Chef Infra and Mondoo

This page covers how to use Chef Infra to install cnspec on hosts to run policies as code.

import Partial from "./_automation-providers-note.mdx";

{" "}

Installing using Chef Infra

We publish an official mondoo cookbook on Chef Supermarket. You can use the cookbook in your own wrapper cookbooks or Chef Infra roles

To apply the cookbook, set the Mondoo Registration Token via:

default['cnspec']['registration_token'] = "changeme"

Example: Apply a cookbook to an Amazon EC2 instance

1. Spin up a new Linux instance on AWS
2. Create the run wrapper cookbook as documented in our example
3. Run chef-run ssh://user@host ./run
4. All instances reported their vulnerability status