This is a very ordinary problem, and it's usually solved like this with Puppet: Specify the service declaratively, and subscribe it to the package that provide

This is a very ordinary problem, and it's usually solved like this with Puppet: Specify the service declaratively, and subscribe it to the package that provides the payload. service { 'myservice': ensure => running, enable => true, subscribe => Package['myservice'], } Then when you upgrade the package on that node, either by using ensure => latest, or by manually specifying the new version, Puppet will automatically restart the service.