# Any interest in a module for managing encryption keys on LUKS volumes?

**URL:** <https://forum.ansible.com/t/any-interest-in-a-module-for-managing-encryption-keys-on-luks-volumes/28054>\
**Category:** Ansible Developer\
**Created:** [July 16, 2018, 8:09am UTC](https://forum.ansible.com/t/any-interest-in-a-module-for-managing-encryption-keys-on-luks-volumes/28054 "2018-07-16T08:09:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ed\_C](https://avatars.discourse-cdn.com/v4/letter/e/c67d28/32.png) [@Ed\_C](https://forum.ansible.com/u/Ed_C)\
**Post date:** [July 16, 2018, 8:09am UTC](https://forum.ansible.com/t/any-interest-in-a-module-for-managing-encryption-keys-on-luks-volumes/28054/1 "2018-07-16T08:09:41Z")

</div>

Hi,

I’ve built a module for managing the decryption keys associated a LUKS volume. I’m trying to assess if it would be generally useful (and hence worth contributing) or whether it’s too specific to my use case to be worth while.

The basic function of the module is: Given a list of key files / passwords and a LUKS volume where at least one key is currently valid, ensure that all provided key files / passwords are valid and remove any other decryption keys currently associated with the volume.

Example:

- luks\_keys:  
device: /dev/sda1  
keys:
- password: “p@55w0rd”
- key\_file: “/disk-key”

Does anyone think this is a generally useful capability that would be worth tidying up and contributing? Or is this just weirdly specific for my problem?

Thanks