The PR for using a script for the password file did include some documentation which is available at:
http://docs.ansible.com/playbooks_vault.html#running-a-playbook-with-vault It is not extensive but does give some information as to what ansible expects. James merged the PR a few weeks ago. On Friday, August 1, 2014, Michael DeHaan <[email protected]> wrote: > There's a pull request for direct GPG support in vault as well, that we > need to evaluate > > https://github.com/ansible/ansible/pull/7174 > > "Luckily, the next major release of Ansible will include the ability for > vault_password_file to point at a script that will be run to get your > passphrase." > > FYI - I don't remember merging this one. If we didn't merge that yet, I'm > not opposed. Perhaps James did and I didn't notice, but there should be > instructions added in docs to reference how to use it before this is > complete. > > It may be a case of comparing the two submissions, can you please comment > on the above pull request? > > Thanks! > > > > > > > On Fri, Aug 1, 2014 at 1:48 AM, Dale <[email protected] > <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: > >> Hi Ansible users, >> >> I've been trying to use vault lately but I got tired of having to enter >> my passphrase every time I ran ansible-playbook. I didn't want to put my >> passphrase into a file on disk, either. Luckily, the next major release of >> Ansible will include the ability for vault_password_file to point at a >> script that will be run to get your passphrase.[1] Using this new >> functionality I wrote a tiny vault_password_file script that reads your >> passphrase via gpg-agent. gpg-agent will then cache that passphrase for >> you (by default) so you won't have to enter it every time you run an >> Ansible command. >> >> I thought others might find this useful. If so, the script can be found >> at: >> >> https://github.com/dsedivec/ansible-plugins/blob/master/vault_from_gpg_agent.py >> >> To reiterate, as of right now I believe this will only work with Ansible >> from the Git devel branch. >> >> If an Ansible maintainer thinks this has a place in some more official >> repository somewhere I'm happy to make a pull request, just give me a hint >> where it should go. >> >> Regards, >> Dale >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Ansible Project" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] >> <javascript:_e(%7B%7D,'cvml','ansible-project%[email protected]');> >> . >> To post to this group, send email to [email protected] >> <javascript:_e(%7B%7D,'cvml','[email protected]');>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ansible-project/CAEj9N4LwfbYg-PVAPTwmn1WP%3DCaYefPU48vY05XS3QxBWyFuUQ%40mail.gmail.com >> <https://groups.google.com/d/msgid/ansible-project/CAEj9N4LwfbYg-PVAPTwmn1WP%3DCaYefPU48vY05XS3QxBWyFuUQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <javascript:_e(%7B%7D,'cvml','ansible-project%[email protected]');> > . > To post to this group, send email to [email protected] > <javascript:_e(%7B%7D,'cvml','[email protected]');>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CA%2BnsWgzxADuiEuwzxk9W_oG86E5D_Yr-yPK_9Er0bJ3cudCEsw%40mail.gmail.com > <https://groups.google.com/d/msgid/ansible-project/CA%2BnsWgzxADuiEuwzxk9W_oG86E5D_Yr-yPK_9Er0bJ3cudCEsw%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Matt Martz [email protected] http://sivel.net/ -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAD8N0v-8qGjx7m5poBTR_h3zJuNQ9eBeV2hutiC4_dNdaQEG7Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
