searchspring/aws-security

Chef library cookbook for managing AWS Security Groups

aws-security's Issues

Outdated supermarket.io

Hi,

On supermarket.io, the last update of this library was 0.1.4 from Updated December 4, 2014. Since this code is now at 0.1.8 already, could you publish this library again? Thanks!

Best regards.

nokogiri fails to compile

nokogiri fails to compile when used with this cookbook. See output below. OS image is the Opscode CentOS 6.5 one available at https://opscode-vm-bento.s3.amazonaws.com/vagrant/virtualbox/opscode_centos-6.5_chef-provisionerless.box.

==> cfgserver: [2014-11-16T17:14:06+00:00] INFO: *** Chef 11.16.4 ***
==> cfgserver: [2014-11-16T17:14:06+00:00] INFO: Chef-client pid: 3298
==> cfgserver: [2014-11-16T17:14:08+00:00] INFO: Setting the run_list to ["role[role-mongo-cfgserver]"] from CLI options
==> cfgserver: [2014-11-16T17:14:08+00:00] INFO: Run List is [role[role-mongo-cfgserver]]
==> cfgserver: [2014-11-16T17:14:08+00:00] INFO: Run List expands to [slice-mongodb-man::config_server]
==> cfgserver: [2014-11-16T17:14:08+00:00] INFO: Starting Chef Run for mongo-cfg01.dev.slicetest.com
==> cfgserver: [2014-11-16T17:14:08+00:00] INFO: Running start handlers
==> cfgserver: [2014-11-16T17:14:08+00:00] INFO: Start handlers complete.
==> cfgserver: [2014-11-16T17:14:23+00:00] INFO: package[autoconf] installing autoconf-2.63-5.1.el6 from base repository
==> cfgserver: [2014-11-16T17:14:37+00:00] INFO: package[bison] installing bison-2.4.1-5.el6 from base repository
==> cfgserver: [2014-11-16T17:14:39+00:00] INFO: package[flex] installing flex-2.5.35-9.el6 from base repository
==> cfgserver: [2014-11-16T17:14:41+00:00] INFO: package[gcc] installing gcc-4.4.7-11.el6 from base repository
==> cfgserver: [2014-11-16T17:15:29+00:00] INFO: package[gcc-c++] installing gcc-c++-4.4.7-11.el6 from base repository
==> cfgserver: [2014-11-16T17:15:41+00:00] INFO: package[kernel-devel] installing kernel-devel-2.6.32-504.1.3.el6 from updates repository
==> cfgserver: [2014-11-16T17:15:59+00:00] INFO: package[patch] installing patch-2.6-6.el6 from base repository
==> cfgserver: 
==> cfgserver: ================================================================================
==> cfgserver: Error executing action `install` on resource 'chef_gem[fog]'
==> cfgserver: ================================================================================
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Mixlib::ShellOut::ShellCommandFailed
==> cfgserver: ------------------------------------
==> cfgserver: Expected process to exit with [0], but received '1'
==> cfgserver: 
==> cfgserver: ---- Begin output of /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" ----
==> cfgserver: 
==> cfgserver: STDOUT: Building native extensions.  This could take a while...
==> cfgserver: 
==> cfgserver: STDERR: ERROR:  Error installing fog:
==> cfgserver: 
==> cfgserver:  ERROR: Failed to build gem native extension.
==> cfgserver: 
==> cfgserver: 
==> cfgserver: 
==> cfgserver:         /opt/chef/embedded/bin/ruby extconf.rb
==> cfgserver: 
==> cfgserver: checking if the C compiler accepts ... yes
==> cfgserver: 
==> cfgserver: Building nokogiri using packaged libraries.
==> cfgserver: 
==> cfgserver: checking for iconv using --with-opt-* flags... yes
==> cfgserver: 
==> cfgserver: ************************************************************************
==> cfgserver: 
==> cfgserver: IMPORTANT NOTICE:
==> cfgserver: 
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Buidling Nokogiri with a packaged version of libxml2-2.9.2
==> cfgserver: 
==> cfgserver: with the following patches applied:
==> cfgserver: 
==> cfgserver:  - 0001-Revert-Missing-initialization-for-the-catalog-module.patch
==> cfgserver: 
