Ansible Vault Environment Variable

README.md

Ansible Vault Environment Variable

Per http://docs.ansible.com/ansible/playbooks_vault.html you can set an environment variable to use a password file for vault access. We can use this to create an environment variable to hold the password.

Password Script

Copy vault-env from this project to ~/bin. Then add this to your ~/.bashrc:

export ANSIBLE_VAULT_PASSWORD_FILE=~/bin/vault-env

Usage

Now just export your password in your shell as needed. Don't be a douche and put this in your profile though.

export ANSIBLE_VAULT_PASSWORD=<password>

vault-env

#!/bin/bash

echo $ANSIBLE_VAULT_PASSWORD

Don't forget to make vault-env executable

 chmod +x ~/bin/vault-env

This is a good idea. Thanks for sharing!

Even better, use secret-tool to store and fetch the password :)

This may have been true, once, but not any longer. The entire contents of the password file becomes the password used to encrypt. Found this out the hard way.