Associate our LUKS volume with TANG server

Posted on

Hi, I'm using below ansible playbook to associate LUKS device /dev/sdb, /dev/sdc with 2 Tang servers, it's always successful on one device. e.g. either /dev/sdb or /dev/sdc, but not both, what could be wrong?


  • hosts: rhel7
    vars:
    dev: /dev/sdb, /dev/sdc
    tang_servers:

    • loninengkvmd2.uk.db.com
    • loninengvm610.uk.db.com

    tasks:

    • name: list device
      set_fact: device="{{ dev.split(',') }}"
    • name: Associate our LUKS volume with each TANG server
      shell: cat /tmp/encdisk.secret | clevis bind luks -f -k- -d "{{ item.0 }}" tang '{"url":"http://{{ item.1 }}","adv":"/tmp/{{ item.1 }}.jws"}'
      with_nested:
      • "{{ device }}"
      • "{{ tang_servers }}"

on rhel7 host, jws files already exist

ls /tmp/*jws

/tmp/loninengkvmd2.uk.db.com.jws /tmp/loninengvm610.uk.db.com.jws

Responses