template backups in conf.d style locations

[Josef Špak]

I've just been auditing things and found that sometimes we used the template module with backups=yes even though it was configuring e.g. logrotate stuff in /etc/logrotate.d/

However, programs like logrotate may/will read all files in the directory, including the backups.

So perhaps this would be a useful tip.

I was also wondering - did anyone get burned by this?

Josef

[Adam Heath]

Shouldn't such programs have a filter exclude setting? dpkg and rpm
will both place temp files into .d style folders, while installing a
package. I can't speak as to what temp extension rpm uses, but dpkg
will create a $file.dpkg-new or $file.dpkg-old in such a folder. Plus,
vim creates .$file.swp. So, it seems that these other programs will
already need to have a way to exclude those files, and ansible should(or
might already be) do something similar.

> --
> You received this message because you are subscribed to the Google
> Groups "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to ansible-proje...@googlegroups.com
> <mailto:ansible-proje...@googlegroups.com>.
> To post to this group, send email to ansible...@googlegroups.com
> <mailto:ansible...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/4e462ee4-1802-44d0-905c-a8c04d4801d3%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/4e462ee4-1802-44d0-905c-a8c04d4801d3%40googlegroups.com?utm_medium=email&utm_source=footer>.
> For more options, visit https://groups.google.com/d/optout.

[Brian Coca]

I've worked around it several ways:

- exclude specific extensions: *~ (also works for editor backups)
- include specific extensions: Include *.conf
- make the backups hidden: .backupfile

Also there might be an update in the works for making backups live on
the 'master' not on the target machines. Currently you can simulate
this with a fetch + file/absent set of tasks.

> email to ansible-proje...@googlegroups.com.
> To post to this group, send email to ansible...@googlegroups.com.

> To view this discussion on the web visit

> https://groups.google.com/d/msgid/ansible-project/543D50B0.1010402%40brainfood.com.

>
> For more options, visit https://groups.google.com/d/optout.

--
Brian Coca
Stultorum infinitus est numerus
0110000101110010011001010110111000100111011101000010000001111001011011110111010100100000011100110110110101100001011100100111010000100001
Pedo mellon a minno