Released: 2016-04-04
- Fixed usage of the
role::cryptsetup:backup
tag. [ypid] - Fixed permission enforcement of the header backup on the Ansible controller. [jacksingleton]
- Remove header backups on remote system when
cryptsetup_header_backup
is set toFalse
. [ypid] - No need to have a default for
cryptsetup_state
in the tasks.cryptsetup_state
is expected to be valid. [ypid]
Released: 2016-03-23
- Renamed option
cryptsetup_backup_header
tocryptsetup_header_backup
and fixed the task to allow to disable header backups. Fixed: Honor the value ofitem.backup_header
(cryptsetup_devices
). Only disable header backups when you know what you are doing! [ypid] - Renamed option
cryptsetup_keyfile_location
tocryptsetup_secret_path
as it also contains the header backup on the Ansible controller. [ypid] - Added support to setup and mount a encrypted filesystem without storing the keyfile on persistent storage of the remote system. [ypid]
- Removed default mount options
user
andauto
because they are not good defaults for the role. [ypid] cryptsetup_mount_options
andcryptsetup_crypttab_options
are now lists of strings to allow more flexibility. [ypid]- Added
cryptsetup_secret_owner
,cryptsetup_secret_group
andcryptsetup_secret_mode
to allow to change file permissions of the secrets directory and files on the Ansible controller. [ypid] - Renamed
cryptsetup_use_random
tocryptsetup_use_dev_random
to emphasize it’s meaning. [ypid]
Released: 2015-12-01
- Fail when keyfile has been generated but ciphertext block device is not available. [ypid]
- Update :file:`.travis.yml` configuration to test the role on Travis-CI. [drybjed]
- Update documentation and change the required Ansible version to
v1.9.0
due to thebecome
option replacingsudo
. [drybjed] - Migrated to the DebOps project as
debops.cryptsetup
. [drybjed]
Released: 2015-10-30
- Major rewrite to allow to create the crypto and filesystem-layer by this role. [ypid]
- Wrote initial documentation. [ypid]
- Moved to DebOps Contrib (the role is still available under
ypid.crypttab until it has been fully renamed to something like
debops.cryptsetup
). [ypid]
Released: 2015-09-07
- Initial release. [ypid]