Below are the meeting notes for this week's Community Meeting, a text-based meeting held weekly in #community-meetings on our community slack, which you can join: https://community-slack.chef.io/
DevRel/Community
Kiah Tolliver shared
Let's get started with a few updates from DevRel:
ICYMI: we’re kicking off the year strong with two webinars next week, in addition to re-starting our live stream schedule.
Webinars:
- Product roadmap updates, with emphasis on our 2022 plans!
- Product Roadmap Community Updates - January - Webinar | Chef
- @Sudharshan Kaushikk takes us through a quick and easy tour of Chef’s Azure Marketplace offerings:
- Azure Marketplace: Streamline your Chef Deployments in Minutes! - Webinar | Chef
Streams:
- 1/11 Community Project highlight - CINC/Sous-Chefs
- 1/13 Interview with Hackathon winner - Marcelo Zambrana Villarroel
This week’s releases
Chef Automate
Kiah Tolliver shared
- Automate 2 version 20211220104140 Released! This release contains a few security updates and improvements. Use the link to check it out.
- Automate 2 version 20220103112354 Released! This release added support for externally deployed PostgreSQL 13.
Chef Infra Server
Kiah Tolliver shared
- Chef Infra Server 14.11.36 Released! This release comes with a few bug fixes and security updates
- Chef Infra Server 14.11.31 Released! This release updates Elasticsearch/log4j. It also resolves the new DDoS attack issue in log4j.
Chef Infra Client
Kiah Tolliver shared
- Chef Infra Client 17.9.18 Released! This release contains large scale refactoring of the yum package resource to resolve a bucket of edge conditions, new secrets helper support for HashiCorp Vault with AppRole auth, and improved system/hypervisor detection support for VMware from our partner TecRacer.
- Chef Infra Client 17.9.26 Released! We fixed a bug and made some minor performance improvements with this release.
Chef Workstation
Kiah Tolliver shared
- Chef Workstation 21.12.720 Released! This release comes with a pile of nice bug fixes, improvements, and performance enhancements so be sure to check it out.
Other releases
Kiah Tolliver shared
- Chef Supermarket 4.2.82 Released! This release includes GitHub Enterprise support, SPDX license information for each shared cookbook, improvements to cookbook deprecations, and a bunch of security enhancements.
- Chef Supermarket 4.2.89 Released! This release contains a few UI fixes and improved search results.
- Chef Manage 3.2.35 Released! This release contains a few minor security updates and bug fixes. If you're still using Manage be sure to check out this new release
Updates
Chef Automate
Ankur Mundhra shared
Hello community
Wish all of you a happy and prosperous 2022! Automate team has been working on the following things over the last 2 weeks:
- ES upgraded to 6.8.22 (fixes CVE-2021-45046, CVE-2021-44228, CVE-2021-22137, CVE-2021-22144)
- Fixed issue to ensure that zipped profiles can be uploaded to Automate
- Supports externally deployed PostgreSQL 13
- Upgraded the embedded version of Chef Infra Server to 14.11.36
- WebUI key based Server addition is being explored in dev branch
- IAM actions for Infra Server views is in development
- Improved way to handle large compliance report is being developed
Chef Habitat
mwrockx shared
Hello from Habitat!
This week's updates:
-
Making progress on next core-plans refresh
-
Working on adding hart size and promotion times to package metadata shown in builder
-
Working on HA on-prem builder support
-
Removing long-standing dead code in builder
-
Addressed a job server panic bug
Chef Infra Client
tas50 shared
Hey everyone. It's been a slow few weeks with the holidays, but we're getting back into the swing of things
- We did a few releases of Infra Client 17 that were mentioned above. New features, bug fixes, and some minor performance optimizations
- New Cookstyle 7.26.1 is out. This has a new RuboCop engine with a ton of bug fixes and we also turned on 2 new RuboCop cops that simplify how you read/write files in libraries and resources. I've seen PRs flying in sous-chefs already to simplify things
- Work continues on moving the client.pem to the windows cert store
- We investigated rewriting our user/group creation on macOS to use native API calls since Apple's CLI utilities are missing some key functionality.
- We're digging into some issues with Omnibus where we may be calling some system libraries instead of omnibus packaged libraries. This is blocking the release of FreeBSD 13 packages
- RHEL 9 and Amazon 2022 package work in our infra is underway
- We're starting work on automatically rotating Infra Client logs to prevent the need for logrotate or funky hacks on Windows
Chef Infra Server
Lincoln Baker shared
Hello! Happy New Year Here are some updates for Chef Infra Server- Finished docs enhancements for chef-server-ctl backup
and restore.