==> cfgserver:  - 0002-Fix-missing-entities-after-CVE-2014-3660-fix.patch
==> cfgserver: 
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Team Nokogiri will keep on doing their best to provide security
==> cfgserver: 
==> cfgserver: updates in a timely manner, but if this is a concern for you and want
==> cfgserver: 
==> cfgserver: to use the system library instead; abort this installation process and
==> cfgserver: 
==> cfgserver: reinstall nokogiri as follows:
==> cfgserver: 
==> cfgserver: 
==> cfgserver: 
==> cfgserver:     gem install nokogiri -- --use-system-libraries
==> cfgserver: 
==> cfgserver:         [--with-xml2-config=/path/to/xml2-config]
==> cfgserver:         [--with-xslt-config=/path/to/xslt-config]
==> cfgserver: 
==> cfgserver: If you are using Bundler, tell it to use the option:
==> cfgserver: 
==> cfgserver:     bundle config build.nokogiri --use-system-libraries
==> cfgserver:     bundle install
==> cfgserver: 
==> cfgserver: Note, however, that nokogiri is not fully compatible with arbitrary
==> cfgserver: versions of libxml2 provided by OS/package vendors.
==> cfgserver: ************************************************************************
==> cfgserver: Extracting libxml2-2.9.2.tar.gz into tmp/x86_64-unknown-linux-gnu/ports/libxml2/2.9.2... OK
==> cfgserver: Running patch with /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ports/patches/libxml2/0001-Revert-Missing-initialization-for-the-catalog-module.patch...
==> cfgserver: Running 'patch' for libxml2 2.9.2... OK
==> cfgserver: Running patch with /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ports/patches/libxml2/0002-Fix-missing-entities-after-CVE-2014-3660-fix.patch...
==> cfgserver: Running 'patch' for libxml2 2.9.2... OK
==> cfgserver: Running 'configure' for libxml2 2.9.2... OK
==> cfgserver: Running 'compile' for libxml2 2.9.2... ERROR, review '/opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/tmp/x86_64-unknown-linux-gnu/ports/libxml2/2.9.2/compile.log' to see what happened.
==> cfgserver: *** extconf.rb failed ***
==> cfgserver: Could not create Makefile due to some reason, probably lack of
==> cfgserver: necessary libraries and/or headers.  Check the mkmf.log file for more
==> cfgserver: details.  You may need configuration options.
==> cfgserver: 
==> cfgserver: Provided configuration options:
==> cfgserver:  --with-opt-dir
==> cfgserver:  --with-opt-include
==> cfgserver:  --without-opt-include=${opt-dir}/include
==> cfgserver:  --with-opt-lib
==> cfgserver:  --without-opt-lib=${opt-dir}/lib
==> cfgserver:  --with-make-prog
==> cfgserver:  --without-make-prog
==> cfgserver:  --srcdir=.
==> cfgserver:  --curdir
==> cfgserver:  --ruby=/opt/chef/embedded/bin/ruby
==> cfgserver:  --help
==> cfgserver:  --clean
==> cfgserver:  --use-system-libraries
==> cfgserver:  --enable-static
==> cfgserver:  --disable-static
==> cfgserver:  --with-zlib-dir
==> cfgserver:  --without-zlib-dir
==> cfgserver:  --with-zlib-include
==> cfgserver:  --without-zlib-include=${zlib-dir}/include
==> cfgserver:  --with-zlib-lib
==> cfgserver:  --without-zlib-lib=${zlib-dir}/lib
==> cfgserver:  --enable-cross-build
==> cfgserver:  --disable-cross-build
==> cfgserver: /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:279:in `block in execute': Failed to complete compile task (RuntimeError)
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:271:in `chdir'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:271:in `execute'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:70:in `compile'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:110:in `cook'
==> cfgserver:  from extconf.rb:268:in `block in process_recipe'
==> cfgserver:  from extconf.rb:167:in `tap'
==> cfgserver:  from extconf.rb:167:in `process_recipe'
==> cfgserver:  from extconf.rb:455:in `<main>'
