ansible / ansible.builtin / v2.9.17 / module / crypttab Encrypted Linux block devices | "added in version" 1.9 of ansible.builtin" Authors: Steve (@groks) preview | supported by communityansible.builtin.crypttab (v2.9.17) — module
pip
Install with pip install ansible==2.9.17
Control Linux encrypted block devices that are set up during system boot in C(/etc/crypttab).
- name: Set the options explicitly a device which must already exist crypttab: name: luks-home state: present opts: discard,cipher=aes-cbc-essiv:sha256
- name: Add the 'discard' option to any existing options for all devices crypttab: name: '{{ item.device }}' state: opts_present opts: discard loop: '{{ ansible_mounts }}' when: "'/dev/mapper/luks-' in {{ item.device }}"
name: description: - Name of the encrypted block device as it appears in the C(/etc/crypttab) file, or optionally prefixed with C(/dev/mapper/), as it appears in the filesystem. I(/dev/mapper/) will be stripped from I(name). required: true type: str opts: description: - A comma-delimited list of options. See C(crypttab(5) ) for details. type: str path: default: /etc/crypttab description: - Path to file to use instead of C(/etc/crypttab). - This might be useful in a chroot environment. type: path state: choices: - absent - opts_absent - opts_present - present description: - Use I(present) to add a line to C(/etc/crypttab) or update its definition if already present. - Use I(absent) to remove a line with matching I(name). - Use I(opts_present) to add options to those already present; options with different values will be updated. - Use I(opts_absent) to remove options from the existing set. required: true type: str password: description: - Encryption password, the path to a file containing the password, or C(-) or unset if the password should be entered at boot. type: path backing_device: description: - Path to the underlying block device or file, or the UUID of a block-device prefixed with I(UUID=). type: str