You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+7Lines changed: 7 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -161,6 +161,9 @@ retry_delay = 5
161
161
level = "info"
162
162
format = "json"
163
163
output = "/var/log/vault-dm-crypt.log"
164
+
165
+
[dmcrypt]
166
+
device_prefix = "crypt"# Prefix for dm-crypt device names (default: "crypt")
164
167
```
165
168
166
169
#### Option 2: AppRole Authentication
@@ -183,12 +186,16 @@ retry_delay = 5
183
186
level = "info"
184
187
format = "json"
185
188
output = "/var/log/vault-dm-crypt.log"
189
+
190
+
[dmcrypt]
191
+
device_prefix = "crypt"# Prefix for dm-crypt device names (default: "crypt")
186
192
```
187
193
188
194
**Notes**:
189
195
- Use either `vault_token` OR `approle`/`secret_id`, not both. The two authentication methods are mutually exclusive.
190
196
- The `vault_path` supports the `%h` placeholder which is replaced with the short hostname of the machine. This allows organizing keys by hostname.
191
197
- For vaultlocker compatibility, set `vault_path = "vaultlocker"` (without hostname placeholder)
198
+
- The `device_prefix` option controls the prefix used for dm-crypt device mapper names (e.g., `/dev/mapper/crypt-<uuid>`). Set to `"vaultlocker"` for compatibility with Python vaultlocker. Can also be set via `VAULT_DM_CRYPT_DEVICE_PREFIX` environment variable.
0 commit comments