RHEL 9.0.0 Alpha bootstrap

The content of this branch was automatically imported from Fedora ELN with the following as its source: https://src.fedoraproject.org/rpms/chrony#38e248d3375971d1b61e17b0daedf7537f98dc97
2020-10-14 22:49:42 +02:00 · 2020-10-14 22:49:42 +02:00 · 8378fd9d39
commit 8378fd9d39
parent acab03bf4c
8 changed files with 772 additions and 0 deletions
--- a/.gitignore
+++ b/.gitignore
@ -0,0 +1,3 @@
+/chrony-4.0.tar.gz
+/chrony-4.0-tar-gz-asc.txt
+/clknetsim-c4ccc2.tar.gz
--- a/chrony-dnssrv@.service
+++ b/chrony-dnssrv@.service
@ -0,0 +1,8 @@
+[Unit]
+Description=DNS SRV lookup of %I for chrony
+After=chronyd.service network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/chrony-helper update-dnssrv-servers %I
--- a/chrony-dnssrv@.timer
+++ b/chrony-dnssrv@.timer
@ -0,0 +1,9 @@
+[Unit]
+Description=Periodic DNS SRV lookup of %I for chrony
+
+[Timer]
+OnActiveSec=0
+OnUnitInactiveSec=1h
+
+[Install]
+WantedBy=timers.target
--- a/chrony-nm-dispatcher-dhcp.patch
+++ b/chrony-nm-dispatcher-dhcp.patch
@ -0,0 +1,64 @@
+From e0c6457fd42252f88ec60d16582b7b6e6fb04f41 Mon Sep 17 00:00:00 2001
+From: Robert Fairley <rfairley@redhat.com>
+Date: Wed, 17 Jun 2020 10:14:19 -0400
+Subject: [PATCH] examples/nm-dispatcher.dhcp: use sysconfig, detect dhclient
+
+Use the PEERNTP and NTPSERVERARGS environment variables from
+/etc/sysconfig/network{-scripts}. Detect a dhclient install to avoid a
+redundant operation with the 11-dhclient NM dispatcher in the
+dhcp-client package.
+---
+ examples/chrony.nm-dispatcher.dhcp | 15 ++++++++++++++-
+ 1 file changed, 14 insertions(+), 1 deletion(-)
+
+diff --git a/examples/chrony.nm-dispatcher.dhcp b/examples/chrony.nm-dispatcher.dhcp
+index 6ea4c37..878e72f 100644
+--- a/examples/chrony.nm-dispatcher.dhcp
+++ b/examples/chrony.nm-dispatcher.dhcp
+@@ -6,6 +6,11 @@
+ 
+ export LC_ALL=C
+ 
+# If a dhclient installation is present, avoid a redundant operation
+# with dhclient which handles NTP server config through its own
+# NetworkManager dispatcher script 11-dhclient.
+[ -e /usr/sbin/dhclient ] && exit 0
+
+ interface=$1
+ action=$2
+ 
+@@ -17,10 +22,18 @@ dhcp_server_file=$server_dir/$interface.sources
+ # DHCP4_NTP_SERVERS is passed from DHCP options by NetworkManager.
+ nm_dhcp_servers=$DHCP4_NTP_SERVERS
+ 
+[ -f /etc/sysconfig/network ] && . /etc/sysconfig/network
+[ -f /etc/sysconfig/network-scripts/ifcfg-"${interface}" ] && \
+    . /etc/sysconfig/network-scripts/ifcfg-"${interface}"
+
+ add_servers_from_dhcp() {
+     rm -f "$dhcp_server_file"
+
+    # Don't add NTP servers if PEERNTP=no specified; return early.
+    [ "$PEERNTP" = "no" ] && return
+
+     for server in $nm_dhcp_servers; do
+-        echo "server $server $default_server_options" >> "$dhcp_server_file"
+        echo "server $server ${NTPSERVERARGS:-$default_server_options}" >> "$dhcp_server_file"
+     done
+     $chronyc reload sources > /dev/null 2>&1 || :
+ }
+-- 
+2.26.2
+
+diff -up chrony-4.0-pre3/examples/chrony.nm-dispatcher.dhcp.nm-dispatcher-dhcp chrony-4.0-pre3/examples/chrony.nm-dispatcher.dhcp
+--- chrony-4.0-pre3/examples/chrony.nm-dispatcher.dhcp.nm-dispatcher-dhcp	2020-08-26 09:27:47.076282468 +0200
+++ chrony-4.0-pre3/examples/chrony.nm-dispatcher.dhcp	2020-08-26 09:27:51.847297974 +0200
+@@ -16,7 +16,7 @@ action=$2
+ 
+ chronyc=/usr/bin/chronyc
+ default_server_options=iburst
+-server_dir=/var/run/chrony-dhcp
+server_dir=/run/chrony-dhcp
+ 
+ dhcp_server_file=$server_dir/$interface.sources
+ # DHCP4_NTP_SERVERS is passed from DHCP options by NetworkManager.
