Created gpg-related tasks for lockdown role for post-lockdown initial set-up
This commit is contained in:
		
							
								
								
									
										38
									
								
								.ansible/roles/lockdown/tasks/gpg.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										38
									
								
								.ansible/roles/lockdown/tasks/gpg.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,38 @@
 | 
			
		||||
---
 | 
			
		||||
- name: Acquire GPG private keys from other system
 | 
			
		||||
  delegate_to: "{{ gpg_private_keys_origin_host }}"
 | 
			
		||||
  ansible.builtin.command:
 | 
			
		||||
    argv:
 | 
			
		||||
      - gpg
 | 
			
		||||
      - -a
 | 
			
		||||
      - --export-secret-key
 | 
			
		||||
      - "{{ item }}"
 | 
			
		||||
  loop: "{{ gpg_origin_private_keyids }}"
 | 
			
		||||
  register: gpg_secrets
 | 
			
		||||
- name: Create GPG private keys
 | 
			
		||||
  ansible.builtin.copy:
 | 
			
		||||
    content: "{{ item }}"
 | 
			
		||||
    dest: "{{ ansible_facts['user_dir'] }}/.gnupg/{{ ansible_facts['user_dir'] }}-{{ idx }}.priv.asc"
 | 
			
		||||
    force: yes
 | 
			
		||||
    backup: yes
 | 
			
		||||
    mode: "0600"
 | 
			
		||||
    state: present
 | 
			
		||||
  loop: "{{ gpg_secrets.results }}"
 | 
			
		||||
  loop_control:
 | 
			
		||||
    index_var: idx
 | 
			
		||||
  register: created_gpg_private_keys
 | 
			
		||||
- name: Import GPG private keys
 | 
			
		||||
  when: (gpg_origin_private_key_passwords | length) == (gpg_origin_private_keyids | length)
 | 
			
		||||
  ansible.builtin.command:
 | 
			
		||||
    argv:
 | 
			
		||||
      - gpg
 | 
			
		||||
      - --batch
 | 
			
		||||
      - --import
 | 
			
		||||
      - --yes
 | 
			
		||||
      - --passphrase-fd
 | 
			
		||||
      - 0
 | 
			
		||||
      - "{{ item.dest }}"
 | 
			
		||||
    stdin: "{{ gpg_origin_private_key_passwords[idx] }}"
 | 
			
		||||
  loop: "{{ created_gpg_private_keys.results }}"
 | 
			
		||||
  loop_control:
 | 
			
		||||
    index_var: idx
 | 
			
		||||
		Reference in New Issue
	
	Block a user