tmt icon indicating copy to clipboard operation
tmt copied to clipboard

Usage of Ansible Inventory in local provisioning

Open dav-pascual opened this issue 2 months ago • 2 comments

The support of ansible inventory in local provisioning could be problematic and introduce potential security issues e.g. you can run tasks on localhost even on the multi-host system

Investigate:

  • If supporting inventory in local provisioning would bring any benefit
  • If its support could introduce security issues

Created from https://github.com/teemtee/tmt/pull/3839#discussion_r2440288143

dav-pascual avatar Oct 20 '25 12:10 dav-pascual

Needs more discussion to find out what to do here.

thrix avatar Oct 22 '25 08:10 thrix

From the hacking session:

  • Running ansible and having inventory for local provision makes sense because you could have multiple local provision guests
  • Prohibiting local/localhost on all other provision types makes sense, but requires research on how to do it. If you have ideas, let us know

LecrisUT avatar Nov 18 '25 13:11 LecrisUT