Tricks

Did you know that you can easily forward a variable (or secret) via SSH … ?

This Variable is just available if you’re logged in and never stored in any configfile or backup. This can be a real advantage …

Sending Host

/etc/ssh/ssh_conf

Host trustedhost.world
  SendEnv        _secret

Receiving Host

/etc/ssh/sshd_conf

AcceptEnv               _secret

restart sshd

Connect

user@myhost ~# export _secret=topsecret99
user@myhost ~# ssh trustedhost.world

user@trustedhost ~# set |grep _secret
_secret=topsecret99

here we are …

Any Comments ?

sha256: 2713843b09025791c3a22c831d592af5ed0a0d7a0e593e67175956f7ee8acfbe

Show Hostvars

ansible -m debug -a "var=hostvars['puffy']" localhost

Build Encrypted Variable

echo -n 'letmein' | ansible-vault encrypt_string --stdin-name 'vault_my_var'
vault_my_var: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          31366161316337383034303536623932613436333530333435366132383637643366333931663732
          3761653137313030323036336435633134663861313939380a663939393263383934323864663265
          34353632646137356535323536643565616561376133313936313763386164333234663233643561
          6364396632663133380a356132343239386632356562333538633236646665653531333438653165
          6465

Ansible Loops Overview

https://chromatichq.com/blog/untangling-ansibles-loops

Anstom Log

Source: https://github.com/octplane/ansible_stdout_compact_logger/commit/d8effb3c85d1b9364d3efab9360f8470bc76fc26