Blame SPECS/chrony.spec

4ed8e1
%global _hardened_build 1
bdfa49
%global clknetsim_ver f89702
4ed8e1
%global ntp2chrony_ver 2a0512
4ed8e1
%bcond_without debug
bdfa49
%bcond_without nts
4ed8e1
4ed8e1
Name:           chrony
bdfa49
Version:        4.1
4ed8e1
Release:        1%{?dist}
4ed8e1
Summary:        An NTP client/server
4ed8e1
4ed8e1
Group:          System Environment/Daemons
4ed8e1
License:        GPLv2
4ed8e1
URL:            https://chrony.tuxfamily.org
4ed8e1
Source0:        https://download.tuxfamily.org/chrony/chrony-%{version}%{?prerelease}.tar.gz
4ed8e1
Source1:        chrony.dhclient
4ed8e1
Source2:        chrony.helper
4ed8e1
Source3:        chrony-dnssrv@.service
4ed8e1
Source4:        chrony-dnssrv@.timer
4ed8e1
# simulator for test suite
4ed8e1
Source10:       https://github.com/mlichvar/clknetsim/archive/%{clknetsim_ver}/clknetsim-%{clknetsim_ver}.tar.gz
4ed8e1
# script for converting ntp configuration to chrony
4ed8e1
Source11:       https://github.com/mlichvar/ntp2chrony/raw/%{ntp2chrony_ver}/ntp2chrony/ntp2chrony.py
4ed8e1
%{?gitpatch:Patch0: chrony-%{version}%{?prerelease}-%{gitpatch}.patch.gz}
4ed8e1
bdfa49
# modify NetworkManager DHCP dispatcher to work with chrony-helper and
bdfa49
# follow distribution-specific configuration
bdfa49
Patch1:         chrony-nm-dispatcher-dhcp.patch
4ed8e1
# add NTP servers from DHCP when starting service
4ed8e1
Patch2:         chrony-service-helper.patch
bdfa49
# revert upstream changes in packaged chrony.conf example
bdfa49
Patch3:         chrony-defconfig.patch
4ed8e1
4ed8e1
BuildRequires:  libcap-devel libedit-devel nettle-devel pps-tools-devel
4ed8e1
%ifarch %{ix86} x86_64 %{arm} aarch64 mipsel mips64el ppc64 ppc64le s390 s390x
4ed8e1
BuildRequires:  libseccomp-devel
4ed8e1
%endif
bdfa49
BuildRequires:  gcc gcc-c++ make bison systemd
4ed8e1
BuildRequires:  kernel-headers > 4.18.0-87
bdfa49
%{?with_nts:BuildRequires: gnutls-devel gnutls-utils}
4ed8e1
4ed8e1
Requires(pre):  shadow-utils
4ed8e1
%{?systemd_requires}
4ed8e1
4ed8e1
# install timedated implementation that can control chronyd service
4ed8e1
Recommends:     timedatex
4ed8e1
4ed8e1
# suggest drivers for hardware reference clocks
4ed8e1
Suggests:       ntp-refclock
4ed8e1
4ed8e1
%description
4ed8e1
chrony is a versatile implementation of the Network Time Protocol (NTP).
4ed8e1
It can synchronise the system clock with NTP servers, reference clocks
4ed8e1
(e.g. GPS receiver), and manual input using wristwatch and keyboard. It
4ed8e1
can also operate as an NTPv4 (RFC 5905) server and peer to provide a time
4ed8e1
service to other computers in the network.
4ed8e1
4ed8e1
%if 0%{!?vendorzone:1}
4ed8e1
%global vendorzone %(source /etc/os-release && echo ${ID}.)
