Meta tags:
description=
A node is any physical, virtual, or cloud device configured and maintained by an instance of Chef Infra Client.
Bootstrapping installs Chef Infra Client on a target system,
so it can run as a client and sets the node up to communicate with a Chef Infra Server.;
Headings (most frequently used words):
node, bootstrap, bootstrapping, knife, troubleshoot, create, users, and, organization, workstation, setup,
Text of the page (most frequently used words):
chef (188), the (49), and (46), overview (46), infra (45), server (42), automate (38), install (38), node (33), version (32), builder (30), deployment (28), configure (24), aws (24), client (23), workstation (21), create (20), about (20), habitat (20), users (18), config (18), with (18), supermarket (18), upgrade (18), bootstrap (17), packages (17), manage (16), api (16), prem (16), for (15), knife (14), ctl (14), reference (14), community (13), certificate (12), using (12), user (12), nodes (12), management (12), license (12), backend (12), 360 (12), managed (12), root (11), pem (11), sudo (11), saas (11), system (11), file (10), data (10), compliance (10), platform (10), backup (10), restore (10), effortless (10), recovery (10), settings (10), postgresql (10), started (10), opensearch (10), database (10), bootstrapping (9), command (9), configuration (9), run (9), name (9), cloud (9), page (8), organization (8), can (8), ssl (8), example (8), resources (8), prerequisites (8), origin (8), disaster (8), requirements (8), desktop (8), guide (8), certificates (8), iam (8), setup (7), get (7), add (7), credentials (7), ssh (7), files (7), set (7), applications (7), package (7), all (6), your (6), feedback (6), external (6), organizations (6), org (6), cookbooks (6), audit (6), migrate (6), inspec (6), log (6), style (6), security (6), cookstyle (6), cluster (6), services (6), supported (6), troubleshooting (6), update (6), logs (6), integrations (6), dashboard (6), enterprise (6), policy (5), terms (5), use (5), licensing (5), this (5), local (5), ubuntu (5), john_doe (5), getting (5), that (5), single (5), download (5), progress (4), trademarks (4), its (4), you (4), fqdn (4), http (4), below (4), error (4), default (4), directory (4), which (4), verify (4), machine (4), list (4), store (4), send (4), downloads (4), uninstall (4), groups (4), roles (4), saml (4), ldap (4), resource (4), packs (4), profiles (4), service (4), apis (4), upgrades (4), monitor (4), private (4), quick (4), start (4), deprecations (4), cops (4), firewalls (4), ports (4), authentication (4), authorization (4), high (4), availability (4), core (4), origins (4), profile (4), minio (4), cookbook (4), application (4), enrollment (4), infrastructure (4), migration (4), courier (4), tokens (4), jobs (4), app (4), integration (4), elasticsearch (4), amazon (4), a2ha (4), premises (4), platforms (4), edition (4), product (3), names (3), are (3), other (3), see (3), any (3), troubleshoot (3), table (3), contents (3), support (3), patch (3), https (3), have (3), following (3), pem_file_of_node (3), will (3), created (3), chef_server (3), path (3), key (3), new_org (3), repo (3), installation (3), 524 (3), steps (3), new (3), john (3), password (3), front (3), bastion (3), ruby (3), from (3), content (3), herein (2), software (2), corporation (2), subsidiaries (2), affiliates (2), appropriate (2), rights (2), reserved (2), their (2), respective (2), owners (2), not (2), 2026 (2), last (2), end (2), root_cert (2), com (2), server_name (2), global (2), ssl_verify_depth (2), cs_nginx (2), sys (2), ngx (2), resolution (2), while (2), upstream (2), collector (2), host (2), hostname (2), ssh_user (2), then (2), shown (2), provide (2), name_of_node (2), fetch (2), save (2), them (2), same (2), dns (2), url (2), check (2), once (2), configured (2), paste (2), inside (2), generate (2), more (2), information (2), workstation_21 (2), 1_amd64 (2), deb (2), follow (2), location (2), listed (2), association_user (2), username (2), syntax (2), doe (2), first (2), running (2), instance (2), installer (2), may (2), target (2), available (2), github (2), environments (2), bags (2), clients (2), active (2), console (2), legacy (2), azure (2), remediation (2), release (2), notes (2), share (2), what (2), scaffolding (2), variables (2), pattern (2), attributehelper (2), attributedefault (2), useplatformhelpers (2), unnecessaryplatformcasestatement (2), unnecessaryoscheck (2), trueclassfalseclassresourceproperties (2), simplifyplatformmajorversioncheck (2), overlycomplexsupportsdependsmetadata (2), negatingonlyif (2), includerecipewithparentheses (2), immediatenotificationtiming (2), filemode (2), defaultcopyrightcomments (2), copyrightcommentformat (2), commentsentencespacing (2), commentformat (2), chefwhaaat (2), attributekeys (2), invalidlicensestring (2), insecurecookbookurl (2), includeresourceexamples (2), includeresourcedescriptions (2), includepropertydescriptions (2), emptymetadatafield (2), defaultmetadatamaintainer (2), sharing (2), sshprivatekey (2), unlessdefinedrequire (2), requirenethttps (2), legacypowershelloutmethods (2), gemspecrequirerubygems (2), gemspeclicense (2), usecreateifmissing (2), unnecessarynameproperty (2), unnecessarydesiredstate (2), suggestsmetadata (2), stringpropertywithnildefault (2), sensitivepropertyinresource (2), resourcewithnothingaction (2), replacesmetadata (2), recipemetadata (2), providesmetadata (2), propertywithrequiredanddefault (2), propertysplatregex (2), ohaiattributetostring (2), namepropertyisrequired (2), multipleplatformchecks (2), longdescriptionmetadata (2), groupingmetadata (2), doublecompiletime (2), customresourcewithallowedactions (2), conflictsmetadata (2), attributemetadata (2), aptrepositorynotifiesaptupdate (2), aptrepositorydistributiondefault (2), redundantcode (2), zipfileresource (2), windowszipfileusage (2), windowsscresource (2), windowsregistryuac (2), whyrunsupportedtrue (2), useszypperrepo (2), userequirerelative (2), usemultipackageinstalls (2), usecheflanguagesystemdhelper (2), usecheflanguageenvhelpers (2), usecheflanguagecloudhelpers (2), usebuildessentialresource (2), unnecessarymixlibshelloutrequire (2), unnecessarydependschef15 (2), unnecessarydependschef14 (2), sysctlparamresource (2), simplifyaptppasetup (2), shellouttochocolatey (2), shellouthelper (2), sevenziparchiveresource (2), setorreturninresources (2), respondtoresourcename (2), respondtoprovides (2), respondtoinmetadata (2), respondtocompiletime (2), resourcenamefrominitialize (2), resourceforcingcompiletime (2), providesfrominitialize (2), propertywithnameattribute (2), powershellscriptexpandarchive (2), powershellinstallwindowsfeature (2), powershellinstallpackage (2), powershellguardinterpreter (2), osxconfigprofileresource (2), opensslx509resource (2), opensslrsakeyresource (2), noderolesinclude (2), nodeinitpackage (2), minitesthandlerusage (2), macosxuserdefaults (2), libarchivefileresource (2), legacyberksfilesource (2), includingwindowsdefaultrecipe (2), includingohaidefaultrecipe (2), includingmixinshelloutinresources (2), includingaptdefaultrecipe (2), ifprovidesdefaultaction (2), foodcriticcomments (2), executetzutil (2), executesysctl (2), executesleep (2), executescexe (2), executeaptupdate (2), emptyresourceinitializemethod (2), dslincludeinresource (2), dependsonzyppercookbook (2), dependsonwindowsfirewallcookbook (2), dependsontimezonelwrpcookbook (2), dependsonopensslcookbook (2), dependsonlocalecookbook (2), dependsonkernelmodulecookbook (2), dependsonchocolateycookbooks (2), dependsonchefvaultcookbook (2), definitions (2), defineschefspecmatchers (2), defaultactionfrominitialize (2), declareactionclass (2), databaghelpers (2), customresourcewithattributes (2), cronmanageresource (2), crondfileortemplate (2), conditionalusingtest (2), classevalactionclass (2), chefgemnokogiri (2), allowedactionsfrominitialize (2), actionmethodinresource (2), modernize (2), searchforenvironmentsorroles (2), dependschefvault (2), cookbookusessearch (2), cookbookusesroles (2), cookbookusespolicygroups (2), cookbookusesenvironments (2), cookbookusesdatabags (2), chefvaultused (2), berksfile (2), windowsversionhelpers (2), windowstaskchangeaction (2), windowspackageinstallertypestring (2), windowsfeatureservermanagercmd (2), verifypropertyusesfileexpansion (2), useyamldump (2), usesruncommandhelper (2), usesdeprecatedmixins (2), useschefresthelpers (2), userdeprecatedsupportsproperty (2), useinlineresourcesdefined (2), useautomaticresourcename (2), searchusespositionalparameters (2), rubyblockcreateaction (2), ruby27keywordargumentwarnings (2), resourcewithoutunifiedtrue (2), resourceusesupdatedmethod (2), resourceusesproviderbasemethod (2), resourceusesonlyresourcename (2), resourceusesdslnamemethod (2), resourceoverridesprovidesmethod (2), resourceinheritsfromcompatresource (2), requirerecipe (2), powershellcookbookhelpers (2), policyfilecommunitysource (2), poisearchiveusage (2), partialsearchhelperusage (2), partialsearchclassusage (2), nodesetwithoutlevel (2), nodesetunless (2), nodeset (2), nodemethodsinsteadofattributes (2), nodedeepfetch (2), namepropertywithdefaultvalue (2), macosuserdefaultsglobalproperty (2), logresourcenotifications (2), localedeprecatedlcallproperty (2), librarianchefspec (2), legacyyumcookbookrecipes (2), legacynotifysyntax (2), launchddeprecatedhashproperty (2), includingyumdnfcompatrecipe (2), includingxmlrubyrecipe (2), hwrpwithoutunifiedtrue (2), hwrpwithoutprovides (2), foodcritictesting (2), foodcriticfile (2), executerelativecreateswithoutcwd (2), executepathproperty (2), erlcallresource (2), epicfail (2), eolauditmodeusage (2), easyinstallresource (2), deprecatedyumrepositoryproperties (2), deprecatedyumrepositoryactions (2), deprecatedwindowsversioncheck (2), deprecatedsudoactions (2), deprecatedshelloutmethods (2), deprecatedplatformmethods (2), deprecatedchefspecplatform (2), dependsonomnibusupdatercookbook (2), dependsonchefreportingcookbook (2), dependsonchefnginxcookbook (2), delivery (2), cookbooksdependsonself (2), cookbookdependsonpoise (2), cookbookdependsonpartialsearch (2), cookbookdependsoncompatresource (2), chocolateypackageuninstallaction (2), chefwindowsplatformhelper (2), chefsugarhelpers (2), chefspeclegacyrunner (2), chefspeccoveragereport (2), chefshellout (2), chefrewind (2), chefhandlerusessupports (2), chefhandlerrecipe (2), cheffile (2), chefdkgenerators (2), tmppath (2), supportsmustbefloat (2), serviceresource (2), scopedfileexist (2), resourcewithnoneaction (2), resourcesetsnameproperty (2), resourcesetsinternalproperties (2), propertywithouttype (2), powershellscriptdeletefile (2), powershellfileexists (2), opensslpasswordhelpers (2), octalmodeasstring (2), notifiesactionnotsymbol (2), nodenormalunless (2), nodenormal (2), metadatamissingversion (2), metadatamissingname (2), metadatamalformeddepends (2), malformedplatformvalueforplatformhelper (2), macosuserdefaultsinvalidtype (2), lazyinresourceguard (2), lazyevalnodeattributedefaults (2), invalidversionmetadata (2), invalidplatformvalueforplatformhelper (2), invalidplatformvalueforplatformfamilyhelper (2), invalidplatformmetadata (2), invalidplatformincase (2), invalidplatformhelper (2), invalidplatformfamilyincase (2), invalidplatformfamilyhelper (2), invalidnotificationtiming (2), invalidnotificationresource (2), invaliddefaultaction (2), invalidcookbookname (2), incorrectlibraryinjection (2), emptyresourceguard (2), dnfpackageallowdowngrades (2), cookbookusesnodesave (2), conditionalrubyshellout (2), chefapplicationfatal (2), blockguardwithonlystring (2), correctness (2), v25 (2), v26 (2), tuning (2), failure (2), optional (2), usage (2), tiered (2), airgap (2), capacity (2), planning (2), plan (2), base (2), 2025 (2), refresh (2), strategy (2), account (2), membership (2), rbac (2), keys (2), rotate (2), certs (2), separate (2), scale (2), frontend (2), artifactory (2), artifact (2), warm (2), spare (2), env (2), connect (2), windows_update_settings (2), windows_power_management (2), windows_password_policy (2), windows_ie_esc (2), windows_firewall (2), windows_disk_encryption (2), windows_desktop_winrm_settings (2), windows_desktop_screensaver (2), windows_defender_exclusion (2), windows_defender (2), windows_choco_installer (2), windows_automatic_logout (2), windows_app_management (2), windows_admin_control (2), rescue_account (2), macos_power_management (2), macos_password_policy (2), macos_firewall (2), macos_disk_encryption (2), macos_desktop_screensaver (2), macos_automatic_software_updates (2), macos_automatic_logout (2), macos_app_management (2), macos_admin_control (2), windows (2), macos (2), zero (2), touch (2), redirect (2), sso (2), opsworks (2), skills (2), administration (2), guides (2), enroll (2), clis (2), non (2), san (2), best (2), practices (2), feature (2), flags (2), cli (2), architecture (2), administrator (2), incident (2), servicenow (2), marketplace (2), runs (2), scan (2), reports (2), setting (2), eas (2), event (2), feed (2), teams (2), policies (2), actions (2), projects (2), lifecycle (2), feeds (2), notifications (2), cleanup (2), monitoring (2), centralize (2), large (2), report (2), ingestion (2), invalid (2), login (2), attempts (2), telemetry (2), session (2), timeout (2), disclosure (2), panel (2), banner (2), collection (2), topics (2), manager (2), rds (2), vpc (2), cidr (2), load (2), balancer (2), faqs (2), performance (2), benchmarks (2), rotation (2), self (2), signed (2), custom (2), during (2), view (2), commands (2), generation (2), remove (2), place (2), existing (2), efs (2), back (2), object (2), storage (2), filesystem (2), customer (2), airgapped (2), tutorial (2), shortcodes (2), matter (2), reuse (2), hugo (2), procedures (2), tables (2), headings (2), notices (2), markdown (2), lists (2), linking (2), formatting (2), tools (2), house (2), contribute (2), docs (2), guidelines (2), contributions (2), commercial (2), script (2), versions (2), accept (2), training (2), blog (2), main (2), certain, used, registered, one, countries, markings, contained, inclusion, does, imply, endorsement, affiliation, sponsorship, between, copyright, modified, april, cookie, privacy, trademark, site, map, thank, submit, fill, field, how, improve, document, ask, contact, still, stuck, yes, was, helpful, wqpjirspnnvektelttqkbfi3qbfgmh95dmk, d5fs4c8ff5q, x9tdkyi22wy8sbi5gv2coj4qydvvbmvmepszgd3, cve8mc5fvj13c7jdbmzdi1aa, begin, myautomate, toml, without, protocol, verification, unable, issuer, handshaking, 127, request, post, myorgs, 443, doing, true, use_sudo, aws_profile, would, been, throws, permission, denied, step, 124, rsa, saved, address, public, public_ip, above, details, trusted_cert, folder, might, throw, case, done, attached, note, demo, name_of_organization, chef_server_url, pem_file_of_user, client_key, name_of_user, client_name, look, like, correct, associated, edit, want, ssh_key_of_node, station, additional, dpkg, wget, stable, latest, given, copy, safe, display, 123, email, status, ensure, instances, puts, everything, into, unique, opt, won, interfere, installed, requires, few, before, performing, detect, operating, dependencies, including, embedded, openssl, parsers, libraries, line, utilities, common, way, approach, assumes, access, website, physical, virtual, device, maintained, installs, sets, communicate, menu, search, skip,
Text of the page (random words):
settings chef habitat habitat v 2 1 habitat v 2 0 habitat v 1 6 habitat builder about habitat builder on prem builder about on prem builder install overview system requirements install builder connect your workstation to builder configure overview example builder env config file configure disaster recovery or warm spare use artifactory as a package artifact store configure builder logs scale builder frontend separate backend services manage overview minio postgresql rotate ssl certs upgrade builder origins overview create an origin origin keys origin membership and rbac packages overview bootstrap core packages update packages troubleshooting saas builder about habitat saas builder create an account builder profile origins origin packages builder api supported packages habitat package refresh strategy core base 2025 packages chef infra client chef infra client 19 chef infra client 18 chef infra server overview infra server overview services plan chef infra server prerequisites capacity planning install install chef infra server install high availability airgap tiered installation upgrades upgrade ha cluster license usage configure chef server rb settings chef infra server optional settings chef backend rb settings server firewalls and ports security manage backup and restore backend failure recovery monitor tuning log files users authentication and authorization organizations groups server users reference chef server ctl chef backend ctl chef infra server api firewalls ports chef inspec version 7 1 version 7 0 version 6 8 version 5 24 version 5 23 resource packs chef workstation workstation v26 workstation v25 cookstyle about cookstyle cookstyle cops list cops chef correctness blockguardwithonlystring chefapplicationfatal conditionalrubyshellout cookbookusesnodesave dnfpackageallowdowngrades emptyresourceguard incorrectlibraryinjection invalidcookbookname invaliddefaultaction invalidnotificationresource