--- a/chrony.dhclient
+++ b/chrony.dhclient
@ -0,0 +1,22 @@
+#!/bin/bash
+
+CHRONY_SOURCEDIR=/run/chrony-dhcp
+SERVERFILE=$CHRONY_SOURCEDIR/$interface.sources
+
+chrony_config() {
+	rm -f "$SERVERFILE"
+	if [ "$PEERNTP" != "no" ]; then
+		mkdir -p $CHRONY_SOURCEDIR
+		for server in $new_ntp_servers; do
+			echo "server $server ${NTPSERVERARGS:-iburst}" >> "$SERVERFILE"
+		done
+		/usr/bin/chronyc reload sources > /dev/null 2>&1 || :
+	fi
+}
+
+chrony_restore() {
+	if [ -f "$SERVERFILE" ]; then
+		rm -f "$SERVERFILE"
+		/usr/bin/chronyc reload sources > /dev/null 2>&1 || :
+	fi
+}
--- a/chrony.spec
+++ b/chrony.spec
@ -0,0 +1,634 @@
+%global _hardened_build 1
+%global clknetsim_ver c4ccc2
+%bcond_without debug
+%bcond_without nts
+
+Name:           chrony
+Version:        4.0
+Release:        1%{?dist}
+Summary:        An NTP client/server
+
+License:        GPLv2
+URL:            https://chrony.tuxfamily.org
+Source0:        https://download.tuxfamily.org/chrony/chrony-%{version}%{?prerelease}.tar.gz
+Source1:        https://download.tuxfamily.org/chrony/chrony-%{version}%{?prerelease}-tar-gz-asc.txt
+Source2:        https://chrony.tuxfamily.org/gpgkey-8B1F4A9ADA73D401E3085A0B5FF06F29BA1E013B.asc
+Source3:        chrony.dhclient
+Source5:        chrony-dnssrv@.service
+Source6:        chrony-dnssrv@.timer
+# simulator for test suite
+Source10:       https://github.com/mlichvar/clknetsim/archive/%{clknetsim_ver}/clknetsim-%{clknetsim_ver}.tar.gz
+%{?gitpatch:Patch0: chrony-%{version}%{?prerelease}-%{gitpatch}.patch.gz}
+
+# add Fedora/RHEL-specific bits to DHCP dispatcher, including
+# deferring to dhclient if installled, and using /etc/sysconfig
+Patch1:         chrony-nm-dispatcher-dhcp.patch
+
+BuildRequires:  libcap-devel libedit-devel nettle-devel pps-tools-devel
+%ifarch %{ix86} x86_64 %{arm} aarch64 mipsel mips64el ppc64 ppc64le s390 s390x
+BuildRequires:  libseccomp-devel
+%endif
+BuildRequires:  gcc gcc-c++ bison systemd gnupg2 net-tools
+%{?with_nts:BuildRequires: gnutls-devel gnutls-utils}
+
+Requires(pre):  shadow-utils
+%{?systemd_requires}
+
+# Old NetworkManager expects the dispatcher scripts in a different place
+Conflicts:      NetworkManager < 1.20
+
+# suggest drivers for hardware reference clocks
+Suggests:       ntp-refclock
+
+%description
+chrony is a versatile implementation of the Network Time Protocol (NTP).
+It can synchronise the system clock with NTP servers, reference clocks
+(e.g. GPS receiver), and manual input using wristwatch and keyboard. It
+can also operate as an NTPv4 (RFC 5905) server and peer to provide a time
+service to other computers in the network.
+
+%if 0%{!?vendorzone:1}
+%global vendorzone %(source /etc/os-release && echo ${ID}.)
