I am configuring my first server at Linode using knife-solo. Everything is working fine but I've just added a step by which I am disabling root login for extra security. My understanding is that whenever I am adding new items to my configuration I should rerun chef to apply them instead of doing it manually but once I lock that is not possible.
Which of these (or of an alternative) approach would be better:
- I could unlock root access at the start of my script and lock it again at the end.
- I could lock it as step one and do all the installations of packages including the server (nginx in my case) as another user.