尽管执行，木偶文件资源仍会运行，除非

Question

I'm applying a local manifest to test an exec and file resource:

class test_file {   
  exec { "touch /tmp/testfile":
    path   => ["/bin", "/usr/bin", "/sbin", "/usr/sbin"],
    unless => "test -d /tmp 2>/dev/null",
  }

  file { "/tmp/success":
    mode    => "0777",
    owner   => "root",
    group   => "staff",
    source  => "file:///Users/Shared/success",
    require => Exec["touch /tmp/testfile"],
  }
}

What I expect to happen: The exec runs and exits because the unless statement returns 0, so the file resource never runs and neither file is created in /tmp .

What Actually happens: The file resource always runs, and copies the "success" file to /tmp

I've run this on macOS 10.11 and 10.12 with both puppet agent 4.10 and 5.3.2 ... with the same results. I'm simply trying to run a conditional that says don't copy a file if some command exits successful. Any insights or directions would be appreciated.

Answer 1

You are misundersanding how Puppet works.

The require metaparameter declares the order in which resources should be applied.* Given your manifest, Puppet only promises that the Exec resource - if it is applied at all - will always be applied before the File resource.

There is another metaparameter, subscribe . If a resource subscribes to another resource, then Puppet tries to "refresh" that resource if the resource it is subscribed to changes state.

Unfortunately, you can't use that here, because File resources ignore "refresh events".

What you can do, although it's a bit ugly, is:

class test_file () {
  Exec {
    path => ["/bin", "/usr/bin", "/sbin", "/usr/sbin"],
  }

  exec { "touch /tmp/testfile":
    unless  => "test -d /tmp 2>/dev/null",
  }

  exec { "cp /Users/Shared/success /tmp/success":
    subscribe   => Exec["touch /tmp/testfile"],
    refreshonly => true,
  }
}

* The require metaparameter also prevents a second resource from being applied at all if the first resource fails to apply. See the failed dependencies section in the docs.