Created gpg-related tasks for lockdown role for post-lockdown initial set-up
This commit is contained in:
38
.ansible/roles/lockdown/tasks/gpg.yml
Normal file
38
.ansible/roles/lockdown/tasks/gpg.yml
Normal file
@@ -0,0 +1,38 @@
|
||||
---
|
||||
- name: Acquire GPG private keys from other system
|
||||
delegate_to: "{{ gpg_private_keys_origin_host }}"
|
||||
ansible.builtin.command:
|
||||
argv:
|
||||
- gpg
|
||||
- -a
|
||||
- --export-secret-key
|
||||
- "{{ item }}"
|
||||
loop: "{{ gpg_origin_private_keyids }}"
|
||||
register: gpg_secrets
|
||||
- name: Create GPG private keys
|
||||
ansible.builtin.copy:
|
||||
content: "{{ item }}"
|
||||
dest: "{{ ansible_facts['user_dir'] }}/.gnupg/{{ ansible_facts['user_dir'] }}-{{ idx }}.priv.asc"
|
||||
force: yes
|
||||
backup: yes
|
||||
mode: "0600"
|
||||
state: present
|
||||
loop: "{{ gpg_secrets.results }}"
|
||||
loop_control:
|
||||
index_var: idx
|
||||
register: created_gpg_private_keys
|
||||
- name: Import GPG private keys
|
||||
when: (gpg_origin_private_key_passwords | length) == (gpg_origin_private_keyids | length)
|
||||
ansible.builtin.command:
|
||||
argv:
|
||||
- gpg
|
||||
- --batch
|
||||
- --import
|
||||
- --yes
|
||||
- --passphrase-fd
|
||||
- 0
|
||||
- "{{ item.dest }}"
|
||||
stdin: "{{ gpg_origin_private_key_passwords[idx] }}"
|
||||
loop: "{{ created_gpg_private_keys.results }}"
|
||||
loop_control:
|
||||
index_var: idx
|
Reference in New Issue
Block a user