puppet auto-upgrading packages is annoying in combination with samhain.

I'd rather have the apt check complain than the samhain check.

diff --git a/modules/buildd/manifests/init.pp b/modules/buildd/manifests/init.pp
index 8ca128e767b7e8a91aa20b98deffc2b0b4391a22..8f68e6905f2469c46074cd49e9a011a58b8965c5 100644 (file)
--- a/modules/buildd/manifests/init.pp
+++ b/modules/buildd/manifests/init.pp
@@ -1,8 +1,8 @@
 class buildd {
    package {
-     "sbuild": ensure => latest;
-     "buildd": ensure => latest;
-     "buildd-builder-meta": ensure => latest;
+     "sbuild": ensure => installed;
+     "buildd": ensure => installed;
+     "buildd-builder-meta": ensure => installed;
      "apt-transport-https": ensure => installed;
      "debootstrap": ensure => installed;
    }

diff --git a/modules/clamav/manifests/init.pp b/modules/clamav/manifests/init.pp
index d8c35a3bae83b43c9cbdc224aff3302cecef8af3..f32805d98b94724c4059291a19c5aeff0a902ba6 100644 (file)
--- a/modules/clamav/manifests/init.pp
+++ b/modules/clamav/manifests/init.pp
@@ -1,6 +1,6 @@
 class clamav {
-    package { "clamav-daemon": ensure => latest;
-              "clamav-freshclam": ensure => latest;
+    package { "clamav-daemon": ensure => installed;
+              "clamav-freshclam": ensure => installed;
     }
 
     file {

diff --git a/modules/debian-org/manifests/init.pp b/modules/debian-org/manifests/init.pp
index be3e3e059813dbc911095abf48777ecb6489fa23..9612a6f573f5931f23d9cab562d28c2ef4a15f6a 100644 (file)
--- a/modules/debian-org/manifests/init.pp
+++ b/modules/debian-org/manifests/init.pp
@@ -1,5 +1,5 @@
 class debian-org {
-   package { "userdir-ldap": ensure => latest;
+   package { "userdir-ldap": ensure => installed;
              "zsh": ensure => installed;
              "apt-utils": ensure => installed;
              "tcsh": ensure => installed;