没有这样的文件或目录 - 文件未找到错误的厨师

Question

这里是我的食谱代码，

include_recipe 'aws' 

require 'aws-sdk' 

client = Aws::S3::Client.new(region: 'us-east-1') 
bucket = client.get_object(bucket:'chefconfig', key: 'encrypted_data_bag_secret') 

# Read content to variable 
file_content = bucket.body.read 

# Log output (optional) 
Chef::Log.info(file_content) 

# Write content to file 
file '/etc/chef/encrypted_data_bag_secret' do 
    owner 'root' 
    group 'root' 
    mode '0755' 
    content file_content 
    action :create 
end 

password_secret = Chef::EncryptedDataBagItem.load_secret('/etc/chef/encrypted_data_bag_secret') 
docker_password_data_bag_item = Chef::EncryptedDataBagItem.load('passwords', 'docker_server_master_password', password_secret) 

docker_service 'default' do 
    action [:create, :start] 
end 

docker_registry 'https://index.docker.io/v1/' do 
    username node['docker']['username'] 
    password docker_password_data_bag_item['password'] 
    email node['docker']['email'] 
end 

我想file资源将创造/etc/chef/encrypted_data_bag_secret第一，将可用于Chef::EncryptedDataBagItem.load_secret但是当我运行这个食谱我开始越来越以下错误消息。

================================================================================ 
    Recipe Compile Error in /var/chef/cache/cookbooks/appservers/recipes/default.rb 
    ================================================================================ 

    Errno::ENOENT 
    ------------- 
    No such file or directory - file not found '/etc/chef/encrypted_data_bag_secret' 

    Cookbook Trace: 
    --------------- 
    /var/chef/cache/cookbooks/appservers/recipes/docker.rb:29:in `from_file' 
    /var/chef/cache/cookbooks/appservers/recipes/default.rb:9:in `from_file' 

由于我在引导节点时添加了这本菜谱，所以我不知道如何在引导过程中提供秘密文件。

Answer 1

由于@tensibai在评论中提到的问题在堆栈溢出问题很好解释compile time vs run time in chef recipes

在这里，我怎么给解决我的问题。

我包裹在ruby_block 'password_secret' 和 'docker_password_data_bag_item' 如下，

ruby_block 'load_databag_secret' do 
    block do 
    password_secret = Chef::EncryptedDataBagItem.load_secret('/etc/chef/encrypted_data_bag_secret') 
    docker_password_data_bag_item = Chef::EncryptedDataBagItem.load('passwords', 'docker_server_master_password', password_secret) 
    node.set['docker']['password'] = docker_password_data_bag_item['password'] 
    end 
end 

而且改变了我的搬运工注册表的代码如下，

docker_registry 'https://index.docker.io/v1/' do 
    username node['docker']['username'] 
    password lazy {node['docker']['password']} 
    email node['docker']['email'] 
end 

请注意docker_registry资源lazy关键字。如果你很好奇，你可以在这里了解更多。

how-to-pass-value-from-one-resource-to-another-resource-in-chef-recipe