+%endif
+
+%prep
+%{gpgverify} --keyring=%{SOURCE2} --signature=%{SOURCE1} --data=%{SOURCE0}
+%setup -q -n %{name}-%{version}%{?prerelease} -a 10
+%{?gitpatch:%patch0 -p1}
+%patch1 -p1 -b .nm-dispatcher-dhcp
+
+%{?gitpatch: echo %{version}-%{gitpatch} > version.txt}
+
+# review changes in packaged configuration files and scripts
+md5sum -c <<-EOF | (! grep -v 'OK$')
+        bc563c1bcf67b2da774bd8c2aef55a06  examples/chrony-wait.service
+        2d01b94bc1a7b7fb70cbee831488d121  examples/chrony.conf.example2
+        96999221eeef476bd49fe97b97503126  examples/chrony.keys.example
+        6a3178c4670de7de393d9365e2793740  examples/chrony.logrotate
+        e051740bb4b21e2e12e6dc63f5195c48  examples/chrony.nm-dispatcher.dhcp
+        8f5a98fcb400a482d355b929d04b5518  examples/chrony.nm-dispatcher.onoffline
+        32c34c995c59fd1c3ad1616d063ae4a0  examples/chronyd.service
+EOF
+
+# don't allow packaging without vendor zone
+test -n "%{vendorzone}"
+
+# use example chrony.conf as the default config with some modifications:
+# - use our vendor zone (2.*pool.ntp.org names include IPv6 addresses)
+# - enable leapsectz to get TAI-UTC offset and leap seconds from tzdata
+# - enable keyfile
+# - use NTP servers from DHCP
+sed -e 's|^\(pool \)\(pool.ntp.org\)|\12.%{vendorzone}\2|' \
+    -e 's|#\(leapsectz\)|\1|' \
+    -e 's|#\(keyfile\)|\1|' \
+    -e 's|^pool.*pool.ntp.org.*|&\n\n# Use NTP servers from DHCP.\nsourcedir /run/chrony-dhcp|' \
+        < examples/chrony.conf.example2 > chrony.conf
+
+touch -r examples/chrony.conf.example2 chrony.conf
+
+# regenerate the file from getdate.y
+rm -f getdate.c
+
+mv clknetsim-%{clknetsim_ver}* test/simulation/clknetsim
+
+%build
+# This package fails its testsuite when LTO is enabled on s390x
+# Disable LTO for now
+%ifarch s390x
+%define _lto_cflags %{nil}
+%endif
+%configure \
+%{?with_debug: --enable-debug} \
+        --enable-ntp-signd \
+        --enable-scfilter \
+%{!?with_nts: --disable-nts} \
+        --chronyrundir=/run/chrony \
+        --docdir=%{_docdir} \
+        --with-ntp-era=$(date -d '1970-01-01 00:00:00+00:00' +'%s') \
+        --with-user=chrony \
+        --with-hwclockfile=%{_sysconfdir}/adjtime \
+        --with-pidfile=/run/chrony/chronyd.pid \
+        --with-sendmail=%{_sbindir}/sendmail
+%make_build
+
+%install
+%make_install
+
+rm -rf $RPM_BUILD_ROOT%{_docdir}
+
+mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{sysconfig,logrotate.d}
+mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/{lib,log}/chrony
+mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d
+mkdir -p $RPM_BUILD_ROOT%{_libexecdir}
+mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib/NetworkManager/dispatcher.d
+mkdir -p $RPM_BUILD_ROOT{%{_unitdir},%{_prefix}/lib/systemd/ntp-units.d}
+
+install -m 644 -p chrony.conf $RPM_BUILD_ROOT%{_sysconfdir}/chrony.conf
+
+install -m 640 -p examples/chrony.keys.example \
+        $RPM_BUILD_ROOT%{_sysconfdir}/chrony.keys
+install -m 755 -p %{SOURCE3} \
+        $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d/chrony.sh
+install -m 644 -p examples/chrony.logrotate \
+        $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/chrony
+
+install -m 644 -p examples/chronyd.service \
+        $RPM_BUILD_ROOT%{_unitdir}/chronyd.service
+install -m 755 -p examples/chrony.nm-dispatcher.onoffline \
+        $RPM_BUILD_ROOT%{_prefix}/lib/NetworkManager/dispatcher.d/20-chrony-onoffline
+install -m 755 -p examples/chrony.nm-dispatcher.dhcp \
+        $RPM_BUILD_ROOT%{_prefix}/lib/NetworkManager/dispatcher.d/20-chrony-dhcp
+install -m 644 -p examples/chrony-wait.service \
+        $RPM_BUILD_ROOT%{_unitdir}/chrony-wait.service
+install -m 644 -p %{SOURCE5} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.service
+install -m 644 -p %{SOURCE6} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.timer
+
+cat > $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/chronyd <<EOF
+# Command-line options for chronyd
+OPTIONS=""
+EOF
+
+touch $RPM_BUILD_ROOT%{_localstatedir}/lib/chrony/{drift,rtc}
+
+echo 'chronyd.service' > \
+        $RPM_BUILD_ROOT%{_prefix}/lib/systemd/ntp-units.d/50-chronyd.list
+
+%check
+# set random seed to get deterministic results
+export CLKNETSIM_RANDOM_SEED=24505
+%make_build -C test/simulation/clknetsim
+make quickcheck
+
+%pre
+getent group chrony > /dev/null || /usr/sbin/groupadd -r chrony
+getent passwd chrony > /dev/null || /usr/sbin/useradd -r -g chrony \
+       -d %{_localstatedir}/lib/chrony -s /sbin/nologin chrony
+:
+
+%post
+# workaround for late reload of unit file (#1614751)
