Ansible based system forger
-
Set
FORGER_SECRETS_DIR
environment variable to a directory where you will have the needed secrets defined.For example
FORGER_SECRETS_DIR=/tmp/secrets/
.Define those files in the secrets directory:
ansible_vault.txt
- Key file for Ansible Vault.github_droptix_ssh_ed25519.txt
- Key file for personal SSH key.github_askia_ssh_ed25519.txt
- Key file for work SSH key.
The secretes diretory will be read-only mounted in the container here:
/etc/forger/secrets/
.
To launch a deployment in a test container use ./scripts/test_image.sh
.
./scripts/test_image.sh fedora_41
To see all the available testing targets check:
./scripts/test_image.sh
Somehow the automated Lazy sync
run with Ansible is not doing it's thing. At
least not entirely. I'm still investigating this bastard as I want LSP to work
out of the box after I deployed the Ansible receipe.