diff --git a/SPECS/chrony.spec b/SPECS/chrony.spec new file mode 100644 index 0000000..ee7d947 --- /dev/null +++ b/SPECS/chrony.spec @@ -0,0 +1,553 @@ +%global _hardened_build 1 +%global clknetsim_ver 3f5ef9 +%global ntp2chrony_ver 2a0512 +%bcond_without debug + +Name: chrony +Version: 3.5 +Release: 1%{?dist} +Summary: An NTP client/server + +Group: System Environment/Daemons +License: GPLv2 +URL: https://chrony.tuxfamily.org +Source0: https://download.tuxfamily.org/chrony/chrony-%{version}%{?prerelease}.tar.gz +Source1: chrony.dhclient +Source2: chrony.helper +Source3: chrony-dnssrv@.service +Source4: chrony-dnssrv@.timer +# simulator for test suite +Source10: https://github.com/mlichvar/clknetsim/archive/%{clknetsim_ver}/clknetsim-%{clknetsim_ver}.tar.gz +# script for converting ntp configuration to chrony +Source11: https://github.com/mlichvar/ntp2chrony/raw/%{ntp2chrony_ver}/ntp2chrony/ntp2chrony.py +%{?gitpatch:Patch0: chrony-%{version}%{?prerelease}-%{gitpatch}.patch.gz} + +# add NTP servers from DHCP when starting service +Patch2: chrony-service-helper.patch + +BuildRequires: libcap-devel libedit-devel nettle-devel pps-tools-devel +%ifarch %{ix86} x86_64 %{arm} aarch64 mipsel mips64el ppc64 ppc64le s390 s390x +BuildRequires: libseccomp-devel +%endif +BuildRequires: gcc bison systemd +BuildRequires: kernel-headers > 4.18.0-87 + +Requires(pre): shadow-utils +%{?systemd_requires} + +# install timedated implementation that can control chronyd service +Recommends: timedatex + +# suggest drivers for hardware reference clocks +Suggests: ntp-refclock + +%description +chrony is a versatile implementation of the Network Time Protocol (NTP). +It can synchronise the system clock with NTP servers, reference clocks +(e.g. GPS receiver), and manual input using wristwatch and keyboard. It +can also operate as an NTPv4 (RFC 5905) server and peer to provide a time +service to other computers in the network. + +%if 0%{!?vendorzone:1} +%global vendorzone %(source /etc/os-release && echo ${ID}.) +%endif + +%prep +%setup -q -n %{name}-%{version}%{?prerelease} -a 10 +%{?gitpatch:%patch0 -p1} +%patch2 -p1 -b .service-helper + +%{?gitpatch: echo %{version}-%{gitpatch} > version.txt} + +# review changes in packaged configuration files and scripts +md5sum -c <<-EOF | (! grep -v 'OK$') + 47ad7eccc410b981d2f2101cf5682616 examples/chrony-wait.service + e473a9fab7fe200cacce3dca8b66290b examples/chrony.conf.example2 + 96999221eeef476bd49fe97b97503126 examples/chrony.keys.example + 6a3178c4670de7de393d9365e2793740 examples/chrony.logrotate + 8748a663f0b1943ea491858f414a6b26 examples/chrony.nm-dispatcher + b23bcc3bd78e195ca2849459e459f3ed examples/chronyd.service +EOF + +# don't allow packaging without vendor zone +test -n "%{vendorzone}" + +# use example chrony.conf as the default config with some modifications: +# - use our vendor zone (2.*pool.ntp.org names include IPv6 addresses) +# - enable leapsectz to get TAI-UTC offset and leap seconds from tzdata +# - enable keyfile +sed -e 's|^\(pool \)\(pool.ntp.org\)|\12.%{vendorzone}\2|' \ + -e 's|#\(leapsectz\)|\1|' \ + -e 's|#\(keyfile\)|\1|' \ + < examples/chrony.conf.example2 > chrony.conf + +touch -r examples/chrony.conf.example2 chrony.conf + +# regenerate the file from getdate.y +rm -f getdate.c + +mv clknetsim-%{clknetsim_ver}* test/simulation/clknetsim + +install -m 644 -p %{SOURCE11} ntp2chrony.py + +%build +%configure \ +%{?with_debug: --enable-debug} \ + --enable-ntp-signd \ + --enable-scfilter \ + --docdir=%{_docdir} \ + --with-ntp-era=$(date -d '1970-01-01 00:00:00+00:00' +'%s') \ + --with-user=chrony \ + --with-hwclockfile=%{_sysconfdir}/adjtime \ + --with-sendmail=%{_sbindir}/sendmail +make %{?