[edit on GitHub]

Use the ntp_conf Chef InSpec audit resource to test the synchronization settings defined in the ntp.conf file. This file is typically located at /etc/ntp.conf.

Availability

Installation

This resource is distributed along with Chef InSpec itself. You can use it automatically.

Version

This resource first became available in v1.0.0 of InSpec.

Syntax

An ntp_conf resource block declares the synchronization settings that should be tested:

describe ntp_conf('path') do
  its('setting_name') { should eq 'value' }
end

where

• 'setting_name' is a synchronization setting defined in the ntp.conf file
• ('path') is the non-default path to the ntp.conf file
• { should eq 'value' } is the value that is expected

Properties

This resource supports any of the settings listed in an ntp.conf file as properties.

Examples

The following examples show how to use this Chef InSpec audit resource

describe ntp_conf do
  its('server') { should_not eq nil }
  its('restrict') { should include '-4 default kod notrap nomodify nopeer noquery'}
end

Test for clock drift against named servers

describe ntp_conf do
  its('driftfile') { should eq '/var/lib/ntp/ntp.drift' }
  its('server') do
    should eq [
      '0.ubuntu.pool.ntp.org',
      '1.ubuntu.pool.ntp.org',
      '2.ubuntu.pool.ntp.org'
    ]
  end
end

Matchers

For a full list of available matchers, please visit our matchers page.