On Thu, Sep 23, 2010 at 12:34 PM, Ohad Levy <ohadl...@gmail.com> wrote:

> I can also recommend using frozen repos, with a testing cycle every time
> you update them...
> I a while ago I wrote a small web app[1] to collect all versions of all
> packages across all of your hosts, you might find it useful to know which
> package is installed on which server... in anycase, if you freeze your
> repos, a yum update on all of your servers will also ensure compliance :)
>
> +1 for this.

We manage 750 CentOS boxes this way. We create a new server and/or compute
node using SystemImager. That image includes /etc/puppet, but not
/etc/puppet/ssl. /etc/rc.local is used to launch puppet, which then --when
the key is signed-- begins the process of bringing the box in synch with the
rest of the cluster.

We yum-update the boxes from a frozen repo, and when the update is done a
new image is taken and added to SytemImager. We step very lightly about
yum-updates, especially if a reboot is required.

~Charles~

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to