Re: [ansible-project] Re: how to encrypt ssh_pass password without asking any more password

2023-12-15 Thread Brian Coca
SSH_ASKPASS also requires DISPLAY (X11 working) so it is not really viable option for Ansible as it is often run from a configuration server/instance that rarely has X11 installed. But if you have such an environment you should be able to set it up that way. -- Brian Coca -- You received

Re: [ansible-project] Re: how to encrypt ssh_pass password without asking any more password

2023-12-15 Thread dbs34
Here is how I do it. I think this is what you want. The way I did it is using a SSH keyring. In the ansible.cfg private_key_file = /etc/ansible/id_rsa_ansible Next share the public key out to all clients, then on the ansible server I created a shell script that invokes #!/bin/env bash ssh-ag

RE: [ansible-project] Re: how to encrypt ssh_pass password without asking any more password

2023-12-15 Thread Stuart Lowe
Use an SSH key then no password is needed. Or create a separate vars file P_vars or something and have p_ansible_ssh_pass=yourpassword encrypt that file with ansible vault then reference that in your all:vars ansible_ssh_pass={{ p_ansible_ssh_pass }} you can then see the file and non secure var