commit
c1268e8b95
@ -0,0 +1,44 @@ |
|||||||
|
# hcloud encrypted debian |
||||||
|
|
||||||
|
## Description |
||||||
|
This repository contains ansible roles and a packer definition to build |
||||||
|
fully encrypted debian snapshots in hetzner cloud which can then be used |
||||||
|
as base images for terraform deployments. |
||||||
|
|
||||||
|
## Usage |
||||||
|
Install `ansible-deployment` |
||||||
|
```sh |
||||||
|
pip install ansible-deployment |
||||||
|
``` |
||||||
|
|
||||||
|
Further documentation for `ansible-deployment`: https://torarg.github.io/ansible-deployment/ |
||||||
|
|
||||||
|
Clone deployment: |
||||||
|
```sh |
||||||
|
git clone https://gitea.k3s.swla.eu/gitea-admin/hcloud-encrypted-debian-packer.git |
||||||
|
``` |
||||||
|
|
||||||
|
Write deployment.key to deployment directory: |
||||||
|
```sh |
||||||
|
echo "SUPER_SECRET_KEY" > hcloud-encrypted-debian-packer/deployment.key |
||||||
|
``` |
||||||
|
|
||||||
|
Change into deployment directory: |
||||||
|
```sh |
||||||
|
cd hcloud-encrypted-debian-packer |
||||||
|
``` |
||||||
|
|
||||||
|
Pull encrypted deployment data blob: |
||||||
|
```sh |
||||||
|
ansible-deployment pull |
||||||
|
``` |
||||||
|
|
||||||
|
Unlock deployment: |
||||||
|
```sh |
||||||
|
ansible-deployment unlock |
||||||
|
``` |
||||||
|
|
||||||
|
Build snapshot with packer: |
||||||
|
```sh |
||||||
|
packer build hcloud-encrypted-debian.pkr.hcl |
||||||
|
``` |
||||||
@ -0,0 +1,21 @@ |
|||||||
|
{ |
||||||
|
"name": "debian-base-image", |
||||||
|
"deployment_repo": { |
||||||
|
"url": "https://gitea.k3s.swla.eu/gitea-admin/hcloud-encrypted-debian-packer.git", |
||||||
|
"reference": "master" |
||||||
|
}, |
||||||
|
"roles_repo": { |
||||||
|
"url": "git@github.com:torarg/ansible-roles.git", |
||||||
|
"reference": "master" |
||||||
|
}, |
||||||
|
"roles": [ |
||||||
|
"hetzner/autoinstall", |
||||||
|
"linux/unlock_initramfs", |
||||||
|
"common/bootstrap", |
||||||
|
"linux/k3s/ansible_setup" |
||||||
|
], |
||||||
|
"inventory_sources": [ |
||||||
|
], |
||||||
|
"inventory_writers": [ |
||||||
|
] |
||||||
|
} |
||||||
@ -0,0 +1 @@ |
|||||||
|
243e7ffe6f8b950f7f489b429c4c35864c01c4e82113dc9544b985359d59fc03 |
||||||
Loading…
Reference in new issue