Associate our LUKS volume with TANG server
Hi, I'm using below ansible playbook to associate LUKS device /dev/sdb, /dev/sdc with 2 Tang servers, it's always successful on one device. e.g. either /dev/sdb or /dev/sdc, but not both, what could be wrong?
-
hosts: rhel7
vars:
dev: /dev/sdb, /dev/sdc
tang_servers:- loninengkvmd2.uk.db.com
- loninengvm610.uk.db.com
tasks:
- name: list device
set_fact: device="{{ dev.split(',') }}" - name: Associate our LUKS volume with each TANG server
shell: cat /tmp/encdisk.secret | clevis bind luks -f -k- -d "{{ item.0 }}" tang '{"url":"http://{{ item.1 }}","adv":"/tmp/{{ item.1 }}.jws"}'
with_nested:- "{{ device }}"
- "{{ tang_servers }}"
on rhel7 host, jws files already exist
ls /tmp/*jws
/tmp/loninengkvmd2.uk.db.com.jws /tmp/loninengvm610.uk.db.com.jws