-
Investigating:
knife ec backup
with--purge
option does not cleanup ACLs for clients and nodes. -
Investigating: Case sensitive/insensitive search for manage GUI and hosted.
-
Begin work on migrating from ElasticSearch to OpenSearch.
Chef Inspec
cwolfe shared
- Expanding support for more containerization systems on the
virtualization
resource - Adding support for explicit permission matching on Windows to the
file
andregistry_key
resources - Adding a
kernel_parameters
resource to list Linux kernel params - Modifying the
iptables
resource to optionally ignore comments - A fix for multiline results with the
mssql_session
resource - Adding support for SSL authentication with WinRM
Chef Workstation
Vikram Karve shared
Hi All! We had a Workstation release in December'21 & another one coming up soon...Work-in-progress
- Continuing on implementing
chef env
in Golang - Our initial analysis on state of telemetry is over, we are now adding workstation install related telemetry
- Continuing to update build scripts to support Apple M1
- Addressing the
-c
and-D
flag handling in some chef subcommands - The Community Tools team has made significant progress on updating kitchen-vra plugin to support vRA8. PR is created for the vmware-vra-gem, the PR for kitchen-vra will follow soon.
- Begun assessing state of test coverage and report generation in relevant repos
- Working to support AIX for chef ad hoc runs
Sous Chefs
ramereth shared
Hello from the Sous Chefs!
Here's the list of new releases in the past week:
-
consul - 5.3.0: Fix wrong number of arguments when calling action
:enable
service on Windows platform -
consul - 5.3.1: Fix idempotency checks for
consul_token
andconsul_policy
-
daemontools - 1.6.4: Cookstyle fixes
-
docker - 10.1.5: Fix
generate_json
not accepting a variable number of arguments -
docker - 10.1.6: Add debian 11 support
-
homebrew - 5.3.0
-
Various Apple M1 fixes
-
Remove deprecated
--full
option for Homebrew (Breaking upstream CLI change!) -
Update tests
-
nano - 3.0.0: Enabled
unified_mode
-
percona - 3.1.1: Fix root password setting for version >= 5.7
-
pyenv - 4.0.0
-
Enabled
unified_mode
true -
Bump required Chef version to 15.3
-
Other misc fixes
-
ruby_build - 2.2.0
-
support Chef temporary directory being located on a volume mounted
noexec
-
support Ruby installation directory being created ahead of time
-
selinux - 6.0.2: Cookstyle fixes
-
yum - 7.2.1: Fix version comparison in
dnf_module
supported check
We also have some other work that's still in progress related to yum and some yum repos among the latest cookstyle PRs
Cinc Updates
ramereth shared
Hello from the Cinc Project!
Cinc Client
- Released 17.9.26
Cinc Auditor
- Released 4.25.9
Cinc Server
- Released 14.11.15, 14.11.21, 14.11.31, 14.11.36 via the unstable channel
- These releases contain fixes when upgrading from an older release of Cinc Server or Chef Server
Cinc Workstation
- Released 21.12.720 via the unstable channel
I'm going to try and focus on getting the workstation build "stable" by double checking we have all the wordmarks fixed. That's the only reason we don't have it in the stable channel. I'm also trying to find time to fix the issues with our Cinc 17 Windows builds
Other updates
tas50 shared
- If you're a Hosted Chef user the upgrade is complete and Hosted Chef is now on the latest Chef Infra Server with fancy new PostgreSQL and new APIs for Policyfiles
- Supermarket is up next. We're going to move it to a whole new infrastructure that will be much easier to keep updated as time goes on. This should improve performance plus you'll get all the new features we've released over the last few months. Keep an eye out for Cookstyle in Supermarket followed up by InSpec Profiles front and center in Supermarket
- Other upcoming releases to be excited for: Workstation is just about to ship and we have a big CVE fix / version bump update coming out for Chef Backend users
- The last bit I'll leave you with is that we're going to start working on Infra 18 in the next few weeks. You'll see us slow down releasing 17 releases after main becomes 18 and 17 becomes a stable branch. Step one is forking off all the branches and then we'll see what we need to do to pull in Ruby 3.1