puppet auto-upgrading packages is annoying in combination with samhain.

I'd rather have the apt check complain than the samhain check.

diff --git a/modules/buildd/manifests/init.pp b/modules/buildd/manifests/init.pp
index 8ca128e..8f68e69 100644 (file)
--- a/modules/buildd/manifests/init.pp
+++ b/modules/buildd/manifests/init.pp
@@ -1,8 +1,8 @@
 class buildd {
    package {
-     "sbuild": ensure => latest;
-     "buildd": ensure => latest;
-     "buildd-builder-meta": ensure => latest;
+     "sbuild": ensure => installed;
+     "buildd": ensure => installed;
+     "buildd-builder-meta": ensure => installed;
      "apt-transport-https": ensure => installed;
      "debootstrap": ensure => installed;
    }

diff --git a/modules/clamav/manifests/init.pp b/modules/clamav/manifests/init.pp
index d8c35a3..f32805d 100644 (file)
--- a/modules/clamav/manifests/init.pp
+++ b/modules/clamav/manifests/init.pp
@@ -1,6 +1,6 @@
 class clamav {
-    package { "clamav-daemon": ensure => latest;
-              "clamav-freshclam": ensure => latest;
+    package { "clamav-daemon": ensure => installed;
+              "clamav-freshclam": ensure => installed;
     }
 
     file {

diff --git a/modules/debian-org/manifests/init.pp b/modules/debian-org/manifests/init.pp
index be3e3e0..9612a6f 100644 (file)
--- a/modules/debian-org/manifests/init.pp
+++ b/modules/debian-org/manifests/init.pp
@@ -1,5 +1,5 @@
 class debian-org {
-   package { "userdir-ldap": ensure => latest;
+   package { "userdir-ldap": ensure => installed;
              "zsh": ensure => installed;
              "apt-utils": ensure => installed;
              "tcsh": ensure => installed;