捕获后者是复杂和混乱的。|4592077|到目前为止，这个线程中最好的答案是Open3，而不是最适合该任务的函数。Open3.capture2、capture2e和capture3的工作方式与system类似，但会返回两个或三个参数：|4592078|out,+err,+st+=+Open3.capture3("echo+#{untrusted}")+++++#+BAD
out,+err,+st+=+Open3.capture3('echo',+untrusted)+++++++#+good
out_err,+st++=+Open3.capture2e('echo',+untrusted)++++++#+good
out,+st++++++=+Open3.capture2('echo',+untrusted)+++++++#+good
p+st.exitstatus|4592079|另一个提到了IO.popen()。语法可能很笨拙，因为它需要一个数组作为输入，但它也可以工作：|4592080|out+=+IO.popen(['echo',+untrusted]).read+++++++++++++++#+good|4592081|4592082|为方便起见，您可以将Open3.capture3()包装在一个函数中，例如：|4592083|#
#+Returns+stdout+on+success,+false+on+failure,+nil+on+error
#
def+syscall(*cmd)
++begin
++++stdout,+stderr,+status+=+Open3.capture3(*cmd)
++++status.success?+&&+stdout.slice!(0..-(1+%2B+$/.size))+#+strip+trailing+eol
++rescue
++end
end|4592084|示例：|4592085|p+system('foo')
p+syscall('foo')
p+system('which',+'foo')
p+syscall('which',+'foo')
p+system('which',+'which')
p+syscall('which',+'which')|4592086|产生以下结果：|4592087|nil
nil
false
false
/usr/bin/which+++++++++<—+stdout+from+system('which',+'which')
true+++++++++++++++++++<-+p+system('which',+'which')
"/usr/bin/which"+++++++<-+p+syscall('which',+'which')|4592088|entityMap|0|LINK|mutability|MUTABLE|url|http://www.ruby-doc.org/stdlib-2.0.0/libdoc/open3/rdoc/Open3.html#method-c-capture2|1|http://www.ruby-doc.org/stdlib-2.0.0/libdoc/open3/rdoc/Open3.html#method-c-capture2e|2|http://www.ruby-doc.org/stdlib-2.0.0/libdoc/open3/rdoc/Open3.html#method-c-capture3|3|http://www.ruby-doc.org/core-2.0.0/IO.html#method-c-popen^0|J|G|10|H|1I|G|J|G|0|10|H|1|1I|G|2|0|D|2|1E|6|0|0|9|J|B|6|0|0|0|10|E|1F|9|1P|8|23|6|0|0|6|A|6|A|3|0|0|0|A|G|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1S|8|@$9|1T|A|1U|B|C]|$9|1V|A|1W|B|C]|$9|1X|A|1Y|B|C]]|D|@$9|1Z|A|20|1|21]|$9|22|A|23|1|24]|$9|25|A|26|1|27]]|E|$]]|$1|F|3|G|5|6|7|28|8|@$9|29|A|2A|B|C]|$9|2B|A|2C|B|H]]|D|@]|E|$]]|$1|I|3|J|5|K|7|2D|8|@]|D|@]|E|$L|M]]|$1|N|3|O|5|6|7|2E|8|@$9|2F|A|2G|B|H]|$9|2H|A|2I|B|C]]|D|@]|E|$]]|$1|P|3|Q|5|K|7|2J|8|@]|D|@]|E|$L|M]]|$1|R|3|S|5|6|7|2K|8|@]|D|@]|E|$]]|$1|T|3|U|5|6|7|2L|8|@$9|2M|A|2N|B|C]|$9|2O|A|2P|B|C]|$9|2Q|A|2R|B|C]|$9|2S|A|2T|B|C]]|D|@]|E|$]]|$1|V|3|W|5|K|7|2U|8|@]|D|@]|E|$L|M]]|$1|X|3|Y|5|6|7|2V|8|@$9|2W|A|2X|B|C]]|D|@$9|2Y|A|2Z|1|30]]|E|$]]|$1|Z|3|10|5|K|7|31|8|@]|D|@]|E|$L|M]]|$1|11|3|-4|5|6|7|32|8|@]|D|@]|E|$]]|$1|12|3|13|5|6|7|33|8|@$9|34|A|35|B|C]]|D|@]|E|$]]|$1|14|3|15|5|K|7|36|8|@]|D|@]|E|$L|M]]|$1|16|3|17|5|6|7|37|8|@]|D|@]|E|$]]|$1|18|3|19|5|K|7|38|8|@]|D|@]|E|$L|M]]|$1|1A|3|1B|5|6|7|39|8|@]|D|@]|E|$]]|$1|1C|3|1D|5|K|7|3A|8|@]|D|@]|E|$L|M]]|$1|1E|3|-4|5|6|7|3B|8|@]|D|@]|E|$]]]|1F|$1G|$5|1H|1I|1J|E|$1K|1L]]|1M|$5|1H|1I|1J|E|$1K|1N]]|1O|$5|1H|1I|1J|E|$1K|1P]]|1Q|$5|1H|1I|1J|E|$1K|1R]]]]

The straightforward way to do this correctly and securely is to use <a href="http://www.ruby-doc.org/stdlib-2.0.0/libdoc/open3/rdoc/Open3.html#method-c-capture2"><code>Open3.capture2()</code></a>, <a href="http://www.ruby-doc.org/stdlib-2.0.0/libdoc/open3/rdoc/Open3.html#method-c-capture2e"><code>Open3.capture2e()</code></a>, or <a href="http://www.ruby-doc.org/stdlib-2.0.0/libdoc/open3/rdoc/Open3.html#method-c-capture3"><code>Open3.capture3()</code></a>.

Using ruby's backticks and its <code>%x</code> alias are NOT SECURE UNDER ANY CIRCUMSTANCES if used with untrusted data. It is DANGEROUS, plain and simple:

<pre><code>untrusted = "; date; echo"
out = `echo #{untrusted}` # BAD

untrusted = '"; date; echo"'
out = `echo "#{untrusted}"` # BAD

untrusted = "'; date; echo'"
out = `echo '#{untrusted}'` # BAD
</code></pre>

The <code>system</code> function, in contrast, escapes arguments properly if used correctly:

<pre><code>ret = system "echo #{untrusted}" # BAD
ret = system 'echo', untrusted # good
</code></pre>

Trouble is, it returns the exit code instead of the output, and capturing the latter is convoluted and messy.

The best answer in this thread so far mentions Open3, but not the functions that are best suited for the task. <code>Open3.capture2</code>, <code>capture2e</code> and <code>capture3</code> work like <code>system</code>, but returns two or three arguments:

<pre><code>out, err, st = Open3.capture3("echo #{untrusted}") # BAD
out, err, st = Open3.capture3('echo', untrusted) # good
out_err, st = Open3.capture2e('echo', untrusted) # good
out, st = Open3.capture2('echo', untrusted) # good
p st.exitstatus
</code></pre>

Another mentions <a href="http://www.ruby-doc.org/core-2.0.0/IO.html#method-c-popen"><code>IO.popen()</code></a>. The syntax can be clumsy in the sense that it wants an array as input, but it works too:

<pre><code>out = IO.popen(['echo', untrusted]).read # good
</code></pre>

<hr>

For convenience, you can wrap <code>Open3.capture3()</code> in a function, e.g.:

<pre><code>#
# Returns stdout on success, false on failure, nil on error
#
def syscall(*cmd)
 begin
 stdout, stderr, status = Open3.capture3(*cmd)
 status.success? &amp;&amp; stdout.slice!(0..-(1 + $/.size)) # strip trailing eol
 rescue
 end
end
</code></pre>

Example:

<pre><code>p system('foo')
p syscall('foo')
p system('which', 'foo')
p syscall('which', 'foo')
p system('which', 'which')
p syscall('which', 'which')
</code></pre>

Yields the following:

<pre><code>nil
nil
false
false
/usr/bin/which &lt;— stdout from system('which', 'which')
true &lt;- p system('which', 'which')
"/usr/bin/which" &lt;- p syscall('which', 'which')
</code></pre>

blocks|key|3747525|text|作为Simon+Hürlimann+already+explained，Open3比反引号等更安全。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3747526|require+'open3'
output+=+Open3.popen3("ls")+{+%7Cstdin,+stdout,+stderr,+wait_thr%7C+stdout.read+}|code-block|syntax|javascript|3747527|请注意，块形式将自动关闭stdin、stdout和stderr-否则它们必须为closed+explicitly。|3747528|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/5970819/165673|1|http://www.ruby-doc.org/stdlib-2.0/libdoc/open3/rdoc/Open3.html#method-c-popen3|2^0|2|X|0|10|5|1|0|0|13|H|2|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]|$A|Z|B|10|1|11]]|C|$]]|$1|D|3|E|5|F|7|12|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|13|8|@]|9|@$A|14|B|15|1|16]]|C|$]]|$1|K|3|-4|5|6|7|17|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]|S|$5|N|O|P|C|$Q|T]]|U|$5|N|O|P|C|$Q|T]]]]

As <a href="https://stackoverflow.com/a/5970819/165673">Simon Hürlimann already explained</a>, <a href="http://www.ruby-doc.org/stdlib-2.0/libdoc/open3/rdoc/Open3.html#method-c-popen3" rel="noreferrer">Open3</a> is safer than backticks etc. 

