Compare commits

...

5 Commits

  1. 44
      README.md
  2. 3
      deployment.json
  3. 2
      deployment.tar.gz.enc.SHA256
  4. 1
      host_vars/default

@ -0,0 +1,44 @@
# hcloud encrypted debian
## Description
This repository contains ansible roles and a packer definition to build
fully encrypted debian snapshots in hetzner cloud which can then be used
as base images for terraform deployments.
## Usage
Install `ansible-deployment`
```sh
pip install ansible-deployment
```
Further documentation for `ansible-deployment`: https://torarg.github.io/ansible-deployment/
Clone deployment:
```sh
git clone https://gitea.k3s.swla.eu/gitea-admin/hcloud-encrypted-debian-packer.git
```
Write deployment.key to deployment directory:
```sh
echo "SUPER_SECRET_KEY" > hcloud-encrypted-debian-packer/deployment.key
```
Change into deployment directory:
```sh
cd hcloud-encrypted-debian-packer
```
Pull encrypted deployment data blob:
```sh
ansible-deployment pull
```
Unlock deployment:
```sh
ansible-deployment unlock
```
Build snapshot with packer:
```sh
packer build hcloud-encrypted-debian.pkr.hcl
```

@ -1,7 +1,7 @@
{
"name": "debian-base-image",
"deployment_repo": {
"url": "_gitea@git.1wilson.org:mw/debian-base-image.git",
"url": "https://gitea.k3s.swla.eu/gitea-admin/hcloud-encrypted-debian-packer.git",
"reference": "master"
},
"roles_repo": {
@ -10,6 +10,7 @@
},
"roles": [
"hetzner/autoinstall",
"linux/unlock_initramfs",
"common/bootstrap",
"linux/k3s/ansible_setup"
],

@ -1 +1 @@
73880a635487232ee4c2ee547befe9eb9e06067c65a197759b20bed0a610b9af
3049b3ea472cb2e27cd026475796076bc119dc67015a70d64a6918026a358e62

@ -0,0 +1 @@
ansible_host: 5.75.181.144
Loading…
Cancel
Save