Patrick wrote:

> 2) Updates / Patch management Are there any best-practices about
> "Patch management with puppet"? For example, we want to upgrade a
> package only if an earlier version currently exist on the client.

> When I use "ensure => latest", a package would be updated to the 
> latest package. It would also be installed even a earlier version was
> not installed before.

At least for Debian, a cron job of 'apt-get update; apt-get -y upgrade' 
with a private repository of known good security updates and other 
patches would do this. Let puppet create an entry for your private 
repository, then install the packages you want with 'ensure => present', 
and finally let the cron job take care of later upgrades. There should 
be an equivalent feature for other distributions' package managers, but 
I'm not familiar with those.

-- 
Mike Renfro  / R&D Engineer, Center for Manufacturing Research,
931 372-3601 / Tennessee Technological University -- ren...@tntech.edu

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to