如何在Chef中禁止覆盖Cookbook版本？防止误传丢失现有版本内容

Hey there! Let's break down your two Chef-related questions to help you avoid accidental overwrites and content loss.

1. Disabling Cookbook Version Overwrites Globally #

To enforce that existing cookbook versions can't be replaced on your Chef server, you'll need to adjust the server's core configuration:

• Open your chef-server.rb file (typically located at /etc/opscode/chef-server.rb) and add this line:

  cookbook_versioning "required"
  

• Save the file and apply the change by restarting the Chef server:

  chef-server-ctl reconfigure
  

This setting makes the server reject any upload that tries to overwrite an existing version. From now on, you must increment the version number in your cookbook's metadata.rb every time you want to push an update.

You can also add an extra layer of protection by locking versions at the environment level. In your environment's .rb file, specify exact versions for cookbooks:

cookbook 'my_app_cookbook', '= 1.2.3'

This ensures nodes only pull the specified version, even if someone manages to bypass the server-level restriction.

2. Restricting Uploads of Existing Versions to Avoid Content Loss #

If you often forget to update the version in metadata.rb before running knife cookbook upload, here are practical fixes to prevent accidental overwrites:

Freeze versions during upload #

Use the --freeze flag when uploading your cookbook. This locks the version on the server, so no future uploads can overwrite it:

knife cookbook upload my_app_cookbook --freeze

Once frozen, any attempt to upload the same version will throw an error, stopping you from losing existing content.

Automatically freeze all uploads #

To make this behavior default (so you don't have to remember the --freeze flag every time), add this line to your knife.rb file:

knife[:freeze] = true

Now every knife cookbook upload will automatically freeze the version on the server.

Freeze existing versions retroactively #

If you already uploaded a version without freezing it, you can lock it after the fact with:

knife cookbook freeze my_app_cookbook 1.2.3

Replace 1.2.3 with the specific version you want to protect.

内容的提问来源于stack exchange，提问作者Alexey Vazhnov