Commit Graph

316 Commits

Author SHA1 Message Date
Miroslav Lichvar
90ef1216ea fix hardened chronyd service to allow writing log files 2021-11-16 16:46:28 +01:00
Miroslav Lichvar
89973469bd 4.1-4 2021-09-29 16:22:20 +02:00
Miroslav Lichvar
cdae473dfc harden chronyd and chrony-wait services 2021-09-29 16:20:36 +02:00
Miroslav Lichvar
49d1a1fef3 4.1-3 2021-08-09 15:54:11 +02:00
Miroslav Lichvar
e7d17261da update seccomp filter for new glibc 2021-08-09 15:52:20 +02:00
Miroslav Lichvar
eeb5738583 remove unnecessary build requirement 2021-08-05 09:26:45 +02:00
Miroslav Lichvar
db7c1c4450 update out-of-date comment about NM DHCP script 2021-08-05 09:26:45 +02:00
Fedora Release Engineering
41461a14e3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-21 19:26:44 +00:00
Miroslav Lichvar
f1723893df 4.1-1 2021-05-13 16:55:54 +02:00
Miroslav Lichvar
eeffcafda9 enable seccomp filter by default
Add -F 2 to default /etc/sysconfig/chronyd to enable a filter blocking a
small number of specific system calls. The filter is incompatible with
the mailonchange directive.
2021-05-13 16:55:34 +02:00
Miroslav Lichvar
c6a8172473 add bcond for seccomp 2021-05-13 16:35:50 +02:00
Miroslav Lichvar
7065ea6b2d update to 4.1 2021-05-13 16:03:51 +02:00
Miroslav Lichvar
3353132ff7 4.1-0.1.pre1 2021-04-22 14:55:09 +02:00
Miroslav Lichvar
f9f7cf22a9 update to 4.1-pre1 2021-04-22 14:52:16 +02:00
Miroslav Lichvar
ba7e409249 rework NM-dispatcher/dhclient detection
The packaged NM dispatcher and dhclient scripts provide the same
functionality. Only one should be active depending on the system
configuration.

Instead of guessing in the NM dispatcher script whether the dhclient
script is executed, check in the dhclient script whether it is called
from a NM dispatcher script (the 11-dhclient script included in the
dhcp-client package).

This is simpler and it removes dependency on the 11-dhclient script.
2021-04-22 13:21:39 +02:00
Miroslav Lichvar
c3c3f0c2dd enable LTO on s390x
Update clknetsim to fix test failure on s390x with enabled LTO.
2021-04-22 11:03:05 +02:00
Zbigniew Jędrzejewski-Szmek
b1f5ca1523 Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
2021-03-02 16:14:05 +01:00
Miroslav Lichvar
ed6f12d1c1 4.0-3 2021-02-02 10:48:16 +01:00
Christian Glombek
7f89c4666b update NM DHCP dispatcher script
Updates the patch with downstream changes from
https://github.com/openshift/os/pull/486
and https://github.com/openshift/os/pull/494
2021-02-02 10:46:27 +01:00
Miroslav Lichvar
a565083d9b fix spec indentation 2021-02-02 10:46:27 +01:00
Fedora Release Engineering
65b8f20ff6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 01:57:12 +00:00
Tom Stellard
dbe22151e2 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2020-12-19 05:13:45 +00:00
Miroslav Lichvar
0fb07c271c drop dnssrv service and timer
They no longer work as they rely on the chrony-helper script, which was
dropped in 4.0-1.
2020-11-04 15:59:53 +01:00
Miroslav Lichvar
38e248d337 4.0-1 2020-10-07 18:34:12 +02:00
Miroslav Lichvar
2baf9594ab update to 4.0 2020-10-07 18:33:19 +02:00
Miroslav Lichvar
1fd00dcac3 update directory permissions to follow upstream 2020-09-24 11:13:22 +02:00
Miroslav Lichvar
960e995c53 4.0-0.9.pre3 2020-09-16 12:55:14 +02:00
Miroslav Lichvar
252f14c474 update to 4.0-pre4 2020-09-16 12:36:57 +02:00
Miroslav Lichvar
8b2e77bb85 4.0-0.8.pre3 2020-08-26 09:39:23 +02:00
Miroslav Lichvar
4578c8d659 move default paths in /var/run to /run 2020-08-26 09:39:23 +02:00
Miroslav Lichvar
3b687e3ada drop old migration code from scriptlet 2020-08-26 09:39:23 +02:00
Robert Fairley
9bae83fd80 patch DHCP NM dispatcher for distribution
Patch the upstream example `nm-dispatcher.dhcp` with
Fedora/RHEL-specific behavior including exiting if a dhclient
install is detected, and using the /etc/sysconfig paths.