<pre><code>require 'open3'
output = Open3.popen3("ls") { |stdin, stdout, stderr, wait_thr| stdout.read }
</code></pre>

Note that the block form will auto-close stdin, stdout and stderr- otherwise they'd have to be <a href="http://www.ruby-doc.org/stdlib-2.0/libdoc/open3/rdoc/Open3.html#method-c-popen3" rel="noreferrer">closed explicitly</a>.

blocks|key|3747533|text|puts+`date`
puts+$?


Mon+Mar++7+19:01:15+PST+2016
pid+13093+exit+0|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|3747534|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

blocks|key|1124586|text|我没有在这里找到这个，所以添加它，我在获得完整输出时遇到了一些问题。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1124587|1124588|如果你想用反引号捕获标准错误，你可以将标准错误重定向到标准错误。|blockquote|1124589|1124590|输出=+grep+hosts+/private/etc/\*+2>&1|offset|length|style|CODE|1124591|1124592|来源：http://blog.bigbinary.com/2012/10/18/backtick-system-exec-in-ruby.html|1124593|entityMap|0|LINK|mutability|MUTABLE|url|http://blog.bigbinary.com/2012/10/18/backtick-system-exec-in-ruby.html^0|0|0|0|0|4|V|0|0|3|1Y|0|0^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|Z|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|10|8|@]|9|@]|A|$]]|$1|G|3|H|5|6|7|11|8|@$I|12|J|13|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|14|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|15|8|@]|9|@$I|16|J|17|1|18]]|A|$]]|$1|P|3|-4|5|6|7|19|8|@]|9|@]|A|$]]]|Q|$R|$5|S|T|U|A|$V|W]]]]

I didn't find this one here so adding it, I had some issues getting the full output. 

<blockquote>
 You can redirect STDERR to STDOUT if you want to capture STDERR using
 backtick.
 
 output = `grep hosts /private/etc/* 2>&amp;1`
</blockquote>

source: <a href="http://blog.bigbinary.com/2012/10/18/backtick-system-exec-in-ruby.html" rel="nofollow noreferrer">http://blog.bigbinary.com/2012/10/18/backtick-system-exec-in-ruby.html</a>

blocks|key|527448|text|将标准输出捕获到名为val的变量中的最简单解决方案|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|527449|val+=+capture(:stdout)+do
++system("pwd")
end

puts+val|code-block|syntax|javascript|527450|简写版本：|527451|val+=+capture(:stdout)+{+system("ls")+}|527452|捕获内核方法由active_support/core_ext//reporting.rb提供|527453|同样，我们也可以使用:stderr捕获标准错误|CODE|527454|entityMap^0|A|3|0|0|0|0|0|V|0|A|7|0^^$0|@$1|2|3|4|5|6|7|V|8|@$9|W|A|X|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|Y|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|Z|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|10|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|11|8|@$9|12|A|13|B|C]]|D|@]|E|$]]|$1|Q|3|R|5|6|7|14|8|@$9|15|A|16|B|S]]|D|@]|E|$]]|$1|T|3|-4|5|6|7|17|8|@]|D|@]|E|$]]]|U|$]]

Simplest solution to capture standard output into a variable named val:
<pre><code>val = capture(:stdout) do
 system(&quot;pwd&quot;)
end

puts val
</code></pre>
shortened version:
<pre><code>val = capture(:stdout) { system(&quot;ls&quot;) }
</code></pre>
capture method is provided by
active_support/core_ext/kernel/reporting.rb
Simlarly we can also capture standard errors too with <code>:stderr</code>

If I call a command using <a href="http://ruby-doc.org/core-2.2.0/Kernel.html#method-i-system" rel="noreferrer">Kernel#system</a> in Ruby, how do I get its output?

<pre><code>system("ls")
</code></pre>

Getting output of system() calls in Ruby

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

如果我在Ruby语言中使用调用一个命令，我如何获得它的输出？system("ls")

问在Ruby中获取system()调用的输出
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在Ruby中获取system()调用的输出EN