_smp_mflags} + +%install +make install DESTDIR=$RPM_BUILD_ROOT + +rm -rf $RPM_BUILD_ROOT%{_docdir} + +mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{sysconfig,logrotate.d} +mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/{lib,log}/chrony +mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d +mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d +mkdir -p $RPM_BUILD_ROOT%{_libexecdir} +mkdir -p $RPM_BUILD_ROOT{%{_unitdir},%{_prefix}/lib/systemd/ntp-units.d} + +install -m 644 -p chrony.conf $RPM_BUILD_ROOT%{_sysconfdir}/chrony.conf + +install -m 640 -p examples/chrony.keys.example \ + $RPM_BUILD_ROOT%{_sysconfdir}/chrony.keys +install -m 755 -p examples/chrony.nm-dispatcher \ + $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony +install -m 755 -p %{SOURCE1} \ + $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d/chrony.sh +install -m 644 -p examples/chrony.logrotate \ + $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/chrony + +install -m 644 -p examples/chronyd.service \ + $RPM_BUILD_ROOT%{_unitdir}/chronyd.service +install -m 644 -p examples/chrony-wait.service \ + $RPM_BUILD_ROOT%{_unitdir}/chrony-wait.service +install -m 644 -p %{SOURCE3} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.service +install -m 644 -p %{SOURCE4} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.timer + +install -m 755 -p %{SOURCE2} $RPM_BUILD_ROOT%{_libexecdir}/chrony-helper + +cat > $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/chronyd < \ + $RPM_BUILD_ROOT%{_prefix}/lib/systemd/ntp-units.d/50-chronyd.list + +%check +# set random seed to get deterministic results +export CLKNETSIM_RANDOM_SEED=24502 +make %{?_smp_mflags} -C test/simulation/clknetsim +make quickcheck + +%pre +getent group chrony > /dev/null || /usr/sbin/groupadd -r chrony +getent passwd chrony > /dev/null || /usr/sbin/useradd -r -g chrony \ + -d %{_localstatedir}/lib/chrony -s /sbin/nologin chrony +: + +%post +# fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2 +if grep -q 'PIDFile=%{_localstatedir}/run/chronyd.pid' \ + %{_sysconfdir}/systemd/system/chronyd.service 2> /dev/null && \ + ! grep -qi '^[ '$'\t'']*pidfile' %{_sysconfdir}/chrony.conf 2> /dev/null +then + sed -i '/PIDFile=/s|/run/|/run/chrony/|' \ + %{_sysconfdir}/systemd/system/chronyd.service +fi +# workaround for late reload of unit file (#1614751) +%{_bindir}/systemctl daemon-reload +%systemd_post chronyd.service chrony-wait.service + +%preun +%systemd_preun chronyd.service chrony-wait.service + +%postun +%systemd_postun_with_restart chronyd.service + +%files +%{!?_licensedir:%global license %%doc} +%license COPYING +%doc FAQ NEWS README ntp2chrony.py +%config(noreplace) %{_sysconfdir}/chrony.conf +%config(noreplace) %verify(not md5 size mtime) %attr(640,root,chrony) %{_sysconfdir}/chrony.keys +%config(noreplace) %{_sysconfdir}/logrotate.d/chrony +%config(noreplace) %{_sysconfdir}/sysconfig/chronyd +%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony +%{_sysconfdir}/dhcp/dhclient.d/chrony.sh +%{_bindir}/chronyc +%{_sbindir}/chronyd +%{_libexecdir}/chrony-helper +%{_prefix}/lib/systemd/ntp-units.d/*.list +%{_unitdir}/chrony*.service +%{_unitdir}/chrony*.timer +%{_mandir}/man[158]/%{name}*.