Commit Graph

74 Commits

Author SHA256 Message Date
Reinhard Max
0e5e2f49b2 - boo#1187906: Consolidate all references to the helper script.
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=102
2021-07-01 13:21:41 +00:00
Martin Pluskal
8036ef535c Accepting request 899811 from home:gmbr3:Active
- Add now working CONFIG parameter to sysusers generator

OBS-URL: https://build.opensuse.org/request/show/899811
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=101
2021-06-14 07:05:09 +00:00
Reinhard Max
ac480f5e95 Accepting request 896868 from home:gmbr3:Active
- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore

OBS-URL: https://build.opensuse.org/request/show/896868
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=99
2021-06-07 11:01:00 +00:00
Reinhard Max
cde7f90ece - Update to 4.1
* Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=97
2021-06-01 13:31:19 +00:00
Reinhard Max
72bacbacac - Enable syscallfilter unconditionally [boo#1181826].
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=96
2021-02-05 11:06:22 +00:00
Martin Pluskal
1a3bbf601a Accepting request 853546 from home:darix:playground
- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.

OBS-URL: https://build.opensuse.org/request/show/853546
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=95
2020-12-07 11:45:06 +00:00
Reinhard Max
bf5e551c5d Accepting request 845302 from home:darix:playground
- Update to 4.0

OBS-URL: https://build.opensuse.org/request/show/845302
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=94
2020-11-02 10:16:11 +00:00
Martin Pluskal
47cdc20a05 Accepting request 844508 from home:kukuk:branches:network:time
- By default we don't write log files but log to journald, so
  only recommend logrotate.

OBS-URL: https://build.opensuse.org/request/show/844508
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=92
2020-10-29 16:39:05 +00:00
Reinhard Max
67288b2a86 - Adjust and rename the sysconfig file, so that it matches the
expectations of chronyd.service (bsc#1173277).
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=90
2020-09-14 12:52:37 +00:00
Martin Pluskal
bba6f7b831 Accepting request 834167 from home:elimat:branches:network:time
- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367)

OBS-URL: https://build.opensuse.org/request/show/834167
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=89
2020-09-14 07:24:37 +00:00
Martin Pluskal
694ca9de6c Accepting request 824482 from home:gmbr3:libexecdir
- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

OBS-URL: https://build.opensuse.org/request/show/824482
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=87
2020-08-10 06:14:10 +00:00
Reinhard Max
606c5dd576 - Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=85
2020-06-04 15:25:07 +00:00
Martin Pluskal
99216d1f98 Accepting request 799317 from home:dimstar:Factory
- Use _systemdutildir instead of _libexecdir/systemd: systemd does
  not actually live below libexecdir.

OBS-URL: https://build.opensuse.org/request/show/799317
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=83
2020-05-01 08:38:23 +00:00
Martin Pluskal
fd8ad00186 Accepting request 774157 from home:marxin:branches:network:time
- Add chrony-test-update-processing-of-packet-log.patch in order
  to fix test-suite failure.

OBS-URL: https://build.opensuse.org/request/show/774157
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=81
2020-02-13 12:49:51 +00:00
Martin Pluskal
a9fcc1aa07 Accepting request 774130 from home:marxin:branches:network:time
- Backport chrony-test-fix-util-unit-test-for-NTP-era-split.patch.

OBS-URL: https://build.opensuse.org/request/show/774130
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=80
2020-02-13 10:00:16 +00:00
Martin Pluskal
965d6fca99 Accepting request 774112 from home:marxin:branches:network:time
- Backport test-fix-util-unit-test-for-NTP-era-split.patch.

OBS-URL: https://build.opensuse.org/request/show/774112
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=79
2020-02-13 09:38:25 +00:00
Martin Pluskal
2bd3254192 Accepting request 773674 from home:marxin:branches:network:time
Use service to get tarball.

OBS-URL: https://build.opensuse.org/request/show/773674
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=78
2020-02-12 11:49:58 +00:00
Martin Pluskal
c3aae44af0 Accepting request 773642 from home:marxin:branches:network:time
- Update clknetsim to version 79ffe44 (fixes boo#1162964).

