[ubuntu/groovy-proposed] chrony 3.5-9ubuntu1 (Accepted)
Christian Ehrhardt
christian.ehrhardt at canonical.com
Mon May 25 12:56:12 UTC 2020
chrony (3.5-9ubuntu1) groovy; urgency=medium
* Merge with Debian unstable (LP: #1878005). Remaining changes:
- d/chrony.conf: use ubuntu ntp pool and server (LP 1744664 1754358)
- Set -x as default if unable to set time (e.g. in containers) (LP 1589780)
Chrony is a single service which acts as both NTP client (i.e. syncing the
local clock) and NTP server (i.e. providing NTP services to the network),
and that is both desired and expected in the vast majority of cases.
But in containers syncing the local clock is usually impossible, but this
shall not break the providing of NTP services to the network.
To some extent this makes chrony's default config more similar to 'ntpd',
which complained in syslog but still provided NTP server service in those
cases.
+ debian/chrony.service: allow the service to run without CAP_SYS_TIME
+ debian/control: add new dependency libcap2-bin for capsh (usually
installed anyway, but make them explicit to be sure).
+ debian/chrony.default: new option SYNC_IN_CONTAINER to not fall back
(Default off) [fixed a minor typo in the comment in this update]
+ debian/chronyd-starter.sh: wrapper to handle special cases in containers
and if CAP_SYS_TIME is missing. Effectively allows to run NTP server in
containers on a default installation and avoid failing to sync time (or
if allowed to sync, avoid multiple containers to fight over it by
accident).
+ debian/install: make chrony-starter.sh available on install.
+ debian/docs, debian/README.container: provide documentation about the
handling of this case.
- d/t/control: harden time-sources-from-dhcp-servers test for systemd change
(LP: 1873031)
* Dropped changes [in Debian now]
- d/t/upstream-system-tests: stop chrony/systemd-timesynd before tests
- d/t/upstream-system-tests: fix stderr in case services do not exist
- Stop starting systemd-timesyncd in postrm. This is no longer relevant
since systemd-timesyncd is a standalone package declaring
Conflicts/Replaces/Provides: time-daemon. (Closes 955773, LP: 1872183)
- d/postrm: Reinstate the remove target (LP: 1873810)
chrony (3.5-9) unstable; urgency=medium
* debian/patches/:
- Add allow-some-*time64-syscalls-in-seccomp-filter.patch. Needed for
32-bit architectures with new system calls using 64-bit time_t.
(LP: #1878005)
* debian/tests/control:
- Add needs-internet restriction to the upstream-simulation-test-suite
test.
[ Christian Ehrhardt ]
* debian/tests/upstream-simulation-test-suite:
- Skip if preparation steps fail.
- Make preparation steps more verbose.
chrony (3.5-8) unstable; urgency=medium
* debian/postrm:
- Stop starting systemd-timesyncd in postrm. This is no longer relevant
since systemd-timesyncd is a standalone package declaring
Conflicts/Replaces/Provides: time-daemon. (Closes: #955773)
[ Christian Ehrhardt ]
* debian/tests/upstream-system-tests:
- Stop chrony/systemd-timesynd before running these tests. (LP: #1870144)
chrony (3.5-7) unstable; urgency=medium
* debian/chrony.maintscript:
- Remove the /etc/NetworkManager/dispatcher.d/20-chrony conffile.
* debian/control:
- Support seccomp facility on riscv64. It should be noted that the system
call filter will stay disabled by default on this architecture until
Linux >= 5.5 hits unstable.
- Bump libseccomp-dev build-dep to 2.4.3-1~ to provide seccomp facility on
riscv64.
- Break network-manager (<< 1.20.0-1~). Prior to this version,
NetworkManager would not look for dispatcher scripts into
/usr/lib/NetworkManager/dispatcher.d/.
* debian/dirs:
- Create the usr/lib/NetworkManager/dispatcher.d subdirectories.
* debian/links:
- Change the location of the NetworkManager dispatcher script.
* debian/patches/:
- Add allow-renameat2-in-seccomp-filter.patch. Required as the riscv64
architecture does not support the rename() and renameat() system calls.
* debian/rules:
- Move the NetworkManager dispatcher script in
/usr/lib/NetworkManager/dispatcher.d/.
Date: Wed, 20 May 2020 09:57:39 +0200
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/chrony/3.5-9ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 20 May 2020 09:57:39 +0200
Source: chrony
Architecture: source
Version: 3.5-9ubuntu1
Distribution: groovy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Closes: 955773
Launchpad-Bugs-Fixed: 1870144 1878005
Changes:
chrony (3.5-9ubuntu1) groovy; urgency=medium
.
* Merge with Debian unstable (LP: #1878005). Remaining changes:
- d/chrony.conf: use ubuntu ntp pool and server (LP 1744664 1754358)
- Set -x as default if unable to set time (e.g. in containers) (LP 1589780)
Chrony is a single service which acts as both NTP client (i.e. syncing the
local clock) and NTP server (i.e. providing NTP services to the network),
and that is both desired and expected in the vast majority of cases.
But in containers syncing the local clock is usually impossible, but this
shall not break the providing of NTP services to the network.
To some extent this makes chrony's default config more similar to 'ntpd',
which complained in syslog but still provided NTP server service in those
cases.
