Neil, With CF3 Enterprise, you could use remotescalar() or hubknowledge(), which allow you to fetch values from remote CFEngine hosts, then you could have the values stored only on the hub.
https://cfengine.com/manuals/cf3-Reference#Function-hubknowledge https://cfengine.com/manuals/cf3-Reference#Function-remotescalar --Diego On Jun 13, 2012, at 4:36 PM, Neil Watson wrote: > Suppose you wish to install a piece of software on every host. Part of > the software has password that is unique to each host. I do not want > all passwords stored in the Cfengine policy. How do you go about > distributing those secrets? > > I thought about having a secrets file and using CF access promises to > allow each host to gather its needed file. Scale is a bit of an issue. > If you have 500 hosts I think you need 500 rules unless iteration > looping works in server bundles. > > All ideas welcome. > > -- > Neil Watson > Linux/UNIX Consultant > http://watson-wilson.ca > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