OBS-URL: https://build.opensuse.org/request/show/773642
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=77
2020-02-12 10:03:46 +00:00
Martin Pluskal
efe9a8a5f6 Accepting request 743099 from home:adkorte
- Change to BuildRequires: rubygem(asciidoctor) and remove conditional
  (is available in SLE12-SP4 and SLE15* as well)
- Fix typo in %install

OBS-URL: https://build.opensuse.org/request/show/743099
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=75
2019-11-04 12:38:19 +00:00
Martin Pluskal
5562449e9f Accepting request 741936 from home:adkorte:branches:openSUSE:Factory
- Fix asciidoc in Tumbleweed
- Revert clknetsim to version 58c5e8b
- Fix incorrect download link for package signature

OBS-URL: https://build.opensuse.org/request/show/741936
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=73
2019-10-23 07:34:11 +00:00
Martin Pluskal
ecbff49e0a - Temporarily disable signature usage as its expired
- Update clknetsim to version ac3c832

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=72
2019-10-21 08:17:13 +00:00
Martin Pluskal
1a07c1babb Accepting request 741213 from home:lemmy04:branches:network:time
- fix chrony-service-helper.patch
- Update to 3.5:
  + Add support for more accurate reading of PHC on Linux 5.0
  + Add support for hardware timestamping on interfaces with read-only timestamping configuration
  + Add support for memory locking and real-time priority on FreeBSD, NetBSD, Solaris
  + Update seccomp filter to work on more architectures
  + Validate refclock driver options
  + Fix bindaddress directive on FreeBSD
  + Fix transposition of hardware RX timestamp on Linux 4.13 and later
  + Fix building on non-glibc systems

OBS-URL: https://build.opensuse.org/request/show/741213
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=71
2019-10-20 18:01:21 +00:00
Reinhard Max
5338b64bf8 - Fix location of helper script in chrony-dnssrv@.service
(bsc#1128846).

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=69
2019-03-21 13:37:00 +00:00
Reinhard Max
2bd0eb7e71 started after name resolution is up (bsc#1129914).
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=68
2019-03-20 15:14:01 +00:00
Reinhard Max
e1a383cdd4 - Fix ordering and dependencies of chronyd.service, so that it is
not being started before the network (bsc#1129730).
- Add chrony-service-ordering.patch

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=67
2019-03-19 15:55:11 +00:00
Martin Pluskal
d0dc0eea07 - Update testsuite to version 58c5e8b
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=65
2019-03-06 14:49:27 +00:00
Reinhard Max
f1d34b8885 typo
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=63
2018-12-20 18:02:56 +00:00
Reinhard Max
ab0c0bf492 - Read runtime servers from /var/run/netconfig/chrony.servers to
fix bsc#1099272.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=62
2018-12-20 17:43:50 +00:00
Martin Pluskal
7da09593f3 - Make sure to generate correct sysconfig file (boo#1117147)
- Update clknetsim to revision 8b48422

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=61
2018-12-14 10:02:44 +00:00
Martin Pluskal
84bd393726 OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=59 2018-12-06 07:43:49 +00:00
Martin Pluskal
9391fe4476 - Remove discrepancies between spec file and chrony-tmpfiles (boo#1115529)
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=58
2018-11-22 09:39:42 +00:00
Ismail Dönmez
02eeb94e00 - Update the keyring and uncomment it in the spec file
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=56
2018-10-18 10:14:29 +00:00
Martin Pluskal
0e6dae305d OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=55 2018-10-18 08:15:41 +00:00
Martin Pluskal
2546c1b260 - Comment out bad signature
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=54
2018-10-18 08:06:23 +00:00
Martin Pluskal
140ff4ce1a OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=53 2018-09-26 12:23:08 +00:00
Martin Pluskal
ea91575fb2 Accepting request 638376 from home:stroeder:branches:network:time
- Added %{_tmpfilesdir}/%{name}.conf
- Updated clknetsim
- Update to version 3.4

OBS-URL: https://build.opensuse.org/request/show/638376
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=52
2018-09-26 11:51:43 +00:00
Martin Pluskal
c022e41858 - Update clknetsim to revision 42b693b
* Drop not needed chrony-fix-open.patch
- Build tests with optflags as well
- Do not run tests on i586
- Enable signd

