Discussion:
[ansible-project] Docker and Ansible Vault: An insecure match?
Mahmoud Saada
2015-07-14 01:06:46 UTC
Permalink
Ansible Vault requires to prompt the user for a password or a file
containing the password. But if I'm running Ansible inside of a container
<https://registry.hub.docker.com/u/ansible/ubuntu14.04-ansible/>, I cannot
prompt the user for a password.

How can I run a playbook using vars encrypted by Vault during a Docker
build?
How can I do it without exposing a password file?
Is there a best practice?
--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+***@googlegroups.com.
To post to this group, send email to ansible-***@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/d89ed1ef-5970-4bda-bd12-34c283b49cbe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Paul Tötterman
2015-07-15 07:55:57 UTC
Permalink
Post by Mahmoud Saada
How can I run a playbook using vars encrypted by Vault during a Docker
build?
Don't
Post by Mahmoud Saada
How can I do it without exposing a password file?
Is there a best practice?
Give sensitive information to the docker container as environment values.
See e.g. https://registry.hub.docker.com/_/postgres/ and POSTGRES_PASSWORD

Cheers,
Paul
--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+***@googlegroups.com.
To post to this group, send email to ansible-***@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/c2846578-f141-4fe1-9044-d8270742a94a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Loading...