[chef] Re: Re: Re: Re: should chef be used for initial server updating/hardening?

[S Ahmed < >]

I was also referring to tweaks when you normally setup a server like:

1. disabling login w/o ssh

2. disabling root login

etc.

On Fri, Jan 20, 2012 at 5:43 PM, Joshua Timberman < "> > wrote:

On Friday, January 20, 2012 at 2:01 PM, Tom wrote:
> Do you have any recommendations for running a regular compliance report
> for each instance, which can be exposed outside chef. eg as an email
> report or similar?

From a Chef perspective, I would use a report handler that captures the information about the run that you might care about, such as the resources that were updated, and send that information somewhere. Report handlers can send to anything, including email.

http://wiki.opscode.com/display/chef/Exception+and+Report+Handlers

--
Opscode, Inc.
Joshua Timberman, Technical Program Manager
IRC, Skype, Twitter, Github: jtimberman