The .vault_pass file is right here with correct string and permissions

However, neither Trellis (canary version) nor Ansible vault are seeing it.

Confirmed trellis configs: ask_vault_pass: false.

ls -a trellis | grep vault
.vault_pass

I can run without error:

ansible-vault view --vault-password-file .vault_pass trellis/group_vars/all/vault.yml

(Not sure how to manually set the file path using trellis vault. Tried a few different sequences eg trellis vault view -f trellis/group_vars/vault.yml --vault-password-file trellis/.vault_pass).

Ah! Found it.

I had, when updating Trellis version, inadvertently removed the line from ansible.cfg:

vault_password_file = .vault_pass

Theoretically this would have been added by trellis-cli.

1 Like