anchor.diff:  mkdir -p /etc/chef/ohai/hints/
   touch /etc/chef/ohai/hints/ec2.json
   
  -echo -e "`date` \n\n**** \n**** Adding chef client runit scripts:\n****\n"
  +print_header "Misc chef-client preparation"
   ( service chef-client stop >/dev/null 2>&1 ; sleep 1 ; killall chef-client 2>/dev/null ) || true
   mkdir -p /var/log/chef /var/chef /etc/service /etc/sv
   
   <%- if (@config[:bootstrap_runs_chef_client].to_s == 'true') || (@chef_config.knife[:bootstrap_runs_chef_client].to_s == 'true') %>
  -echo -e "`date` \n\n**** \n**** First run of chef:\n****\n"
  +print_header "First run of chef"
   set -e
   <%= start_chef %>
   set +e
   <%- end %>
   
  -echo -e "`date` \n\n**** \n**** Cleanup:\n****\n"
  +print_header "Clean up"
   # make locate work good
   updatedb
   
  -echo -e "`date` \n\n**** \n**** Adding chef client nonce script:\n****\n"
  +print_header "Adding chef-client-nonce script"
   
   cat > /etc/init.d/chef-client-nonce <<'EOP'
   #! /bin/sh
  
positive.code: 
  date > /etc/box_build_time
  
  echo -e "`date` \n\n**** \n**** yum upgrade:\n****\n"
  yum upgrade --assumeyes
  
  echo -e "`date` \n\n**** \n**** Installing base packages:\n****\n"
  yum install --assumeyes \
      autoconf \
      automake \
  
negative.code: chmod +x /etc/init.d/chef-client-nonce 
  chkconfig --level 2345 chef-client-nonce on
  
  print_header "Ensure 'user' user has sudo"
  sed -i -e 's/name: root/name: user/' \
    -e '/name: user/a \
      groups: [wheel]' /etc/cloud/cloud.cfg
  sed -i -e 's/# \(%wheel.*NOPASSWD.*\)/\1/' /etc/sudoers
  
  print_header "Disable iptables and postfix"
  for svc in iptables ip6tables postfix; do
      service $svc stop
      chkconfig --level 2345 $svc off
  done
  
  print_header "Disable SELinux"
  sed -i -e 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
  
  print_header "Cluster Chef client bootstrap complete"
  EOF
  