ssh-crypt
ssh-crypt copied to clipboard
Integrated with keyring or ansible-vault?
is it possible to use ssh-crypt as backends of keyring and ansible-vault, etc, like sageciher?
Not sure about keyring, But you can use ssh-crypt like a "password manager" to safely store your ansible vault password.
- encrypt your current ansible vault password using
ssh-crypt --encrypt --key <my-ssh-key-identifier> --string <plaintext-ansible-password> - create an executable decryption script named "~/vault-pass.sh" like this:
#!/bin/bash
ssh-crypt --decrypt --key <my-ssh-key-identifier> --string '<ENCRYPTED-ansible-password>'
- Tell ansible vault to use the decryption script when needed
export ANSIBLE_VAULT_PASSWORD_FILE=~/vault-pass.sh
ok, thanks