document multi developers/different trust levels setup

Signed-off-by: Nico Schottelius <nico@brief.schottelius.org>
This commit is contained in:
Nico Schottelius 2012-01-17 23:41:01 +01:00
parent 3d8f26b42a
commit cae332dcf8
2 changed files with 15 additions and 4 deletions

View file

@ -138,9 +138,20 @@ The following **.git/config** is taken from a a real world scenario:
Have a look at git-remote(1) to adjust the remote configuration, which allows Have a look at git-remote(1) to adjust the remote configuration, which allows
MULTI DEVELOPERS/DIFFERENT TRUST RELATIONSHIP/CENTRAL SERVER APPROACH MULTIPLE DEVELOPERS WITH DIFFERENT TRUST
--------------------------------------------------------------------- ----------------------------------------
FIXME before 2.0.5 If you are working in an environment that requires different people to
work on the same configuration, but having different privileges, you can
implement this scenario with a gateway host and sudo:
- Create a dedicated user (for instance **cdist**)
- Setup the ssh-pubkey for this user that has the right to configure all hosts
- Create a wrapper to update the cdist configuration in ~cdist/cdist
- Allow every developer to execute this script via sudo as the user cdist
- Allow run of cdist as user cdist on specific hosts on a per user/group base
- f.i. nico ALL=(ALL) NOPASSWD: /home/cdist/bin/cdist config hostabc
For more details consult sudoers(5)
SEE ALSO SEE ALSO
-------- --------

View file

@ -65,7 +65,7 @@ SEE ALSO
- cdist(1) - cdist(1)
- cdist-type(7) - cdist-type(7)
- cdist-best-practice(7) - cdist-best-practice(7)
- cdist-stages(7)? - cdist-stages(7)
- Brave New World by Aldous Huxley - Brave New World by Aldous Huxley
COPYING COPYING