[chef] Re: Re: Re: AWS Security Cookbook

[Douglas Garstang < >]

Eric,

They didn't specifically say at the conference which one they where referring to, but this seems like the likely candidate:

https://github.com/SearchSpring/aws_security

I just took a look at the mkmf log file, and it seems to be failing here:

/tmp/ccGwgqii.o: In function `main':
/opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/conftest.c:8: undefined reference to `libiconv_open'
/opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/conftest.c:9: undefined reference to `libiconv'
collect2: ld returned 1 exit status

Usually this would mean a library is missing (how I'd get the package installed first from chef would be a challenge), but I can't seem to find any library called libiconv on CentOS 6.5. It looks like you can compile nokogirl with --without-iconv, but I don't know how I could wrap the aws_security cookbook to make it do that. :(

Doug.

On Fri, Nov 14, 2014 at 10:27 AM, Eric Herot < " target="_blank"> > wrote:

For those of us not at the conference, can you say what the name of the cookbook you’re trying to use is?

FYI there was a recent change to the Nokogiri gem that added another external package dependency (specifically libghc-zlib-dev on Ubuntu). I’d suggest filing an issue with the cookbook author letting them know that this problem exists.

On November 14, 2014 at 12:50:23 PM, Daniel DeLeo ( " target="_blank"> ) wrote:

On Friday, November 14, 2014 at 9:43 AM, Douglas Garstang wrote:

> So, I was at one of the chef sessions at AWS Re:Invent yesterday, apparently there's a cookbook for creating security groups. Giant gaping security issues aside, when I tried to use it, it fails building nokigiri. I don't think that's _ever_ compiled successfully.
>
> Is there an alternative?
>
> Doug

Ruby has an XML library in the standard lib called REXML. It’s obviously much slower, but on the client side I think most use cases can tolerate the performance hit, but most tooling authors just use nokogiri for whatever reason. You could file an issue asking the authors to investigate using REXML instead (though this may not be possible if they’re relying on an upstream AWS library).

As for installing nokogiri, there are options for the installer to use local libxml2 packages rather than vendoring its own, these should be described in the nokogiri documentation. You might have to take over the nokogiri installation step to get this to work, depending on how this cookbook installs it.

--
Daniel DeLeo

--

Regards,

Douglas Garstang
http://www.linkedin.com/in/garstang
Email: ">
Cell: +1-805-340-5627