On Thu, Apr 7, 2011 at 23:52, John Chris Richards
<john.chris.richa...@gmail.com> wrote:
> I totally agree with you. Hence with the above solution we can have a
> little bit more control over our systems.
Hey. Sorry for getting into this discussion late: if you really
wanted to trigger a puppet run after a file was modified, I would
probably take the approach of using an external tool to do the
triggering.
Linux has the inotify system, and *BSD have something similar, which
do real-time event notification on files and directories. You can
either write a small monitor based on those, or find one of the
existing ones (inoticoming, inocron, and at least one more exist in
Linux-ville).
When they observe a change in the appropriate location they can
trigger the puppet run for you; that gives you the desired behavior,
more or less. You will still have the period between the puppet run
starting and the change being backed out where the system is wrong, of
course.
Overall, though, I wouldn't recommend the strategy: this is a
technical solution to a social problem – if your users are making
uncontrolled, or bad, changes then you need to bring them into the
fold, not fight with them. The later will just make them more
duplicitous: they will disable your notification tool (or puppet, if
that did the monitoring), then make their changes.
I would strongly encourage you to either get to the point that they
are not fighting you (and puppet) for control of the system by
bringing them on board to the process (eg: they update puppet, rather
than hack on the machine), or by locking them out.
Regards,
Daniel
...and, yes, they /will/ get very upset with the "locking them out" option. :)
--
⎋ Puppet Labs Developer – http://puppetlabs.com
✉ Daniel Pittman <dan...@puppetlabs.com>
✆ Contact me via gtalk, email, or phone: +1 (877) 575-9775
♲ Made with 100 percent post-consumer electrons
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