4ed8e1
%endif
4ed8e1
4ed8e1
%prep
4ed8e1
%setup -q -n %{name}-%{version}%{?prerelease} -a 10
4ed8e1
%{?gitpatch:%patch0 -p1}
bdfa49
%patch1 -p1 -b .nm-dispatcher-dhcp
4ed8e1
%patch2 -p1 -b .service-helper
bdfa49
%patch3 -p1 -b .defconfig
4ed8e1
4ed8e1
%{?gitpatch: echo %{version}-%{gitpatch} > version.txt}
4ed8e1
4ed8e1
# review changes in packaged configuration files and scripts
4ed8e1
md5sum -c <<-EOF | (! grep -v 'OK$')
bdfa49
        bc563c1bcf67b2da774bd8c2aef55a06  examples/chrony-wait.service
4ed8e1
        e473a9fab7fe200cacce3dca8b66290b  examples/chrony.conf.example2
4ed8e1
        96999221eeef476bd49fe97b97503126  examples/chrony.keys.example
4ed8e1
        6a3178c4670de7de393d9365e2793740  examples/chrony.logrotate
bdfa49
        fabb5b3f127b802c27c82837feff0fe6  examples/chrony.nm-dispatcher.dhcp
bdfa49
        8f5a98fcb400a482d355b929d04b5518  examples/chrony.nm-dispatcher.onoffline
bdfa49
        56d221eba8ce8a2e03d3e0dd87999a81  examples/chronyd.service
4ed8e1
EOF
4ed8e1
4ed8e1
# don't allow packaging without vendor zone
4ed8e1
test -n "%{vendorzone}"
4ed8e1
4ed8e1
# use example chrony.conf as the default config with some modifications:
4ed8e1
# - use our vendor zone (2.*pool.ntp.org names include IPv6 addresses)
4ed8e1
# - enable leapsectz to get TAI-UTC offset and leap seconds from tzdata
4ed8e1
# - enable keyfile
4ed8e1
sed -e 's|^\(pool \)\(pool.ntp.org\)|\12.%{vendorzone}\2|' \
4ed8e1
    -e 's|#\(leapsectz\)|\1|' \
4ed8e1
    -e 's|#\(keyfile\)|\1|' \
4ed8e1
        < examples/chrony.conf.example2 > chrony.conf
4ed8e1
4ed8e1
touch -r examples/chrony.conf.example2 chrony.conf
4ed8e1
4ed8e1
# regenerate the file from getdate.y
4ed8e1
rm -f getdate.c
4ed8e1
4ed8e1
mv clknetsim-%{clknetsim_ver}* test/simulation/clknetsim
4ed8e1
4ed8e1
install -m 644 -p %{SOURCE11} ntp2chrony.py
4ed8e1
4ed8e1
%build
4ed8e1
%configure \
4ed8e1
%{?with_debug: --enable-debug} \
4ed8e1
        --enable-ntp-signd \
4ed8e1
        --enable-scfilter \
bdfa49
%{!?with_nts: --disable-nts} \
bdfa49
        --chronyrundir=/run/chrony \
4ed8e1
        --docdir=%{_docdir} \
4ed8e1
        --with-ntp-era=$(date -d '1970-01-01 00:00:00+00:00' +'%s') \
4ed8e1
        --with-user=chrony \
4ed8e1
        --with-hwclockfile=%{_sysconfdir}/adjtime \
bdfa49
        --with-pidfile=/run/chrony/chronyd.pid \
4ed8e1
        --with-sendmail=%{_sbindir}/sendmail
4ed8e1
make %{?_smp_mflags}
4ed8e1
4ed8e1
%install
4ed8e1
make install DESTDIR=$RPM_BUILD_ROOT
4ed8e1
4ed8e1
rm -rf $RPM_BUILD_ROOT%{_docdir}
4ed8e1
4ed8e1
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{sysconfig,logrotate.d}
4ed8e1
mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/{lib,log}/chrony
4ed8e1
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d
4ed8e1
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d
4ed8e1
mkdir -p $RPM_BUILD_ROOT%{_libexecdir}
4ed8e1
mkdir -p $RPM_BUILD_ROOT{%{_unitdir},%{_prefix}/lib/systemd/ntp-units.d}
4ed8e1
4ed8e1
install -m 644 -p chrony.conf $RPM_BUILD_ROOT%{_sysconfdir}/chrony.conf
4ed8e1
4ed8e1
install -m 640 -p examples/chrony.keys.example \
4ed8e1
        $RPM_BUILD_ROOT%{_sysconfdir}/chrony.keys
bdfa49
install -m 755 -p examples/chrony.nm-dispatcher.onoffline \
bdfa49
        $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony-onoffline
bdfa49
install -m 755 -p examples/chrony.nm-dispatcher.dhcp \
bdfa49
        $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony-dhcp
4ed8e1
install -m 755 -p %{SOURCE1} \
4ed8e1
        $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d/chrony.sh
4ed8e1
install -m 644 -p examples/chrony.logrotate \
4ed8e1
        $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/chrony
4ed8e1
4ed8e1
install -m 644 -p examples/chronyd.service \
4ed8e1
        $RPM_BUILD_ROOT%{_unitdir}/chronyd.service
4ed8e1
