15
votes
Accepted
How do I include my internal CA certificate to validate SSL exchanges in Chef?
There's a couple of way to achieve the result:
Chef has a trusted_dir to allow adding certificate to the trusted list. the documentation has a lot of details about it. Adding your CA certificate to ...
- 11.3k
13
votes
Accepted
What steps could be taken to inherit and override some parts of a Chef cookbook?
There are a lot of specifics but the overall pattern we use is "wrap and extend". The general idea is to make a cookbook that depends on the community cookbook, usually named mycompany_originalthing, ...
- 1,197
10
votes
Accepted
Are configuration management tools appropriate to use as deployment tools?
In such context the typical advice should be immediately applicable: use the right tool for the job.
But then you also cannot ignore nowadays the almost virulent tendency of software tools to extend ...
- 6,730
7
votes
Accepted
What is Chef Automate
For the whole points and to try things there's https://learn.chef.io which allow you to test automate also.
Mainly chef automate is the next iteration bringing together 4 commercial products from ...
- 11.3k
7
votes
Vendoring - what is it?
Vendoring is the concept of downloading/installing a specific version of dependencies and making it available elsewhere (typically, within a local repo/folder of your supporting application)
...
- 270
7
votes
Accepted
Zip/tar a folder using chef resource
Well that's not exactly about chef, you're basically asking how to use tar.
The command to create an archive of a folder would be
tar -zcvf <backup_thing>.tgz <path_to_backup>
In the tar ...
- 11.3k
7
votes
Accepted
What's missing from this simple recipe that creates a user?
I'll put in an answer although I'm not 100% sure. I think that you got the permissions wrong on ~/.ssh and it should be 0700 instead of 0600, otherwise the user cannot access it.
Another tip which is ...
- 471
6
votes
Accepted
What can Vagrant, Puppet, Docker, Chef do for a Full stack Web developer?
First of all, I strongly advise against "feature comparisons" blog post for similar software, they're quickly outdated and I'll try to keep this answer generic for a system configuration manager (SCM) ...
- 11.3k
6
votes
User management using chef
It does nothing. A huge part of the purpose of Chef is that converges are idempotent, meaning you can run them repeatedly with no cumulative effects. I highly recommend consulting the Chef ...
- 783
6
votes
Are configuration management tools appropriate to use as deployment tools?
Configuration management tools are used to get a system into a known state. Deployment tools deploy new program files and program data to a system. At the end of the day, both types of tools do some ...
- 161
6
votes
Using Chef for multi-node operations
In short, Chef may not be the tool to use here.
Chef is a convergent model, so you have to write your recipes in an idempotent way such as after some runs it will be at the desired state according to ...
- 11.3k
6
votes
Accepted
How should we automatically rebuild immutable infrastructure when new packages are available?
Part of adopting the Immutable Infrastructure Pattern is decomposing your system into small manageable pieces that can move through CI/CD Pipeline very quickly, this means that OS patches can be done ...
- 11.6k
5
votes
Accepted
DevOps practice on AWS instances
You might not be able to get this done on the free tier. Puppet for example isn't going to want to start because of the RAM limitations. The AWS free tier uses thje t2.micro instance which only has ...
- 3,724
5
votes
Accepted
Organizing Chef cookbooks
No, it is not, the chef-repo is the legacy way back to chef 10.
Knife allows working on multiples directory with the -o option. Berks work from current directory.
You can also work around the ...
- 11.3k
5
votes
Accepted
Downloading multple files from remote using chef resource
what about something like that:
%w{
mysql-community-common-5.7.16-1.el7.x86_64.rpm
mysql-community-libs-5.7.16-1.el7.x86_64.rpm
mysql-community-client-5.7.16-1.el7.x86_64.rpm
...
- 780
5
votes
Accepted
fatal: ambiguous argument 'master': unknown revision or path not in the working tree
The error looks like you're using a non-existent reference (branch/tag). Try specifying the correct branch and tag using the branch/tag options. You can also use the commit hash directly using ref ...
- 334
5
votes
Accepted
Why not use configuration management tool instead of Dockerfile?
The tool you need is Packer using Docker as the "builder" and Chef as the "provisioner". Then you can add the resulting image to your repo and reuse it without having to pack again, until your recipes ...
- 1,086
5
votes
Why not use configuration management tool instead of Dockerfile?
These strategies have nothing to do with one another.
Containers (like Docker) are a methodology for deploying and isolating applications. Containers are well liked because they're transportable. ...
- 272
5
votes
Accepted
difference between packer and matchbox
You may use matchbox on a VM as you do on a baremetal machine, you won't be able to use packer on a baremetal machine ont he other hand as it doesn't handle any PXE boot option.
That said, leveraging ...
- 11.3k
4
votes
Are configuration management tools appropriate to use as deployment tools?
TL;DR: Just use Ansbile, it is both configuration and deployment tool :)
There are several types of deployment:
Application based (files, archives packages)
Container based (includes VMs, Habitat, ...
- 5,807
4
votes
Accepted
How to Chef things that don't exist yet
I'd go with node.run_state to store a transient variable in a run and define it in a ruby_block so it happens at converge time, something like this:
yum_package 'somepackage'
ruby_block 'set myvar' ...
- 11.3k
4
votes
Which Chef software do we need to install for Windows?
A node in chef terminology is a machine managed with chef-client.
Chef-client is available for various OS, windows, Linux, Aix, Mac etc.
However the chef-server is only available for linux.
- 11.3k
4
votes
Chef username/passwords best practice for multiple nodes
Storing sensitive data in attributes is definitely not a good practice. I once used a strategy of a chef-vault per environment (dev,stg,prod), and it worked well. If you use the sensitive data within ...
- 215
3
votes
Accepted
Can I run Chef/Puppet server from Azure and manage my on-premise infrastructure?
The prerequisites for a chef server are here and common to any installation.
You only need to allow https to port 443 from your inner infrastructure to the cloud server.
If you have a proxy with SSL ...
- 11.3k
3
votes
DevOps practice on AWS instances
The Azure free trial gives you $200 in credit for the first month which is plenty of capacity spin up many VMs of an adequate size to run all the tools you mention. I would advise not starting the ...
- 1,086
3
votes
fatal: ambiguous argument 'master': unknown revision or path not in the working tree
I recently ran into the same error. In my case, I had rebased a branch and was attempting to push to the remote. One of the pulled commits had changed the structure of a few directories, and git ...
- 131
3
votes
Managing Data bags in different environments
https://www.digitalocean.com/community/tutorials/how-to-use-roles-and-environments-in-chef-to-control-server-configurations
For instance, if a node is in the "production" environment, you could
...
- 13.1k
3
votes
Upgrading jenkins using chef
So first of all, Chef is just a manner of upgrading/configuring, it will help you keep a reproducible state and keeping configuration in line but it won't do black magic and translate your jobs for ...
- 11.3k
3
votes
Are configuration management tools appropriate to use as deployment tools?
For software and deploying code to an existing server or inside a Docker container, the answer is relatively simple - No, you don't need both, but you might want both if another tool or utility adds ...
- 3,724
3
votes
Are configuration management tools appropriate to use as deployment tools?
Application deployment is a hard thing to pin down because it has a lot of sub-problems. Config management systems are excellent at modeling tasks which are convergent and work with "what is the ...
- 1,197
Only top scored, non community-wiki answers of a minimum length are eligible