---
- name: Converge
  hosts: all
  become: true
  roles:
    - ansible-role-luks
  vars:
    luks_devices:
      - name: data_encrypted
        device: /tmp/test.img
        fstype: ext4
        mount_point: /mnt/data_decrypted
        key: secret

  pre_tasks:
    - name: update apt cache
      ansible.builtin.apt:
        update_cache: true

    - name: check if test.img exists
      ansible.builtin.stat:
        path: /tmp/test.img
      register: st

    - name: create test.img
      ansible.builtin.command: dd if=/dev/zero of=/tmp/test.img bs=1M count=100
      when: not st.stat.exists