I disagree, as it's not a compliance testing framework, it's intended to do a particular variety of basic tests.
Compliance is more about checking for drift between unlike systems, and being able to do very good reports on them and then select systems based on certain criteria. We'll be doing some things here in the near future, part of the steps to get here are to either have a fact caching system or use a callback to record facts, another step is to supplement our existing setup module with some modules that calculate a bit more inventory. On Wed, Jan 22, 2014 at 12:20 PM, Aaron Hunter <[email protected]>wrote: > I would recommend that you use Ansible to do the patching and updating but > use serverspec (serverspec.org) to do the compliance checking. They work > well together and this uses each for its intended purpose. > > --Aaron > > > On Tuesday, January 21, 2014 12:34:12 PM UTC-5, Mark Phillips wrote: >> >> Hello Folks, >> >> I'm working on a configuration management proposal for a client at the >> moment - and I'm planning on using Ansible (I have 'prior'). Part of their >> requirements is patching - and having done something similar in the past >> with Puppet, I was planning on looking at doing patch management with >> Ansible too. Again, I'm fine with working that out. >> >> They'd also like to be able to review their estate for compliance - >> initially it'll be package versions, I guess (they're an RPM shop). I'm >> pondering if I could also do this bit with Ansible - but off hand I can't >> imagine how I'd approach that. >> >> Does anybody have any thoughts and/or experience? Is it a daft thing to >> even contemplate? Am I thinking of pushing a square peg into a round hole? >> >> Any input will be greatly appreciated. >> >> --Mark >> > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > -- Michael DeHaan <[email protected]> CTO, AnsibleWorks, Inc. http://www.ansibleworks.com/ -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
