Skip to content

The exec resource should warn when used without idempotence parameters. #18

@tuxmea

Description

@tuxmea

In 2025 we discussed in Ghent (CfgMgmtCamp) that we want to make usage of exec more secury.

There have been 2 possible solutions:

  1. a lint plugin which identifies if an exec has the idempotency parameters set (out of scope for this project)
  2. let the type check if all desired parameters are set

The lint plugin is finished: https://github.com/voxpupuli/puppet-lint-exec_idempotency-check

I have now worked on a PoC (pile of crap) to check if extending the tape is possible. See OpenVoxProject/openvox#237

We should check if both are desired or if the linter is suffucient.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status

    No status

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions