0e15d6cea8
Convert yes/no to true/false. ( #503 )
2022-08-23 21:33:29 +02:00
6bf3ef47e1
Move licenses to LICENSES/, use SPDX-License-Identifier, mention all licenses in galaxy.yml ( #491 )
...
* Add SPDX license identifiers, mention all licenses in galaxy.yml.
* Add default copyright headers.
* Add headers for documents.
* Fix/add more copyright statements.
* Add copyright / license info for vendored code.
* Add extra sanity test.
* Add changelog fragment.
* Comment PSF-2.0 license out in galaxy.yml for now.
* Remove colon after 'Copyright'.
* Avoid colon after 'Copyright' in lint script.
* Mention correct filename.
* Add BSD-3-Clause.
* Improve lint script.
* Update README.
* Symlinks...
2022-07-21 07:27:26 +02:00
041fff5057
Add persistent and perf options to the luks_device ( #434 )
...
Read and write work queue significantly degrades performance on
SSD/NVME devices[1].
In Debian 11 crypttab does not support no-read-workqueue and
no-write-workqueue flags, so the persistent flag is workaround: once
opened with perf parameters persists forever.
[1] https://blog.cloudflare.com/speeding-up-linux-disk-encryption/
Signed-off-by: Yauhen Artsiukhou <jsirex@gmail.com>
2022-04-10 14:30:10 +02:00
0d4b3ed991
Fix parsing of lsblk output. ( #410 )
2022-03-02 13:48:38 +01:00
ea2e45d63f
Set LANG and similar env variables to prevent translated cryptsetup output. ( #388 )
2022-01-30 21:30:56 +01:00
62272296da
Small docs improvements ( #374 )
...
* Small improvements.
* Document behavior changes.
2022-01-10 12:05:09 +00:00
ebbfd7c56f
luks_device: add built-in signature wiper to work around older wipefs versions with LUKS2 containers ( #327 )
...
* Use 'cryptsetup erase' to kill LUKS signature.
* Adjust unit test.
* Use own wiper for LUKS headers.
* Add comments.
* Fix tests.
* Update changelog.
* Remove 'cryptsetup erase'.
* Improve error messages.
2021-11-11 06:59:35 +01:00
a1897fd3b1
luks_device: add sector_size option ( #193 )
...
* Add sector_size option to luks_device.
* Trying to improve error handling.
* Improve error handling.
2021-03-02 22:02:31 +01:00
d921ff1f68
Allow to configure PBKDF ( #163 )
...
* Allow to configure PBKDF.
* Also add PBKDF options to key add operation.
* Simplify code.
* Update plugins/modules/luks_device.py
Co-authored-by: Andrew Klychkov <aaklychkov@mail.ru>
* Fix indent.
* Use more of the options.
* Bump iteration count.
* Increase memory limit.
* Fall back to default PBKDF.
* Apply suggestions from code review
Co-authored-by: Andrew Klychkov <aaklychkov@mail.ru>
Co-authored-by: Andrew Klychkov <aaklychkov@mail.ru>
2021-01-22 12:21:03 +00:00
ccb25eab36
luks_device - make add/removal of keyfile/passphrase idempotent ( #168 )
...
* Update documentation, adjust tests, add changelog fragment.
* Move module unit test to correct place.
* Implement keyfile / passphrase test.
2021-01-03 11:22:41 +01:00
e4c12fa4e5
Add cipher and hash options to luks_create ( #97 )
2020-08-13 22:17:36 +02:00
109edecd78
Add version_added: 1.0.0 for all new features. ( #37 )
2020-06-29 15:21:35 +02:00
6da3125720
Fix example formatting ( #51 )
2020-05-16 18:53:29 +03:00
9e5969a644
Remove ANSIBLE_METADATA from modules. ( #49 )
2020-05-14 13:22:12 +02:00
4d157b93ee
Use FQCN in examples. ( #12 )
2020-03-31 16:23:45 +02:00
a9f45b4d5b
Initial commit
2020-03-09 13:11:34 +00:00
Felix Fontein
Yauhen
Arnoways
Andrew Klychkov
Ansible Core Team