On Sunday, 7 June 2015 21:43:50 UTC+2, David Reagan wrote: Hmm.... So, use rsync to push the scripts to each server, making sure to > only send the data relevant to each specific server. Right? >
No no, we don't push scripts. Each managed node *pulls* playbooks and related bits over SSH. The rsync server runs a "restricted rsync" that will allow the managed node to fetch only some files. This way, a compromised node should never be able to get anything it's not supposed to. Anand -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/d73ccb45-7983-45dd-a857-4e2262ecbabb%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
