Skip to content

Latest commit

 

History

History
36 lines (26 loc) · 1.08 KB

File metadata and controls

36 lines (26 loc) · 1.08 KB

famedly.base.dropbear_luks_unlock ansible role

Usage

  • Specify authorized SSH keys in dropbear_authorized_keys: string[], which can then connect as root@{host} when dropbear is running.

  • Specify the network configuration in dropbear_ip_config as a dict with they keys { ip, gateway, netmask, hostname, interface }. Currently, only static IPv4 config is tested.

  • The default command to run on login in /bin/cryptroot-unlock - to override it, set dropbear_run_command accordingly.

Removal of SSH keys

  • In order to remove pubkeys, the SSH keys specified in dropbear_authorized_keys need to be dicts with a key and state key, where state is either present or absent.

  • Ommitting the state for implicit present is allowed, so is plainly specifying the key as a string directly.

dropbear_authorized_keys:
  - key: "<ssh_key_0>"
  - key: "<ssh_key_1>"
    state: present
  - key: "<ssh_key_2>"
    state: absent
  - "<ssh_key_3>"

Supported distros

  • Tested and verified with stock debian 10
  • Tested and verified with stock debian 11