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Gem files will remain installed in /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1 for inspection.
==> cfgserver: Results logged to /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/gem_make.out
==> cfgserver: ---- End output of /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" ----
==> cfgserver: Ran /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" returned 1
==> cfgserver: 
==> cfgserver: Cookbook Trace:
==> cfgserver: ---------------
==> cfgserver: /tmp/vagrant-chef-2/chef-solo-1/cookbooks/aws_security/recipes/default.rb:24:in `from_file'
==> cfgserver: /tmp/vagrant-chef-2/chef-solo-1/cookbooks/slice-mongodb-man/recipes/aws_security_groups.rb:1:in `from_file'
==> cfgserver: /tmp/vagrant-chef-2/chef-solo-1/cookbooks/slice-mongodb-man/recipes/config_server.rb:1:in `from_file'
==> cfgserver: 
==> cfgserver: Resource Declaration:
==> cfgserver: ---------------------
==> cfgserver: # In /tmp/vagrant-chef-2/chef-solo-1/cookbooks/aws_security/recipes/default.rb
==> cfgserver: 
==> cfgserver:  24: chef_gem "fog"
==> cfgserver:  25: 
==> cfgserver: 
==> cfgserver: Compiled Resource:
==> cfgserver: ------------------
==> cfgserver: # Declared in /tmp/vagrant-chef-2/chef-solo-1/cookbooks/aws_security/recipes/default.rb:24:in `from_file'
==> cfgserver: 
==> cfgserver: chef_gem("fog") do
==> cfgserver:   provider Chef::Provider::Package::Rubygems
==> cfgserver:   action :install
==> cfgserver:   retries 0
==> cfgserver:   retry_delay 2
==> cfgserver:   guard_interpreter :default
==> cfgserver:   package_name "fog"
==> cfgserver:   version "1.24.0"
==> cfgserver:   timeout 900
==> cfgserver:   gem_binary "/opt/chef/embedded/bin/gem"
==> cfgserver:   cookbook_name :aws_security
==> cfgserver:   recipe_name "default"
==> cfgserver: end
==> cfgserver: 
==> cfgserver: 
==> cfgserver: 
==> cfgserver: ================================================================================
==> cfgserver: Recipe Compile Error in /tmp/vagrant-chef-2/chef-solo-1/cookbooks/slice-mongodb-man/recipes/config_server.rb
==> cfgserver: ================================================================================
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Mixlib::ShellOut::ShellCommandFailed
==> cfgserver: ------------------------------------
==> cfgserver: chef_gem[fog] (aws_security::default line 24) had an error: Mixlib::ShellOut::ShellCommandFailed: Expected process to exit with [0], but received '1'
==> cfgserver: 
==> cfgserver: ---- Begin output of /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" ----
==> cfgserver: 
==> cfgserver: STDOUT: Building native extensions.  This could take a while...
==> cfgserver: 
==> cfgserver: STDERR: ERROR:  Error installing fog:
==> cfgserver: 
==> cfgserver:  ERROR: Failed to build gem native extension.
==> cfgserver: 
==> cfgserver: 
==> cfgserver: 
==> cfgserver:         /opt/chef/embedded/bin/ruby extconf.rb
==> cfgserver: 
==> cfgserver: checking if the C compiler accepts ... yes
==> cfgserver: 
==> cfgserver: Building nokogiri using packaged libraries.
==> cfgserver: 
==> cfgserver: checking for iconv using --with-opt-* flags... yes
==> cfgserver: 
==> cfgserver: ************************************************************************
==> cfgserver: 
==> cfgserver: IMPORTANT NOTICE:
==> cfgserver: 
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Buidling Nokogiri with a packaged version of libxml2-2.9.2
==> cfgserver: 
==> cfgserver: with the following patches applied:
==> cfgserver:  - 0001-Revert-Missing-initialization-for-the-catalog-module.patch
==> cfgserver:  - 0002-Fix-missing-entities-after-CVE-2014-3660-fix.patch
==> cfgserver: 
==> cfgserver: Team Nokogiri will keep on doing their best to provide security
