[chef] Re: AWS Security Cookbook

[Daniel DeLeo < >]

On Friday, November 14, 2014 at 9:43 AM, Douglas Garstang wrote:

> So, I was at one of the chef sessions at AWS Re:Invent yesterday, 
> apparently there's a cookbook for creating security groups. Giant gaping 
> security issues aside, when I tried to use it, it fails building nokigiri. 
> I don't think that's _ever_ compiled successfully.
>  
> Is there an alternative?
>  
> Doug  

Ruby has an XML library in the standard lib called REXML. It’s obviously much 
slower, but on the client side I think most use cases can tolerate the 
performance hit, but most tooling authors just use nokogiri for whatever 
reason. You could file an issue asking the authors to investigate using REXML 
instead (though this may not be possible if they’re relying on an upstream 
AWS library).

As for installing nokogiri, there are options for the installer to use local 
libxml2 packages rather than vendoring its own, these should be described in 
the nokogiri documentation. You might have to take over the nokogiri 
installation step to get this to work, depending on how this cookbook 
installs it.

--  
Daniel DeLeo