Blame SPECS/chrony.spec

dabfaa
%global _hardened_build 1
dabfaa
%global clknetsim_ver 5b4d14
dabfaa
%global ntp2chrony_ver 982426
dabfaa
%bcond_without debug
dabfaa
dabfaa
Name:           chrony
dabfaa
Version:        3.3
dabfaa
Release:        3%{?dist}
dabfaa
Summary:        An NTP client/server
dabfaa
dabfaa
Group:          System Environment/Daemons
dabfaa
License:        GPLv2
dabfaa
URL:            https://chrony.tuxfamily.org
dabfaa
Source0:        https://download.tuxfamily.org/chrony/chrony-%{version}%{?prerelease}.tar.gz
dabfaa
Source1:        chrony.dhclient
dabfaa
Source2:        chrony.helper
dabfaa
Source3:        chrony-dnssrv@.service
dabfaa
Source4:        chrony-dnssrv@.timer
dabfaa
# simulator for test suite
dabfaa
Source10:       https://github.com/mlichvar/clknetsim/archive/%{clknetsim_ver}/clknetsim-%{clknetsim_ver}.tar.gz
dabfaa
# script for converting ntp configuration to chrony
dabfaa
Source11:       https://github.com/mlichvar/ntp2chrony/raw/%{ntp2chrony_ver}/ntp2chrony.py
dabfaa
%{?gitpatch:Patch0: chrony-%{version}%{?prerelease}-%{gitpatch}.patch.gz}
dabfaa
dabfaa
# move pidfile to /var/run/chrony to allow chronyd to remove it on exit
dabfaa
Patch1:         chrony-pidfile.patch
dabfaa
# add NTP servers from DHCP when starting service
dabfaa
Patch2:         chrony-service-helper.patch
dabfaa
# avoid blocking in getrandom system call
dabfaa
Patch3:         chrony-getrandom.patch
dabfaa
dabfaa
BuildRequires:  libcap-devel libedit-devel nettle-devel pps-tools-devel
dabfaa
%ifarch %{ix86} x86_64 %{arm} aarch64 mipsel mips64el ppc64 ppc64le s390 s390x
dabfaa
BuildRequires:  libseccomp-devel
dabfaa
%endif
dabfaa
BuildRequires:  gcc bison systemd
dabfaa
dabfaa
Requires(pre):  shadow-utils
dabfaa
%{?systemd_requires}
dabfaa
dabfaa
# install timedated implementation that can control chronyd service
dabfaa
Recommends:     timedatex
dabfaa
dabfaa
# suggest drivers for hardware reference clocks
dabfaa
Suggests:       ntp-refclock
dabfaa
dabfaa
%description
dabfaa
chrony is a versatile implementation of the Network Time Protocol (NTP).
dabfaa
It can synchronise the system clock with NTP servers, reference clocks
dabfaa
(e.g. GPS receiver), and manual input using wristwatch and keyboard. It
dabfaa
can also operate as an NTPv4 (RFC 5905) server and peer to provide a time
dabfaa
service to other computers in the network.
dabfaa
dabfaa
%if 0%{!?vendorzone:1}
dabfaa
%global vendorzone %(source /etc/os-release && echo ${ID}.)
dabfaa
%endif
dabfaa
dabfaa
%prep
dabfaa
%setup -q -n %{name}-%{version}%{?prerelease} -a 10
dabfaa
%{?gitpatch:%patch0 -p1}
dabfaa
%patch1 -p1 -b .pidfile
dabfaa
%patch2 -p1 -b .service-helper
dabfaa
%patch3 -p1 -b .getrandom
dabfaa
dabfaa
%{?gitpatch: echo %{version}-%{gitpatch} > version.txt}
dabfaa
dabfaa
# review changes in packaged configuration files and scripts
dabfaa
md5sum -c <<-EOF | (! grep -v 'OK$')
dabfaa
        47ad7eccc410b981d2f2101cf5682616  examples/chrony-wait.service
dabfaa
        e473a9fab7fe200cacce3dca8b66290b  examples/chrony.conf.example2
dabfaa
        ba6bb05c50e03f6b5ab54a2b7914800d  examples/chrony.keys.example
dabfaa
        6a3178c4670de7de393d9365e2793740  examples/chrony.logrotate
dabfaa
        63e0781f84e89ba6029d93ef0722c4ce  examples/chrony.nm-dispatcher
dabfaa
        921b354e94f5e3db124cb50d11cd560f  examples/chronyd.service
dabfaa
EOF
dabfaa
dabfaa
# don't allow packaging without vendor zone
dabfaa
test -n "%{vendorzone}"
dabfaa
dabfaa
# use example chrony.conf as the default config with some modifications:
dabfaa
# - use our vendor zone (2.*pool.ntp.org names include IPv6 addresses)
dabfaa
# - enable leapsectz to get TAI-UTC offset and leap seconds from tzdata
dabfaa
# - enable keyfile
dabfaa
sed -e 's|^\(pool \)\(pool.ntp.org\)|\12.%{vendorzone}\2|' \
dabfaa
    -e 's|#\(leapsectz\)|\1|' \
dabfaa
    -e 's|#\(keyfile\)|\1|' \
dabfaa
        < examples/chrony.conf.example2 > chrony.conf
dabfaa
dabfaa
touch -r examples/chrony.conf.example2 chrony.conf
dabfaa
dabfaa
# regenerate the file from getdate.y
dabfaa
rm -f getdate.c
dabfaa
dabfaa
mv clknetsim-%{clknetsim_ver}* test/simulation/clknetsim
dabfaa
dabfaa
install -m 644 -p %{SOURCE11} ntp2chrony.py
dabfaa
dabfaa
%build
dabfaa
%configure \
dabfaa
%{?with_debug: --enable-debug} \
dabfaa
        --enable-ntp-signd \
dabfaa
        --enable-scfilter \
dabfaa
        --docdir=%{_docdir} \
dabfaa
        --with-ntp-era=$(date -d '1970-01-01 00:00:00+00:00' +'%s') \
dabfaa
        --with-user=chrony \
dabfaa
        --with-hwclockfile=%{_sysconfdir}/adjtime \
dabfaa
        --with-sendmail=%{_sbindir}/sendmail
dabfaa
make %{?_smp_mflags}
dabfaa
dabfaa
%install
dabfaa
make install DESTDIR=$RPM_BUILD_ROOT
dabfaa
dabfaa
rm -rf $RPM_BUILD_ROOT%{_docdir}
dabfaa
dabfaa
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{sysconfig,logrotate.d}
dabfaa
mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/{lib,log}/chrony
dabfaa
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d
dabfaa
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d
dabfaa
mkdir -p $RPM_BUILD_ROOT%{_libexecdir}
dabfaa
mkdir -p $RPM_BUILD_ROOT{%{_unitdir},%{_prefix}/lib/systemd/ntp-units.d}
dabfaa
dabfaa
install -m 644 -p chrony.conf $RPM_BUILD_ROOT%{_sysconfdir}/chrony.conf
dabfaa
dabfaa
install -m 640 -p examples/chrony.keys.example \
dabfaa
        $RPM_BUILD_ROOT%{_sysconfdir}/chrony.keys
dabfaa
install -m 755 -p examples/chrony.nm-dispatcher \
dabfaa
        $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony
dabfaa
install -m 755 -p %{SOURCE1} \
dabfaa
        $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d/chrony.sh
dabfaa
install -m 644 -p examples/chrony.logrotate \
dabfaa
        $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/chrony
dabfaa
dabfaa
install -m 644 -p examples/chronyd.service \
dabfaa
        $RPM_BUILD_ROOT%{_unitdir}/chronyd.service
dabfaa
install -m 644 -p examples/chrony-wait.service \
dabfaa
        $RPM_BUILD_ROOT%{_unitdir}/chrony-wait.service
dabfaa
install -m 644 -p %{SOURCE3} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.service
dabfaa
install -m 644 -p %{SOURCE4} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.timer
dabfaa
dabfaa
install -m 755 -p %{SOURCE2} $RPM_BUILD_ROOT%{_libexecdir}/chrony-helper
dabfaa
dabfaa
cat > $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/chronyd <
dabfaa
# Command-line options for chronyd
dabfaa
OPTIONS=""
dabfaa
EOF
dabfaa
dabfaa
touch $RPM_BUILD_ROOT%{_localstatedir}/lib/chrony/{drift,rtc}
dabfaa
dabfaa
echo 'chronyd.service' > \
dabfaa
        $RPM_BUILD_ROOT%{_prefix}/lib/systemd/ntp-units.d/50-chronyd.list
dabfaa
dabfaa
%check
dabfaa
# set random seed to get deterministic results
dabfaa
export CLKNETSIM_RANDOM_SEED=24502
dabfaa
make %{?_smp_mflags} -C test/simulation/clknetsim
dabfaa
make quickcheck
dabfaa
dabfaa
%pre
dabfaa
getent group chrony > /dev/null || /usr/sbin/groupadd -r chrony
dabfaa
getent passwd chrony > /dev/null || /usr/sbin/useradd -r -g chrony \
dabfaa
       -d %{_localstatedir}/lib/chrony -s /sbin/nologin chrony
dabfaa
:
dabfaa
dabfaa
%post
dabfaa
# fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
dabfaa
if grep -q 'PIDFile=%{_localstatedir}/run/chronyd.pid' \
dabfaa
                %{_sysconfdir}/systemd/system/chronyd.service 2> /dev/null && \
dabfaa
        ! grep -qi '^[ '$'\t'']*pidfile' %{_sysconfdir}/chrony.conf 2> /dev/null
dabfaa
then
dabfaa
        sed -i '/PIDFile=/s|/run/|/run/chrony/|' \
dabfaa
                %{_sysconfdir}/systemd/system/chronyd.service
dabfaa
fi
dabfaa
# workaround for late reload of unit file (#1614751)
dabfaa
%{_bindir}/systemctl daemon-reload
dabfaa
%systemd_post chronyd.service chrony-wait.service
dabfaa
dabfaa
%preun
dabfaa
%systemd_preun chronyd.service chrony-wait.service
dabfaa
dabfaa
%postun
dabfaa
%systemd_postun_with_restart chronyd.service
dabfaa
dabfaa
%files
dabfaa
%{!?_licensedir:%global license %%doc}
dabfaa
%license COPYING
dabfaa
%doc FAQ NEWS README ntp2chrony.py
dabfaa
%config(noreplace) %{_sysconfdir}/chrony.conf
dabfaa
%config(noreplace) %verify(not md5 size mtime) %attr(640,root,chrony) %{_sysconfdir}/chrony.keys
dabfaa
%config(noreplace) %{_sysconfdir}/logrotate.d/chrony
dabfaa
%config(noreplace) %{_sysconfdir}/sysconfig/chronyd
dabfaa
%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony
dabfaa
%{_sysconfdir}/dhcp/dhclient.d/chrony.sh
dabfaa
%{_bindir}/chronyc
dabfaa
%{_sbindir}/chronyd
dabfaa
%{_libexecdir}/chrony-helper
dabfaa
%{_prefix}/lib/systemd/ntp-units.d/*.list
dabfaa
%{_unitdir}/chrony*.service
dabfaa
%{_unitdir}/chrony*.timer
dabfaa
%{_mandir}/man[158]/%{name}*.[158]*
dabfaa
%dir %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony
dabfaa
%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/drift
dabfaa
%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/rtc
dabfaa
%dir %attr(-,chrony,chrony) %{_localstatedir}/log/chrony
dabfaa
dabfaa
%changelog
dabfaa
* Mon Aug 13 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
dabfaa
- fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
dabfaa
  (#1614800)
dabfaa
- add workaround for late reload of unit file (#1614751)
dabfaa
dabfaa
* Mon Jun 18 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
dabfaa
- move pidfile to /var/run/chrony to allow chronyd to remove it on exit
dabfaa
  (#1584585)
dabfaa
- avoid blocking in getrandom system call (#1592425)
dabfaa
dabfaa
* Thu Apr 05 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-1
dabfaa
- update to 3.3
dabfaa
- enable keyfile by default again
dabfaa
- update ntp2chrony script
dabfaa
dabfaa
* Mon Mar 19 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-0.2.pre1
dabfaa
- include ntp2chrony script in documentation (#1530987)
dabfaa
dabfaa
* Thu Mar 15 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-0.1.pre1
dabfaa
- update to 3.3-pre1
dabfaa
- switch to nettle for crypto hashing
dabfaa
- add gcc to build requirements
dabfaa
dabfaa
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-4
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
dabfaa
dabfaa
* Tue Jan 30 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-3
dabfaa
- use systemd macro for scriptlet dependencies
dabfaa
dabfaa
* Thu Jan 25 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
dabfaa
- fix chronyc getting stuck in infinite loop after clock step
dabfaa
- don't allow packaging without vendor zone
dabfaa
- suggest ntp-refclock
dabfaa
- remove obsolete dependency
dabfaa
- update description
dabfaa
dabfaa
* Fri Sep 15 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
dabfaa
- update to 3.2
dabfaa
- get TAI-UTC offset and leap seconds from tzdata by default
dabfaa
dabfaa
* Tue Aug 29 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.4.pre2
dabfaa
- update to 3.2-pre2
dabfaa
dabfaa
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.3.pre1
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
dabfaa
dabfaa
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.2.pre1
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
dabfaa
dabfaa
* Tue Jul 25 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.1.pre1
dabfaa
- update to 3.2-pre1
dabfaa
dabfaa
* Thu May 04 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-5
