add service to load zfs key

files/zfs-load-key.service

+[Unit]
+Description=Load encryption keys
+DefaultDependencies=no
+After=zfs-import.target
+Before=zfs-mount.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/sbin/zfs load-key -a
+
+[Install]
+WantedBy=zfs-mount.service

tasks/main.yml

@@ -6,6 +6,20 @@
       - zfs-dkms
       - zfsutils-linux
 
+- name: copy zfs unlock systemd service
+  copy:
+    src: zfs-load-key.service
+    dest: /etc/systemd/system/zfs-load-key.service
+    owner: root
+    group: root
+    mode: 0644
+
+- name: enable systemd unlock service
+  ansible.builtin.systemd:
+    name: zfs-load-key.service
+    enabled: True
+    daemon_reload: True
+
 - name: create volumes
   loop: "{{ zfs.volumes|dict2items }}"
   include_tasks: volume.yml