> Ah, so Puppet is running on a machine, it will maintain the configuration of the machine even if some well-intentioned user fiddles? Yes, at least for all re

> Ah, so Puppet is running on a machine, it will maintain the configuration of the machine even if some well-intentioned user fiddles? Yes, at least for all ressources under its control. So in theory all changes to ressources managed via puppet should be done via puppet. I guess that's better this way when you're running a large farm of machines, the use-case puppet/chef/etc. were created for.