install -m 644 -p examples/chrony-wait.service \
4ed8e1
        $RPM_BUILD_ROOT%{_unitdir}/chrony-wait.service
4ed8e1
install -m 644 -p %{SOURCE3} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.service
4ed8e1
install -m 644 -p %{SOURCE4} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.timer
4ed8e1
4ed8e1
install -m 755 -p %{SOURCE2} $RPM_BUILD_ROOT%{_libexecdir}/chrony-helper
4ed8e1
4ed8e1
cat > $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/chronyd <
4ed8e1
# Command-line options for chronyd
4ed8e1
OPTIONS=""
4ed8e1
EOF
4ed8e1
4ed8e1
touch $RPM_BUILD_ROOT%{_localstatedir}/lib/chrony/{drift,rtc}
4ed8e1
4ed8e1
echo 'chronyd.service' > \
4ed8e1
        $RPM_BUILD_ROOT%{_prefix}/lib/systemd/ntp-units.d/50-chronyd.list
4ed8e1
4ed8e1
%check
4ed8e1
# set random seed to get deterministic results
4ed8e1
export CLKNETSIM_RANDOM_SEED=24502
4ed8e1
make %{?_smp_mflags} -C test/simulation/clknetsim
4ed8e1
make quickcheck
4ed8e1
4ed8e1
%pre
4ed8e1
getent group chrony > /dev/null || /usr/sbin/groupadd -r chrony
4ed8e1
getent passwd chrony > /dev/null || /usr/sbin/useradd -r -g chrony \
4ed8e1
       -d %{_localstatedir}/lib/chrony -s /sbin/nologin chrony
4ed8e1
:
4ed8e1
4ed8e1
%post
4ed8e1
# fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
4ed8e1
if grep -q 'PIDFile=%{_localstatedir}/run/chronyd.pid' \
4ed8e1
                %{_sysconfdir}/systemd/system/chronyd.service 2> /dev/null && \
4ed8e1
        ! grep -qi '^[ '$'\t'']*pidfile' %{_sysconfdir}/chrony.conf 2> /dev/null
4ed8e1
then
4ed8e1
        sed -i '/PIDFile=/s|/run/|/run/chrony/|' \
4ed8e1
                %{_sysconfdir}/systemd/system/chronyd.service
4ed8e1
fi
4ed8e1
# workaround for late reload of unit file (#1614751)
4ed8e1
%{_bindir}/systemctl daemon-reload
4ed8e1
%systemd_post chronyd.service chrony-wait.service
4ed8e1
4ed8e1
%preun
4ed8e1
%systemd_preun chronyd.service chrony-wait.service
4ed8e1
4ed8e1
%postun
4ed8e1
%systemd_postun_with_restart chronyd.service
4ed8e1
4ed8e1
%files
4ed8e1
%{!?_licensedir:%global license %%doc}
4ed8e1
%license COPYING
4ed8e1
%doc FAQ NEWS README ntp2chrony.py
4ed8e1
%config(noreplace) %{_sysconfdir}/chrony.conf
4ed8e1
%config(noreplace) %verify(not md5 size mtime) %attr(640,root,chrony) %{_sysconfdir}/chrony.keys
4ed8e1
%config(noreplace) %{_sysconfdir}/logrotate.d/chrony
4ed8e1
%config(noreplace) %{_sysconfdir}/sysconfig/chronyd
bdfa49
%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony*
4ed8e1
%{_sysconfdir}/dhcp/dhclient.d/chrony.sh
4ed8e1
%{_bindir}/chronyc
4ed8e1
%{_sbindir}/chronyd
4ed8e1
%{_libexecdir}/chrony-helper
4ed8e1
%{_prefix}/lib/systemd/ntp-units.d/*.list
4ed8e1
%{_unitdir}/chrony*.service
4ed8e1
%{_unitdir}/chrony*.timer
4ed8e1
%{_mandir}/man[158]/%{name}*.[158]*
bdfa49
%dir %attr(750,chrony,chrony) %{_localstatedir}/lib/chrony
4ed8e1
%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/drift
4ed8e1
%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/rtc
bdfa49
%dir %attr(750,chrony,chrony) %{_localstatedir}/log/chrony
4ed8e1
4ed8e1
%changelog
bdfa49
* Tue Jun 15 2021 Miroslav Lichvar <mlichvar@redhat.com> 4.1-1
bdfa49
- update to 4.1 (#1895003 #1847853 #1929157)
bdfa49
- add NetworkManager dispatcher script to add servers from DHCP even without
bdfa49
  dhclient (#1933139)
bdfa49
- restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295)
bdfa49
- reset chrony-helper state after stopping chronyd (#1971697)
bdfa49
- add gcc-c++ and make to build requirements
bdfa49
- move default paths in /var/run to /run
bdfa49
4ed8e1
* Tue May 21 2019 Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
4ed8e1
- update to 3.5 (#1685469 #1677218)
4ed8e1
- fix shellcheck warnings in helper scripts (#1711948)
4ed8e1
- update ntp2chrony script
4ed8e1
4ed8e1
* Mon Aug 13 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
