[Pkg-puppet-devel] consensus on ubuntu patches?

[Stig Sandbeck Mathisen]

micah anderson <micah at riseup.net> writes:

> etckeeper
> ---------

I would like to wait with including this until it has been accepted
upstream, mostly so we don't differ too much from the upstream puppet.

> ship template dirs
> ------------------
>
> This seems like a good change. It makes me think that we should
> consider also shipping a modules directory, as the best-practice seems
> to be be putting everything as possible into modules now days.

Yes.  I also agree with shipping module directory.  I have an "acme"
module we use at work I can add to doc/puppet/examples/

> purge all puppet directories
> ----------------------------
>
> Ok, this one scares me, only because it makes me worry that we would
> remove someone's hard work that they've spent crafting recipes in
> /etc/puppet. Is there any way we can use ucf or similar to *only* remove
> the package files that the admins have not touched, instead of rm
> -rf'ing the whole thing? Or at least a debconf question that requires
> confirmation before nuking it (like in the mysql package's removal of
> /var/lib/mysql which contains your database data). 
>
> The /var/log puppet directory clearly needs to go.
>
> the /var/lib/puppet directory purge is also a little scary, has anyone
> tried this to see if it is the right thing to do? Remember, that
> directory contains SSL certificates/keys, sometimes facter bits, and
> people have used it for config-file snippet assembly. Just by looking at
> this change, I cannot say for sure if it is the right thing to do, I
> think we'd need to try it, and purge in a number of different scenarios
> to be sure its ok, just to be safe.

I agree with this.  I have no trouble with removing /var/log/puppet.

I am wary about removing /var/lib/puppet (I add local content in
/var/lib/puppet/environments/{production,testing,bootstrap}.  Removing
/etc/puppet is potentially dangerous, for the same reason.

We could encourage users to put local manifests in /srv/puppet, but I
don't want to assume that it's safe to remove /var/lib/puppet and
/etc/puppet, even when purging.

-- 
Stig Sandbeck Mathisen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-puppet-devel/attachments/20100224/76e10b2e/attachment.pgp>