Forum: Cfengine Help Subject: Re: Does anyone do "yum update" with cfengine3 ? Author: sauer Link to topic: https://cfengine.com/forum/read.php?3,22349,22360#msg-22360
We use a couple of local repositories, one with packages we know will be ok on systems because they've been tested and are safe to deploy to the world, and one with packages which should be updated "less uatomatically" because they need some kind of intervention. Cfengine auto-updates any packages in the "automatic" repository, and we schedule updates from the other repo (generally using Cfengine to specifically pull individual packages based on pre-defined change windows). In both cases, packages do not get intalled on any system until they've been tested and placed into our repo. The "secret" is to identify at a high level a deployment process which you can live with, and /then/ to describe that process using Cfengine. It's probably helpful to do those two steps separately so you don't get bogged down in technical specifics while determining your goals. :) _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