4ed8e1
- fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
4ed8e1
  (#1614800)
4ed8e1
- add workaround for late reload of unit file (#1614751)
4ed8e1
4ed8e1
* Mon Jun 18 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
4ed8e1
- move pidfile to /var/run/chrony to allow chronyd to remove it on exit
4ed8e1
  (#1584585)
4ed8e1
- avoid blocking in getrandom system call (#1592425)
4ed8e1
4ed8e1
* Thu Apr 05 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-1
4ed8e1
- update to 3.3
4ed8e1
- enable keyfile by default again
4ed8e1
- update ntp2chrony script
4ed8e1
4ed8e1
* Mon Mar 19 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-0.2.pre1
4ed8e1
- include ntp2chrony script in documentation (#1530987)
4ed8e1
4ed8e1
* Thu Mar 15 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-0.1.pre1
4ed8e1
- update to 3.3-pre1
4ed8e1
- switch to nettle for crypto hashing
4ed8e1
- add gcc to build requirements
4ed8e1
4ed8e1
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-4
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
4ed8e1
4ed8e1
* Tue Jan 30 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-3
4ed8e1
- use systemd macro for scriptlet dependencies
4ed8e1
4ed8e1
* Thu Jan 25 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
4ed8e1
- fix chronyc getting stuck in infinite loop after clock step
4ed8e1
- don't allow packaging without vendor zone
4ed8e1
- suggest ntp-refclock
4ed8e1
- remove obsolete dependency
4ed8e1
- update description
4ed8e1
4ed8e1
* Fri Sep 15 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
4ed8e1
- update to 3.2
4ed8e1
- get TAI-UTC offset and leap seconds from tzdata by default
4ed8e1
4ed8e1
* Tue Aug 29 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.4.pre2
4ed8e1
- update to 3.2-pre2
4ed8e1
4ed8e1
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.3.pre1
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
4ed8e1
4ed8e1
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.2.pre1
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
4ed8e1
4ed8e1
* Tue Jul 25 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.1.pre1
4ed8e1
- update to 3.2-pre1
4ed8e1
4ed8e1
* Thu May 04 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-5
4ed8e1
- check PEERNTP variable before loading existing dhclient files
4ed8e1
4ed8e1
* Thu Apr 20 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-4
4ed8e1
- use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599)
4ed8e1
- fix seccomp filter for new glibc once again
4ed8e1
- don't drop PHC samples with zero delay
4ed8e1
4ed8e1
* Mon Mar 13 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
4ed8e1
- fix seccomp filter for new glibc
4ed8e1
4ed8e1
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.1-2
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
4ed8e1
4ed8e1
* Tue Jan 31 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
4ed8e1
- update to 3.1
4ed8e1
- enable seccomp support on more archs
4ed8e1
- package chronyd sysconfig file
4ed8e1
4ed8e1
* Tue Jan 24 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-0.1.pre1
4ed8e1
- update to 3.1-pre1
4ed8e1
4ed8e1
* Mon Jan 16 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-1
4ed8e1
- update to 3.0
4ed8e1
4ed8e1
* Fri Jan 06 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.3.pre3
4ed8e1
- update to 3.0-pre3
4ed8e1
4ed8e1
* Thu Dec 15 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.2.pre2
4ed8e1
- update to 3.0-pre2
4ed8e1
- enable support for MS-SNTP authentication in Samba
4ed8e1
4ed8e1
* Fri Dec 09 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.1.pre1
4ed8e1
- update to 3.0-pre1
4ed8e1
4ed8e1
* Mon Nov 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4.1-1
4ed8e1
- update to 2.4.1
4ed8e1
4ed8e1
* Thu Oct 27 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-4
4ed8e1
