I am trying to make chef-11.16.4-1.el6.x86_64.rpm available to our servers via a local yum repo that we've built. it is not available in RHEL Repos, so i had to manually download and save it in our repo. so here is what i did on yum repo server: 1. cd /packages/rhel65-base/; wget https://opscode-omnibus-packages.s3.amazonaws.com/el/6/x86_64/chef-11.16.4-1.el6.x86_64.rpm 2. createrepo /packages/rhel65-base/ Yum client was able to see the new package available: [user1@testserver01 ~]$ yum list chef Loaded plugins: amazon-id, rhui-lb, security Installed Packages chef.x86_64 11.16.0-1.el6 installed Available Packages chef.x86_64 11.16.4-1.el6 local-rhel65-base But when trying to install the latest package of chef, it ends with below error: warning: rpmts_HdrFromFdno: Header V4 DSA/SHA1 Signature, key ID 83ef826a: NOKEY Public key for chef-11.16.4-1.el6.x86_64.rpm is not installed Assuming that the chef rpm has not been signed, i tried to sign it myself by following https://iuscommunity.org/pages/CreatingAGPGKeyandSigningRPMs.html but still couldn't get it working. Some useful info i can find in Chef's website is the SHA1 checksum value of this package. Anyone got ideas/suggestions to solve this issue? thanks!

I encountered an error when trying to generate a cookbook using the command chef generate cookbook test-cookbook. The error message I received is as follows:

ERROR : exit status 127
/opt/chef-workstation/embedded/bin/ruby:  error while loading shared libraries: libcrypt.so.1: cannot open shared object file: No such file or directory

The error appears to be caused by a missing shared library called libcrypt.so.1. How can I fix this issue and generate the cookbook successfully?

What is the best practice for installing Python pip packages with Chef? I thought about the poise-python , but I've read that it stops maintenance . And a direct install at recipe like:

-python
execute 'python modules' do 
    command 'pip install toposort==1.5.0'         
    ignore_failure true            
end

It makes something cause which not install and drop the recipe, that is the reason of adding the ignore_failure true.

Following the permeation of virtualization and containerization through world of network services, various tools and systems have emerged for provisioning and orchestrating such systems from templates with applied custom overlays. However, most such systems operating from a POSIX base have simply adapted standard Linux-based operating systems for the new environments. In contrast, [NixOS](https://en.wikipedia.org/wiki/NixOS) and [Guix System](https://en.wikipedia.org/wiki/GNU_Guix_System) would appear to be ideally suited for such applications, by their native architecture, centered around a read-only file base with overlays managed through a declarative language. Such design would appear to carry directly in the operating system much of the functionality intended to be injected into a standard operating system by projects such as Puppet, Chef, and Ansible. Is NixOS or Guix System currently in use by any large-scale services?

Are there machine configuration management systems akin to: - Puppet - Chef which are natively, or at least intimately, Python-friendly? Any recommendations with supporting evidence and/or backing reasoning as to why? (The two systems above have a penchant for Ruby.)

I run chef-client on some of my servers and want to be able to stop the service in case of testing or emergencies. However, when I stop the service using systemctl chef-client will resurrect itself within 5 minutes of stopping the service. Within the Unit file below I tried removing Restart = always, but the service will still restart and the Retsart = always will appear in the Unit file again. What configuration would I need to change to prevent chef from resurrecting itself? [Unit] Description = Chef Infra Client daemon After = network.target auditd.service [Service] Type = simple EnvironmentFile = /etc/sysconfig/chef-client ExecStart = /opt/chef/bin/chef-client -c $CONFIG -i $INTERVAL -s $SPLAY $OPTIONS ExecReload = /bin/kill -HUP $MAINPID SuccessExitStatus = 3 Restart = always [Install] WantedBy = multi-user.target EDIT: I don't see any cron jobs that are related to chef or any system timers set up.

JQ looks like a great tool, but I'm struggling with it. Here is what I am trying to do: Extract just the values from this chef knife search and generate a CSV. given this command and output: >knife search node "name:foo*" -a name -a cpu.total -a memory.total -Fj

{
  "results": 2,
  "rows": [
    {
      "foo-01": {
        "name": "foo-01",
        "cpu.total": 12,
        "memory.total": "16267368kB"
      }
    },
    {
      "foo-02": {
        "name": "foo-02",
        "cpu.total": 12,
        "memory.total": "16264296kB"
      }
    }
  ]
}

I would like to get the values extracted to CSV like this:

foo-01,12,16267368kB
foo-02,12,16264296kB

(I can deal with the quotes)

In looking at powershell, the general assumption is that it's being used either for or on Windows machines in a homogeneous network. Strictly within Linux, and only using "core" powershell, looking at automation : > You are reading an unmaintained version of the Ansible documentation. > Unmaintained Ansible versions can contain unfixed security > vulnerabilities (CVE). Please upgrade to a maintained version. See the > latest Ansible documentation. How can I use powershell in Linux to admin Linux with Ansible?

