[chef] should chef be used for initial server updating/hardening?

[S Ahmed < >]

Is it good practise to use chef to update repos i.e. sugo apt-get update && sudo apt-get upgrade

And general server hardening like iptables etc?

If yes, any good examples for ubuntu hardening that you can point me to?