Chef CentOS 7 base configuration
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
attributes
recipes
solo
spec
templates/default
test/recipes
.gitignore
.kitchen.yml
Berksfile
README.md
chefignore
metadata.rb

README.md

chef centos7 base

Environment

  • OS: CentOS 7
  • cookbook: firewalld,postfix

Attributes

# set root e-mail	
default['aliases']['root_email'] = 'root@exz.su'

# set selinux permissive 	
default['selinux']['node'] = 'permissive'

# set non default ssh port			 
default['sshd']['port'] = '40022'			

# set server hostname		
default['postfix']['myhostname'] = 'se001.exz.su'	

# do not change if you want use yandex
default['postfix']['relayhost'] = 'smtp.yandex.ru'	

# set relay email
default['postfix']['relay_email'] = 'support@exz.su'

# set relay email password
default['postfix']['relay_email_password'] = ''		

# do not change if you want send email from root
default['postfix']['generic_user_root'] = 'root'			

Recipes

  • selinux - for change selenux mode
  • firewalld - for enable firewalld, allow connect to ssh
  • sshd - for configure sshd use non default port
  • fail2ban - for protect ssh from bruteforce
  • postfix - for sending notification
  • aliases - for setup root email
  • yum-cron - for check updates and sending notifications

Kitchen

# git clone https://github.com/mr-exz/chef_centos7_base.git
# cd chef_centos7_base
# kitchen converge
# kitchen login

If all correct you should get test email notification in default['aliases']['root_email']

Usage

Chef solo

# curl -sSL https://rvm.io/mpapis.asc | gpg --import -
# curl -L get.rvm.io | bash -s stable
# source /etc/profile.d/rvm.sh
# rvm reload
# rvm requirements run
# rvm install 2.4.0
# rvm use 2.4.0 --default
# gem install chef
# gem install --no-rdoc --no-ri berkshelf
# mkdir /tmp/chef-solo
# cd /tmp/chef-solo
# git clone https://github.com/mr-exz/chef_centos7_base.git
# cd ./chef_centos7_base/
# berks vendor cookbooks
# chef-solo -c solo/solo.rb -j solo/centos7_base.json