3 ms·
At the moment I'm using git hooks on bare repos on a deployment machine to automatically build detached work trees whenever someone pushes the deployment branch
by dreamcompiler 6y ago
At the moment I'm using git hooks on bare repos on a deployment machine to automatically build detached work trees whenever someone pushes the deployment branch. This works well because no secret keys need exist on the deployment machine. Even if encrypted, I don't want secret keys sitting on a deployment machine.
Does ansible pull require a secret ssh key on the pulling machine? Seems like it would but I don't remember.
- mdaniel 6y agoIt would only require credentials if you need them to fetch from a private git repo (or other protected playbook source); otherwise it (traditionally) uses the "local" connection, meaning it will launch python subprocesses rather than trying to ssh into localhost