containers, not ChefSpec