dabfaa
- check PEERNTP variable before loading existing dhclient files
dabfaa
dabfaa
* Thu Apr 20 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-4
dabfaa
- use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599)
dabfaa
- fix seccomp filter for new glibc once again
dabfaa
- don't drop PHC samples with zero delay
dabfaa
dabfaa
* Mon Mar 13 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
dabfaa
- fix seccomp filter for new glibc
dabfaa
dabfaa
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.1-2
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
dabfaa
dabfaa
* Tue Jan 31 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
dabfaa
- update to 3.1
dabfaa
- enable seccomp support on more archs
dabfaa
- package chronyd sysconfig file
dabfaa
dabfaa
* Tue Jan 24 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-0.1.pre1
dabfaa
- update to 3.1-pre1
dabfaa
dabfaa
* Mon Jan 16 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-1
dabfaa
- update to 3.0
dabfaa
dabfaa
* Fri Jan 06 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.3.pre3
dabfaa
- update to 3.0-pre3
dabfaa
dabfaa
* Thu Dec 15 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.2.pre2
dabfaa
- update to 3.0-pre2
dabfaa
- enable support for MS-SNTP authentication in Samba
dabfaa
dabfaa
* Fri Dec 09 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.1.pre1
dabfaa
- update to 3.0-pre1
dabfaa
dabfaa
* Mon Nov 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4.1-1
dabfaa
- update to 2.4.1
dabfaa
dabfaa
* Thu Oct 27 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-4
dabfaa
- avoid AVC denials in chrony-wait service (#1350815)
dabfaa
dabfaa
* Tue Sep 13 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-3
dabfaa
- fix chrony-helper to escape names of systemd units (#1374767)
dabfaa
dabfaa
* Tue Jun 28 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-2
dabfaa
- fix chrony-helper to exit with correct status (#1350531)
dabfaa
dabfaa
* Tue Jun 07 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-1
dabfaa
- update to 2.4
dabfaa
- don't require info
dabfaa
dabfaa
* Mon May 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-0.1.pre1
dabfaa
- update to 2.4-pre1
dabfaa
- extend chrony-helper to allow management of static sources (#1331655)
dabfaa
dabfaa
* Tue Feb 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-1
dabfaa
- update to 2.3
dabfaa
dabfaa
* Tue Feb 02 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-0.1.pre1
dabfaa
- update to 2.3-pre1
dabfaa
dabfaa
* Thu Jan 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.2.1-1
dabfaa
- update to 2.2.1 (CVE-2016-1567)
dabfaa
- set NTP era split explicitly
dabfaa
dabfaa
* Mon Oct 19 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-1
dabfaa
- update to 2.2
dabfaa
dabfaa
* Fri Oct 09 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.2.pre2
dabfaa
- update to 2.2-pre2
dabfaa
- require libseccomp-devel on supported archs only
dabfaa
dabfaa
* Fri Oct 02 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.1.pre1
dabfaa
- update to 2.2-pre1
dabfaa
- enable seccomp support
dabfaa
- use weak dependency for timedatex on Fedora 24 and later
dabfaa
dabfaa
* Tue Jun 23 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1.1-1
dabfaa
- update to 2.1.1
dabfaa
- add -n option to gzip command to not save timestamp
dabfaa
dabfaa
* Mon Jun 22 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
dabfaa
- update to 2.1
dabfaa
- extend chrony-helper to allow using servers from DNS SRV records (#1234406)
dabfaa
- set random seed in testing to get deterministic results
dabfaa
dabfaa
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1-0.2.pre1
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
dabfaa
dabfaa
* Wed Jun 10 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-0.1.pre1
dabfaa
- update to 2.1-pre1
dabfaa
dabfaa
* Mon Apr 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-1
dabfaa
- update to 2.0
dabfaa
dabfaa
* Wed Apr 08 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.3.pre2
dabfaa
- update to 2.0-pre2 (CVE-2015-1853 CVE-2015-1821 CVE-2015-1822)
dabfaa
dabfaa
* Thu Jan 29 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.2.pre1
dabfaa
- require timedatex (#1136905)
dabfaa
dabfaa
* Tue Jan 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.1.pre1
dabfaa
