stumbling through Chef's DSL syntax