summaryrefslogtreecommitdiff
path: root/roles/storage/luks/base/tasks/main.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/storage/luks/base/tasks/main.yml')
-rw-r--r--roles/storage/luks/base/tasks/main.yml45
1 files changed, 8 insertions, 37 deletions
diff --git a/roles/storage/luks/base/tasks/main.yml b/roles/storage/luks/base/tasks/main.yml
index 7fe556a1..eca233e8 100644
--- a/roles/storage/luks/base/tasks/main.yml
+++ b/roles/storage/luks/base/tasks/main.yml
@@ -4,40 +4,11 @@
name: cryptsetup-bin
state: present
-- name: Create temporary build directory
- tempfile:
- state: directory
- register: keyfile_dir
- changed_when: False
- check_mode: False
-
-- name: create luks volumes
- block:
- - name: write passphrases into temporary keyfiles
- loop: "{{ luks_devices | dict2items }}"
- loop_control:
- label: "{{ item.key }}"
- copy:
- dest: "{{ keyfile_dir.path }}/{{ item.key }}"
- content: "{{ item.value.passphrase }}"
- mode: 0600
- changed_when: False
- check_mode: False
-
- - name: create/open luks volumes
- loop: "{{ luks_devices | dict2items }}"
- loop_control:
- label: "{{ item.key }} ({{ item.value.device }})"
- luks_device:
- name: "{{ item.key }}"
- device: "{{ item.value.device }}"
- keyfile: "{{ keyfile_dir.path }}/{{ item.key }}"
- state: opened
-
- always:
- - name: remove base-directory for keyfiles
- file:
- path: "{{ keyfile_dir.path }}"
- state: absent
- changed_when: False
- check_mode: False
+- name: create luks devices
+ loop: "{{ luks_devices | dict2items }}"
+ loop_control:
+ label: "{{ item.key }}"
+ vars:
+ luks_device: "{{ item.value | combine({'name': item.key}) }}"
+ include_role:
+ name: storage/luks/device