Patrick wrote: > 2) Updates / Patch management Are there any best-practices about > "Patch management with puppet"? For example, we want to upgrade a > package only if an earlier version currently exist on the client.
> When I use "ensure => latest", a package would be updated to the > latest package. It would also be installed even a earlier version was > not installed before. At least for Debian, a cron job of 'apt-get update; apt-get -y upgrade' with a private repository of known good security updates and other patches would do this. Let puppet create an entry for your private repository, then install the packages you want with 'ensure => present', and finally let the cron job take care of later upgrades. There should be an equivalent feature for other distributions' package managers, but I'm not familiar with those. -- Mike Renfro / R&D Engineer, Center for Manufacturing Research, 931 372-3601 / Tennessee Technological University -- ren...@tntech.edu --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---