- avoid AVC denials in chrony-wait service (#1350815)
4ed8e1
4ed8e1
* Tue Sep 13 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-3
4ed8e1
- fix chrony-helper to escape names of systemd units (#1374767)
4ed8e1
4ed8e1
* Tue Jun 28 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-2
4ed8e1
- fix chrony-helper to exit with correct status (#1350531)
4ed8e1
4ed8e1
* Tue Jun 07 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-1
4ed8e1
- update to 2.4
4ed8e1
- don't require info
4ed8e1
4ed8e1
* Mon May 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-0.1.pre1
4ed8e1
- update to 2.4-pre1
4ed8e1
- extend chrony-helper to allow management of static sources (#1331655)
4ed8e1
4ed8e1
* Tue Feb 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-1
4ed8e1
- update to 2.3
4ed8e1
4ed8e1
* Tue Feb 02 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-0.1.pre1
4ed8e1
- update to 2.3-pre1
4ed8e1
4ed8e1
* Thu Jan 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.2.1-1
4ed8e1
- update to 2.2.1 (CVE-2016-1567)
4ed8e1
- set NTP era split explicitly
4ed8e1
4ed8e1
* Mon Oct 19 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-1
4ed8e1
- update to 2.2
4ed8e1
4ed8e1
* Fri Oct 09 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.2.pre2
4ed8e1
- update to 2.2-pre2
4ed8e1
- require libseccomp-devel on supported archs only
4ed8e1
4ed8e1
* Fri Oct 02 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.1.pre1
4ed8e1
- update to 2.2-pre1
4ed8e1
- enable seccomp support
4ed8e1
- use weak dependency for timedatex on Fedora 24 and later
4ed8e1
4ed8e1
* Tue Jun 23 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1.1-1
4ed8e1
- update to 2.1.1
4ed8e1
- add -n option to gzip command to not save timestamp
4ed8e1
4ed8e1
* Mon Jun 22 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
4ed8e1
- update to 2.1
4ed8e1
- extend chrony-helper to allow using servers from DNS SRV records (#1234406)
4ed8e1
- set random seed in testing to get deterministic results
4ed8e1
4ed8e1
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1-0.2.pre1
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
4ed8e1
4ed8e1
* Wed Jun 10 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-0.1.pre1
4ed8e1
- update to 2.1-pre1
4ed8e1
4ed8e1
* Mon Apr 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-1
4ed8e1
- update to 2.0
4ed8e1
4ed8e1
* Wed Apr 08 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.3.pre2
4ed8e1
- update to 2.0-pre2 (CVE-2015-1853 CVE-2015-1821 CVE-2015-1822)
4ed8e1
4ed8e1
* Thu Jan 29 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.2.pre1
4ed8e1
- require timedatex (#1136905)
4ed8e1
4ed8e1
* Tue Jan 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.1.pre1
4ed8e1
- update to 2.0-pre1
4ed8e1
4ed8e1
* Thu Sep 11 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-1
4ed8e1
- update to 1.31
4ed8e1
- add servers from DHCP with iburst option by default
4ed8e1
- use upstream configuration files and scripts
4ed8e1
- don't package configuration examples
4ed8e1
- compress chrony.txt
4ed8e1
4ed8e1
* Thu Aug 21 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-0.1.pre1
4ed8e1
- update to 1.31-pre1
4ed8e1
- use license macro if available
4ed8e1
4ed8e1
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.30-3
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
4ed8e1
4ed8e1
* Fri Aug 15 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-2
4ed8e1
- reconnect client sockets (#1124059)
4ed8e1
4ed8e1
* Tue Jul 01 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-1
4ed8e1
- update to 1.30
4ed8e1
- enable debug messages
4ed8e1
4ed8e1
* Mon Jun 09 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-0.1.pre1
4ed8e1
- update to 1.30-pre1
4ed8e1
- execute test suite
4ed8e1
- avoid calling systemctl in helper script
4ed8e1
