[chef] Re: Re: Ruby, Chef, Omnibus and you!

[Alex Howells < >]

On 31 December 2011 02:40, Alex Howells 
<
 >
 wrote:
> On 30 December 2011 22:23, Joshua Timberman 
> <
 >
>  wrote:
>>
>> Ah, of course. The package compiled against the version of Ruby available 
>> in the distribution, since is a C extension, so in order to work with the 
>> Ruby in the Chef Full Stack installation, it needs to be recompiled with 
>> that version of Ruby (1.9.2p180). That's fine in many environments - to 
>> build C extension RubyGems on systems when installing the gem, but not in 
>> environments where C compiler and build toolchains are prohibited from 
>> servers by security policy.
>>
>
> If Omnibus is "The Future" then I'm guessing the Ruby which you ship
> inside it is going to have a *lot* of stuff bolted on.
>
> Is that something you've thought about and are okay with?

NB: This means instead of benefiting from the Ubuntu Security folks
handling all the repackaging when a security bug comes out, you guys
are assuming responsibility for patching your intepreter. No longer is
it just chef-client bugs, now you have responsibility for the full
stack you deployed via Omnibus...