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=50
2018-08-03 09:17:49 +00:00
Martin Pluskal
029648ee59 - Mention all sources as such in spec file
- Fix formatting of changelog
- Drop reference to change is not present
  * Enhancements:
    + Add burst option to server/pool directive
    + Add stratum and tai options to refclock directive
    + Add support for Nettle crypto library
    + Add workaround for missing kernel receive timestamps on Linux
    + Wait for late hardware transmit timestamps
    + Improve source selection with unreachable sources
    + Improve protection against replay attacks on symmetric mode
    + Allow PHC refclock to use socket in /var/run/chrony
    + Add shutdown command to stop chronyd
    + Simplify format of response to manual list command
    + Improve handling of unknown responses in chronyc
  * Bug fixes:
    + Respond to NTPv1 client requests with zero mode
    + Fix -x option to not require CAP_SYS_TIME under non-root user
    + Fix acquisitionport directive to work with privilege separation
    + Fix handling of socket errors on Linux to avoid high CPU usage
    + Fix chronyc to not get stuck in infinite loop after clock step

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=49
2018-08-02 07:54:01 +00:00
Martin Pluskal
41377f5dbf Accepting request 626940 from home:bmwiedemann:branches:network:time
- Update to version 3.3
ed
  + Enhancements:
    Add burst option to server/pool directive
    Add stratum and tai options to refclock directive
    Add support for Nettle crypto library
    Add workaround for missing kernel receive timestamps on Linux
    Wait for late hardware transmit timestamps
    Improve source selection with unreachable sources
    Improve protection against replay attacks on symmetric mode
    Allow PHC refclock to use socket in /var/run/chrony
    Add shutdown command to stop chronyd
    Simplify format of response to manual list command
    Improve handling of unknown responses in chronyc
  + Bug fixes:
    Respond to NTPv1 client requests with zero mode
    Fix -x option to not require CAP_SYS_TIME under non-root user
    Fix acquisitionport directive to work with privilege separation
    Fix handling of socket errors on Linux to avoid high CPU usage
    Fix chronyc to not get stuck in infinite loop after clock step
  + make package build reproducible (boo#1047218)
    via https://www.mail-archive.com/chrony-dev@chrony.tuxfamily.org/msg01685.html

OBS-URL: https://build.opensuse.org/request/show/626940
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=48
2018-08-02 07:42:46 +00:00
Martin Pluskal
1b3494a786 Accepting request 597617 from home:markkp:branches:network:time
- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"

OBS-URL: https://build.opensuse.org/request/show/597617
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=46
2018-04-18 07:10:17 +00:00
Martin Pluskal
da3cde8e63 Accepting request 591505 from home:kukuk:branches:network:time
- Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/591505
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=44
2018-03-30 09:49:35 +00:00
Martin Pluskal
1f55fc9eb9 Accepting request 587004 from home:kukuk:branches:network:time
- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.

OBS-URL: https://build.opensuse.org/request/show/587004
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=42
2018-03-14 16:40:50 +00:00
Martin Pluskal
527ed2d81e - Enable pps support
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=40
2018-02-09 10:21:23 +00:00
Martin Pluskal
2f8a4c9f68 Accepting request 544752 from home:RBrownSUSE:branches:network:time
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544752
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=38
2017-11-23 15:11:48 +00:00
Martin Pluskal
03c4ecbefc OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=36 2017-10-26 21:26:35 +00:00
Martin Pluskal
92481aa2b7 OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=35 2017-10-26 12:34:40 +00:00
Martin Pluskal
9a79f15b95 - Cleanup spec file:
* Drop pre systemd support
  * Run spec-cleaner

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=34
2017-10-26 11:15:56 +00:00
Martin Pluskal
f16919c0b4 Accepting request 536441 from home:markkp:branches:network:time
- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).

OBS-URL: https://build.opensuse.org/request/show/536441
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=33
2017-10-26 08:03:18 +00:00
Martin Pluskal
de5d64bd86 Accepting request 529908 from home:darix:playground
- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch

OBS-URL: https://build.opensuse.org/request/show/529908
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=31
2017-10-02 08:32:34 +00:00
Martin Pluskal
906029af44 Accepting request 528207 from home:markkp:branches:network:time
- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version

OBS-URL: https://build.opensuse.org/request/show/528207
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=29
2017-09-22 07:52:47 +00:00