invalidnotificationtiming invalidplatformfamilyhelper invalidplatformfamilyincase invalidplatformhelper invalidplatformincase invalidplatformmetadata invalidplatformvalueforplatformfamilyhelper invalidplatformvalueforplatformhelper invalidversionmetadata lazyevalnodeattributedefaults lazyinresourceguard macosuserdefaultsinvalidtype malformedplatformvalueforplatformhelper metadatamalformeddepends metadatamissingname metadatamissingversion nodenormal nodenormalunless notifiesactionnotsymbol octalmodeasstring opensslpasswordhelpers powershellfileexists powershellscriptdeletefile propertywithouttype resourcesetsinternalproperties resourcesetsnameproperty resourcewithnoneaction scopedfileexist serviceresource supportsmustbefloat tmppath chef deprecations chefdkgenerators cheffile chefhandlerrecipe chefhandlerusessupports chefrewind chefshellout chefspeccoveragereport chefspeclegacyrunner chefsugarhelpers chefwindowsplatformhelper chocolateypackageuninstallaction cookbookdependsoncompatresource cookbookdependsonpartialsearch cookbookdependsonpoise cookbooksdependsonself delivery dependsonchefnginxcookbook dependsonchefreportingcookbook dependsonomnibusupdatercookbook deprecatedchefspecplatform deprecatedplatformmethods deprecatedshelloutmethods deprecatedsudoactions deprecatedwindowsversioncheck deprecatedyumrepositoryactions deprecatedyumrepositoryproperties easyinstallresource eolauditmodeusage epicfail erlcallresource executepathproperty executerelativecreateswithoutcwd foodcriticfile foodcritictesting hwrpwithoutprovides hwrpwithoutunifiedtrue includingxmlrubyrecipe includingyumdnfcompatrecipe launchddeprecatedhashproperty legacynotifysyntax legacyyumcookbookrecipes librarianchefspec localedeprecatedlcallproperty logresourcenotifications macosuserdefaultsglobalproperty namepropertywithdefaultvalue nodedeepfetch nodemethodsinsteadofattributes nodeset nodesetunless nodesetwithoutlevel partialsearchclassusage partialsearchhelperusage poisearchiveusage policyfilecommunitysource powershellcookbookhelpers requirerecipe resourceinheritsfromcompatresource resourceoverridesprovidesmethod resourceusesdslnamemethod resourceusesonlyresourcename resourceusesproviderbasemethod resourceusesupdatedmethod resourcewithoutunifiedtrue ruby27keywordargumentwarnings rubyblockcreateaction searchusespositionalparameters useautomaticresourcename useinlineresourcesdefined userdeprecatedsupportsproperty useschefresthelpers usesdeprecatedmixins usesruncommandhelper useyamldump verifypropertyusesfileexpansion windowsfeatureservermanagercmd windowspackageinstallertypestring windowstaskchangeaction windowsversionhelpers chef effortless berksfile chefvaultused cookbookusesdatabags cookbookusesenvironments cookbookusespolicygroups cookbookusesroles cookbookusessearch dependschefvault searchforenvironmentsorroles chef modernize actionmethodinresource allowedactionsfrominitialize chefgemnokogiri classevalactionclass conditionalusingtest crondfileortemplate cronmanageresource customresourcewithattributes databaghelpers declareactionclass defaultactionfrominitialize defineschefspecmatchers definitions dependsonchefvaultcookbook dependsonchocolateycookbooks dependsonkernelmodulecookbook dependsonlocalecookbook dependsonopensslcookbook dependsontimezonelwrpcookbook dependsonwindowsfirewallcookbook dependsonzyppercookbook dslincludeinresource emptyresourceinitializemethod executeaptupdate executescexe executesleep executesysctl executetzutil foodcriticcomments ifprovidesdefaultaction includingaptdefaultrecipe includingmixinshelloutinresources includingohaidefaultrecipe includingwindowsdefaultrecipe legacyberksfilesource libarchivefileresource macosxuserdefaults minitesthandlerusage nodeinitpackage noderolesinclude opensslrsakeyresource opensslx509resource osxconfigprofileresource powershellguardinterpreter powershellinstallpackage powershellinstallwindowsfeature powershellscriptexpandarchive propertywithnameattribute providesfrominitialize resourceforcingcompiletime resourcenamefrominitialize respondtocompiletime respondtoinmetadata respondtoprovides respondtoresourcename setorreturninresources sevenziparchiveresource shellouthelper shellouttochocolatey simplifyaptppasetup sysctlparamresource unnecessarydependschef14 unnecessarydependschef15 unnecessarymixlibshelloutrequire usebuildessentialresource usecheflanguagecloudhelpers