control "apt-key-1" do
   impact 1.0
   title "Is the Ubuntu FTP archive key installed?"
   desc "Ubuntu cryptographically signs its package lists to verify they are
   valid."
   describe command('apt-key list') do
    its('stdout') { should match /Ubuntu Archive Automatic Signing Key/ }
   end
 end