Re: General questions and problems with exec...

Luke Kanies
Tue, 10 Oct 2006 15:21:25 -0000

> On Oct 9, 2006, at 22:45, Luke Kanies wrote:
>
>> Juri Rischel Jensen wrote:
>
> <snip>
>> During installs, just start puppetd with --ignoreschedules.  This will
>> cause it to, well, ignore schedules.  In other words, all objects will
>> run, whether they match their schedule or not.
>
> This got me thinking: What about general security updates, eg. for
> all the libraries, dependency programs etc? Can puppet handle them as
> well...? Or do I have to make an exec statement of some sort to
> handle that...?

It mostly just depends on how you want to manage them.  I''d expect
you''ll want to just do an apt-get upgrade periodically, in which case
it
makes more sense to just have an exec statement handle that.  If you
want to specifically manage the state of a given package, or of all
packages, then you use Puppet''s support for packages.

> One more question that comes to mind: Does puppet run "apt-get
> update" before every run with "package" statements...?

No -- it''s up to you to determine how often you want to update.

> Wauv, that really cut down on the size of that file! Just what I
> want: To be able to type less to do more... ;-) Thanks!

Glad to help.

> Actually the line should read "@cat /etc/shorewall/rulefiles/*.rules
>  > rules" as I suspected that exact variable to be causing the
> problem; but it weren''t. It still doesn''t work.

Ok.  Have you tried running the exec with ''logoutput =>
true'' set?

That should at least tell you what make is saying.  Are you getting a
failure from make?

--
What happens to the hole when the cheese is gone?  -- Bertolt Brecht