I'm using puppet for everything, including nearly immutable infrastructure ( if you can't mount your disks read only and run that way you dont have immutable in

I'm using puppet for everything, including nearly immutable infrastructure ( if you can't mount your disks read only and run that way you dont have immutable infrastructure ) Puppet maintains the base image with the core system. Special systems are recreated by applying system specific classes to a base image. Application software is installed via packages with git commit-ids being versions. Nothing is upgraded, rather a new instances are rolled out and the old instances are destroyed. This also ensures that we always know that we can recreate our entire infrastructure because we do that for rapidly changing systems several times a day and for all systems at least monthly. This makes our operational workflow match the disaster recovery, which is god sent.