Vault decrypt via command

[freswa]

From the README:

I have plans to add a support to use commands to retrieve a password (eg. using pass or gopass), let me know if you are interested.

I'm just here so say I'm interested :)
I mainly use this repo which uses ansible-vault by defining vault_password_file = misc/get-vault-pass.sh in ansible.cfg

[hv15]

Just to add, per https://docs.ansible.com/ansible/latest/reference_appendices/config.html#default-vault-password-file, the ANSIBLE_VAULT_PASSWORD_FILE environment variable can be set to either a file (whose content contains the clear text password/key) or a executable file (e.g. a script to return the password on stdout). As with @freswa I also use a script which looks something like:

#!/usr/bin/bash

/usr/bin/gopass -o -n my/ansible/vault/password

[Alveel]

This seems to work out of the box for me.

I have ANSIBLE_VAULT_PASSWORD_FILE=$mypath/vault_password.sh in my environment, where the script is executable and just contains a shebang and pass $pass_vault_entry.