==> cfgserver: updates in a timely manner, but if this is a concern for you and want
==> cfgserver: to use the system library instead; abort this installation process and
==> cfgserver: reinstall nokogiri as follows:
==> cfgserver: 
==> cfgserver:     gem install nokogiri -- --use-system-libraries
==> cfgserver:         [--with-xml2-config=/path/to/xml2-config]
==> cfgserver:         [--with-xslt-config=/path/to/xslt-config]
==> cfgserver: 
==> cfgserver: If you are using Bundler, tell it to use the option:
==> cfgserver: 
==> cfgserver:     bundle config build.nokogiri --use-system-libraries
==> cfgserver:     bundle install
==> cfgserver: 
==> cfgserver: Note, however, that nokogiri is not fully compatible with arbitrary
==> cfgserver: versions of libxml2 provided by OS/package vendors.
==> cfgserver: ************************************************************************
==> cfgserver: Extracting libxml2-2.9.2.tar.gz into tmp/x86_64-unknown-linux-gnu/ports/libxml2/2.9.2... OK
==> cfgserver: Running patch with /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ports/patches/libxml2/0001-Revert-Missing-initialization-for-the-catalog-module.patch...
==> cfgserver: Running 'patch' for libxml2 2.9.2... OK
==> cfgserver: Running patch with /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ports/patches/libxml2/0002-Fix-missing-entities-after-CVE-2014-3660-fix.patch...
==> cfgserver: Running 'patch' for libxml2 2.9.2... OK
==> cfgserver: Running 'configure' for libxml2 2.9.2... OK
==> cfgserver: Running 'compile' for libxml2 2.9.2... ERROR, review '/opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/tmp/x86_64-unknown-linux-gnu/ports/libxml2/2.9.2/compile.log' to see what happened.
==> cfgserver: *** extconf.rb failed ***
==> cfgserver: Could not create Makefile due to some reason, probably lack of
==> cfgserver: necessary libraries and/or headers.  Check the mkmf.log file for more
==> cfgserver: details.  You may need configuration options.
==> cfgserver: 
==> cfgserver: Provided configuration options:
==> cfgserver:  --with-opt-dir
==> cfgserver:  --with-opt-include
==> cfgserver:  --without-opt-include=${opt-dir}/include
==> cfgserver:  --with-opt-lib
==> cfgserver:  --without-opt-lib=${opt-dir}/lib
==> cfgserver:  --with-make-prog
==> cfgserver:  --without-make-prog
==> cfgserver:  --srcdir=.
==> cfgserver:  --curdir
==> cfgserver:  --ruby=/opt/chef/embedded/bin/ruby
==> cfgserver:  --help
==> cfgserver:  --clean
==> cfgserver:  --use-system-libraries
==> cfgserver:  --enable-static
==> cfgserver:  --disable-static
==> cfgserver:  --with-zlib-dir
==> cfgserver:  --without-zlib-dir
==> cfgserver:  --with-zlib-include
==> cfgserver:  --without-zlib-include=${zlib-dir}/include
==> cfgserver:  --with-zlib-lib
==> cfgserver:  --without-zlib-lib=${zlib-dir}/lib
==> cfgserver:  --enable-cross-build
==> cfgserver:  --disable-cross-build
==> cfgserver: /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:279:in `block in execute': Failed to complete compile task (RuntimeError)
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:271:in `chdir'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:271:in `execute'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:70:in `compile'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:110:in `cook'
==> cfgserver:  from extconf.rb:268:in `block in process_recipe'
==> cfgserver:  from extconf.rb:167:in `tap'
==> cfgserver:  from extconf.rb:167:in `process_recipe'
==> cfgserver:  from extconf.rb:455:in `<main>'
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Gem files will remain installed in /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1 for inspection.
==> cfgserver: Results logged to /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/gem_make.out
