search

ansistrano / deploy

Ansible role to deploy scripting applications like PHP, Python, Ruby, etc. in a capistrano style
https://ansistrano.com
MIT License
2.37k stars 343 forks source link

Workaround for git deployment strategy while /tmp has noexec #314

Closed scuben closed 6 years ago

scuben commented 6 years ago

I run into problem when having /tmp dir mounted with "noexec". Even if remote_tmp is set to something else than /tmp the git module ignores it. Only current working fix is to set TMP dir environments on the git task.

Open issue on ansible: https://github.com/ansible/ansible/issues/30064

ricardclau commented 6 years ago

👎 If you really need to mount /tmp with "noexec", which many disagree on it providing any extra security, you can set the environment variables at a playbook level

I don't see the need to complicate the role for such edge case when it can be solved in your playbooks (https://docs.ansible.com/ansible/2.6/user_guide/playbooks_environment.html)