cadey
/
propellor
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

propellor spin

This commit is contained in:
Joey Hess 2014-03-31 11:06:46 -04:00
parent 0605b00128
commit c1c7feedfb
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
README
View File

@ -39,4 +39,15 @@ in such a file, use: propellor --set $host $field
The field name will be something like 'Password "root"'; see PrivData.hs
for available fields.
It's often easiest to deploy propellor to a host by cloning a git://
or http:// repository. To avoid a MITM attack, propellor checks
that the top commit in the git repository is gpg signed by a
trusted key, and refuses to deploy it otherwise. This is only done if
privdata/keyring.gpg exists. To generate it, make a gpg key and
run something like:
The keyring.gpg can be checked into git, but to ensure that it's
used from the beginning when bootstrapping, propellor --spin
transfers it to the host using ssh.
[1] http://reclass.pantsfullofunix.net/