- call chronyc directly from logrotate and NM dispatcher scripts
4ed8e1
- add conflict with systemd-timesyncd service
4ed8e1
4ed8e1
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.29.1-2
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
4ed8e1
4ed8e1
* Fri Jan 31 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
4ed8e1
- update to 1.29.1 (CVE-2014-0021)
4ed8e1
- replace hardening build flags with _hardened_build
4ed8e1
4ed8e1
* Tue Nov 19 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-3
4ed8e1
- let systemd remove pid file (#974305)
4ed8e1
4ed8e1
* Thu Oct 03 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-2
4ed8e1
- add ordering dependency to not start chronyd before ntpd stopped
4ed8e1
4ed8e1
* Thu Aug 08 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-1
4ed8e1
- update to 1.29 (CVE-2012-4502, CVE-2012-4503)
4ed8e1
4ed8e1
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.28-2
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
4ed8e1
4ed8e1
* Wed Jul 17 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-1
4ed8e1
- update to 1.28
4ed8e1
- change default makestep limit to 10 seconds
4ed8e1
4ed8e1
* Mon Jun 24 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.2.pre1
4ed8e1
- buildrequire systemd-units
4ed8e1
4ed8e1
* Fri Jun 21 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.1.pre1
4ed8e1
- update to 1.28-pre1
4ed8e1
- listen for commands only on localhost by default
4ed8e1
4ed8e1
* Thu May 09 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-3
4ed8e1
- disable chrony-wait service by default (#961047)
4ed8e1
- drop old systemd scriptlets
4ed8e1
- don't own ntp-units.d directory
4ed8e1
- move files from /lib
4ed8e1
- remove unncessary dependency on syslog target
4ed8e1
4ed8e1
* Tue Mar 12 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-2
4ed8e1
- suppress error messages from tr when generating key (#907914)
4ed8e1
- fix delta calculation with extreme frequency offsets
4ed8e1
4ed8e1
* Fri Feb 01 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-1
4ed8e1
- update to 1.27
4ed8e1
- start chrony-wait service with chronyd
4ed8e1
- start chronyd service after sntp
4ed8e1
- remove obsolete macros
4ed8e1
4ed8e1
* Tue Sep 11 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844
4ed8e1
- update to git snapshot 1ca844
4ed8e1
- update systemd integration (#846303)
4ed8e1
- use systemd macros if available (#850151)
4ed8e1
- use correct vendor pool.ntp.org zone on RHEL (#845981)
4ed8e1
- don't log output of chrony-wait service
4ed8e1
4ed8e1
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.27-0.4.pre1
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
4ed8e1
4ed8e1
* Fri Apr 27 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.3.pre1
4ed8e1
- update service file for systemd-timedated-ntp target (#816493)
4ed8e1
4ed8e1
* Fri Apr 06 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.2.pre1
4ed8e1
  use systemctl is-active instead of status in chrony-helper (#794771)
4ed8e1
4ed8e1
* Tue Feb 28 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.1.pre1
4ed8e1
- update to 1.27-pre1
4ed8e1
- generate SHA1 command key instead of MD5
4ed8e1
4ed8e1
* Wed Feb 15 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-6.20110831gitb088b7
4ed8e1
- remove old servers on DHCP update (#787042)
4ed8e1
4ed8e1
* Fri Feb 10 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-5.20110831gitb088b7
4ed8e1
- improve chrony-helper to keep track of servers added from DHCP (#787042)
4ed8e1
- fix dhclient script to always return with zero exit code (#767859)
4ed8e1
4ed8e1
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.26-4.20110831gitb088b7
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
4ed8e1
4ed8e1
* Tue Sep 06 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-3.20110831gitb088b7
4ed8e1
