| #!/usr/bin/env bash | |
| # http://redsymbol.net/articles/unofficial-bash-strict-mode/ | |
| ######################################################################################### | |
| # SCRIPT: clear-docker-cache.sh | |
| # Description: Used to cleanup unused docker containers and volumes | |
| # Source: https://gitlab.com/gitlab-org/gitlab-runner/blob/main/packaging/root/usr/share/gitlab-runner/clear-docker-cache | |
| ###################################################################################### | |
| IFS=$'\n\t' | |
| set -euo pipefail |
I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.
What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.
Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.