Unreleased
- Renamed option
cryptsetup_backup_header
tocryptsetup_header_backup
and fixed the task to allow to disable header backups. Only disable header backups when you know what you are doing! [ypid] - Renamed option
cryptsetup_keyfile_location
tocryptsetup_secret_location
as it also contains the header backup on the Ansible controller. [ypid] - Added support to setup and mount a encrypted filesystem without storing the keyfile on persistent storage of the remote system. [ypid]
- Removed default mount options
user
andauto
because they are not good defaults for the role. [ypid] cryptsetup_mount_options
andcryptsetup_crypttab_options
are now lists of strings to allow more flexibility. [ypid]- Added
cryptsetup_secret_owner
,cryptsetup_secret_group
andcryptsetup_secret_mode
to allow to change file permissions of the secrets directory and files on the Ansible controller. [ypid] - Renamed
cryptsetup_use_random
tocryptsetup_use_dev_random
to emphasize it’s meaning. [ypid]
Released: 2015-12-01
- Fail when keyfile has been generated but ciphertext block device is not available. [ypid]
- Update :file:`.travis.yml` configuration to test the role on Travis-CI. [drybjed]
- Update documentation and change the required Ansible version to
v1.9.0
due to thebecome
option replacingsudo
. [drybjed] - Migrated to the DebOps project as
debops.cryptsetup
. [drybjed]
Released: 2015-10-30
- Major rewrite to allow to create the crypto and filesystem-layer by this role. [ypid]
- Wrote initial documentation. [ypid]
- Moved to DebOps Contrib (the role is still available under
ypid.crypttab until it has been fully renamed to something like
debops.cryptsetup
). [ypid]
Released: 2015-09-07
- Initial release. [ypid]