+%{_bindir}/systemctl daemon-reload
+# migrate from chrony-helper to sourcedir directive
+if test -a %{_libexecdir}/chrony-helper; then
+        grep -qi 'sourcedir /run/chrony-dhcp$' %{_sysconfdir}/chrony.conf 2> /dev/null || \
+                echo -e '\n# Use NTP servers from DHCP.\nsourcedir /run/chrony-dhcp' >> \
+                        %{_sysconfdir}/chrony.conf
+        mkdir -p /run/chrony-dhcp
+        for f in %{_localstatedir}/lib/dhclient/chrony.servers.*; do
+                sed 's|.*|server &|' < $f > /run/chrony-dhcp/"${f##*servers.}.sources"
+        done 2> /dev/null
+fi
+%systemd_post chronyd.service chrony-wait.service
+
+%preun
+%systemd_preun chronyd.service chrony-wait.service
+
+%postun
+%systemd_postun_with_restart chronyd.service
+
+%files
+%{!?_licensedir:%global license %%doc}
+%license COPYING
+%doc FAQ NEWS README
+%config(noreplace) %{_sysconfdir}/chrony.conf
+%config(noreplace) %verify(not md5 size mtime) %attr(640,root,chrony) %{_sysconfdir}/chrony.keys
+%config(noreplace) %{_sysconfdir}/logrotate.d/chrony
+%config(noreplace) %{_sysconfdir}/sysconfig/chronyd
+%{_sysconfdir}/dhcp/dhclient.d/chrony.sh
+%{_bindir}/chronyc
+%{_sbindir}/chronyd
+%{_prefix}/lib/NetworkManager
+%{_prefix}/lib/systemd/ntp-units.d/*.list
+%{_unitdir}/chrony*.service
+%{_unitdir}/chrony*.timer
+%{_mandir}/man[158]/%{name}*.[158]*
+%dir %attr(750,chrony,chrony) %{_localstatedir}/lib/chrony
+%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/drift
+%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/rtc
+%dir %attr(750,chrony,chrony) %{_localstatedir}/log/chrony
+
+%changelog
+* Wed Oct 07 2020 Miroslav Lichvar <mlichvar@redhat.com> 4.0-1
+- update to 4.0
+- update directory permissions to follow upstream
+
+* Wed Sep 16 2020 Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.9.pre4
+- update to 4.0-pre4
+
+* Wed Aug 26 2020 Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.8.pre3
+- update to 4.0-pre3
+- switch to sourcedir directive for loading servers from DHCP
+- add NetworkManager dispatcher script to save servers from DHCP when
+  dhclient is not installed (Robert Fairley)
+- drop old migration code from scriptlet
+- move default paths in /var/run to /run
+
+* Mon Aug 10 2020 Jeff Law <law@redhat.com> - 4.0-0.7.pre2
+- Disable LTO on s390x
+
+* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.0-0.6.pre2
+- Second attempt - Rebuilt for
+  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.0-0.5.pre2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Mon Jul 13 2020 Tom Stellard <tstellar@redhat.com> 4.0-0.4.pre2
+- use make macros
+
+* Mon May 04 2020 Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.3.pre2
+- rebuild for new nettle
+
+* Mon Apr 20 2020 Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.2.pre2
+- update to 4.0-pre2
+
+* Tue Mar 17 2020 Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.1.pre1
+- update to 4.0-pre1
+- add net-tools to build requirements for testing
+- add missing dependency on coreutils
+
+* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.5-8
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Mon Jan 20 2020 Miroslav Lichvar <mlichvar@redhat.com> 3.5-7
+- fix testing with new glibc (#1792854)
+
+* Wed Oct 09 2019 Miroslav Lichvar <mlichvar@redhat.com> 3.5-6
+- drop timedatex recommendation
+- verify upstream signatures
+
+* Thu Aug 22 2019 Lubomir Rintel <lkundrak@v3.sk> - 3.5-5
+- Move the NetworkManager dispatcher script out of /etc
+
+* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.5-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Tue Jul 16 2019 Miroslav Lichvar <mlichvar@redhat.com> 3.5-3
+- rebuild for new nettle
+
+* Thu May 23 2019 Miroslav Lichvar <mlichvar@redhat.com> 3.5-2
+- fix shellcheck warnings in helper scripts
+
+* Tue May 14 2019 Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
+- update to 3.5
+
+* Thu May 02 2019 Miroslav Lichvar <mlichvar@redhat.com> 3.5-0.1.pre1
+- update to 3.5-pre1
+
+* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.4-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Wed Sep 19 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.4-1
+- update to 3.4
+
+* Fri Aug 31 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.4-0.1.pre1
+- update to 3.4-pre1
+
+* Mon Aug 13 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-5
+- fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
+- add workaround for late reload of unit file (#1614751)
+
+* Mon Jul 16 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-4
+- add gcc-c++ to build requirements
