}
file { '/usr/local/share/ca-certificates/debian.org':
- ensure => directory,
- source => 'puppet:///modules/ssl/servicecerts/',
- mode => '0644', # this works; otherwise all files are +x
+ ensure => absent,
purge => true,
recurse => true,
force => true,