The problem is we don't have a known good configuration on machines, that's what we want to start verifying. Current ideas are things like inspec or test-infra, but I thought I'd ask here as well for suggestions