+
+* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.3-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Mon Jun 18 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
+- move pidfile to /var/run/chrony to allow chronyd to remove it on exit
+- avoid blocking in getrandom system call
+
+* Wed Apr 04 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-1
+- update to 3.3
+- enable keyfile by default again
+
+* Thu Mar 15 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-0.1.pre1
+- update to 3.3-pre1
+- switch to nettle for crypto hashing
+- add gcc to build requirements
+
+* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Tue Jan 30 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-3
+- use systemd macro for scriptlet dependencies
+
+* Thu Jan 25 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
+- fix chronyc getting stuck in infinite loop after clock step
+- don't allow packaging without vendor zone
+- suggest ntp-refclock
+- remove obsolete dependency
+- update description
+
+* Fri Sep 15 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
+- update to 3.2
+- get TAI-UTC offset and leap seconds from tzdata by default
+
+* Tue Aug 29 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.4.pre2
+- update to 3.2-pre2
+
+* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.3.pre1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
+
+* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.2.pre1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Tue Jul 25 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.1.pre1
+- update to 3.2-pre1
+
+* Thu May 04 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-5
+- check PEERNTP variable before loading existing dhclient files
+
+* Thu Apr 20 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-4
+- use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599)
+- fix seccomp filter for new glibc once again
+- don't drop PHC samples with zero delay
+
+* Mon Mar 13 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
+- fix seccomp filter for new glibc
+
+* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Tue Jan 31 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
+- update to 3.1
+- enable seccomp support on more archs
+- package chronyd sysconfig file
+
+* Tue Jan 24 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-0.1.pre1
+- update to 3.1-pre1
+
+* Mon Jan 16 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-1
+- update to 3.0
+
+* Fri Jan 06 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.3.pre3
+- update to 3.0-pre3
+
+* Thu Dec 15 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.2.pre2
+- update to 3.0-pre2
+- enable support for MS-SNTP authentication in Samba
+
+* Fri Dec 09 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.1.pre1
+- update to 3.0-pre1
+
+* Mon Nov 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4.1-1
+- update to 2.4.1
+
+* Thu Oct 27 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-4
+- avoid AVC denials in chrony-wait service (#1350815)
+
+* Tue Sep 13 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-3
+- fix chrony-helper to escape names of systemd units (#1374767)
+
+* Tue Jun 28 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-2
+- fix chrony-helper to exit with correct status (#1350531)
+
+* Tue Jun 07 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-1
+- update to 2.4
+- don't require info
+
+* Mon May 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-0.1.pre1
+- update to 2.4-pre1
+- extend chrony-helper to allow management of static sources (#1331655)
+
+* Tue Feb 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-1
+- update to 2.3
+
+* Tue Feb 02 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-0.1.pre1
+- update to 2.3-pre1
+
+* Thu Jan 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.2.1-1
+- update to 2.2.1 (CVE-2016-1567)
+- set NTP era split explicitly
+
+* Mon Oct 19 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-1
+- update to 2.2
+
+* Fri Oct 09 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.2.pre2
+- update to 2.2-pre2
+- require libseccomp-devel on supported archs only
+
+* Fri Oct 02 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.1.pre1
+- update to 2.2-pre1
+- enable seccomp support
+- use weak dependency for timedatex on Fedora 24 and later
+
+* Tue Jun 23 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1.1-1
+- update to 2.1.1
+- add -n option to gzip command to not save timestamp
+
+* Mon Jun 22 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
+- update to 2.1
