Hot answers tagged

15 votes
Accepted

How do I include my internal CA certificate to validate SSL exchanges in Chef?

There's a couple of way to achieve the result: Chef has a trusted_dir to allow adding certificate to the trusted list. the documentation has a lot of details about it. Adding your CA certificate to ...
user avatar
  • 11.1k
13 votes
Accepted

What steps could be taken to inherit and override some parts of a Chef cookbook?

There are a lot of specifics but the overall pattern we use is "wrap and extend". The general idea is to make a cookbook that depends on the community cookbook, usually named mycompany_originalthing, ...
user avatar
  • 1,197
10 votes
Accepted

Are configuration management tools appropriate to use as deployment tools?

In such context the typical advice should be immediately applicable: use the right tool for the job. But then you also cannot ignore nowadays the almost virulent tendency of software tools to extend ...
user avatar
7 votes
Accepted

What is Chef Automate

For the whole points and to try things there's https://learn.chef.io which allow you to test automate also. Mainly chef automate is the next iteration bringing together 4 commercial products from ...
user avatar
  • 11.1k
7 votes

Vendoring - what is it?

Vendoring is the concept of downloading/installing a specific version of dependencies and making it available elsewhere (typically, within a local repo/folder of your supporting application) ...
user avatar
7 votes
Accepted

Zip/tar a folder using chef resource

Well that's not exactly about chef, you're basically asking how to use tar. The command to create an archive of a folder would be tar -zcvf <backup_thing>.tgz <path_to_backup> In the tar ...
user avatar
  • 11.1k
7 votes
Accepted

What's missing from this simple recipe that creates a user?

I'll put in an answer although I'm not 100% sure. I think that you got the permissions wrong on ~/.ssh and it should be 0700 instead of 0600, otherwise the user cannot access it. Another tip which is ...
user avatar
  • 461
6 votes
Accepted

What can Vagrant, Puppet, Docker, Chef do for a Full stack Web developer?

First of all, I strongly advise against "feature comparisons" blog post for similar software, they're quickly outdated and I'll try to keep this answer generic for a system configuration manager (SCM) ...
user avatar
  • 11.1k
6 votes

User management using chef

It does nothing. A huge part of the purpose of Chef is that converges are idempotent, meaning you can run them repeatedly with no cumulative effects. I highly recommend consulting the Chef ...
user avatar
  • 773
6 votes

Are configuration management tools appropriate to use as deployment tools?

Configuration management tools are used to get a system into a known state. Deployment tools deploy new program files and program data to a system. At the end of the day, both types of tools do some ...
user avatar
  • 161
6 votes

Using Chef for multi-node operations

In short, Chef may not be the tool to use here. Chef is a convergent model, so you have to write your recipes in an idempotent way such as after some runs it will be at the desired state according to ...
user avatar
  • 11.1k
6 votes
Accepted

How should we automatically rebuild immutable infrastructure when new packages are available?

Part of adopting the Immutable Infrastructure Pattern is decomposing your system into small manageable pieces that can move through CI/CD Pipeline very quickly, this means that OS patches can be done ...
user avatar
5 votes
Accepted

DevOps practice on AWS instances

You might not be able to get this done on the free tier. Puppet for example isn't going to want to start because of the RAM limitations. The AWS free tier uses thje t2.micro instance which only has ...
user avatar
  • 3,674
5 votes
Accepted

Organizing Chef cookbooks

No, it is not, the chef-repo is the legacy way back to chef 10. Knife allows working on multiples directory with the -o option. Berks work from current directory. You can also work around the ...
user avatar
  • 11.1k
5 votes
Accepted

Downloading multple files from remote using chef resource

what about something like that: %w{ mysql-community-common-5.7.16-1.el7.x86_64.rpm mysql-community-libs-5.7.16-1.el7.x86_64.rpm mysql-community-client-5.7.16-1.el7.x86_64.rpm ...
user avatar
  • 780
5 votes
Accepted

Why not use configuration management tool instead of Dockerfile?

