Ansible asks for SSH passphrase if private key is encrypted by vault

1,538 views

Skip to first unread message

Anthony Cheng

unread,

May 2, 2017, 6:41:08 PM5/2/17

to Ansible Project

Anyone using ansible vault to encrypt ssh private key? Seems like it will always prompt for passphrase if the key file is encrypted.

If the key is not encrypted by vault then it works as is; ansible.cfg has the configuration for the vault passphrase file. Also in my case the ssh file does not have passphrase (so doesn't ENCRYPTED in line format).

I see someone ran into the same issue here but no response:

(https://groups.google.com/forum/#!topicsearchin/ansible-project/ansible$20vault$20passphrase;context-place=forum/ansible-project/ansible-project/WHz0yV_b89A/ansible-project/fyFaSw3Aji0)

Perhaps a bug?

Matt Martz

unread,

May 2, 2017, 7:22:25 PM5/2/17

to ansible...@googlegroups.com

Ansible has no current support for connecting to hosts with a vault encrypted ssh key.

See the following PR where support may potentially be added: https://github.com/ansible/ansible/pull/22764

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/7c31376f-022a-4736-961a-0ce4821796e3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.