chrony_conf resource
Use the chrony_conf
Chef InSpec audit resource to test the synchronization settings defined in the chrony.conf
file. This file is typically located at /etc/chrony.conf
.
Availability
Install
This resource is distributed with Chef InSpec and is automatically available for use.Syntax
An chrony_conf
resource block declares the synchronization settings that should be tested:
describe chrony_conf('PATH') do
its('setting_name') { should eq 'VALUE' }
end
where:
'setting_name'
is a synchronization setting defined in thechrony.conf
file.('path')
is the non-default path to thechrony.conf
file (default path is/etc/chrony.conf
).{ should eq 'value' }
is the value that is expected.
Examples
The following examples show how to use this Chef InSpec audit resource.
This resource matches any service listed in the chrony.conf
file.
Test for clock drift against named servers
describe chrony_conf do
its('driftfile') { should cmp '/var/lib/chrony/drift' }
its('server') do
should cmp [
'0.ubuntu.pool.ntp.org',
'1.ubuntu.pool.ntp.org',
'2.ubuntu.pool.ntp.org'
]
end
end
Test that an NTP server exists and a specific subnet is specified from which NTP clients are accessible
describe chrony_conf do
its('server') { should_not eq nil }
its('allow') { should include '192.168.0.0/16'}
end