usecheflanguageenvhelpers usecheflanguagesystemdhelper usemultipackageinstalls userequirerelative useszypperrepo whyrunsupportedtrue windowsregistryuac windowsscresource windowszipfileusage zipfileresource chef redundantcode aptrepositorydistributiondefault aptrepositorynotifiesaptupdate attributemetadata conflictsmetadata customresourcewithallowedactions doublecompiletime groupingmetadata longdescriptionmetadata multipleplatformchecks namepropertyisrequired ohaiattributetostring propertysplatregex propertywithrequiredanddefault providesmetadata recipemetadata replacesmetadata resourcewithnothingaction sensitivepropertyinresource stringpropertywithnildefault suggestsmetadata unnecessarydesiredstate unnecessarynameproperty usecreateifmissing chef ruby gemspeclicense gemspecrequirerubygems legacypowershelloutmethods requirenethttps unlessdefinedrequire chef security sshprivatekey chef sharing defaultmetadatamaintainer emptymetadatafield includepropertydescriptions includeresourcedescriptions includeresourceexamples insecurecookbookurl invalidlicensestring chef style attributekeys chefwhaaat commentformat commentsentencespacing copyrightcommentformat defaultcopyrightcomments filemode immediatenotificationtiming includerecipewithparentheses negatingonlyif overlycomplexsupportsdependsmetadata simplifyplatformmajorversioncheck trueclassfalseclassresourceproperties unnecessaryoscheck unnecessaryplatformcasestatement useplatformhelpers inspec deprecations attributedefault attributehelper effortless pattern effortless overview quick start effortless audit effortless config variables and config what is scaffolding supermarket about supermarket share cookbooks private supermarket about private supermarket install configure backup and restore monitor log files upgrades reference supermarket ctl supermarket api release notes chef 360 platform chef automate chef backend chef download apis chef habitat chef infra client chef infra server chef inspec chef local license service chef manage chef migrate chef supermarket chef workstation chef compliance chef compliance audit profiles chef compliance remediation chef cloud resource packs aws cloud resources azure cloud resources legacy chef manage about the management console uninstall manage rb chef manage ctl active directory ldap configure saml clients cookbooks data bags environments nodes roles organizations groups users uninstall available on github downloads send feedback support node bootstrapping table of contents a node is any physical virtual or cloud device configured and maintained by an instance of chef infra client bootstrapping installs chef infra client on a target system so it can run as a client and sets the node up to communicate with a chef infra server to bootstrap a node run knife bootstrap in the workstation knife bootstrap the knife bootstrap command is a common way to install chef infra client on a node the default for this approach assumes that a node can access the chef website so that it may download the chef infra client package from that location the chef infra client installer will detect the version of the operating system and then install the appropriate chef infra client version using a single command to install chef infra client and all of its dependencies including an embedded version of ruby openssl parsers libraries and command line utilities the chef infra client installer puts everything into a unique directory opt chef so that chef infra client won t interfere with other applications that may be running on the target machine once installed chef infra client requires a few more configuration steps before performing its first chef infra client run on a node bootstrap a node create users and organization ssh in the bastion host and follow the below steps ssh in chef_server instance sudo chef automate ssh hostname chef_server ensure all the front end instances are up and running sudo chef automate status create a user syntax sudo chef server ctl user create username first name last name email id password f path and file name to store user s pem file for example sudo chef server ctl user create john_doe john doe john doe example com john 123 f john_doe pem created users can be listed using sudo chef server ctl user list create an organization syntax sudo chef server ctl org create org name org display