Dotfiles/setup
The_miro f1ea6dcb54 ansible: add collect-luks-keys playbook for LUKS backup key archival
New playbook collect-luks-keys.yml connects to all enrolled FreeIPA
clients, checks for /_LUKS_BACKUP_KEY (placed there by the installer
when encryption is enabled), and fetches each key to the Ansible
controller as luks-keys/<HOSTNAME>_LUKS_BACKUP_KEY (mode 0400).

Hosts without the file are reported but not treated as errors.
The luks-keys/ store directory is created with mode 0700.

Usage:
  ansible-playbook -i inventory collect-luks-keys.yml

Can be scheduled via cron on the controller for automatic collection.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-18 15:25:05 +02:00
..
Setup-shell-4-containers setup: housekeeping — rename, deprecate, fix refs 2026-05-11 15:02:25 +02:00
archiso setup: add answerfile system for fully automated installs 2026-05-18 15:24:47 +02:00
deprecated privacy: remove hardcoded username and AWS signed URL 2026-05-12 14:17:48 +02:00
modules ansible: add collect-luks-keys playbook for LUKS backup key archival 2026-05-18 15:25:05 +02:00
arch-autoinstall.sh installer: add no-encryption option and auto LUKS backup key 2026-05-18 15:24:29 +02:00
archbaseos-guided-install.sh installer: add no-encryption option and auto LUKS backup key 2026-05-18 15:24:29 +02:00
audit-packages.sh setup: fix pamtester/pinta/kew package source categorization 2026-05-11 19:45:33 +02:00
generate-answerfile.sh setup: add answerfile system for fully automated installs 2026-05-18 15:24:47 +02:00
install-modules.sh setup: add browser/IDE modules and lynx to core packages 2026-05-18 14:23:43 +02:00
install.sh setup: add croc to optional apps; fix shell match in tui summary 2026-05-18 03:03:01 +02:00
tui-install.sh setup: add answerfile system for fully automated installs 2026-05-18 15:24:47 +02:00