4 ms·

Could anyone comment about whether any file-related Ansible modules use scp by default instead of sftp?

• evgen 8y ago
  I believe you need to set scp_if_ssh = True in ansible.cfg for scp to ever be used, even if sftp is not available on the remote host.
  • jabl 8y ago
    Nowadays ansible uses a sort-of 'smart' method by default, where it first tries to use sftp, and if that fails, falls back to scp. See https://docs.ansible.com/ansible/latest/plugins/connection/ssh.html https://docs.ansible.com/ansible/latest/plugins/connection/s...
    • zurn 8y ago
      So if the server is compromised, it can fail the sftp in a suitable way? But its another matter if ansible's scp client is vulnerable to this.
    • kakarot 8y ago
      So if anyone is curious, the way to prevent this is: scp_if_ssh = false