anchor.diff:  chmod +x /etc/init.d/chef-client-nonce 
   chkconfig --level 2345 chef-client-nonce on
   
  -echo -e "`date` \n\n**** \n**** Ensure 'user' user has sudo:\n****\n"
  +print_header "Ensure 'user' user has sudo"
   sed -i -e 's/name: root/name: user/' \
     -e '/name: user/a \
       groups: [wheel]' /etc/cloud/cloud.cfg
   sed -i -e 's/# \(%wheel.*NOPASSWD.*\)/\1/' /etc/sudoers
   
  -echo -e "`date` \n\n**** \n**** Disable iptables postfix:\n****\n"
  +print_header "Disable iptables and postfix"
   for svc in iptables ip6tables postfix; do
       service $svc stop
       chkconfig --level 2345 $svc off
   done
   
  -echo -e "`date` \n\n**** \n**** Disable SELinux:\n****\n"
  +print_header "Disable SELinux"
   sed -i -e 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
   
  -echo -e "`date` \n\n**** \n**** Cluster Chef client bootstrap complete\n****\n"
  +print_header "Cluster Chef client bootstrap complete"
   EOF
  
positive.code: mkdir -p /etc/chef/ohai/hints/
  touch /etc/chef/ohai/hints/ec2.json
  
  echo -e "`date` \n\n**** \n**** Adding chef client runit scripts:\n****\n"
  ( service chef-client stop >/dev/null 2>&1 ; sleep 1 ; killall chef-client 2>/dev/null ) || true
  mkdir -p /var/log/chef /var/chef /etc/service /etc/sv
  
  <%- if (@config[:bootstrap_runs_chef_client].to_s == 'true') || (@chef_config.knife[:bootstrap_runs_chef_client].to_s == 'true') %>
  echo -e "`date` \n\n**** \n**** First run of chef:\n****\n"
  set -e
  <%= start_chef %>
  set +e
  <%- end %>
  
  echo -e "`date` \n\n**** \n**** Cleanup:\n****\n"
  # make locate work good
  updatedb
  
  echo -e "`date` \n\n**** \n**** Adding chef client nonce script:\n****\n"
  
  cat > /etc/init.d/chef-client-nonce <<'EOP'
  #! /bin/sh
  
negative.code:     zlib \
      zlib-devel
  
  # Grr, prevent 'prelink' from mangling our binaries
  # http://www.tsheffler.com/blog/?p=491
  grep ruby /etc/prelink.conf || echo '-b /usr/bin/ruby*' >>/etc/prelink.conf
  
  print_header "Installing ruby version ${RUBY_VERSION}"
  yum install --assumeyes ruby-1.9.3.p545
  
  yum clean all
  
  if [ ! -f /usr/bin/chef-client ]; then
  
    print_header "Updating gems"
    gem update --system
  
    print_header "Installing chef"
    gem install ohai --no-rdoc --no-ri
    gem install chef --no-rdoc --no-ri --version "$CHEF_VERSION"
    # gems needed for the client.rb or so generically useful you want them at hand
    gem install      --no-rdoc --no-ri extlib bundler json right_aws pry fog
  
  else # no chef-client
    print_header "Chef is present -- skipping apt/ruby/chef installation"
  fi # end ruby+chef install
  
  print_header "Writing chef client config files"
  mkdir -p /etc/chef
  
  <%- if @config[:client_key] %>
  