[158]* +%dir %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony +%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/drift +%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/rtc +%dir %attr(-,chrony,chrony) %{_localstatedir}/log/chrony + +%changelog +* Tue May 21 2019 Miroslav Lichvar 3.5-1 +- update to 3.5 (#1685469 #1677218) +- fix shellcheck warnings in helper scripts (#1711948) +- update ntp2chrony script + +* Mon Aug 13 2018 Miroslav Lichvar 3.3-3 +- fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2 + (#1614800) +- add workaround for late reload of unit file (#1614751) + +* Mon Jun 18 2018 Miroslav Lichvar 3.3-2 +- move pidfile to /var/run/chrony to allow chronyd to remove it on exit + (#1584585) +- avoid blocking in getrandom system call (#1592425) + +* Thu Apr 05 2018 Miroslav Lichvar 3.3-1 +- update to 3.3 +- enable keyfile by default again +- update ntp2chrony script + +* Mon Mar 19 2018 Miroslav Lichvar 3.3-0.2.pre1 +- include ntp2chrony script in documentation (#1530987) + +* Thu Mar 15 2018 Miroslav Lichvar 3.3-0.1.pre1 +- update to 3.3-pre1 +- switch to nettle for crypto hashing +- add gcc to build requirements + +* Wed Feb 07 2018 Fedora Release Engineering - 3.2-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Tue Jan 30 2018 Miroslav Lichvar 3.2-3 +- use systemd macro for scriptlet dependencies + +* Thu Jan 25 2018 Miroslav Lichvar 3.2-2 +- fix chronyc getting stuck in infinite loop after clock step +- don't allow packaging without vendor zone +- suggest ntp-refclock +- remove obsolete dependency +- update description + +* Fri Sep 15 2017 Miroslav Lichvar 3.2-1 +- update to 3.2 +- get TAI-UTC offset and leap seconds from tzdata by default + +* Tue Aug 29 2017 Miroslav Lichvar 3.2-0.4.pre2 +- update to 3.2-pre2 + +* Wed Aug 02 2017 Fedora Release Engineering - 3.2-0.3.pre1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 3.2-0.2.pre1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Tue Jul 25 2017 Miroslav Lichvar 3.2-0.1.pre1 +- update to 3.2-pre1 + +* Thu May 04 2017 Miroslav Lichvar 3.1-5 +- check PEERNTP variable before loading existing dhclient files + +* Thu Apr 20 2017 Miroslav Lichvar 3.1-4 +- use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599) +- fix seccomp filter for new glibc once again +- don't drop PHC samples with zero delay + +* Mon Mar 13 2017 Miroslav Lichvar 3.1-3 +- fix seccomp filter for new glibc + +* Fri Feb 10 2017 Fedora Release Engineering - 3.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Tue Jan 31 2017 Miroslav Lichvar 3.1-1 +- update to 3.1 +- enable seccomp support on more archs +- package chronyd sysconfig file + +* Tue Jan 24 2017 Miroslav Lichvar 3.1-0.1.pre1 +- update to 3.1-pre1 + +* Mon Jan 16 2017 Miroslav Lichvar 3.0-1 +- update to 3.0 + +* Fri Jan 06 2017 Miroslav Lichvar 3.0-0.3.pre3 +- update to 3.0-pre3 + +* Thu Dec 15 2016 Miroslav Lichvar 3.0-0.2.pre2 +- update to 3.0-pre2 +- enable support for MS-SNTP authentication in Samba + +* Fri Dec 09 2016 Miroslav Lichvar 3.0-0.1.pre1 +- update to 3.0-pre1 + +* Mon Nov 21 2016 Miroslav Lichvar 2.4.1-1 +- update to 2.4.1 + +* Thu Oct 27 2016 Miroslav Lichvar 2.4-4 +- avoid AVC denials in chrony-wait service (#1350815) + +* Tue Sep 13 2016 Miroslav Lichvar 2.4-3 +- fix chrony-helper to escape names of systemd units (#1374767) + +* Tue Jun 28 2016 Miroslav Lichvar 2.4-2 +- fix chrony-helper to exit with correct status (#1350531) + +* Tue Jun 07 2016 Miroslav Lichvar 2.4-1 +- update to 2.4 +- don't require info + +* Mon May 16 2016 Miroslav Lichvar 2.4-0.1.pre1 +- update to 2.4-pre1 +- extend chrony-helper to allow management of static sources (#1331655) + +* Tue Feb 16 2016 Miroslav Lichvar 2.3-1 +- update to 2.3 + +* Tue Feb 02 2016 Miroslav Lichvar 2.3-0.1.pre1 +- update to 2.3-pre1 + +* Thu Jan 21 2016 Miroslav Lichvar 2.2.1-1 +- update to 2.2.1 (CVE-2016-1567) +- set NTP era split explicitly + +* Mon Oct 19 2015 Miroslav Lichvar 2.2-1 +- update to 2.2 + +* Fri Oct 09 2015 Miroslav Lichvar 2.2-0.2.pre2 +- update to 2.2-pre2 +- require libseccomp-devel on supported archs only + +* Fri Oct 02 2015 Miroslav Lichvar 2.2-0.1.pre1 +- update to 2.2-pre1 +- enable seccomp support +- use weak dependency for