ka
/
ansible-role-dmcrypt_devices
1
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1 Commit
1 Branch
24KB
Tree: b0ef055542
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'b0ef055542'
${ noResults }
ansible-role-dmcrypt_devices/tasks/main.yml

59 lines
1.2KB
Raw Blame History 

  1. ---

  2. 

  3. - name: shred device

  4.   command:

  5.     shred

  6.     --iterations=1

  7.     {{ item.device }}

  8.   when: item.wipe is defined and item.wipe

  9.   with_items: "{{ dmcrypt_devices }}"

  10. 

  11. - name: ramdisk

  12.   mount:

  13.     src: ram

  14.     fstype: ramfs

  15.     name: /ram

  16.     state: mounted

  17. 

  18. - name: keyfile directory

  19.   file:

  20.     path: /ram/dmcrypt_devices/

  21.     owner: root

  22.     group: root

  23.     mode: 0700

  24.     state: directory

  25. 

  26. - name: keyfile

  27.   copy:

  28.     content: "{{ item.key }}"

  29.     dest: /ram/dmcrypt_devices/{{ item.name }}

  30.   with_items: "{{ dmcrypt_devices }}"

  31. 

  32. - name: luksFormat

  33.   command:

  34.     cryptsetup luksFormat

  35.     --cipher {{ item.cipher }}

  36.     --hash {{ item.hash }}

  37.     --key-size {{ item.key_size }}

  38.     {{ item.device }}

  39.     /ram/dmcrypt_devices/{{ item.name }}

  40.   with_items: "{{ dmcrypt_devices }}"

  41. 

  42. - name: luksOpen

  43.   command:

  44.     cryptsetup luksOpen

  45.     --key-file=/ram/dmcrypt_devices/{{ item.name }}

  46.     {{ item.device }}

  47.     {{ item.name }}

  48.   with_items: "{{ dmcrypt_devices }}"

  49. 

  50. - name: wipe keyfile

  51.   command: shred /ram/dmcrypt_devices/{{ item.name }}

  52.   with_items: "{{ dmcrypt_devices }}"

  53. 

  54. - name: remove keyfile

  55.   file:

  56.     path: /ram/dmcrypt_devices/{{ item.name }}

  57.     state: absent

  58.   with_items: "{{ dmcrypt_devices }}"