[chef] Re: Audit mode with Vagrant only

[Joshua Timberman < >]

Ohai,

I'm running audit mode via test kitchen in the audit-cis cookbook. The .kitchen.yml has:

provisioner:

  name: chef_zero

  client_rb:

    audit_mode: :enabled

Test Kitchen 1.4.0 is required for this - it's not released but the RC is in ChefDK 0.5.0.

And I have some other discussion about this on my blog post here:

http://jtimberman.housepub.org/blog/2015/04/03/chef-audit-mode-introduction/

I'm not sure how to do this in vanilla Vagrant though.

On Wed, Apr 22, 2015 at 8:26 AM, Eric Helgeson < " target="_blank"> > wrote:

Hello!

I'm trying to get audit-mode to work just with vagrant and chef-client 12.2.1. Since there's no option in Vagrant yet I tried passing it in the chef.arguments, but get this error -

$ cat Vagrantfile | grep audit
    chef.arguments = "--audit-mode enabled"
 
$ vagrant provision
==> default: Running provisioner: chef_zero...
==> default: Detected Chef (12.2.1) is already installed
Generating chef JSON and uploading...
==> default: Running chef-zero...
==> default: /opt/chef/embedded/lib/ruby/gems/2.1.0/gems/mixlib-cli-1.5.0/lib/mixlib/cli.rb:191:in `parse_options'
==> default: : 
==> default: invalid option: --audit-mode (OptionParser::InvalidOption)
==> default: 	from /opt/chef/embedded/apps/chef/lib/chef/application.rb:86:in `configure_chef'
==> default: 	from /opt/chef/embedded/apps/chef/lib/chef/application.rb:48:in `reconfigure'
==> default: 	from /opt/chef/embedded/apps/chef/lib/chef/application/solo.rb:190:in `reconfigure'
==> default: 	from /opt/chef/embedded/apps/chef/lib/chef/application.rb:58:in `run'
==> default: 	from /opt/chef/embedded/apps/chef/bin/chef-solo:25:in `<top (required)>'
==> default: 	from /usr/bin/chef-solo:51:in `load'
==> default: 	from /usr/bin/chef-solo:51:in `<main>'
Chef never successfully completed! Any errors should be visible in the
output above. Please fix your recipes so that they properly complete.

Also tried passing in a chef.custom_config_path = 'path/to/client.rb' with `audit_mode :enabled` but those options don't seem to get picked up.

Thanks,

-Eric Helgeson

@nulleric

https://usingchef.com

--

Joshua Timberman