I'm having issues finding a direct answer to my question, maybe because I don't know how to phrase it or the correct terms. I'm looking to find out how to make a subset of commands in a chain be "either or" as in

A && B && (C || D) && E && F

where the result of the previous command dictates if the next fires. In this case it's a chef command

knife vault create

that causes the issue with a break error when trying to create a vault that already exists. So I want to do

knife vault update

if knife vault create errors out of the script Heres a bigger overview

command1 && \
command2 && \
(knife vault create
or
knife vault update) && \
command4 && \
continuing...

As there are so few cases (1) so far in the script I'm making I wanted to keep the formatting instead of suddenly beginning with if/else or something "more advanced".

I have a server built with AWS OpsWOrks, so everything is in configuration. There is a process whose ulimit is set to 4096, as checked from /proc/$PID/limits. This process runs as root. I ran the ulimit command as root user which shows the file limit as 1024. There are many servers (around 50) configured with the same cookbooks and all of them have the same configuration "drift". There is no knife ssh involved so couldn't have been someone running a one-liner on all instances. The codebase doesn't have a single line referencing the value if 4096, so I am stumped. Is there any way I can determine how the process might have picked up the value of 4096?

While I am installing chef , I am getting below error. [root@centos Tools]# chef-server-ctl reconfigure /opt/opscode/embedded/bin/ruby: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /opt/opscode/embedded/lib/libruby.so.2.1) /opt/opscode/embedded/bin/ruby: /lib64/libc.so.6: version `GLIBC_2.17' not found (required by /opt/opscode/embedded/lib/libruby.so.2.1) I have downloaded glibc-2.14.1.tar.gz and glibc-2.17.tar.gz sources and compiled manually with --prefix location as /home/virt02/lib but still no use. Getting same above error. Update : I did [root@centos Tools]# cat /etc/ld.so.conf.d/randomLibs.conf /home/virt02/lib [root@centos Tools]# ldconfig [root@centos Tools]# Update : [root@centos ~]# ldd /opt/opscode/embedded/lib/libruby.so.2.1 /opt/opscode/embedded/lib/libruby.so.2.1: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by /opt/opscode/embedded/lib/libruby.so.2.1) /opt/opscode/embedded/lib/libruby.so.2.1: /lib64/libc.so.6: version `GLIBC_2.17' not found (required by /opt/opscode/embedded/lib/libruby.so.2.1) linux-vdso.so.1 => (0x00007ffce97a7000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fab5317c000) libdl.so.2 => /lib64/libdl.so.2 (0x00007fab52f77000) libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007fab52d40000) libm.so.6 => /lib64/libm.so.6 (0x00007fab52abc000) libc.so.6 => /lib64/libc.so.6 (0x00007fab52727000) /lib64/ld-linux-x86-64.so.2 (0x00007fab53883000) libfreebl3.so => /lib64/libfreebl3.so (0x00007fab52524000) [root@centos ~]# ldd /lib64/libc.so.6 /lib64/ld-linux-x86-64.so.2 (0x00007f0151e36000) linux-vdso.so.1 => (0x00007fff952ee000) [root@centos ~]# But still not working.

I have a bash script ( let's say main.sh ) which I need to integrate with chef. Currently we are using "expect" to pass the parameters to main.sh. Now I need to make script in such a way that the parameters for main.sh will be passed using attribute file in chef. I know that we can put our code in a bash resource but i am struggling to pass the parameters like passwords, user names, ports using chef attributes ?? Below is how the script looks like: #!/usr/bin/expect set filename [lindex $argv 0] set f [open $filename] set inputs [split [read $f] "\n"] # Below parameters i need to pass using chef attributes instead of expect inputs lassign $inputs ADMIN_PASSWORD CREATE_USER USER_EMAIL FIRST_NAME LAST_NAME INST_PATH #read -e -p "Enter the installation folder path(//): " FILEPATH3 #FILEPATH3=$(echo $FILEPATH3 | sed 's/ /\\ /') spawn "$INST_PATH/main.sh" expect "Enter system admin password:" send "$ADMIN_PASSWORD\r" expect "Create a new user y/n (y):" send "$CREATE_USER\r" ............. .............

I'm new to above deployment and configuration tools. I have typical need to install and upgrade on a target machine a customized and configured webserver, maybe reverse proxy, database, required runtime for interpreted languages and such. My distribution already has a package manager that works. I can create and distribute my own packages containing preconfigured software and install/upgrade them over ssh. Where should I expect this solution to be insufficient and opt for mentioned tools?