- update to 2.0-pre1
dabfaa
dabfaa
* Thu Sep 11 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-1
dabfaa
- update to 1.31
dabfaa
- add servers from DHCP with iburst option by default
dabfaa
- use upstream configuration files and scripts
dabfaa
- don't package configuration examples
dabfaa
- compress chrony.txt
dabfaa
dabfaa
* Thu Aug 21 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-0.1.pre1
dabfaa
- update to 1.31-pre1
dabfaa
- use license macro if available
dabfaa
dabfaa
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.30-3
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
dabfaa
dabfaa
* Fri Aug 15 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-2
dabfaa
- reconnect client sockets (#1124059)
dabfaa
dabfaa
* Tue Jul 01 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-1
dabfaa
- update to 1.30
dabfaa
- enable debug messages
dabfaa
dabfaa
* Mon Jun 09 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-0.1.pre1
dabfaa
- update to 1.30-pre1
dabfaa
- execute test suite
dabfaa
- avoid calling systemctl in helper script
dabfaa
- call chronyc directly from logrotate and NM dispatcher scripts
dabfaa
- add conflict with systemd-timesyncd service
dabfaa
dabfaa
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.29.1-2
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
dabfaa
dabfaa
* Fri Jan 31 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
dabfaa
- update to 1.29.1 (CVE-2014-0021)
dabfaa
- replace hardening build flags with _hardened_build
dabfaa
dabfaa
* Tue Nov 19 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-3
dabfaa
- let systemd remove pid file (#974305)
dabfaa
dabfaa
* Thu Oct 03 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-2
dabfaa
- add ordering dependency to not start chronyd before ntpd stopped
dabfaa
dabfaa
* Thu Aug 08 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-1
dabfaa
- update to 1.29 (CVE-2012-4502, CVE-2012-4503)
dabfaa
dabfaa
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.28-2
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
dabfaa
dabfaa
* Wed Jul 17 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-1
dabfaa
- update to 1.28
dabfaa
- change default makestep limit to 10 seconds
dabfaa
dabfaa
* Mon Jun 24 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.2.pre1
dabfaa
- buildrequire systemd-units
dabfaa
dabfaa
* Fri Jun 21 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.1.pre1
dabfaa
- update to 1.28-pre1
dabfaa
- listen for commands only on localhost by default
dabfaa
dabfaa
* Thu May 09 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-3
dabfaa
- disable chrony-wait service by default (#961047)
dabfaa
- drop old systemd scriptlets
dabfaa
- don't own ntp-units.d directory
dabfaa
- move files from /lib
dabfaa
- remove unncessary dependency on syslog target
dabfaa
dabfaa
* Tue Mar 12 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-2
dabfaa
- suppress error messages from tr when generating key (#907914)
dabfaa
- fix delta calculation with extreme frequency offsets
dabfaa
dabfaa
* Fri Feb 01 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-1
dabfaa
- update to 1.27
dabfaa
- start chrony-wait service with chronyd
dabfaa
- start chronyd service after sntp
dabfaa
- remove obsolete macros
dabfaa
dabfaa
* Tue Sep 11 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844
dabfaa
- update to git snapshot 1ca844
dabfaa
- update systemd integration (#846303)
dabfaa
- use systemd macros if available (#850151)
dabfaa
- use correct vendor pool.ntp.org zone on RHEL (#845981)
dabfaa
- don't log output of chrony-wait service
dabfaa
dabfaa
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.27-0.4.pre1
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
dabfaa
dabfaa
* Fri Apr 27 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.3.pre1
dabfaa
- update service file for systemd-timedated-ntp target (#816493)
dabfaa
dabfaa
* Fri Apr 06 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.2.pre1
dabfaa
  use systemctl is-active instead of status in chrony-helper (#794771)
dabfaa
dabfaa
* Tue Feb 28 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.1.pre1
dabfaa
- update to 1.27-pre1
dabfaa
- generate SHA1 command key instead of MD5
dabfaa
dabfaa
* Wed Feb 15 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-6.20110831gitb088b7
dabfaa
- remove old servers on DHCP update (#787042)
