summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2022-08-06 13:07:25 +0300
committerLars Wirzenius <liw@liw.fi>2022-08-06 13:07:25 +0300
commitaf3a789a175dccf6fab923ea92b8cfd5112305d7 (patch)
treeb98c095661c9110de7e2c70f2bdf242e567383c8
parent662d078fba48c8c0723875f69d90339e4dc568e1 (diff)
downloadansibleness-af3a789a175dccf6fab923ea92b8cfd5112305d7.tar.gz
stamina: allow use of Yubikey for LUKS
Sponsored-by: author
-rw-r--r--ansible/solace.yml13
1 files changed, 13 insertions, 0 deletions
diff --git a/ansible/solace.yml b/ansible/solace.yml
index af7730f..b3b7eaa 100644
--- a/ansible/solace.yml
+++ b/ansible/solace.yml
@@ -142,6 +142,19 @@
# owner: liw
# group: liw
+ - name: "install necessary packages to use a Yubikey with LUKS"
+ apt:
+ name:
+ - yubikey-luks
+ - usbutils
+ - name: "configure crypttab to use yubikey-luks key script"
+ crypttab:
+ name: pv0
+ opts: keyscript=/usr/share/yubikey-luks/ykluks-keyscript
+ state: opts_present
+ - name: "update initramfs"
+ shell: |
+ update-initramfs -u
vars:
ansible_python_interpreter: /usr/bin/python3