timedatex on Fedora 24 and later + +* Tue Jun 23 2015 Miroslav Lichvar 2.1.1-1 +- update to 2.1.1 +- add -n option to gzip command to not save timestamp + +* Mon Jun 22 2015 Miroslav Lichvar 2.1-1 +- update to 2.1 +- extend chrony-helper to allow using servers from DNS SRV records (#1234406) +- set random seed in testing to get deterministic results + +* Wed Jun 17 2015 Fedora Release Engineering - 2.1-0.2.pre1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Wed Jun 10 2015 Miroslav Lichvar 2.1-0.1.pre1 +- update to 2.1-pre1 + +* Mon Apr 27 2015 Miroslav Lichvar 2.0-1 +- update to 2.0 + +* Wed Apr 08 2015 Miroslav Lichvar 2.0-0.3.pre2 +- update to 2.0-pre2 (CVE-2015-1853 CVE-2015-1821 CVE-2015-1822) + +* Thu Jan 29 2015 Miroslav Lichvar 2.0-0.2.pre1 +- require timedatex (#1136905) + +* Tue Jan 27 2015 Miroslav Lichvar 2.0-0.1.pre1 +- update to 2.0-pre1 + +* Thu Sep 11 2014 Miroslav Lichvar 1.31-1 +- update to 1.31 +- add servers from DHCP with iburst option by default +- use upstream configuration files and scripts +- don't package configuration examples +- compress chrony.txt + +* Thu Aug 21 2014 Miroslav Lichvar 1.31-0.1.pre1 +- update to 1.31-pre1 +- use license macro if available + +* Sat Aug 16 2014 Fedora Release Engineering - 1.30-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Fri Aug 15 2014 Miroslav Lichvar 1.30-2 +- reconnect client sockets (#1124059) + +* Tue Jul 01 2014 Miroslav Lichvar 1.30-1 +- update to 1.30 +- enable debug messages + +* Mon Jun 09 2014 Miroslav Lichvar 1.30-0.1.pre1 +- update to 1.30-pre1 +- execute test suite +- avoid calling systemctl in helper script +- call chronyc directly from logrotate and NM dispatcher scripts +- add conflict with systemd-timesyncd service + +* Sat Jun 07 2014 Fedora Release Engineering - 1.29.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Fri Jan 31 2014 Miroslav Lichvar 1.29.1-1 +- update to 1.29.1 (CVE-2014-0021) +- replace hardening build flags with _hardened_build + +* Tue Nov 19 2013 Miroslav Lichvar 1.29-3 +- let systemd remove pid file (#974305) + +* Thu Oct 03 2013 Miroslav Lichvar 1.29-2 +- add ordering dependency to not start chronyd before ntpd stopped + +* Thu Aug 08 2013 Miroslav Lichvar 1.29-1 +- update to 1.29 (CVE-2012-4502, CVE-2012-4503) + +* Sat Aug 03 2013 Fedora Release Engineering - 1.28-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Wed Jul 17 2013 Miroslav Lichvar 1.28-1 +- update to 1.28 +- change default makestep limit to 10 seconds + +* Mon Jun 24 2013 Miroslav Lichvar 1.28-0.2.pre1 +- buildrequire systemd-units + +* Fri Jun 21 2013 Miroslav Lichvar 1.28-0.1.pre1 +- update to 1.28-pre1 +- listen for commands only on localhost by default + +* Thu May 09 2013 Miroslav Lichvar 1.27-3 +- disable chrony-wait service by default (#961047) +- drop old systemd scriptlets +- don't own ntp-units.d directory +- move files from /lib +- remove unncessary dependency on syslog target + +* Tue Mar 12 2013 Miroslav Lichvar 1.27-2 +- suppress error messages from tr when generating key (#907914) +- fix delta calculation with extreme frequency offsets + +* Fri Feb 01 2013 Miroslav Lichvar 1.27-1 +- update to 1.27 +- start chrony-wait service with chronyd +- start chronyd service after sntp +- remove obsolete macros + +* Tue Sep 11 2012 Miroslav Lichvar 1.27-0.5.pre1.git1ca844 +- update to git snapshot 1ca844 +- update systemd integration (#846303) +- use systemd macros if available (#850151) +- use correct vendor pool.ntp.org zone on RHEL (#845981) +- don't log output of chrony-wait service + +* Wed Jul 18 2012 Fedora Release Engineering - 1.27-0.4.pre1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Apr 27 2012 Miroslav Lichvar 1.27-0.3.pre1 +- update service