Completely gutted the old chef stuff. Now relying on the shell provisioner, as I can more tightly control it - and having a chef setup is very overkill.