Linux `nbde_server` role

This role allows users to deploy an NBDE server. NBDE stands for Network-Bound Disk Encryption.

The current supported provider is tang.

Role Variables

Variable	Default	Description
`nbde_server_provider`	tang	identifies the provider for `nbde_server` role. We currently support `tang` as an `nbde_server` provider, meaning that the `nbde_server` role is currently able to provision/deploy a tang server
`nbde_server_rotate_keys`	no	indicates whether we should rotate existing keys -- if any -- , then create new keys. Default behavior (`no`) is to create new keys, if there are none, and don't touch the keys, if they exist. If set to `yes`, existing keys will be rotated and new keys will be created
`nbde_server_deploy_keys`	no	indicates whether we should deploy the specific keys located in `nbde_server_keys_dir` directory
`nbde_server_fetch_keys`	no	indicates whether we should fetch keys to the control node, in which case they will be placed in `nbde_server_keys_dir`
`nbde_server_keys_dir`	`"./keys"`	specifies a directory in the control node that either contains a set of keys to be deployed to the NBDE servers or keys lifted from the NBDE servers. Either `nbde_server_deploy_keys` or `nbde_server_fetch_keys` must be set to `yes` for this variable to have any effect. When deploying keys from this directory, the keys should be in the top level dir. This directory must exist

---
- name: Ensure NBDE server is deployed
  hosts: nbde_servers
  become: true

  roles:
    - role: nbde_server

# vim:set ts=2 sw=2 et:

MIT