- update to git snapshot 20110831gitb088b7
4ed8e1
- on first start generate password with 16 chars
4ed8e1
- change systemd service type to forking
4ed8e1
- add forced-command to chrony-helper (#735821)
4ed8e1
4ed8e1
* Mon Aug 15 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-2
4ed8e1
- fix iburst with very high jitters and long delays
4ed8e1
- use timepps header from pps-tools-devel
4ed8e1
4ed8e1
* Wed Jul 13 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-1
4ed8e1
- update to 1.26
4ed8e1
- read options from sysconfig file if it exists
4ed8e1
4ed8e1
* Fri Jun 24 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-0.1.pre1
4ed8e1
- update to 1.26-pre1
4ed8e1
- fix service name in %%triggerun
4ed8e1
- drop SysV init script
4ed8e1
- add chrony-wait service
4ed8e1
4ed8e1
* Fri May 06 2011 Bill Nottingham <notting@redhat.com> 1.25-2
4ed8e1
- fix systemd scriptlets for the upgrade case
4ed8e1
4ed8e1
* Wed May 04 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-1
4ed8e1
- update to 1.25
4ed8e1
4ed8e1
* Wed Apr 20 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.3.pre2
4ed8e1
- update to 1.25-pre2
4ed8e1
- link with -Wl,-z,relro,-z,now options
4ed8e1
4ed8e1
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.25-0.2.pre1
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
4ed8e1
4ed8e1
* Tue Feb 01 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.1.pre1
4ed8e1
- update to 1.25-pre1
4ed8e1
- use iburst, four pool servers, rtcsync, stratumweight in default config
4ed8e1
- add systemd support
4ed8e1
- drop sysconfig file 
4ed8e1
- suppress install-info errors
4ed8e1
4ed8e1
* Thu Apr 29 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
4ed8e1
- update to 20100428git73d775
4ed8e1
- replace initstepslew directive with makestep in default config
4ed8e1
- add NetworkManager dispatcher script
4ed8e1
- add dhclient script
4ed8e1
- retry server/peer name resolution at least once to workaround
4ed8e1
  NetworkManager race condition on boot
4ed8e1
- don't verify chrony.keys
4ed8e1
4ed8e1
* Fri Mar 12 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-3.20100302git5fb555
4ed8e1
- update to snapshot 20100302git5fb555
4ed8e1
- compile with PPS API support
4ed8e1
4ed8e1
* Thu Feb 04 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-1
4ed8e1
- update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294)
4ed8e1
- modify default config
4ed8e1
  - step clock on start if it is off by more than 100 seconds
4ed8e1
  - disable client log
4ed8e1
- build with -fPIE on sparc
4ed8e1
4ed8e1
* Tue Dec 15 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.24-0.1.pre1
4ed8e1
- update to 1.24-pre1
4ed8e1
4ed8e1
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-7.20081106gitbe42b4
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
4ed8e1
4ed8e1
* Fri Jul 17 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-6.20081106gitbe42b4
4ed8e1
- switch to editline
4ed8e1
- support arbitrary chronyc commands in init script
4ed8e1
4ed8e1
* Mon Jun 08 2009 Dan Horak <dan[at]danny.cz> 1.23-5.20081106gitbe42b4
4ed8e1
- add patch with support for s390/s390x
4ed8e1
4ed8e1
* Mon Mar 09 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-4.20081106gitbe42b4
4ed8e1
- fix building with broken libcap header (#483548)
4ed8e1
4ed8e1
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-3.20081106gitbe42b4
4ed8e1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
4ed8e1
4ed8e1
* Wed Nov 19 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-2.20081106gitbe42b4
4ed8e1
- fix info uninstall
4ed8e1
- generate random command key in init script
4ed8e1
- support cyclelogs, online, offline commands in init script
4ed8e1
- add logrotate script
4ed8e1
4ed8e1
* Tue Nov 11 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-1.20081106gitbe42b4
4ed8e1
- initial release