How to use zsh as default when starting an ssh session to a remote chef server using LDAP for authentication? tom@chef:~$ chsh -s /usr/bin/zsh Password: chsh: user 'tom' does not exist in /etc/passwd Zsh is installed on the system. cat /etc/shells # /etc/shells: valid login shells /bin/sh /bin/bash /bin/rbash /bin/dash /usr/bin/tmux /usr/bin/screen /bin/zsh /usr/bin/zsh

I'd like to have systemd run a program after the system is completely booted and ready to go. Eventually, that process may complete and exit with hopefully 0; in some situations, it may need to have a wrapper script that shuts down the computer when it exists, although it should definitely not be restarted. I'm managing these systems using Chef, and here is what my unit files look like so far: systemd_unit 'siege.service' do content ({ Unit: { Description: 'Run Siege', Requires: 'network-online.target', After: 'network-online.target', Documentation: ['https://github.com/joedog/siege '], AssertPathExists: node['siege']['log_dir'], }, Service: { Type: 'idle', ExecStart: '/usr/local/bin/siege', User: node['current_user'], }}) action [:create] only_if { node['siege']['create_service'] } end systemd_unit 'siege.timer' do content({Unit: { Description: 'Siege timer', Documentation: ['https://github.com/joedog/siege '], After: 'network-online.target', }, Timer: { OnStartupSec: '10s', AccuracySec: '1us', }, Install: { WantedBy: 'multi-user.target', }}) action [:create, :enable] only_if { node['siege']['create_service'] } end So basically I have no idea whether I'm going in the correct direction and whether a timer is the best way of doing this. From what I've read, it sounds like it will start 10s after systemd starts- that's not exactly what I'm looking for; I want it to start immediately after Everything ElseTM. I've seen a lot of similar questions advising the use of a service, but to me, this isn't really a service per se- this is running one program one time that is designed to exit, as you'd expect a user to do. It would really be nice if everything else was started up so Siege can suck up all the network bandwidth or CPU, and I'm not thrilled with my arbitrary 10s but I didn't see a better way. Am I crazy for doing it this way?

I am trying to run a chef verify test and the test is showing nginx is enabled and running using this code: describe service('nginx') do it { should be_enabled } it { should be_running } end It will not however show in the /etc/nginx directory. I can't find any mention of nginx in anywhere except my tests and the config files I put in place with my cookbook. Well the cookbook is one I have been given by a coworker.

I have Installed virtualbox-dkms $ sudo apt-get install virtualbox-dkms DKMS: install completed. * Stopping VirtualBox kernel modules [ OK ] * Starting VirtualBox kernel modules [ OK ] Setting up virtualbox (4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1) ... * Stopping VirtualBox kernel modules [ OK ] * Starting VirtualBox kernel modules [ OK ] Setting up virtualbox-qt (4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1) ... $ vagrant up Bringing machine 'default' up with 'virtualbox' provider... ==> default: Importing base box 'lucid32'... ==> default: Matching MAC address for NAT networking... ==> default: Setting the name of the VM: chef-repo_default_1449661717604_69994 ==> default: Clearing any previously set network interfaces... ==> default: Preparing network interfaces based on configuration... default: Adapter 1: nat ==> default: Forwarding ports... default: 22 => 2222 (adapter 1) ==> default: Booting VM... ==> default: Waiting for machine to boot. This may take a few minutes... default: SSH address: 127.0.0.1:2222 default: SSH username: vagrant default: SSH auth method: private key default: Warning: Connection timeout. Retrying...

>**Context:** > A ubuntu Virtualbox VM having shared folders from a Windows host. Provisioner: chef-solo Assuming there is a path /tmp/shared_data and I am attempting to created a symlink on it like ln -s /var/www /tmp/shared_data/web_root It fails saying protocol error > Begin output of "bash" "/tmp/chef-script20161020-6826-kore5t" ---- > ==> dev: STDOUT: ==> dev: STDERR: ln: failed to create symbolic link ‘/tmp/shared_data/web_root’: Protocol error ==> dev: ---- End output of "bash" "/tmp/chef-script20161020-6826-kore5t" ---- ==> dev: Ran "bash" "/tmp/chef-script20161020-6826-kore5t" returned 1 I would imagine this is because since the path I am attempting to make a symlink on is the windows FS and does not support it. So is there a way I can detect if symlink can be created in a path before hand before I attempt it and thus breaking my build.

I'm trying to convert a Chef script that's used in AWS OpsWorks for an Ubuntu system to a script I can use with my AWS OpsWorks setup for my Amazon Linux AMI installation. Their Ubuntu Setup: -

chown -R www-data:www-data /var/www

My Linux Setup: -

usermod -a -G www apache

-

chown -R apache /var/www

-

chgrp -R www /var/www

Their chef Script is as follows:

"/srv/www/wordpress/current/wp-config.php" do
  source "wp-config.php"
  mode '0755'
  action :create
  owner 'deploy'
  group 'www-data'
end

Do I just need to change their

'www-data'

user to my

'apache'

user to get this script to work with my setup?

I was trying to create and bootstrap an instance on openstack with chef using this command: sudo knife openstack server create -N jenkins_openstack -f 0eb9c50a-07b9-4fc1-aa33-f6bd66c6bc7b --network-ids 7d5c5d7e-e447-4b22-a5f8-5dbfb53c2128 --openstack-ssh-key-id mmm --openstack-floating-ip -r 'role[jenkins]' --environment production -i /root/.ssh/mmm.pem --ssh-user centos --bootstrap-install-command ' sudo sh -c 'echo 192.168.103.194 chef.server.com >> /etc/hosts'' but this doesn't work and gives this error: -bash: /etc/hosts: Permission denied Any ideas?