[chef] Package a chef installation

[< >]

It is my understanding that chef is generally used to define a system and
deploy to a node.

Are there use cases where one can package the entire system as an .rpm, .deb,
.exe, etc? 

For example, given a simple stack:
* apache2
* mysql
* simple rails application

How can one package all three into a .rpm so that when given to a customer,
they can install the rpm while still being firewalled from the outside world?