On Wednesday, June 8, 2016 at 4:06:10 AM UTC-5, Matt Larson wrote:
>
> I did try installing via the PC1 (AIO) repo, and it worked ok for me at 
> home.  But like I said, can't do that at work.
>
> What is your main concern with AIO?  I don't wanna make a bad step here.   
> At first, AIO sounded scary to me... like some alternative to rpm/yum (in 
> case of rhel-based distros), but it's still the same packaging mechanism, 
> just dedicated repos per collective release, yes?
>
>

No, AIO is quite a different beast from a separate repo per release.  It is 
Puppet software plus private copies of substantially all dependencies, all 
in a single package.  It is true that the packages in question are of the 
target machines' native package type, but that's not the point.  I have 
both philosophical and practical objections to the practice, without regard 
to the details of Puppet's AIO packages specifically.  Your Infosec people 
are going to hate it more specifically and intensely, and it is possible 
that you will even run into a policy that forbids (third party) AIO 
packages altogether.  If they undertake the required review, then expect it 
to take a long time, because they will need to review every component 
included in the AIO.


John

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/98b0d9d0-c522-42dd-90ea-755900446d62%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to