-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Smith wrote: > berber wrote: >> Puppet runs every hour or so on our production servers and makes sure >> they stick to the manifest. I'm curious to know if this is advised for >> production. >> >> In theory, if something breaks in puppet for whatever reason, all of >> our production servers may be hurt simultaneously. >> > > 1) Don't disable using the cached catalog in case of failure > 2) Treat your Puppet deployments like software deployments. STAGE THEM!!
Puppet makes managing configuration easier and more automated - it doesn't preclude change control, testing and work flow. :) In fact using Puppet without these can sometimes be downright dangerous. Regards James Turnbull - -- Author of: * Pro Linux System Administration (http://tinyurl.com/linuxadmin) * Pulling Strings with Puppet (http://tinyurl.com/pupbook) * Pro Nagios 2.0 (http://tinyurl.com/pronagios) * Hardening Linux (http://tinyurl.com/hardeninglinux) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBSzm1UiFa/lDkFHAyAQLhGggA2Pa4GipIeWRq83EiKV9e3QKMz1CF4VGT hfGbW7UdUDKKdDCS8hORlGmSMjl27LInaa5PF21aB5v6v0XDhwpB6zrQ9RaO0rdr 0YdN8S/HiuJqeT5b9/+B/RzpPB6xkNF5u37eKIgd+MNdyL6G20W7X1Pv6XROrEt0 9/bvPACbc8hmdn5pirbR7dopg7ETNr4EMH7AtOsJ/wB1f4iiA+fyjmnncalGU3sv RXS8iefF/V/NwL+RFWACMVLuM5ZEdyG7JfVXn9vS9oGg9k6xr/pHbgPJ5iATjVyj loKufiUDjXIZpXd0oJn3Q1WiVVW2EB6W//4lhonkr95mzbPjIhW/fw== =ZPyb -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.