Welcome to Ansible Decryptor
Ansible Decryptor is a powerful tool designed to help you decrypt Ansible vault files with ease. Built with Rust for maximum performance and reliability.
Features
- Native Rust implementation - no external dependencies required
- Fast and efficient decryption
- Supports both environment variables and password files
- Handles inline vault variables within YAML files
Download Instructions
To download the latest version of Ansible Decryptor, visit our GitHub Releases page and select the appropriate binary for your operating system.
Build Status
Getting Started
1. Extract the binary:
tar -xzf ansible-decryptor-Linux-x86_64.tar.gz
2. Set your vault password (choose one method):
# Method 1: Use environment variable
export ANSIBLE_VAULT_PASSWORD=your_password
# Method 2: Use password file
echo "your_password" > ~/.vault_pass
# or
export ANSIBLE_VAULT_PASSWORD_FILE=path/to/your/vault_password_file
3. Run the decryptor:
./ansible-decryptor path/to/your/encrypted_vars.yml
Example Usage
Consider this YAML file with encrypted values (secrets.yml
):
username: bob
password: !vault |
$ANSIBLE_VAULT;1.1;AES256
66666561343034643465376137363938656161346430353236643834313131653630663331626531
3330623833393338663930323633303566366134643131360a623862653133323732383166656366
31333631663861386136346432373438653735346436633566333562656630613135303262383164
3631616264633838350a616562376332356565316234643563383935393864353633393338646234
3532
nested_secret:
api_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
34623737646430613735633664323934306138616266646532396434303661666166366237353862
6331613966396639373939376633393033386239633138650a336338656235613363386364353564
30636138393666306663383761313738653463326264646634353136663065666337623838306666
6362333237616537630a613330613336653338313131633134623661373939663263303265656437
3636
Running the decryptor:
export ANSIBLE_VAULT_PASSWORD=your_password
./ansible-decryptor secrets.yml
Output:
username: bob
password: supersecret123
nested_secret:
api_key: abcdef123456