加解密現有檔案

  1. 建立明文檔 vfile1.yml。
    ceuser@deyu:~/ansible_pb$ echo 'vault file 1' > vfile1.yml
    
    ceuser@deyu:~/ansible_pb$ cat vfile1.yml
    vault file 1
    
  2. encrypt 加密 vfile1.yml,輸入兩次密碼,成功加密。
    ceuser@deyu:~/ansible_pb$ ansible-vault encrypt vfile1.yml
    New Vault password: 
    Confirm New Vault password: 
    Encryption successful
    
  3. 查看加密檔 vfile.yml,是一串亂數。
    ceuser@deyu:~/ansible_pb$ cat vfile1.yml
    $ANSIBLE_VAULT;1.1;AES256
    30346561653064303436343036666238646432303264353035663362666534333839666265613639
    3664303637646131323531356335343034623366653035650a326234623235316537393963633030
    33656238656231623239336335663335313632643532643037646162326637623163366161386464
    3039336535626333340a656331646638303265333435363861656235303835306563313135356237
    3737
    
  4. view 輸入密碼後,才可以檢視加密檔 vfile1.yml。
    ceuser@deyu:~/ansible_pb$ ansible-vault view vfile1.yml
    Vault password: 
    vault file 1
    
  5. decrypt 解密 vfile1.yml,輸入密碼,成功解密。
    ceuser@deyu:~/ansible_pb$ ansible-vault decrypt vfile1.yml
    Vault password: 
    Decryption successful
    
    ceuser@deyu:~/ansible_pb$ cat vfile1.yml
    vault file 1