Current status: writing Chef scripts. Works well with Vagrant, I'd much rather see an /etc/sudoers syntax error in a VM than on production.