on_premises/roles/remote_unlock/meta/argument_specs.yml

32 lines
1.1 KiB
YAML

---
argument_specs:
main:
short_description: Unlock LUKS encrypted disks from within initial ram filesystem
description: |
Login to initial ram filesystem via SSH and unlock encrypted disks.
Proceed boot after unlock.
options:
unlock_port:
default: 222
description: TCP/IP port of the initial ram filesystem SSH daemon
type: "int"
luks_passphrase:
description: Passphrase to unlock encrypted LUKS disks
type: "str"
required: true
prepare:
short_description: Setup initial ram filesystem to run a SSH daemon
description: |
Install all dependencies and build a initial ram filesystem that runs a SSH daemon.
SSH will that be available to unlock LUKS encrypted disks from remote.
options:
unlock_port:
default: 222
description: TCP/IP port of the initial ram filesystem SSH daemon
type: "int"
ssh_keys:
description: "List of ssh public keys that will be added to .ssh/authorized_keys"
type: 'list'
elements: 'str'
required: true