One step closer to distributed install

CactuseSecurity / firewall-orchestrator

Network Security data repository for automation, reporting and compliance of firewall rules

https://fwo.cactus.de

Apache License 2.0

33 stars 11 forks source link

One step closer to distributed install #2528

Closed alf-cactus closed 2 months ago

alf-cactus commented 2 months ago

It is still not possible to complete a distributed installation. These changes however bring us one step closer

tests are only conducted on the host they are designed for
use ansible copy for remote and synchronize for remote host

Non-distributed install tested successfully

alf-cactus commented 2 months ago

In case of local installation you use synchronize, else if you use distributed installation you use copy. This behavior is created with when: inventory_hostname ==(!=) 'localhost'

synchronize has this limitation: Currently, synchronize is limited to elevating permissions via passwordless sudo. This is because rsync itself is connecting to the remote machine and rsync doesn’t give us a way to pass sudo credentials in.

That makes it unsuited for distributed installations