Do you know about ChatOps? With ChatOps, you run tool commands from within a chat client. The client is configured so that it can execute those commands, which means everyone who’s participating in the conversation can see what’s happening in real time. Now, users of Chef and HipChat can get in the ChatOps groove because Chef has just released its HipChat/Chef server integration. This fully suppor

On Tuesday, we announced the release of the InSpec infrastructure testing framework as part of the release of Chef Compliance. Today we would like to dive into how and why we decided to create InSpec, from its journey as a Serverspec extension to its current state as a standalone project. Serverspec for compliance testing Our startup VulcanoSec, acquired by Chef earlier this year, was founded to s

Today we’ve released an initial version of audit-cis. This is an “audit mode only” cookbook that runs on a node to check for compliance with The Center for Internet Security (CIS) benchmark for a specific platform. This release targets CentOS 7, CIS Benchmark version 1.0.0. CIS Benchmarks are consensus based security recommendations for various operating systems, platform distributions, or commonl

This is a guest post by Jon Rooney, Director of Developer Marketing at Splunk Two weeks ago at ChefConf, the Chef team announced an integrated app for Splunk to gain real-time insights from your Chef infrastructure. The Chef Analytics App for Splunk is available for free on Splunkbase, the Splunk app marketplace and provides Chef users with visibility into metrics such as success / failure rates,

Managing users is one of the contrived (but applicable) examples we use in Chef Fundamentals training to help onboard new Chefs to the idea of writing data-driven cookbooks. Whenever I run a training class, I typically end that module by talking around other ways to manage users and SSH keys (hopefully you’re not still using passwords). Outside of training classes, this topic comes up quite a bit

_Update: 2014-10-17: We have released an update of Chef Server products and Analytics to address the POODLE attack as well as other recently announced vulnerabilites._ A new attack on SSL 3.0 has been announced. This attack is fully detailed in this document. ## Affected Products See section Remediation below for a mitigation that can be applied to affected products until patched releases are avai