==> cfgserver: ---- End output of /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" ----
==> cfgserver: Ran /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" returned 1
==> cfgserver: 
==> cfgserver: Cookbook Trace:
==> cfgserver: ---------------
==> cfgserver:   /tmp/vagrant-chef-2/chef-solo-1/cookbooks/aws_security/recipes/default.rb:24:in `from_file'
==> cfgserver:   /tmp/vagrant-chef-2/chef-solo-1/cookbooks/slice-mongodb-man/recipes/aws_security_groups.rb:1:in `from_file'
==> cfgserver:   /tmp/vagrant-chef-2/chef-solo-1/cookbooks/slice-mongodb-man/recipes/config_server.rb:1:in `from_file'
==> cfgserver: 
==> cfgserver: Relevant File Content:
==> cfgserver: ----------------------
==> cfgserver: /tmp/vagrant-chef-2/chef-solo-1/cookbooks/aws_security/recipes/default.rb:
==> cfgserver: 
==> cfgserver:  17:  # distributed under the License is distributed on an "AS IS" BASIS,
==> cfgserver:  18:  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
==> cfgserver:  19:  # See the License for the specific language governing permissions and
==> cfgserver:  20:  # limitations under the License.
==> cfgserver:  21:  #
==> cfgserver:  22:  
==> cfgserver:  23:  include_recipe "build-essential"
==> cfgserver:  24>> chef_gem "fog"
==> cfgserver:  25:  
==> cfgserver:  26:  if node['aws_security']['encrypted_data_bag']
==> cfgserver:  27:    databag_item = Chef::EncryptedDataBagItem.load(
==> cfgserver:  28:      node['aws_security']['encrypted_data_bag'],
==> cfgserver:  29:     'aws_keys'
==> cfgserver:  30:    )
==> cfgserver:  31:    node.set['aws_security']['aws_access_key_id'] = databag_item['aws_access_key_id']
==> cfgserver:  32:    node.set['aws_security']['aws_secret_access_key'] = databag_item['aws_secret_access_key']
==> cfgserver:  33:  end
==> cfgserver: 
==> cfgserver: [2014-11-16T17:16:44+00:00] ERROR: Running exception handlers
==> cfgserver: [2014-11-16T17:16:44+00:00] ERROR: Exception handlers complete
==> cfgserver: [2014-11-16T17:16:44+00:00] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out
==> cfgserver: [2014-11-16T17:16:44+00:00] ERROR: chef_gem[fog] (aws_security::default line 24) had an error: Mixlib::ShellOut::ShellCommandFailed: Expected process to exit with [0], but received '1'
==> cfgserver: ---- Begin output of /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" ----
==> cfgserver: STDOUT: Building native extensions.  This could take a while...
==> cfgserver: STDERR: ERROR:  Error installing fog:
==> cfgserver:  ERROR: Failed to build gem native extension.
==> cfgserver: 
==> cfgserver:         /opt/chef/embedded/bin/ruby extconf.rb
==> cfgserver: checking if the C compiler accepts ... yes
==> cfgserver: Building nokogiri using packaged libraries.
==> cfgserver: checking for iconv using --with-opt-* flags... yes
==> cfgserver: ************************************************************************
==> cfgserver: IMPORTANT NOTICE:
==> cfgserver: 
==> cfgserver: Buidling Nokogiri with a packaged version of libxml2-2.9.2
==> cfgserver: with the following patches applied:
==> cfgserver:  - 0001-Revert-Missing-initialization-for-the-catalog-module.patch
==> cfgserver:  - 0002-Fix-missing-entities-after-CVE-2014-3660-fix.patch
==> cfgserver: 
==> cfgserver: Team Nokogiri will keep on doing their best to provide security
==> cfgserver: updates in a timely manner, but if this is a concern for you and want
==> cfgserver: to use the system library instead; abort this installation process and
==> cfgserver: reinstall nokogiri as follows:
==> cfgserver: 
==> cfgserver:     gem install nokogiri -- --use-system-libraries
==> cfgserver:         [--with-xml2-config=/path/to/xml2-config]
==> cfgserver:         [--with-xslt-config=/path/to/xslt-config]
==> cfgserver: 
==> cfgserver: If you are using Bundler, tell it to use the option:
