chef

In learning chef, I see conflicting patterns for wrapper cookbooks. For example. Some cookbooks use default.rb and others use customize.rb for overrides. attributes/default.rb attributes/customize.rb Which is best practice? Also, some wrapper cookbooks have parameters like this, in the recipes/default.rb file : normal['foo']['bar'] = 42 Whereas others have default['foo']['bar'] = 42 And some have node.set['foo']['bar'] = 42 Additionally some cookbooks use symbols, and other strings ['foo']['bar'] [:foo][:bar] Which style should I use? Update Looks like chef has released an official style guide

Hi I am setting up a cluster of machines using chef at offsite locations. If one of these machines was stolen, what damage can the attacker do to my chef-server or other nodes by having possession of chef-validator.pem ? What other things can they access through chef? Thanks! This was one of the items discussed at a recent Foodfight episode on managing "secrets" in chef. Highly recommended watching: http://foodfightshow.org/2013/07/secret-chef.html The knife bootstrap operation uploads this key when initializing new chef clients. Possession of this key enables the client to register itself

I'm trying to override attributes in the java cookbook with test-kitchen . When I try run kitchen converge default-centos-64 , a bad YAML error shows up. --- driver: name: vagrant customize: memory: 1024 cpuexecutioncap: 50 provisioner: name: chef_solo platforms: - name: centos-6.4 suites: - name: default run_list: - recipe[java::default] - recipe[maven::default] attributes: { java.install_flavor: "oracle", java.jdk_version: "7" } I pasted the above into http://yamllint.com/ . When I hit "Go," it removes all lines beginning at "attributes", and then shows a Green "Valid YAML". Attributes are

I have my Chef cookbooks stored in chef/cookbooks/ folder. When running kitchen converge I am still getting notice Berksfile, Cheffile, cookbooks/, or metadata.rb not found so Chef will run with effectively no cookbooks. Is this intended? I tried many options, for example: suites: - name: default run_list: recipe[git] cookbook_path: "chef/cookbooks" but I can't find the proper solution. How to specify the cookbooks' and roles' paths? You'll want to put the path in your berksfile, which will likely end up looking like so.. source 'https://supermarket.chef.io' cookbook 'cookbookname', path:

Is it possible to access the registry of another user with Chef? I have the chef-client running as System and I want to modify the registry of User1? Is there a way to do this? The registry_key resource provides a way to access HKEY_Users but I see no way to map the username to the SID. Kenny Evitt This ended up being mildly convoluted and looking at it makes me cringe. But it seems to work! I wanted to modify another user's environment variables via the registry, as described in this Server Fault answer , but I also wanted to create the user with Chef. The problem then is that Windows doesn't