Originally part of work for fixing integration between the
NetworkManager internal DHCP client and chrony:
https://bugzilla.redhat.com/show_bug.cgi?id=1800901
2020-08-26 09:39:23 +02:00
Miroslav Lichvar
0ecc1e4fe9 switch to sourcedir directive for loading servers from DHCP
Drop the chrony-helper script in favor of the new sourcedir directive.

Modify the dhclient script to save NTP servers from DHCP to
/run/chrony-dhcp/$interface.sources and configure chronyd to (re)load
the sources from files in that directory on start and the "reload
sources" command.

Other functionality of the helper script is dropped with no
replacemement.
2020-08-26 09:39:23 +02:00
Miroslav Lichvar
304dad1ba3 update to 4.0-pre3 2020-08-25 12:59:54 +02:00
Jeff Law
26e6c4a46d Disable LTO on s390x for now 2020-08-10 14:51:17 -06:00
Fedora Release Engineering
42541fd056 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 00:22:10 +00:00
Fedora Release Engineering
e041600a11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 13:57:34 +00:00
Tom Stellard
26ef0d15b0 use make macros
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-21 08:41:13 +02:00
Miroslav Lichvar
58c7956c63 4.0-0.3.pre2 2020-05-04 09:44:41 +02:00
Miroslav Lichvar
069897be45 4.0-0.2.pre2 2020-04-20 16:54:47 +02:00
Miroslav Lichvar
6e0c18861d update to 4.0-pre2 2020-04-20 16:54:04 +02:00
Miroslav Lichvar
14baaf0f8f fix testing on ppc64le and s390x 2020-03-18 12:49:50 +01:00
Miroslav Lichvar
7c4c641397 4.0-0.1.pre1 2020-03-17 15:27:44 +01:00
Miroslav Lichvar
3292ab8a8e update to 4.0-pre1 2020-03-17 15:27:42 +01:00
Miroslav Lichvar
eff127108e add net-tools to build requirements for testing 2020-03-17 15:06:54 +01:00
Miroslav Lichvar
127d88dd27 add missing dependency on coreutils 2020-03-17 15:06:31 +01:00
Fedora Release Engineering
680f8eded3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-28 14:01:03 +00:00
Miroslav Lichvar
b4ceda5f40 3.5-7 2020-01-20 12:21:29 +01:00
Miroslav Lichvar
1e0baf8ccb fix testing with new glibc (#1792854) 2020-01-20 12:20:42 +01:00
Miroslav Lichvar
718aa8464c 3.5-6 2019-10-09 17:05:15 +02:00
Miroslav Lichvar
ae57c18ced drop timedatex recommendation
systemd-timedated has obsoleted timedatex in F31.
2019-10-09 17:04:42 +02:00
Lubomir Rintel
58f87738ea Move the NetworkManager dispatcher script out of /etc
It's not user configuration and shouldn't ever have been there. Except for that
it used to be the only location NetworkManager looked into. With NetworkManager
1.20 that is no longer the case and the dispatcher scripts can be moved to
/usr/lib.
2019-08-29 16:31:35 +02:00
Miroslav Lichvar
c0f3bfcbcd verify upstream signatures 2019-08-27 15:34:56 +02:00
Fedora Release Engineering
e6d617a744 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-24 20:14:40 +00:00
Miroslav Lichvar
3364ee9583 3.5-3 2019-07-16 15:39:26 +02:00
Miroslav Lichvar
06bbe31ce3 3.5-2 2019-05-23 09:52:48 +02:00
Miroslav Lichvar
b0ec18c672 3.5-1 2019-05-14 14:48:24 +02:00
Miroslav Lichvar
63544d16c4 update to 3.5 2019-05-14 14:47:30 +02:00
Miroslav Lichvar
52c0bdd69b 3.5-0.1.pre1 2019-05-02 16:36:26 +02:00
Miroslav Lichvar
409ca2664e update to 3.5-pre1 2019-05-02 16:29:14 +02:00
Fedora Release Engineering
3b217375b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-01-31 15:34:46 +00:00
