Switch to using inspec for testing

[chef.git] / test / integration / networking / inspec / nftables_spec.rb

diff --git a/test/integration/networking/inspec/nftables_spec.rb b/test/integration/networking/inspec/nftables_spec.rb
new file mode 100644 (file)
index 0000000..c928d2b
--- /dev/null
+++ b/test/integration/networking/inspec/nftables_spec.rb
@@ -0,0 +1,15 @@
+describe package("nftables") do
+  it { should be_installed }
+end
+
+describe service("nftables") do
+  it { should be_enabled }
+  it { should be_running }
+end
+
+describe file("/etc/nftables.conf") do
+  it { should be_file }
+  its(:content) { should match(/echo-request.*accept/) }
+  its(:content) { should match(/http.*accept/) }
+  its(:content) { should match(/https.*accept/) }
+end