==> cfgserver: 
==> cfgserver:     bundle config build.nokogiri --use-system-libraries
==> cfgserver:     bundle install
==> cfgserver: 
==> cfgserver: Note, however, that nokogiri is not fully compatible with arbitrary
==> cfgserver: versions of libxml2 provided by OS/package vendors.
==> cfgserver: ************************************************************************
==> cfgserver: Extracting libxml2-2.9.2.tar.gz into tmp/x86_64-unknown-linux-gnu/ports/libxml2/2.9.2... OK
==> cfgserver: Running patch with /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ports/patches/libxml2/0001-Revert-Missing-initialization-for-the-catalog-module.patch...
==> cfgserver: Running 'patch' for libxml2 2.9.2... OK
==> cfgserver: Running patch with /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ports/patches/libxml2/0002-Fix-missing-entities-after-CVE-2014-3660-fix.patch...
==> cfgserver: Running 'patch' for libxml2 2.9.2... OK
==> cfgserver: Running 'configure' for libxml2 2.9.2... OK
==> cfgserver: Running 'compile' for libxml2 2.9.2... ERROR, review '/opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/tmp/x86_64-unknown-linux-gnu/ports/libxml2/2.9.2/compile.log' to see what happened.
==> cfgserver: *** extconf.rb failed ***
==> cfgserver: Could not create Makefile due to some reason, probably lack of
==> cfgserver: necessary libraries and/or headers.  Check the mkmf.log file for more
==> cfgserver: details.  You may need configuration options.
==> cfgserver: 
==> cfgserver: Provided configuration options:
==> cfgserver:  --with-opt-dir
==> cfgserver:  --with-opt-include
==> cfgserver:  --without-opt-include=${opt-dir}/include
==> cfgserver:  --with-opt-lib
==> cfgserver:  --without-opt-lib=${opt-dir}/lib
==> cfgserver:  --with-make-prog
==> cfgserver:  --without-make-prog
==> cfgserver:  --srcdir=.
==> cfgserver:  --curdir
==> cfgserver:  --ruby=/opt/chef/embedded/bin/ruby
==> cfgserver:  --help
==> cfgserver:  --clean
==> cfgserver:  --use-system-libraries
==> cfgserver:  --enable-static
==> cfgserver:  --disable-static
==> cfgserver:  --with-zlib-dir
==> cfgserver:  --without-zlib-dir
==> cfgserver:  --with-zlib-include
==> cfgserver:  --without-zlib-include=${zlib-dir}/include
==> cfgserver:  --with-zlib-lib
==> cfgserver:  --without-zlib-lib=${zlib-dir}/lib
==> cfgserver:  --enable-cross-build
==> cfgserver:  --disable-cross-build
==> cfgserver: /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:279:in `block in execute': Failed to complete compile task (RuntimeError)
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:271:in `chdir'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:271:in `execute'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:70:in `compile'
==> cfgserver:  from /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/mini_portile-0.6.1/lib/mini_portile.rb:110:in `cook'
==> cfgserver:  from extconf.rb:268:in `block in process_recipe'
==> cfgserver:  from extconf.rb:167:in `tap'
==> cfgserver:  from extconf.rb:167:in `process_recipe'
==> cfgserver:  from extconf.rb:455:in `<main>'
==> cfgserver: 
==> cfgserver: 
==> cfgserver: Gem files will remain installed in /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1 for inspection.
==> cfgserver: Results logged to /opt/chef/embedded/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.4.1/ext/nokogiri/gem_make.out
==> cfgserver: ---- End output of /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" ----
==> cfgserver: Ran /opt/chef/embedded/bin/gem install fog -q --no-rdoc --no-ri -v "1.24.0" returned 1
==> cfgserver: [2014-11-16T17:16:45+00:00] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)
Chef never successfully completed! Any errors should be visible in the
output above. Please fix your recipes so that they properly complete.

