1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

# 安装
brew install bitwarden-cli

# 配置server地址
bw config server https://xxx.xxx

# 登录
bw login

# 登录完成后可以查看一下状态
bw status

# 正常来说, 即使是登录了, `bw` 每次执行可能也都会要求输入主密码, 这时候你可以使用如下命令让当前shell会话免密码: 
export BW_SESSION=$(bw unlock --raw)

# 测试创建一个密码item   
bw get template item | jq ".name=\"Ansible-test-alliot-blog\" | .login=$(bw get template item.login | jq '.username="alliot" | .password="password123"')" | bw encode | bw create item

# 获取这个密码
bw get password Ansible-test-alliot-blog

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

[defaults]
nocows = 1
host_key_checking = False
inventory = inventory/inventory.ini
ansible_ssh_user = root
interpreter_python = auto_silent
stdout_callback = debug



vault_password_file = ~/vault-pass.sh


[ssh_connection]
pipelining =True
ssh_args=-o ControlMaster=auto -o ControlPersist=60s

1
2
3
4
5
6
7
8
9
10
11
12

#!/bin/bash

set -e

# 需要先安装bitwarden-cli 
# brew install bitwarden-cli 
# bw config server https://xx.xxx
# bw login  
# bw sync   
# bw logout   
# export BW_SESSION=$(bw unlock --raw)   
bw get password "Ansible-test-alliot-blog"

1
2

ansible-vault encrypt alliot-blog.yaml
New Vault password:  

1
2
3

ansible-vault encrypt alliot-blog.yaml         

? Master password: [input is hidden]