rcbops/support-tools

Normalize chef-server/cookbooks scripts with chef-client script

Opened this issue · 0 comments

Apsu commented

The chef-client script ssh's to the specified remote host and calls "sudo" to do its tasks. Once you can easily specify the user to ssh as (cf. #1), it makes good sense to do the needfuls in the chef-server/cookbook scripts via sudo, so you can do all three deployment tasks from a non-root user, without requiring root ssh keys/passwords accessible between boxes.