rsync is breaks cfengine's principle of autonomous control. At the very least one should use copy to preserve the autonomous model
M On Wed, 2006-01-18 at 17:40 +1100, Jamie Wilkinson wrote: > On Tue Jan 17, 2006 at 22:11:04 -0800, Robert Helmer wrote: > >If I was starting from scratch, I'd probably try to go with Subversion, > >since I really believe the atomic commits, rename etc. features are > >a good idea, although I must say that CVSup is really the ideal way to > >get both of the benefits of an export and an update. I am > >not sure if there is anything equivalent to extract files from > >Subversion's database without having a real workspace, or > >waiting for a full export. > > I'm not a fan of having cvs/svn/etc update the cfinputs directory > automatically. We deliberately chose to use rsync to roll out the cfinputs > manually, so that the cfmaster never has access to the repository directly. > > This means you can control access to who can make things go live using SSH > keys, but still let minions check things in, and you also make sure that if > the server is compromised then the repository won't be (necessarily). > > > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@gnu.org > http://lists.gnu.org/mailman/listinfo/help-cfengine _______________________________________________ Help-cfengine mailing list Help-cfengine@gnu.org http://lists.gnu.org/mailman/listinfo/help-cfengine
