Chef Infra and Mondoo
This page covers how to use Chef Infra to install cnspec on hosts to run policies as code.
Installing using Chef Infra
We publish an official mondoo cookbook on Chef Supermarket. You can use the cookbook in your own wrapper cookbooks or Chef Infra roles
To apply the cookbook, set the Mondoo Registration Token via:
default['cnspec']['registration_token'] = "changeme"
Example: Apply a cookbook to an Amazon EC2 instance
- Spin up a new Linux instance on AWS
- Create the
runwrapper cookbook as documented in our example
chef-run ssh://user@host ./run
- All instances reported their vulnerability status