Hi Puppeteers!

I've just been speaking to Ohad on #theforeman about package
management, specifically about generating lists of packages : version
numbers across the estate for things like patch management.

DISCLAIMER: I'm new to puppet!

What I was initially thinking was extended facter to produce a
dpkg/rpm etc.. output but I've been told that facter doesn't produce
hashes and the size of the list would probably exceed the available
HTTP GET? Ohad showed me some code that would generate this list, but
it obviously doesn't tie straight into puppet.

Is there any way this could be accomplished? I suppose the nirvana for
me would be to be able to instantly see if a package needs updating,
based upon a CVE/DSA/RSA etc similar to the way pakiti does it [1]..
(although I suppose a sources.list with just security sources would
do) and then use something like mcollective to slowly, but safely
upgrade the package.

Has this been thought of as an approach at all, or do people here use
their own repo's and just finely control what goes into it and use
some other mechanism to push the updates?


Any thoughts on this matter greatly appreciated,

Cheers
Joel


[1] http://pakiti.sourceforge.net/


-- 
$ echo "kpfmAdpoofdufevq/dp/vl" | perl -pe 's/(.)/chr(ord($1)-1)/ge'

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to