0

I have some servers managed by chef who are running (partly) the same software, e.g. nginx. If nginx has a security issue and there is a new version, what is the best practice to install the new version on all servers?

Improve this question
7
  • If you're using a package manager, you could specify the version of the software and trigger a chef-client run.
    – Jaap Haagmans
    Jul 28, 2014 at 8:49
  • You mean a chef package manager like librarian-chef, and to adjust the version number in the cheffile?
    – Yo Ludke
    Jul 28, 2014 at 9:35
  • No, I actually meant to ask whether you've instructed Chef to install nginx through (for instance) yum or compile it from source. yum_package supports the definition of software versions. If you've compiled from source, you could check for the software version through the nginx -v command and grep for the version you want, only reinstalling nginx if it doesn't match your pattern.
    – Jaap Haagmans
    Jul 28, 2014 at 9:42
  • I am using the offical nginx cookbook supermarket.getchef.com/cookbooks/nginx v.1.4.0, nginx not from source.. In this case the have a default version specified default['nginx']['version'] = "1.2.6"
    – Yo Ludke
    Jul 28, 2014 at 9:47
  • Why not add nginx version as an attribute + download nginx binaries based on that. So, when you want to upgrade, just change the value of attribute and you are ready to upgrade. This will help you to copmare and backup old data
    – jkumar_99
    Jul 28, 2014 at 9:48

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .