diff --git a/howto/puppet.md b/howto/puppet.md index 1bf2d1d1171b65086989976da5a41cb54bcb6a87..3e804c429826b2bf2d105030a2a2c6fac0ae4d74 100644 --- a/howto/puppet.md +++ b/howto/puppet.md @@ -1775,15 +1775,13 @@ moved into a class parameter, probably in `common.yaml`. ### Cron and scheduling -The Puppet agent is *not* running as a daemon, it's running through -good old `cron`. +Although Puppet supports running the agent as a daemon, our agent runs are +handled by a systemd timer/service unit pair: `puppet-run.timer` and +`puppet-run.service`. These are managed via the `profile::puppet` class and the +`puppet` module. -Puppet runs on each node every four hour, although with a random 2h -jitter, so the actual frequency is somewhere between 4 and 6 -hours. - -This configuration is in `/etc/cron.d/puppet-crontab` and deployed by -Puppet itself, currently as part of the `torproject_org` module. +The runs are executed every 4 hours, with a random 4 hour jitter, so the actual +frequency is somewhere between 4 and 8 hours. ### LDAP integration