summaryrefslogtreecommitdiff
path: root/docsite
diff options
context:
space:
mode:
authorBrian Coca <bcoca@ansible.com>2015-08-21 11:06:00 -0400
committerBrian Coca <bcoca@ansible.com>2015-08-21 11:06:00 -0400
commit144da7e7d1e700bd045ac7bbb099cee1d28332c5 (patch)
treecc280eda2e7834ad06b7f37e5fd11312d94606ed /docsite
parentf150fe2c232a9eb3a3863ed30690397c922de6e1 (diff)
parent956fa801157cc622083d7155316c4db333e1a02a (diff)
downloadansible-144da7e7d1e700bd045ac7bbb099cee1d28332c5.tar.gz
Merge pull request #11765 from ldx/vault_pbkdf2hmac
Use PBKDF2HMAC() from cryptography for vault keys.
Diffstat (limited to 'docsite')
-rw-r--r--docsite/rst/playbooks_vault.rst6
1 files changed, 6 insertions, 0 deletions
diff --git a/docsite/rst/playbooks_vault.rst b/docsite/rst/playbooks_vault.rst
index 2a7b819099..9dce71e2f8 100644
--- a/docsite/rst/playbooks_vault.rst
+++ b/docsite/rst/playbooks_vault.rst
@@ -108,5 +108,11 @@ This is something you may wish to do if using Ansible from a continuous integrat
(The `--vault-password-file` option can also be used with the :ref:`ansible-pull` command if you wish, though this would require distributing the keys to your nodes, so understand the implications -- vault is more intended for push mode).
+.. _speeding_up_vault:
+Speeding Up Vault Operations
+````````````````````````````
+
+By default, Ansible uses PyCrypto to encrypt and decrypt vault files. If you have many encrypted files, decrypting them at startup may cause a perceptible delay. To speed this up, install the cryptography package::
+ pip install cryptography