Security Groups not idempotent?

The security groups don't appear to be idempotent, will this be added in later?

Remove rules not included in chef

Include an option to remove rules not created by chef.

Missing required arguments: aws_access_key_id, aws_secret_access_key

Error executing action add on resource 'aws_security_group_rule[depi]'

The required arguments are not required if the chef recipe is executed on an ec2 instance with the appropriate IAM role attached.

Rules with the same port_range but different protocols are treated as identical

I'm trying to open a range of ports on both udp and tcp. The second rule is never added since it's detected as already existing ("X already exists -- nothing to do").

My workaround is to specify slightly different port ranges so that they don't overlap...but that's awkward:)

Switch to fog-aws

The fog project broke out aws from the greater fog codebase into fog-aws, which includes just what you need for fog. Requiring fog actually brings in 28 other gems. Requiring fog-aws only brings in 4. fog-aws also loads about 3-4 times faster.

Dynamically install the gem

Instead of requiring the user to include the default recipe and having that load an entire cookbook to install the gem each time you can just rescue the load of the gem with a chef_gem install. The resource will only trigger if the load fails, which makes it much faster and it doesn't require adding anything to the runlist in order to use the provider. Win win.

uninitialized constant Aws::Ec2::Fog

Currently released version (0.1.9) has the following bug (which might have been solved already by #36 - not sure):

* aws_security_group[<REMOVED>] action create_and_attach
           * chef_gem[fog-aws] action install (up to date)

           ================================================================================
           Error executing action `create_and_attach` on resource 'aws_security_group[<REMOVED>]'
           ================================================================================

           NameError
           ---------
           uninitialized constant Aws::Ec2::Fog

           Cookbook Trace:
           ---------------
           /tmp/kitchen/cache/cookbooks/aws_security/libraries/ec2.rb:50:in `create_aws_interface'
           /tmp/kitchen/cache/cookbooks/aws_security/libraries/ec2.rb:23:in `ec2'
           /tmp/kitchen/cache/cookbooks/aws_security/providers/group.rb:79:in `security_group'
           /tmp/kitchen/cache/cookbooks/aws_security/providers/group.rb:75:in `load_current_resource'
           /tmp/kitchen/cache/cookbooks/compat_resource/files/lib/chef_compat/monkeypatches/chef/runner.rb:78:in `run_action'
           /tmp/kitchen/cache/cookbooks/compat_resource/files/lib/chef_compat/monkeypatches/chef/runner.rb:106:in `block (2 levels) in converge'
           /tmp/kitchen/cache/cookbooks/compat_resource/files/lib/chef_compat/monkeypatches/chef/runner.rb:106:in `each'
           /tmp/kitchen/cache/cookbooks/compat_resource/files/lib/chef_compat/monkeypatches/chef/runner.rb:106:in `block in converge'
           /tmp/kitchen/cache/cookbooks/compat_resource/files/lib/chef_compat/monkeypatches/chef/runner.rb:105:in `converge'

Maybe re-publish to supermarket.chef.io?

No Support for IAM Roles

Don't believe this cookbook has any ability to use IAM roles in EC2. With other cookbooks I've used, if you leave the aws_access_key_id and aws_secret_access_key parameters from the LWRP's, somehow the cookbook will fall back to authentication via the IAM role assigned to the instance.

However, with this cookbook, leaving those parameters out results in the following error:

"Missing required arguments: aws_access_key_id, aws_secret_access_key"

Not picking up changes made outside of the chef recipe