file for systemd-timedated-ntp target (#816493) + +* Fri Apr 06 2012 Miroslav Lichvar 1.27-0.2.pre1 + use systemctl is-active instead of status in chrony-helper (#794771) + +* Tue Feb 28 2012 Miroslav Lichvar 1.27-0.1.pre1 +- update to 1.27-pre1 +- generate SHA1 command key instead of MD5 + +* Wed Feb 15 2012 Miroslav Lichvar 1.26-6.20110831gitb088b7 +- remove old servers on DHCP update (#787042) + +* Fri Feb 10 2012 Miroslav Lichvar 1.26-5.20110831gitb088b7 +- improve chrony-helper to keep track of servers added from DHCP (#787042) +- fix dhclient script to always return with zero exit code (#767859) + +* Thu Jan 12 2012 Fedora Release Engineering - 1.26-4.20110831gitb088b7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Tue Sep 06 2011 Miroslav Lichvar 1.26-3.20110831gitb088b7 +- update to git snapshot 20110831gitb088b7 +- on first start generate password with 16 chars +- change systemd service type to forking +- add forced-command to chrony-helper (#735821) + +* Mon Aug 15 2011 Miroslav Lichvar 1.26-2 +- fix iburst with very high jitters and long delays +- use timepps header from pps-tools-devel + +* Wed Jul 13 2011 Miroslav Lichvar 1.26-1 +- update to 1.26 +- read options from sysconfig file if it exists + +* Fri Jun 24 2011 Miroslav Lichvar 1.26-0.1.pre1 +- update to 1.26-pre1 +- fix service name in %%triggerun +- drop SysV init script +- add chrony-wait service + +* Fri May 06 2011 Bill Nottingham 1.25-2 +- fix systemd scriptlets for the upgrade case + +* Wed May 04 2011 Miroslav Lichvar 1.25-1 +- update to 1.25 + +* Wed Apr 20 2011 Miroslav Lichvar 1.25-0.3.pre2 +- update to 1.25-pre2 +- link with -Wl,-z,relro,-z,now options + +* Tue Feb 08 2011 Fedora Release Engineering - 1.25-0.2.pre1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Tue Feb 01 2011 Miroslav Lichvar 1.25-0.1.pre1 +- update to 1.25-pre1 +- use iburst, four pool servers, rtcsync, stratumweight in default config +- add systemd support +- drop sysconfig file +- suppress install-info errors + +* Thu Apr 29 2010 Miroslav Lichvar 1.24-4.20100428git73d775 +- update to 20100428git73d775 +- replace initstepslew directive with makestep in default config +- add NetworkManager dispatcher script +- add dhclient script +- retry server/peer name resolution at least once to workaround + NetworkManager race condition on boot +- don't verify chrony.keys + +* Fri Mar 12 2010 Miroslav Lichvar 1.24-3.20100302git5fb555 +- update to snapshot 20100302git5fb555 +- compile with PPS API support + +* Thu Feb 04 2010 Miroslav Lichvar 1.24-1 +- update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294) +- modify default config + - step clock on start if it is off by more than 100 seconds + - disable client log +- build with -fPIE on sparc + +* Tue Dec 15 2009 Miroslav Lichvar 1.24-0.1.pre1 +- update to 1.24-pre1 + +* Fri Jul 24 2009 Fedora Release Engineering - 1.23-7.20081106gitbe42b4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Fri Jul 17 2009 Miroslav Lichvar 1.23-6.20081106gitbe42b4 +- switch to editline +- support arbitrary chronyc commands in init script + +* Mon Jun 08 2009 Dan Horak 1.23-5.20081106gitbe42b4 +- add patch with support for s390/s390x + +* Mon Mar 09 2009 Miroslav Lichvar 1.23-4.20081106gitbe42b4 +- fix building with broken libcap header (#483548) + +* Mon Feb 23 2009 Fedora Release Engineering - 1.23-3.20081106gitbe42b4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Wed Nov 19 2008 Miroslav Lichvar 1.23-2.20081106gitbe42b4 +- fix info uninstall +- generate random command key in init script +- support cyclelogs, online, offline commands in init script +- add logrotate script + +* Tue Nov 11 2008 Miroslav Lichvar 1.23-1.20081106gitbe42b4 +- initial release