Chef Server 11.0.8-rc.2 available for testing


#1

We’ve got a second release candidate ready for Chef Server 11.0.8. This adds some security fixes for Rails and PostgreSQL on top of the last RC, as well as bit more fixes to the configuration cookbooks for non-standard port configurations that chef-server-ctl uses.

You’ll still need to assemble a URL to download a prerelease package, which is documented here: http://wiki.opscode.com/display/chef/Chef+11+Server+Preview

For example, to get the latest x64 prerelease deb for Ubunu 10.04, you can run these commands which work for both fresh installs and upgrades:

wget 'http://www.opscode.com/chef/download-server?p=ubuntu&pv=10.04&m=x86_64&v=latest&prerelease=true' -O chef-server-latest-prerelease.deb sudo dpkg -i chef-server-latest-prerelease.deb
$ sudo chef-server-ctl reconfigure

This release fixes the ability to change the ports of most of the services, including external ports for nginx. We’ve tested this ourselves and it appears robust but would love it if you tried too.

Here’s a list of what’s fixed in 11.0.8 Server:

[CHEF-3849] - redirect for login for webui ignores ssl_port
[CHEF-3853] - checksum URLs generated by POST /sandboxes do not respect configured load balancer port
[CHEF-3887] - Cannot change port of erchef
[CHEF-3889] - tunables for postgresql in chef server 11 do not work when system has more than 64GB of RAM
[CHEF-4029] - configurable bookshelf url & nginx ssl port issue
[CHEF-4059] - chef-server-webui: update Rails version to 3.2.13 for security issues
[CHEF-4060] - Upgrade PostgreSQL 9.2.4


Bryan McLellan | opscode | technical program manager, open source
© 206.607.7108 | (t) @btmspox | (b) http://blog.loftninjas.org


#2

Brian, please take a note at “::File notation” thread at chef maillist.

It’s best to make a decision before of 11 release.

2013/4/16 Bryan McLellan btm@opscode.com

We’ve got a second release candidate ready for Chef Server 11.0.8. This
adds some security fixes for Rails and PostgreSQL on top of the last RC, as
well as bit more fixes to the configuration cookbooks for non-standard port
configurations that chef-server-ctl uses.

You’ll still need to assemble a URL to download a prerelease package,
which is documented here:
http://wiki.opscode.com/display/chef/Chef+11+Server+Preview

For example, to get the latest x64 prerelease deb for Ubunu 10.04, you can
run these commands which work for both fresh installs and upgrades:

wget ' http://www.opscode.com/chef/download-server?p=ubuntu&pv=10.04&m=x86_64&v=latest&prerelease=true' -O chef-server-latest-prerelease.deb sudo dpkg -i chef-server-latest-prerelease.deb
$ sudo chef-server-ctl reconfigure

This release fixes the ability to change the ports of most of the
services, including external ports for nginx. We’ve tested this ourselves
and it appears robust but would love it if you tried too.

Here’s a list of what’s fixed in 11.0.8 Server:

[CHEF-3849] - redirect for login for webui ignores ssl_port
[CHEF-3853] - checksum URLs generated by POST /sandboxes do not respect
configured load balancer port
[CHEF-3887] - Cannot change port of erchef
[CHEF-3889] - tunables for postgresql in chef server 11 do not work when
system has more than 64GB of RAM
[CHEF-4029] - configurable bookshelf url & nginx ssl port issue
[CHEF-4059] - chef-server-webui: update Rails version to 3.2.13 for
security issues
[CHEF-4060] - Upgrade PostgreSQL 9.2.4


Bryan McLellan | opscode | technical program manager, open source
© 206.607.7108 | (t) @btmspox | (b) http://blog.loftninjas.org


#3

Great to hear about the ports fixes I will give this some time today if I can.

On Apr 16, 2013, at 11:26 AM, Bryan McLellan btm@opscode.com wrote:

We’ve got a second release candidate ready for Chef Server 11.0.8. This adds some security fixes for Rails and PostgreSQL on top of the last RC, as well as bit more fixes to the configuration cookbooks for non-standard port configurations that chef-server-ctl uses.

You’ll still need to assemble a URL to download a prerelease package, which is documented here: http://wiki.opscode.com/display/chef/Chef+11+Server+Preview

For example, to get the latest x64 prerelease deb for Ubunu 10.04, you can run these commands which work for both fresh installs and upgrades:

wget 'http://www.opscode.com/chef/download-server?p=ubuntu&pv=10.04&m=x86_64&v=latest&prerelease=true' -O chef-server-latest-prerelease.deb sudo dpkg -i chef-server-latest-prerelease.deb
$ sudo chef-server-ctl reconfigure

This release fixes the ability to change the ports of most of the services, including external ports for nginx. We’ve tested this ourselves and it appears robust but would love it if you tried too.

Here’s a list of what’s fixed in 11.0.8 Server:

[CHEF-3849] - redirect for login for webui ignores ssl_port
[CHEF-3853] - checksum URLs generated by POST /sandboxes do not respect configured load balancer port
[CHEF-3887] - Cannot change port of erchef
[CHEF-3889] - tunables for postgresql in chef server 11 do not work when system has more than 64GB of RAM
[CHEF-4029] - configurable bookshelf url & nginx ssl port issue
[CHEF-4059] - chef-server-webui: update Rails version to 3.2.13 for security issues
[CHEF-4060] - Upgrade PostgreSQL 9.2.4


Bryan McLellan | opscode | technical program manager, open source
© 206.607.7108 | (t) @btmspox | (b) http://blog.loftninjas.org


#4

On Tuesday, April 16, 2013 at 11:52 AM, Akzhan Abdulin wrote:

Brian, please take a note at “::File notation” thread at chef maillist.

It’s best to make a decision before of 11 release.

This is a server release, which no longer happens in lockstep with client releases.

In any case, changing, e.g., Chef::Resource::File to Chef::Resource::FileResource or similar is going to be a breaking change for anyone who has code like MyResource < Chef::Resource::File or Chef::Resource::File.new(), which could be quite a lot of people, so the best we could do in the 11.x series is deprecate.


Daniel DeLeo