+- extend chrony-helper to allow using servers from DNS SRV records (#1234406)
+- set random seed in testing to get deterministic results
+
+* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1-0.2.pre1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Wed Jun 10 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-0.1.pre1
+- update to 2.1-pre1
+
+* Mon Apr 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-1
+- update to 2.0
+
+* Wed Apr 08 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.3.pre2
+- update to 2.0-pre2 (CVE-2015-1853 CVE-2015-1821 CVE-2015-1822)
+
+* Thu Jan 29 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.2.pre1
+- require timedatex (#1136905)
+
+* Tue Jan 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.1.pre1
+- update to 2.0-pre1
+
+* Thu Sep 11 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-1
+- update to 1.31
+- add servers from DHCP with iburst option by default
+- use upstream configuration files and scripts
+- don't package configuration examples
+- compress chrony.txt
+
+* Thu Aug 21 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-0.1.pre1
+- update to 1.31-pre1
+- use license macro if available
+
+* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.30-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
+
+* Fri Aug 15 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-2
+- reconnect client sockets (#1124059)
+
+* Tue Jul 01 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-1
+- update to 1.30
+- enable debug messages
+
+* Mon Jun 09 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-0.1.pre1
+- update to 1.30-pre1
+- execute test suite
+- avoid calling systemctl in helper script
+- call chronyc directly from logrotate and NM dispatcher scripts
+- add conflict with systemd-timesyncd service
+
+* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.29.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
+
+* Fri Jan 31 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
+- update to 1.29.1 (CVE-2014-0021)
+- replace hardening build flags with _hardened_build
+
+* Tue Nov 19 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-3
+- let systemd remove pid file (#974305)
+
+* Thu Oct 03 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-2
+- add ordering dependency to not start chronyd before ntpd stopped
+
+* Thu Aug 08 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-1
+- update to 1.29 (CVE-2012-4502, CVE-2012-4503)
+
+* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.28-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
+
+* Wed Jul 17 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-1
+- update to 1.28
+- change default makestep limit to 10 seconds
+
+* Mon Jun 24 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.2.pre1
+- buildrequire systemd-units
+
+* Fri Jun 21 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.1.pre1
+- update to 1.28-pre1
+- listen for commands only on localhost by default
+
+* Thu May 09 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-3
+- disable chrony-wait service by default (#961047)
+- drop old systemd scriptlets
+- don't own ntp-units.d directory
+- move files from /lib
+- remove unncessary dependency on syslog target
+
+* Tue Mar 12 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-2
+- suppress error messages from tr when generating key (#907914)
+- fix delta calculation with extreme frequency offsets
+
+* Fri Feb 01 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-1
+- update to 1.27
+- start chrony-wait service with chronyd
+- start chronyd service after sntp
+- remove obsolete macros
+
+* Tue Sep 11 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844
+- update to git snapshot 1ca844
+- update systemd integration (#846303)
+- use systemd macros if available (#850151)
+- use correct vendor pool.ntp.org zone on RHEL (#845981)
+- don't log output of chrony-wait service
+
+* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.27-0.4.pre1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
+
+* Fri Apr 27 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.3.pre1
+- update service file for systemd-timedated-ntp target (#816493)
+
+* Fri Apr 06 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.2.pre1
+  use systemctl is-active instead of status in chrony-helper (#794771)
+
+* Tue Feb 28 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.1.pre1
+- update to 1.27-pre1
+- generate SHA1 command key instead of MD5
+
+* Wed Feb 15 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-6.20110831gitb088b7
