mirror of
https://github.com/trailofbits/algo.git
synced 2025-07-24 14:33:02 +02:00
e8947f318b
* Refactoring, booleans declaration and update users fix * Make server_name more FQDN compatible * Rename variables * Define the default value for store_cakey * Skip a prompt about the SSH user if deploying to localhost * Disable reboot for non-cloud deployments * Enable EC2 volume encryption by default * Add default server value (localhost) for the local installation Delete empty files * Add default region to aws_region_facts * Update docs * EC2 credentials fix * Warnings fix * Update deploy-from-ansible.md * Fix a typo * Remove lightsail from the docs * Disable EC2 encryption by default * rename droplet to server * Disable dependencies * Disable tls_cipher_suite * Convert wifi-exclude to a string. Update-users fix * SSH access congrats fix * 16.04 > 18.04 * Dont ask for the credentials if specified in the environment vars * GCE server name fix
27 lines
802 B
YAML
27 lines
802 B
YAML
---
|
|
- name: Check if the encrypted image already exist
|
|
ec2_ami_facts:
|
|
aws_access_key: "{{ access_key }}"
|
|
aws_secret_key: "{{ secret_key }}"
|
|
owners: self
|
|
region: "{{ algo_region }}"
|
|
filters:
|
|
state: available
|
|
"tag:Algo": encrypted
|
|
register: search_crypt
|
|
|
|
- name: Copy to an encrypted image
|
|
ec2_ami_copy:
|
|
aws_access_key: "{{ access_key }}"
|
|
aws_secret_key: "{{ secret_key }}"
|
|
encrypted: yes
|
|
name: algo
|
|
kms_key_id: "{{ kms_key_id | default(omit) }}"
|
|
region: "{{ algo_region }}"
|
|
source_image_id: "{{ (ami_search.images | sort(attribute='creation_date') | last)['image_id'] }}"
|
|
source_region: "{{ algo_region }}"
|
|
wait: true
|
|
tags:
|
|
Algo: "encrypted"
|
|
register: ami_search_encrypted
|
|
when: search_crypt.images|length|int == 0
|