diff manifests/templates.pp @ 131:0dd899a10ee1 puppet-3.6

Change all "latest" packages to "installed" Having Puppet update packages is dangerous and not correct sysadmin. We have a script for checking for updates. Let that run and let the sysadmin update when appropriate. This will prevent any potential issues from faulty service restarts in the middle of the night.
author IBBoard <dev@ibboard.co.uk>
date Wed, 26 Oct 2016 19:40:37 +0100
parents 16a931df5fd7
children b1815d10eb91
line wrap: on
line diff
--- a/manifests/templates.pp	Thu Oct 06 19:02:30 2016 +0100
+++ b/manifests/templates.pp	Wed Oct 26 19:40:37 2016 +0100
@@ -219,13 +219,13 @@
 class tools {
 	$packages = [ 'sqlite', 'bash-completion', 'nano', 'bzip2', 'mlocate', 'patch' ]
 	package { $packages:
-		ensure => latest;
+		ensure => installed;
 	}
 }
 
 class logrotate {
 	package { 'logrotate':
-		ensure => latest;
+		ensure => installed;
 	}
 	file { '/etc/logrotate.d/httpd':
 		ensure => present,
@@ -241,7 +241,7 @@
 
 class logwatch {
 	package { 'logwatch':
-		ensure => latest;
+		ensure => installed;
 	}
 	File {
 		ensure => present,
@@ -307,7 +307,7 @@
 	$firewall_cmd,
 	) {
 	package { 'fail2ban':
-		ensure => latest,
+		ensure => installed,
 	}
 	service { 'fail2ban':
 		ensure => running,
@@ -546,7 +546,7 @@
 
 	# Graphviz for Trac "master ticket" graphs
 	package { 'graphviz':
-		ensure => latest,
+		ensure => installed,
 	}
 
 	website::https::multitld { 'www.warfoundry':
@@ -664,7 +664,7 @@
 class cronjobs {
 	# Add Mutt for scripts that send emails, but stop it clogging the disk by keeping copies of emails
 	package { 'mutt':
-		ensure => latest,
+		ensure => installed,
 	}
 	file { '/etc/Muttrc.local':
 		content => 'set copy = no',