Re: RCSs and CFEngine

[Mark Burgess]

rsync is breaks cfengine's principle of autonomous control. At the very
least one should use copy to preserve the autonomous model

M

On Wed, 2006-01-18 at 17:40 +1100, Jamie Wilkinson wrote:
> On Tue Jan 17, 2006 at 22:11:04 -0800, Robert Helmer wrote:
> >If I was starting from scratch, I'd probably try to go with Subversion,
> >since I really believe the atomic commits, rename etc. features are
> >a good idea, although I must say that CVSup is really the ideal way to 
> >get both of the benefits of an export and an update. I am
> >not sure if there is anything equivalent to extract files from
> >Subversion's database without having a real workspace, or
> >waiting for a full export.
> 
> I'm not a fan of having cvs/svn/etc update the cfinputs directory
> automatically.  We deliberately chose to use rsync to roll out the cfinputs
> manually, so that the cfmaster never has access to the repository directly.
> 
> This means you can control access to who can make things go live using SSH
> keys, but still let minions check things in, and you also make sure that if
> the server is compromised then the repository won't be (necessarily).
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://lists.gnu.org/mailman/listinfo/help-cfengine