+- remove old servers on DHCP update (#787042)
+
+* Fri Feb 10 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-5.20110831gitb088b7
+- improve chrony-helper to keep track of servers added from DHCP (#787042)
+- fix dhclient script to always return with zero exit code (#767859)
+
+* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.26-4.20110831gitb088b7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
+
+* Tue Sep 06 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-3.20110831gitb088b7
+- update to git snapshot 20110831gitb088b7
+- on first start generate password with 16 chars
+- change systemd service type to forking
+- add forced-command to chrony-helper (#735821)
+
+* Mon Aug 15 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-2
+- fix iburst with very high jitters and long delays
+- use timepps header from pps-tools-devel
+
+* Wed Jul 13 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-1
+- update to 1.26
+- read options from sysconfig file if it exists
+
+* Fri Jun 24 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-0.1.pre1
+- update to 1.26-pre1
+- fix service name in %%triggerun
+- drop SysV init script
+- add chrony-wait service
+
+* Fri May 06 2011 Bill Nottingham <notting@redhat.com> 1.25-2
+- fix systemd scriptlets for the upgrade case
+
+* Wed May 04 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-1
+- update to 1.25
+
+* Wed Apr 20 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.3.pre2
+- update to 1.25-pre2
+- link with -Wl,-z,relro,-z,now options
+
+* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.25-0.2.pre1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
+
+* Tue Feb 01 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.1.pre1
+- update to 1.25-pre1
+- use iburst, four pool servers, rtcsync, stratumweight in default config
+- add systemd support
+- drop sysconfig file 
+- suppress install-info errors
+
+* Thu Apr 29 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
+- update to 20100428git73d775
+- replace initstepslew directive with makestep in default config
+- add NetworkManager dispatcher script
+- add dhclient script
+- retry server/peer name resolution at least once to workaround
+  NetworkManager race condition on boot
+- don't verify chrony.keys
+
+* Fri Mar 12 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-3.20100302git5fb555
+- update to snapshot 20100302git5fb555
+- compile with PPS API support
+
+* Thu Feb 04 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-1
+- update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294)
+- modify default config
+  - step clock on start if it is off by more than 100 seconds
+  - disable client log
+- build with -fPIE on sparc
+
+* Tue Dec 15 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.24-0.1.pre1
+- update to 1.24-pre1
+
+* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-7.20081106gitbe42b4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
+
+* Fri Jul 17 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-6.20081106gitbe42b4
+- switch to editline
+- support arbitrary chronyc commands in init script
+
+* Mon Jun 08 2009 Dan Horak <dan[at]danny.cz> 1.23-5.20081106gitbe42b4
+- add patch with support for s390/s390x
+
+* Mon Mar 09 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-4.20081106gitbe42b4
+- fix building with broken libcap header (#483548)
+
+* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-3.20081106gitbe42b4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
+* Wed Nov 19 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-2.20081106gitbe42b4
+- fix info uninstall
+- generate random command key in init script
+- support cyclelogs, online, offline commands in init script
+- add logrotate script
+
+* Tue Nov 11 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-1.20081106gitbe42b4
+- initial release
--- a/gpgkey-8B1F4A9ADA73D401E3085A0B5FF06F29BA1E013B.asc
+++ b/gpgkey-8B1F4A9ADA73D401E3085A0B5FF06F29BA1E013B.asc
@ -0,0 +1,29 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=4XBU
+-----END PGP PUBLIC KEY BLOCK-----
--- a/3
+++ b/3
@ -0,0 +1,3 @@
+SHA512 (chrony-4.0.tar.gz) = a1c11a386c43f495910f7f2e9b5fbb1652c3631471d182b9b8203dfef98611d11535ad547a879856551263aed0ae2e30e4135b8ed89553684706166bc1c725c9
+SHA512 (chrony-4.0-tar-gz-asc.txt) = c3156d91f4fdb6f9e2fdbc83b1399afb0ecdfa9b7bc92648c5bce477c3f0f921d2a13aa21ac6c281f18b008c60f08e3db6d82b642b646f064aea1dbe19295c4c
+SHA512 (clknetsim-c4ccc2.tar.gz) = d2f71b2036e33ee92cd3590079dac04bc57bf2e9909f11e9ba66cd61c9946e92d2ebbdfd03c359cf39c6c8c07b28557d35fee3cb57eec75f5b1201858aa1d701