@liw the main problems I see with propellor is that (1) it's closely entangled with git, and (2) builds itself on the target, requiring all sort of GHC stuff there.
Apart from that, it's pretty decent. It's certainly a lot faster than Ansible. I'd guess a hundred times faster or so.
So if it were building a single binary on the host and then copied that to wherever it's supposed to run via scp and executes it, it would be fine.