similar to: Puppet and Cfengine Differences

I''m not sure if this is the way things are supposed to happen but, when I specify a directory with recursion and md5 checksums, the directory itself is checksummed and assumed to have changed. Of course, if anything in the directory changed, the directory checksum will change. What I would like to do is to manipulate all of the files in a directory, but ignore the directory itself.

Hi there, I want to manage some files with puppet that control the installation of packages in Gentoo (/etc/make.conf, /etc/portage/*). These files must be downloaded to the client before any package resource is processed, so they are installed correctly. Is there any way to do this? Possible solutions: 1. Include in *every* package require => [ list of files ] inside a case statement, so

I''m having a bit of trouble understanding what to do with the ''type'' attribute of ''file''. I would like to perform different operations on directories vs. files under the same structure, can ''type'' be used for this? Are there any other examples of doing this kind of thing? Thanks, Trevor

Does anyone know if it''s possible to do the following: Given the directory structure: /foo/bar /foo/bar/<bunch of stuff> Is it possible to set /foo/bar to, say 555, and all stuff below to 440 or the directory equivalent? Thanks, Trevor

Would it be possible to... ( I suppose that this is an enhancement request )... automatically do the following on a client-side manifest failure: 1. Wipe localconfig.yaml and state.yaml and try again (seems to fix most things for me) 2. Revert to a last known good configuration if all else fails. Thanks, Trevor _______________________________________________ Puppet-users mailing list

Hello, I just attempted to remove both the ypbind and the yp-tools packages using the package parameter with yum. As it turns out, both of these packages depend on each other. Is there a way of forcing package removal and, if there is not, is there a way of making all packages to be removed be collapsed into the same yum command? Either of these solutions would solve the problem with the

Hi all Guess it''s time for me to dig a bit deeper into the ruby language. Can you recommend some good starting books on ruby programming? Thanks. -- Med venlig hilsen Juri Rischel Jensen Fab:IT ApS Vesterbrogade 50 DK-1620 København Tlf: 70 202 407 / Fax: 33 313 640 www.fab-it.dk / juri@fab-it.dk

I suppose that this is a question about fileserver.conf but what I''m trying to do is to have something like the following in fileserver.conf: [$hostname] path /var/lib/puppet/files/privatefiles/$hostname.txt allow $hostname Basically, this would allow access to a file named <hostname>.txt for only the host to which it should be delivered. I''m not entirely sure

Ok, given the statement on the web page about unlesssystemuser under Resources ( http://reductivelabs.com/projects/puppet/documentation/typedocs.html#resources), I assume that users can be purged. However, when I attempt to do this with resources { user: purge => true, noop => true } and what I get is: err: Found a bug: private method ''split'' called for nil:NilClass.

If I do something like the following: class blah { File { mode => 111 } file { "/cheese": } } Will the File override stay within the class or break outside? Also, if I then do: class moo inherits blah { File { owner => bob } file { "/bobsfile": } } What will happen? Thanks, Trevor _______________________________________________ Puppet-users mailing

https://build-automation.108.redhat.com/ Just a thought that it might get some more press. Trevor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I''ve created a small patch, below, to take care of the case when you wish to use yum to ensure that the latest version of the package is installed but the yum server is down. This patch makes the assumption that, in the case of an yum query error, you want to assume that, if the application is installed, it is the latest. This allows you

Has anyone done rollbacks with puppet? The story goes that last night I pushed a change out, which intentionally changed the way certain services where managed. The change involved pushing out a few files, cronjobs, etc., which was okay until it was discovered there was a bug with the service. My configurations are kept in subversion and rolling back to a previous configuration would have

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Attached is a patch which attempts to enforce ''proper'' permissions of all files controlled directly by the puppet processes. All owners and groups are explicitly set as are all permissions. The idea is that the Puppet process configuration files should be relatively tamper resistant and at least throw a warning that the

I''ve been tinkering around with managing users and am concerned with the overall administrative usability of the inheritance overrides. For instance, the user games: redhat_base: user { games: ensure => present } local_site inherits redhat_base: User[games] { ensure => absent } This is fine, but imagine a few levels of nesting later with an admin that wants to ensure that a

This has been a "fun" issue. Basically, I''m trying to purge (ensure => absent) useless users and groups that I don''t need. The problem that I''m having, is that I can''t seem to determine a way to make sure that the users are deleted before the groups. For example: user { games: ensure => absent } group { games: ensure => absent } Now,

I attempted the following: resources { service: purge => true, noop => true } service { sshd: ensure => running; iptables ensure => running; } And got the following message: notice: Starting configuration run err: Found a bug: uninitialized constant Parse notice: Finished configuration run in 0.47 seconds When I remove the ''resources'' line, everything works

This was a fun one to track down... I was trying to use the append_if_no_such_line script from the wiki and it was working fine EXCEPT when I threw a notify at it. The notify appears to completely ignore both unless and onlyif within the exec for some reason. If I put the same test in the actual command line, it works fine. Example: unless => "/bin/grep -Fqe ''$line''

Greetings! Are there any plans of using Kerberos for authentication in addition to (or in place of) SSL certificates in Puppet? Kerberos provides mutual, cryptographically strong authentication. A number of different services are Kerberos-enabled (SSH, NFSv4 and HTTP are common examples), and thus use the same authentication mechanism system-wide. At our site, almost all services and users are

Hello, I would like to know on what platforms Puppet runs. I cannot seem to find the information on Puppet''s web site. Bcfg2 has it on it''s front page :-) I know there are .debs and .rpms, but are, for instance, Solaris, FreeBSD and AIX supported? Thanks. -- Guillaume Pratte Recherche et développement Révolution Linux Toutes les opinions et les prises de position