[Pkg-puppet-devel] Disable pluginsync in puppet.conf

Nigel Kersten nigel at explanatorygap.net
Sat Mar 13 16:26:38 UTC 2010


2010/3/12 Micah Anderson <micah at riseup.net>:
>
> The pluginsync=true option is set in the default puppet.conf that we
> ship. It seems to me something that most people want enabled, however
> for a new user it causes an error:
>
> err: /File[/var/lib/puppet/lib]: Failed to retrieve current state of
> resource: Could not retrieve information from source(s)
> puppet://puppet/plugins

There's a spurious error that gets thrown if you try to pluginsync and
don't have any plugins.

Given the plugins mount is virtual and constructed on the fly, it
seems particularly dumb behaviour.

http://projects.reductivelabs.com/issues/2244 is the relevant upstream bug.

>
> errors tend to make people scared, especially if they happen on first
> use... so I am wondering about disabling this. People may depend on it,
> so it would require a NEWS item.

Given the security implications of pluginsync (it can append to
anything in RUBYLIB, not just puppet/facter related stuff) I think
turning it off and saying so in NEWS is the right thing to do.

People will turn it on when they need it.


>
> micah
>
>
> --
> "It is no measure of health to be well adjusted to a profoundly sick society." - J Krishnamurti
>
> _______________________________________________
> Pkg-puppet-devel mailing list
> Pkg-puppet-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-puppet-devel
>
>



More information about the Pkg-puppet-devel mailing list