Thanks Martin. It sounds really good.
Would you share some configuration on place?
When you say patching you mean only linux with packages updates?
Regards
On 13/03/2015 8:08 PM, "Martin Willemsma" wrote:
> I do have a succes story for using Puppet as a patch management tool. We
> build a system
I do have a succes story for using Puppet as a patch management tool. We
build a system around PuppetDB and our internal CMDB to have patches
installed automatically according to update schedules (input for puppet
schedule type) and in a controlled manner.
- Display package updates from PuppetDB i
While it's possible to do stuff like this in Puppet, it's not really
configuration management that you're doing here; it's systems
administration. If your requirement is to have patches installed
automatically, I would write this as a 10 line shell script, and have
Puppet just take care of ins
While it's possible to do stuff like this in Puppet, this isn't really
configuration management you're doing; it's systems administration. If
your requirement is to have patches installed automatically, I would write
a 10 line shell script, and use puppet to install it as a cron job.
On Wednes
I don't have enough nodes to justify running my own patch repository, but
here is the manifest I use for patching our Debian-derived systems. First,
though, here is the facter called "updates_already_running"
Facter.add(:updates_already_running) do
confine :osfamily => "Debian"
setcode do
if
I don't recommend using Puppet for anything to do with patching, even in
the distribution of the patches. (Actually, I'm not sure how Puppet would
be used to distribute patches even in principle.) Anyhow, sooner or later
you're going to want a tool that was actually designed for patch and
pac
El 11/03/15 a las 14:26, Alessandro Franceschi escribió:
I agree with what you wrote.
Puppet is not the best tool to execute one-shot operations like patching
or deploying of applications.
It's good at maintaining the state of the resources of our systems, so
you can use it to configure what you
Agree.
Thanks
On 12/03/2015 12:26 AM, "Alessandro Franceschi" wrote:
> I agree with what you wrote.
> Puppet is not the best tool to execute one-shot operations like patching
> or deploying of applications.
> It's good at maintaining the state of the resources of our systems, so you
> can use it
I agree with what you wrote.
Puppet is not the best tool to execute one-shot operations like patching or
deploying of applications.
It's good at maintaining the state of the resources of our systems, so you
can use it to configure what you need to manage the patching or the
deployment of a syste