name association_user username f path and file name to store org s pem file for example sudo chef server ctl org create new_org new organization association_user john_doe f new_org pem created organization can be listed using sudo chef server ctl org list copy the pem files and save them to a safe location workstation setup to set up the workstation on your machine follow the steps given below install the latest version of chef workstation on the ubuntu system wget https packages chef io files stable chef workstation 21 7 524 ubuntu 20 04 chef workstation_21 7 524 1_amd64 deb to install the same dpkg i chef workstation_21 7 524 1_amd64 deb verify the installation using the following command chef v for additional information see install workstation page generate chef repo using chef generate repo chef repo for more information see the getting station page of workstation paste pem files of user and organization inside root chef for example eg root chef john_doe pem root chef new_org pem paste ssh key of node which you want to bootstrap inside root ssh ssh_key_of_node edit credentials file vi root chef credentials or run knife configure to configure the credentials provide the name of user created in chef_server correct path of pem file of user and chef server url or associated dns and organization name once configured root chef credentials will look like as shown below default client_name name_of_user client_key root chef pem_file_of_user chef_server_url https demo server saas chef io organizations name_of_organization run the following command knife ssl fetch knife ssl check note knife ssl check might throw certificate error in which case configuration can be done using dns attached to chef infra server url the above command will fetch certificate details save them to the trusted_cert folder in root chef and verify the same run the bootstrap command knife bootstrap public_ip i pem_file_of_node u ubuntu n name_of_node sudo public ip ip address of the node which we re bootstrapping pem_file_of_node pem file of node which we have saved at root ssh pem_file_of_node name_of_node you can provide any name to your node for example knife bootstrap 3 124 i ssh rsa pem u ubuntu n john_doe troubleshoot if knife bootstrap throws permission denied or can t create directory error add the following configuration in root chef credentials and then run the bootstrap command as shown in step no 8 resolution default knife ssh_user ubuntu this would have been knife ssh_user in your config rb aws_profile default use_sudo true if you have an error while doing bootstrapping error 20 unable to get local issuer certificate while ssl handshaking to upstream client 127 0 0 1 server request post organizations myorgs data collector http 1 1 upstream https mp automate fqdn 443 data collector v0 host my hostname resolution for certificate verification patch the below config in chef server cs_nginx v1 sys ngx http ssl_verify_depth 6 global v1 external automate ssl server_name automate fqdn without http protocol root_cert my automate fqdn root ca command to patch the config chef automate config patch toml file cs for example cs_nginx v1 sys ngx http ssl_verify_depth 6 global v1 external automate ssl server_name myautomate fqdn com root_cert begin certificate x9tdkyi22wy8sbi5gv2coj4qydvvbmvmepszgd3 cve8mc5fvj13c7jdbmzdi1aa wqpjirspnnvektelttqkbfi3qbfgmh95dmk d5fs4c8ff5q end certificate table of contents node bootstrapping knife bootstrap bootstrap a node create users and organization workstation setup troubleshoot was this page helpful yes no still stuck contact support ask the community how can we improve this document do not fill in this field submit feedback thank you for your feedback table of contents node bootstrapping knife bootstrap bootstrap a node create users and organization workstation setup troubleshoot site map licensing terms of use trademark policy privacy policy cookie policy page last modified april 13 2026 copyright 2026 progress software corporation and or its subsidiaries or affiliates all rights reserved progress and certain product names used herein are trademarks or registered trademarks of progress software corporation and or one of its subsidiaries or affiliates in the u s and or other countries see trademarks for appropriate markings all rights in any other trademarks contain...
|
