Chef Infra Client 16.12.3 Released!

Chef Release Announcements
1

Hey Everyone,

Happy late Friday (at least for those of us in PST). Hot on the heels of our Chef Infra Client 15.16.7 release earlier today we have a nice new release of Chef Infra Client 16.12.3. This release includes an updated InSpec agent, several resource improvements, and improved platform detection. Be sure to give it a try.

What's new in 16.12:

Chef InSpec

Chef InSpec has been updated from 4.28 to 4.29.3.

New Features

  • The JSON metadata pass through configuration has been moved from the Automate reporter to the JSON Reporter.

Bug Fixes

  • The apt resource now correctly fetches all package repositories using the -name flag in an environment where ZSH is the user's default shell.
  • Updates how InSpec profiles are created with GCP or AWS providers so they use inputs instead of attributes.

Resource Improvements

service and chef_client_launchd

The service and chef_client_launchd resources on macOS now use the full path to launchctl to avoid potential failures. Thanks @krackajak!

file

Verifiers in the file resource are only run if the content actually changes. This can significantly speed execution of Chef Infra Client when no actual changes occur. Thanks @joshuamiller01!

mount

The mount resource now properly handles NFS mounts with a root of /. Thanks for reporting this @eheydrick and thanks for the fix @ramereth!

powershell_script and dsc_script

Our embedded PowerShell libraries have been updated for improved execution of PowerShell and DSC code on Windows systems.

Improved System Detection

Ohai has been updated to better detect system configuration details:

  • Ohai now detects Chef Infra Clients running in the Effortless pattern at node['chef_packages']['chef']['chef_effortless'].
  • Windows packages installed for the current user are now detected in addition to system wide package installations. Thanks @jaymzh!
  • Sangoma Linux is now detected as part of the rhel platform family. Thanks @hron84!
  • Docker is now properly detected even if it's running on a virtualized system. Thanks @jaymzh!
  • Alibaba Cloud Linux is now detected as platform alibabalinux and platform family rhel.

Security

Upgraded OpenSSL on macOS hosts to 1.1.1k, which resolves the following CVEs:

Get the Build

As always, you can download binaries directly from downloads.chef.io or by using the mixlib-install command-line utility:

$ mixlib-install download chef -v 16.12.3

Alternatively, you can install Chef Infra Client using one of the following command options:

# In Shell
$ curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chef -v 16.12.3
# In Windows Powershell
. { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex; install -project chef -version 16.12.3

If you want to give this version a spin in Test Kitchen, create or add the following to your kitchen.yml file:

provisioner:
  product_name: chef
  product_version: 16.12.3

Enjoy,
Tim