rsync isn't the complete system - you're going to need git (or another vcs) and some other tools of course.
#1 is git (dump and log the git head on a deploy)
#2 don't do that - keep a single consistent environment
#3 use the system openssl - monitor other software components for security updates -- you need to do this anyway in any of these systems.
I wish everyone to have easy deployments where environments, OS versions and everything else are always consistent. :)
> #3 monitor other software components for security updates -- you need to do this anyway in any of these systems.
Sure. But having multiple virtualenvs means you need to monitor all of them on all of deployed hosts. Having everything packaged separately means you can do audits much easier and without location-specific checks.
#1 is git (dump and log the git head on a deploy) #2 don't do that - keep a single consistent environment #3 use the system openssl - monitor other software components for security updates -- you need to do this anyway in any of these systems.