ansible.builtin.crypttab (v2.9.27) — module

Install Ansible via pip

Install with pip install ansible==2.9.27

Description

Control Linux encrypted block devices that are set up during system boot in C(/etc/crypttab).

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Set the options explicitly a device which must already exist
  crypttab:
    name: luks-home
    state: present
    opts: discard,cipher=aes-cbc-essiv:sha256

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Add the 'discard' option to any existing options for all devices
  crypttab:
    name: '{{ item.device }}'
    state: opts_present
    opts: discard
  loop: '{{ ansible_mounts }}'
  when: "'/dev/mapper/luks-' in {{ item.device }}"

Inputs

    
name:
    description:
    - Name of the encrypted block device as it appears in the C(/etc/crypttab) file, or
      optionally prefixed with C(/dev/mapper/), as it appears in the filesystem. I(/dev/mapper/)
      will be stripped from I(name).
    required: true
    type: str

opts:
    description:
    - A comma-delimited list of options. See C(crypttab(5) ) for details.
    type: str

path:
    default: /etc/crypttab
    description:
    - Path to file to use instead of C(/etc/crypttab).
    - This might be useful in a chroot environment.
    type: path

state:
    choices:
    - absent
    - opts_absent
    - opts_present
    - present
    description:
    - Use I(present) to add a line to C(/etc/crypttab) or update its definition if already
      present.
    - Use I(absent) to remove a line with matching I(name).
    - Use I(opts_present) to add options to those already present; options with different
      values will be updated.
    - Use I(opts_absent) to remove options from the existing set.
    required: true
    type: str

password:
    description:
    - Encryption password, the path to a file containing the password, or C(-) or unset
      if the password should be entered at boot.
    type: path

backing_device:
    description:
    - Path to the underlying block device or file, or the UUID of a block-device prefixed
      with I(UUID=).
    type: str