Igor Gnatenko
d403b1ea39 Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
2019-01-28 20:23:57 +01:00
Miroslav Lichvar
d061ee77ba 3.4-1 2018-09-19 17:26:24 +02:00
Miroslav Lichvar
d656f05816 update to 3.4 2018-09-19 17:21:04 +02:00
Miroslav Lichvar
49fc70ec1b don't back up and run failing test 2018-08-31 13:20:35 +02:00
Miroslav Lichvar
b5d5ccb905 fix test suite to pass quick check 2018-08-31 12:56:35 +02:00
Miroslav Lichvar
390c7e1ccc 3.4-0.1.pre1 2018-08-31 11:42:40 +02:00
Miroslav Lichvar
32f91ae7d1 update to 3.4-pre1 2018-08-31 11:40:58 +02:00
Miroslav Lichvar
2a5394f185 3.3-5 2018-08-13 12:02:58 +02:00
Miroslav Lichvar
e0770f801c add workaround for late reload of unit file (#1614751) 2018-08-13 12:02:58 +02:00
Miroslav Lichvar
947de079b7 fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2 2018-08-13 12:02:58 +02:00
Miroslav Lichvar
1284f5a8d4 3.3-4 2018-07-16 16:06:07 +02:00
Miroslav Lichvar
70b83a3867 add gcc-c++ to build requirements 2018-07-16 16:05:54 +02:00
Fedora Release Engineering
a6d24e5deb - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-12 21:46:39 +00:00
Miroslav Lichvar
dd304952ec 3.3-2 2018-06-18 15:57:11 +02:00
Miroslav Lichvar
d2850f1c13 avoid blocking in getrandom system call 2018-06-18 15:56:58 +02:00
Miroslav Lichvar
46c0acfa68 move pidfile to /var/run/chrony to allow chronyd to remove it on exit 2018-06-18 15:37:53 +02:00
Miroslav Lichvar
9989827a3c 3.3-1 2018-04-04 12:45:46 +02:00
Miroslav Lichvar
bfa1db2d6a enable keyfile by default again 2018-04-04 12:41:23 +02:00
Miroslav Lichvar
5e2242337f update to 3.3 2018-04-04 12:31:01 +02:00
Miroslav Lichvar
85d5386bd9 3.3-0.1.pre1 2018-03-15 09:42:13 +01:00
Miroslav Lichvar
1f8ef8f584 add gcc to build requirements 2018-03-15 09:39:35 +01:00
Miroslav Lichvar
80a92f4205 switch to nettle for crypto hashing 2018-03-15 09:33:58 +01:00
Miroslav Lichvar
c1f119f1f1 update to 3.3-pre1 2018-03-15 09:30:20 +01:00
Fedora Release Engineering
e690bd94d1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 04:55:04 +00:00
Miroslav Lichvar
85ea060019 3.2-3 2018-01-30 11:59:45 +01:00
Miroslav Lichvar
eabe7b50e5 use systemd macro for scriptlet dependencies 2018-01-30 11:33:50 +01:00
Miroslav Lichvar
ab2181b2fa 3.2-2 2018-01-25 14:52:52 +01:00
Miroslav Lichvar
216232645f update description 2018-01-25 14:49:37 +01:00
Miroslav Lichvar
6bdb94e9b0 fix chronyc getting stuck in infinite loop after clock step 2018-01-25 14:49:37 +01:00
Miroslav Lichvar
f15bb7e2fc suggest ntp-refclock 2018-01-25 14:49:37 +01:00
Miroslav Lichvar
e099458cec remove obsolete dependency 2018-01-25 14:49:37 +01:00
Miroslav Lichvar
994c6b7832 don't allow packaging without vendor zone 2018-01-25 14:49:21 +01:00
Miroslav Lichvar
5f4b70cc48 3.2-1 2017-09-15 11:57:18 +02:00
Miroslav Lichvar
b64e08b39d get TAI-UTC offset and leap seconds from tzdata by default 2017-09-15 11:55:32 +02:00
Miroslav Lichvar
85d555d5f8 update to 3.2 2017-09-15 11:50:12 +02:00
Miroslav Lichvar
328d343cc6 3.2-0.4.pre2 2017-08-29 16:24:24 +02:00
Miroslav Lichvar
f5c55bcd1e update to 3.2-pre2 2017-08-29 16:15:24 +02:00
Fedora Release Engineering
99ddf3df96 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 18:47:29 +00:00
Fedora Release Engineering
2d6a1210de - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 04:48:54 +00:00