dabfaa
dabfaa
* Fri Feb 10 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-5.20110831gitb088b7
dabfaa
- improve chrony-helper to keep track of servers added from DHCP (#787042)
dabfaa
- fix dhclient script to always return with zero exit code (#767859)
dabfaa
dabfaa
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.26-4.20110831gitb088b7
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
dabfaa
dabfaa
* Tue Sep 06 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-3.20110831gitb088b7
dabfaa
- update to git snapshot 20110831gitb088b7
dabfaa
- on first start generate password with 16 chars
dabfaa
- change systemd service type to forking
dabfaa
- add forced-command to chrony-helper (#735821)
dabfaa
dabfaa
* Mon Aug 15 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-2
dabfaa
- fix iburst with very high jitters and long delays
dabfaa
- use timepps header from pps-tools-devel
dabfaa
dabfaa
* Wed Jul 13 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-1
dabfaa
- update to 1.26
dabfaa
- read options from sysconfig file if it exists
dabfaa
dabfaa
* Fri Jun 24 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-0.1.pre1
dabfaa
- update to 1.26-pre1
dabfaa
- fix service name in %%triggerun
dabfaa
- drop SysV init script
dabfaa
- add chrony-wait service
dabfaa
dabfaa
* Fri May 06 2011 Bill Nottingham <notting@redhat.com> 1.25-2
dabfaa
- fix systemd scriptlets for the upgrade case
dabfaa
dabfaa
* Wed May 04 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-1
dabfaa
- update to 1.25
dabfaa
dabfaa
* Wed Apr 20 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.3.pre2
dabfaa
- update to 1.25-pre2
dabfaa
- link with -Wl,-z,relro,-z,now options
dabfaa
dabfaa
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.25-0.2.pre1
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
dabfaa
dabfaa
* Tue Feb 01 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.1.pre1
dabfaa
- update to 1.25-pre1
dabfaa
- use iburst, four pool servers, rtcsync, stratumweight in default config
dabfaa
- add systemd support
dabfaa
- drop sysconfig file 
dabfaa
- suppress install-info errors
dabfaa
dabfaa
* Thu Apr 29 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
dabfaa
- update to 20100428git73d775
dabfaa
- replace initstepslew directive with makestep in default config
dabfaa
- add NetworkManager dispatcher script
dabfaa
- add dhclient script
dabfaa
- retry server/peer name resolution at least once to workaround
dabfaa
  NetworkManager race condition on boot
dabfaa
- don't verify chrony.keys
dabfaa
dabfaa
* Fri Mar 12 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-3.20100302git5fb555
dabfaa
- update to snapshot 20100302git5fb555
dabfaa
- compile with PPS API support
dabfaa
dabfaa
* Thu Feb 04 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-1
dabfaa
- update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294)
dabfaa
- modify default config
dabfaa
  - step clock on start if it is off by more than 100 seconds
dabfaa
  - disable client log
dabfaa
- build with -fPIE on sparc
dabfaa
dabfaa
* Tue Dec 15 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.24-0.1.pre1
dabfaa
- update to 1.24-pre1
dabfaa
dabfaa
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-7.20081106gitbe42b4
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
dabfaa
dabfaa
* Fri Jul 17 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-6.20081106gitbe42b4
dabfaa
- switch to editline
dabfaa
- support arbitrary chronyc commands in init script
dabfaa
dabfaa
* Mon Jun 08 2009 Dan Horak <dan[at]danny.cz> 1.23-5.20081106gitbe42b4
dabfaa
- add patch with support for s390/s390x
dabfaa
dabfaa
* Mon Mar 09 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-4.20081106gitbe42b4
dabfaa
- fix building with broken libcap header (#483548)
dabfaa
dabfaa
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-3.20081106gitbe42b4
dabfaa
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
dabfaa
dabfaa
* Wed Nov 19 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-2.20081106gitbe42b4
dabfaa
- fix info uninstall
dabfaa
- generate random command key in init script
dabfaa
- support cyclelogs, online, offline commands in init script
dabfaa
- add logrotate script
dabfaa
dabfaa
* Tue Nov 11 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-1.20081106gitbe42b4
dabfaa
- initial release