On Mon, Apr 05, 2010 at 04:54:30PM +1000, Daniel Pittman wrote: > >>> thank you so much for the reply. i have bunch of webserver, i want to able > >>> be able run svn update to all the webserver from master. > > this is not what puppet specializes in. you can probably do it, but you will > almost certainly find it more productive to use some alternate tool to > implement this feature.
I don't understand why so many puppet people say this. Cfengine users do this kind of thing all the time (it's one of the very few things that is possibly slightly easier in Cfengine and is perfectly secure; you can't run arbitrary commands remotely via cfengine any more than you can with puppet). Cfengine does this by allowing you to define arbitary "classes" (which in cfengine means named conditions which are either defined/active or undefined/inactive) when you trigger a run of cfengine either locally or remotely. It's perfectly secure because all you can do is trigger whatever actions are associated with that "class" in the client's config file. The worst you can do is DOS the client machine by repeatedly triggering cfengine (and there are ways to protect against that). Seems to me that the same thing can be achieved with puppetrun and tags (or custom facts or some method you roll for yourself of communicating arbitrary conditions to puppet). What am I missing? -- Bruce I must admit that the existence of Disneyland (which I know is real) proves that we are not living in Judea in AD 50. -- Philip K. Dick -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