The tool you need is Packer using Docker as the "builder" and Chef as the "provisioner". Then you can add the resulting image to your repo and reuse it without having to pack again, until your recipes ...
user avatar
  • 1,076
5 votes

Why not use configuration management tool instead of Dockerfile?

These strategies have nothing to do with one another. Containers (like Docker) are a methodology for deploying and isolating applications. Containers are well liked because they're transportable. ...
user avatar
  • 272
5 votes
Accepted

difference between packer and matchbox

You may use matchbox on a VM as you do on a baremetal machine, you won't be able to use packer on a baremetal machine ont he other hand as it doesn't handle any PXE boot option. That said, leveraging ...
user avatar
  • 11.1k
4 votes
Accepted

fatal: ambiguous argument 'master': unknown revision or path not in the working tree

The error looks like you're using a non-existent reference (branch/tag). Try specifying the correct branch and tag using the branch/tag options. You can also use the commit hash directly using ref ...
user avatar
  • 324
4 votes

Are configuration management tools appropriate to use as deployment tools?

TL;DR: Just use Ansbile, it is both configuration and deployment tool :) There are several types of deployment: Application based (files, archives packages) Container based (includes VMs, Habitat, ...
user avatar
  • 5,647
4 votes
Accepted

How to Chef things that don't exist yet

I'd go with node.run_state to store a transient variable in a run and define it in a ruby_block so it happens at converge time, something like this: yum_package 'somepackage' ruby_block 'set myvar' ...
user avatar
  • 11.1k
4 votes

Which Chef software do we need to install for Windows?

A node in chef terminology is a machine managed with chef-client. Chef-client is available for various OS, windows, Linux, Aix, Mac etc. However the chef-server is only available for linux.
user avatar
  • 11.1k
4 votes

Chef username/passwords best practice for multiple nodes

Storing sensitive data in attributes is definitely not a good practice. I once used a strategy of a chef-vault per environment (dev,stg,prod), and it worked well. If you use the sensitive data within ...
user avatar
3 votes
Accepted

Can I run Chef/Puppet server from Azure and manage my on-premise infrastructure?

The prerequisites for a chef server are here and common to any installation. You only need to allow https to port 443 from your inner infrastructure to the cloud server. If you have a proxy with SSL ...
user avatar
  • 11.1k
3 votes

DevOps practice on AWS instances

The Azure free trial gives you $200 in credit for the first month which is plenty of capacity spin up many VMs of an adequate size to run all the tools you mention. I would advise not starting the ...
user avatar
  • 1,076
3 votes

Managing Data bags in different environments

https://www.digitalocean.com/community/tutorials/how-to-use-roles-and-environments-in-chef-to-control-server-configurations For instance, if a node is in the "production" environment, you could ...
user avatar
  • 12.6k
3 votes

Upgrading jenkins using chef

So first of all, Chef is just a manner of upgrading/configuring, it will help you keep a reproducible state and keeping configuration in line but it won't do black magic and translate your jobs for ...
user avatar
  • 11.1k
3 votes

Are configuration management tools appropriate to use as deployment tools?

For software and deploying code to an existing server or inside a Docker container, the answer is relatively simple - No, you don't need both, but you might want both if another tool or utility adds ...
user avatar
  • 3,674
3 votes

Are configuration management tools appropriate to use as deployment tools?

Application deployment is a hard thing to pin down because it has a lot of sub-problems. Config management systems are excellent at modeling tasks which are convergent and work with "what is the ...
user avatar
  • 1,197
3 votes

Creativity use case scenario?

Your question is quite vague/generic. People store their source code (or generally, files) in git; let Jenkins run jobs (like CI/CD pipelines), use Docker to put their software into well-defined ...
user avatar
  • 4,726

Only top scored, non community-wiki answers of a minimum length are eligible