Ansible Vault

Prepare: password file Create a simple password file. In the following case, I store it at ~/.ansible_vault_password. How to use Here is the simple snippets. ansible-vault create --vault-password-file ~/.ansible_vault_password ./foo.key # Make encrypted file and start editing. ansible-vault edit --vault-password-file ~/.ansibe_vault_password ./foo.key ansible-vault encrypt --vault-password-file ~/.ansible_vault_password ./foo.key # Encrypt existing file. Further Ansible-vault usees AES for its encryption. You can use executable file as a password file (don’t forget to add executable permission, unless you’ll get HMAC error when you append -vvvv option).