Chef 14 Released
April 05, 2018

Chef announced the release of Chef 14, the fastest and easiest to use Chef version yet.

Expanded out-of-the-box support for both Windows and macOS eliminates the need for external cookbooks to manage these operating systems.

And finally, Chef 14 benefits from the performance enhancements in Ruby 2.5, running up to 10% faster than previous versions.

A major objective over the last few years has been to include more resources, or configuration items, in core Chef. When Chef was first released back in 2009, it provided a declarative automation framework for performing basic systems tasks like installing packages or managing files. Higher-order operations, like managing software repositories, tuning kernel parameters, or managing operating system subscriptions were only available through external cookbooks. While developing those cookbooks allowed Chef to iterate on these tasks independent of the Chef Client release cadence, once the code matured, it was time to add it back to core Chef.

In Chef 14, the company added nearly thirty resources to core Chef with the goal of allowing you to do nearly any basic systems management function without the need for an external cookbook. The resources fall into the following areas:

- Windows support: There is no longer any need to use a separate windows cookbook in order to get access to Windows management resources. This has been a multi-year project and required Chef to modernize and rewrite much of the logic in these resources, but the payoff is worth it. For example, you can now join Chef-managed Windows servers to an Active Directory domain, install packages from DISM or PowerShell, set up AutoRun items, install printers, and many more tasks, all with just a few lines of Chef code and no external dependencies.

- macOS management: Many companies, including Facebook’s Client Platform Engineering team, are now managing their desktop macOS fleets using Chef. Tasks like installing packages from DMG images or Homebrew casks and taps, and management of macOS user profiles are possible without a dependency on the macos cookbook. Speaking of that cookbook, it is now maintained by our partners at Microsoft and replaces the old mac_os_x cookbook. Microsoft will be speaking at ChefConf 2018 on this topic.

- RedHat Enterprise Linux subscription management: It’s now possible to manage your Red Hat Systems Manager (RHSM) subscription and entitlements using core Chef, as well as ensuring that specific errata are installed on a server. This helps with patch management use cases, particularly for remediating fleetwide vulnerabilities like Meltdown or Spectre.

- Utility functions: Resources that previously existed in cookbooks to perform tasks like managing swap files, kernel tuning (sysctl), setting the system hostname, generating OpenSSL keys, or managing sudo configuration are all in core Chef.

Finally, there is the usual plethora of minor changes and bugfixes that accompany a major release like this. A few that are worth calling out:

- The yum and DNF resources have been completely overhauled to be more performant.

- Chef disabled Ohai’s passwd plugin by default to avoid enumerating users’ entire directories on AD or LDAP-connected systems.

- node[“name”] and node[“chef_environment”] are now top-level attributes to avoid confusion when writing recipes. (You can still use the old method syntax but the attribute format is now recommended.)

- Ohai now reports on Windows system’s product and system type (e.g. “Datacenter”) by default.

Share this

Industry News

March 28, 2024

Check Point® Software Technologies Ltd. announced a collaboration with Microsoft that utilizes the Microsoft Azure OpenAI Service to enhance Check Point Infinity AI Copilot, marking a significant advancement in cyber security AI applications.

March 28, 2024

ArmorCode announced ArmorCode Risk Prioritization, providing a 3D scoring approach for managing application security risks.

March 28, 2024

AppViewX and Fortanix announced a partnership to offer cloud-delivered secure digital identity management and code signing.

March 27, 2024

WaveMaker has updated its platform in response to customer demand for more sophisticated API and code management tools.

March 27, 2024

Vercara announced the launch of UltraAPI™, a product suite that protects APIs and web applications from malicious bots and fraudulent activity while ensuring regulatory compliance.

March 27, 2024

Legit Security announced the launch of its standalone enterprise secrets scanning product, which can detect, remediate, and prevent secrets exposure across the software development pipeline.

March 26, 2024

Progress announced a strategic partnership with Veeam® Software, the #1 leader by market share in Data Protection and Ransomware Recovery, to provide customers with an enterprise-ready cyber defense solution that strengthens the security of their business-critical data.

March 26, 2024

GitGuardian released its Software Composition Analysis (SCA) module.

March 26, 2024

DataStax announced a milestone in its journey to simplify enterprise retrieval-augmented generation (RAG) for developers by integrating with Microsoft Semantic Kernel.

March 25, 2024

Check Point® Software Technologies Ltd. is collaborating with NVIDIA to enhance the security of AI cloud infrastructure. Integrating NVIDIA BlueField DPUs, which feature a broad range of purpose-built, innovative security capabilities, the new Check Point AI Cloud Protect solution will help prevent threats at both the network and host levels.

March 25, 2024

Sentry announced the release of Autofix, an AI-powered feature to debug and fix code in minutes, saving important time and resources.

March 25, 2024

Apiiro announced a product integration and partnership with Secure Code Warrior, the agile developer security training platform, to extend its ASPM technology and processes to the people layer.

March 21, 2024

Progress announced that Progress® Semaphore™, its metadata management and semantic AI platform, was named a Champion in SoftwareReviews’ 2024 Metadata Management Emotional Footprint Awards.

March 21, 2024

The Cloud Native Computing Foundation® (CNCF®) has partnered with Udemy, an online skills marketplace and learning platform.

March 21, 2024

GitLab has acquired Oxeye, the provider of a cloud-native application security and risk management solution.