Skip to content

Latest commit

 

History

History
84 lines (65 loc) · 1.75 KB

TUTORIAL.md

File metadata and controls

84 lines (65 loc) · 1.75 KB
Raw

Tutorial

If you start with chef for the first time, we advise you to use a virtual machine for testing.

Debian / Ubuntu for testing with ChefDK

  1. Install ChefDK client

We recommend to use Chef client in production environments instead of the ChefDK

apt-get install -y wget
wget https://opscode-omnibus-packages.s3.amazonaws.com/ubuntu/12.04/x86_64/chefdk_0.3.5-1_amd64.deb
dpkg -i chefdk_0.3.5-1_amd64.deb
  1. Download the chef cookbook
apt-get install git
git clone https://github.com/TelekomLabs/chef-os-hardening.git chef-os-hardening
  1. Download cookbook dependences with Berkshelf
cd chef-os-hardening
berks vendor ../cookbooks
cd ..
mv chef-os-hardening/ cookbooks/os-hardening

  1. Create solo.rb

    This file is used to specify the configuration details for chef-solo. So create a solo.rb that include the cookbook_path.

cat > solo.rb <<EOF
root = File.absolute_path(File.dirname(__FILE__))
node_name "localhost"
file_cache_path root
cookbook_path [ root + '/cookbooks', root + '/site-cookbooks' ]
EOF

  1. Create solo.json

    Chef-solo does not interact with the Chef Server. Consequently, node-specific attributes must be located in a JSON file on the target system. Create the following solo.json.

cat > solo.json <<EOF
{
    "security" : {"suid_sgid": {
        "remove_from_unknown" : true,
        "system_whitelist" : []
        }
    },
    "run_list":[
        "recipe[os-hardening]"
    ]
}
EOF
  1. Verify structure
# tree -L 2
.
|-- cookbooks
|   |-- apt
|   |-- ohai
|   |-- os-hardening
|   |-- sysctl
|   `-- yum
|-- solo.json
`-- solo.rb
  1. Run chef-solo
chef-solo -c solo.rb -j solo.json