lock down chef version and update kernel