Differences

This shows you the differences between two versions of the page.

--- linux:security:keyring:secret-tool [2021/11/09 00:32] – [Usage] chuck
+++ linux:security:keyring:secret-tool [2021/11/14 16:59] (current) – chuck
@@ Line 1: / Line 1: @@
 ======secret-tool======
-Store and retrieve passwords from the keyring.
 ----
-===Description===
+=====Description=====
-<WRAP green announcement smaller>
+Store and retrieve passwords from the keyring.
-==From man secret-tool==
-Each password is stored in an item. Items are uniquely identified by a set of attribute keys and values. When
-storing a password you must specify unique pairs of attributes names and values, and when looking up a
-password you provide the same attribute name and value pairs.
-</WRAP>
 ----
@@ Line 29: / Line 23: @@
     * ''%%{attribute}%%'' = Used by the secret-tool for retrieving or deleting a given secret.
     * ''%%{value}%%'' = Used by the secret-tool for retrieving or deleting a given secret.
-----
   * Add an entry:<code bash>
 secret-tool store --label='My Label' {attribute} {value} {attribute2} {value2} [...]
-Password:
 </code>
   * Retrieve a password:<code bash>
 secret-tool lookup {attribute} {value} {attribute2} {value2} [...]
-P4s$W0rd
 </code>
   * Show entries with similar key/values:<code bash>
 secret-tool search --all {attribute} {value} {attribute2} {value2} [...]
-[/org/freedesktop/secrets/collection/TestDB/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx]
-label = test2
-secret = P4s$W0rd
-created = 2020-05-08 17:58:08
-modified = 2020-05-08 21:16:04
-schema = (null)
-attribute.Path = /test2
-attribute.Uuid = 04706d96b2404a2f96de02a8a76bf113
-attribute.UserName = chuck
-attribute.URL =
-attribute.Notes =
-attribute.Title = test2
-attribute.Key1 = Value1
-attribute.Key2 = Value2
 </code>
   * Delete an entry:<code bash>
 secret-tool clear {attribute} {value} {attribute2} {value2} [...]
 </code>
+----
 ====Searching====
   * Generic Formatting Example:<code bash>
@@ Line 86: / Line 62: @@
 </code>
   * Use in docker: https://www.marian-dan.ro/blog/storing-secrets-using-secret-tool/
+----
+====Use keyring for Ansible====
+  * Create keyring entry:<code bash>
+secret-tool store --label='Ansible Playbook' service ansible_playbook username <username>
+</code>
+  * Create variable in playbook:<code yaml>
+admin_user: "username"
+ansible_become_pass: "{{ lookup('community.general.keyring', 'ansible_playbook {{ admin_user }}') }}"
+</code>
+  * https://docs.ansible.com/ansible/latest/collections/community/general/keyring_lookup.html
 ----