Hello,
I'm introducing hiera-eyaml-gpg <https://github.com/sihil/hiera-eyaml-gpg>
to our workflow and hit a snag.
I configured hiera like this:
---
:backends:
- eyaml
:eyaml:
:datadir: '/etc/puppet/hieradata'
:extension: 'yaml'
:gpg_gnupghome: /vagrant/keyrings/live
:hierarchy:
- "fqdn/%{fqdn}"
- "os/%{osfamily}"
- common
:logger: console
And I manage to get Vagrant to execute puppet with eyaml inside the Vagrant
box and eyaml finds the hiera data, but it fails on access my private key
inside the Vagrant box.
I managed to setup gpg-agent on the host, and found that more recent
versions of OpenSSH support UNIX-domain socket forwarding
(http://superuser.com/a/884602/27453).
My question now is:
1. How do others manage to use eyaml inside Vagrant?
2. If forwarding gpg-agent is the way to go, is there any Vagrant
configuration trick to set it up automatically? I didn't find anything
about this in https://docs.vagrantup.com/v2/vagrantfile/ssh_settings.html
3. Should I instead import my private gpg key into the Vagrant box using a
shell provisioner?
Thanks.
--
This mailing list is governed under the HashiCorp Community Guidelines -
https://www.hashicorp.com/community-guidelines.html. Behavior in violation of
those guidelines may result in your removal from this mailing list.
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to the Google Groups
"Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/vagrant-up/93630851-80aa-4d42-9ff1-4f286d7952bd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
