I would recommend that you use Ansible to do the patching and updating but use serverspec (serverspec.org) to do the compliance checking. They work well together and this uses each for its intended purpose.
--Aaron On Tuesday, January 21, 2014 12:34:12 PM UTC-5, Mark Phillips wrote: > > Hello Folks, > > I'm working on a configuration management proposal for a client at the > moment - and I'm planning on using Ansible (I have 'prior'). Part of their > requirements is patching - and having done something similar in the past > with Puppet, I was planning on looking at doing patch management with > Ansible too. Again, I'm fine with working that out. > > They'd also like to be able to review their estate for compliance - > initially it'll be package versions, I guess (they're an RPM shop). I'm > pondering if I could also do this bit with Ansible - but off hand I can't > imagine how I'd approach that. > > Does anybody have any thoughts and/or experience? Is it a daft thing to > even contemplate? Am I thinking of pushing a square peg into a round hole? > > Any input will be greatly appreciated. > > --Mark > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
