I like this! The traditional route taken by portage & co is to expose the management server (for example the portage tree) via NFS and then the managed servers have cronjobs that connect to the management server in order to do their magic.I think SSHFS and FUSE would be our best option here. That would give us access to remote filesystems as if they were on the localhost itself.
This requires two things:
#1 The management server has to be positioned in your network so the managed servers can contact it, more or less dictades a place in the DMZ or even externally.
#2 The managed servers has to have extra software installed, for example the cronjobs etc.
With your thoughts about using SSHFS the situation is reversed, aka the management server can be put into the safer network and we only have to allow it to acess the various networks where the managed servers are, and also the software that we use to manage the servers only have to be installed on the management server! (i.e cfg-update and say paludis only need to be installed on the management server)
Another implification is that the management can be performed when the admin says so and not when some remote cronjob are executed. And it is far easier to let the management server reach out to x number of remote serverns per run (in case we have 10000 servers we do not want to start 10000 parelell sessions) than it is to tune the timings of the remote crons.