+ debian/chrony.service: allow the service to run without CAP_SYS_TIME
+ debian/control: add new dependency libcap2-bin for capsh (usually
installed anyway, but make them explicit to be sure).
+ debian/chrony.default: new option SYNC_IN_CONTAINER to not fall back
(Default off) [fixed a minor typo in the comment in this update]
+ debian/chronyd-starter.sh: wrapper to handle special cases in containers
and if CAP_SYS_TIME is missing. Effectively allows to run NTP server in
containers on a default installation and avoid failing to sync time (or
if allowed to sync, avoid multiple containers to fight over it by
accident).
+ debian/install: make chrony-starter.sh available on install.
+ debian/docs, debian/README.container: provide documentation about the
handling of this case.
- d/t/control: harden time-sources-from-dhcp-servers test for systemd change
(LP: 1873031)
* Dropped changes [in Debian now]
- d/t/upstream-system-tests: stop chrony/systemd-timesynd before tests
- d/t/upstream-system-tests: fix stderr in case services do not exist
- Stop starting systemd-timesyncd in postrm. This is no longer relevant
since systemd-timesyncd is a standalone package declaring
Conflicts/Replaces/Provides: time-daemon. (Closes 955773, LP: 1872183)
- d/postrm: Reinstate the remove target (LP: 1873810)
.
chrony (3.5-9) unstable; urgency=medium
.
* debian/patches/:
- Add allow-some-*time64-syscalls-in-seccomp-filter.patch. Needed for
32-bit architectures with new system calls using 64-bit time_t.
(LP: #1878005)
.
* debian/tests/control:
- Add needs-internet restriction to the upstream-simulation-test-suite
test.
.
[ Christian Ehrhardt ]
* debian/tests/upstream-simulation-test-suite:
- Skip if preparation steps fail.
- Make preparation steps more verbose.
.
chrony (3.5-8) unstable; urgency=medium
.
* debian/postrm:
- Stop starting systemd-timesyncd in postrm. This is no longer relevant
since systemd-timesyncd is a standalone package declaring
Conflicts/Replaces/Provides: time-daemon. (Closes: #955773)
.
[ Christian Ehrhardt ]
* debian/tests/upstream-system-tests:
- Stop chrony/systemd-timesynd before running these tests. (LP: #1870144)
.
chrony (3.5-7) unstable; urgency=medium
.
* debian/chrony.maintscript:
- Remove the /etc/NetworkManager/dispatcher.d/20-chrony conffile.
.
* debian/control:
- Support seccomp facility on riscv64. It should be noted that the system
call filter will stay disabled by default on this architecture until
Linux >= 5.5 hits unstable.
- Bump libseccomp-dev build-dep to 2.4.3-1~ to provide seccomp facility on
riscv64.
- Break network-manager (<< 1.20.0-1~). Prior to this version,
NetworkManager would not look for dispatcher scripts into
/usr/lib/NetworkManager/dispatcher.d/.
.
* debian/dirs:
- Create the usr/lib/NetworkManager/dispatcher.d subdirectories.
.
* debian/links:
- Change the location of the NetworkManager dispatcher script.
.
* debian/patches/:
- Add allow-renameat2-in-seccomp-filter.patch. Required as the riscv64
architecture does not support the rename() and renameat() system calls.
.
* debian/rules:
- Move the NetworkManager dispatcher script in
/usr/lib/NetworkManager/dispatcher.d/.
Checksums-Sha1:
d2c0cff47b02d01bdd34abedf1fe67521ef17ecd 2445 chrony_3.5-9ubuntu1.dsc
79e9aeace143550300387a99f17bff04b45673f7 458226 chrony_3.5.orig.tar.gz
59d1948c1628cd83f7dc9bbe675e194e5e870a37 41800 chrony_3.5-9ubuntu1.debian.tar.xz
45e46a3210aa1eeccd457ad7611b95a5e51777ee 6704 chrony_3.5-9ubuntu1_source.buildinfo
Checksums-Sha256:
ab234d9a8016552ffa09ed8a2d75910cafe6360a214ed45f25820c38a742e5e8 2445 chrony_3.5-9ubuntu1.dsc
4e02795b1260a4ec51e6ace84149036305cc9fc340e65edb9f8452aa611339b5 458226 chrony_3.5.orig.tar.gz
8c30c7a0518024978fbb6142e382a5b915facff53a402724d12c0f4159bf9e50 41800 chrony_3.5-9ubuntu1.debian.tar.xz
c60e55cc54d839809da7418a4a9b45bd757bdedeee1b941504c77a8ed68ca370 6704 chrony_3.5-9ubuntu1_source.buildinfo
Files:
ee458f8d98157dbe6d65388690c1c808 2445 net optional chrony_3.5-9ubuntu1.dsc
5f66338bc940a9b51eede8f391e7bed3 458226 net optional chrony_3.5.orig.tar.gz
4d15cc31a2aca0b6fce4018d20a72153 41800 net optional chrony_3.5-9ubuntu1.debian.tar.xz
734e4d6b129e7a8c178e7b0a082cb41a 6704 net optional chrony_3.5-9ubuntu1_source.buildinfo
Original-Maintainer: Vincent Blut <vincent.debian at free.fr>
-----BEGIN PGP SIGNATURE-----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=csAJ
-----END PGP SIGNATURE-----
More information about the Groovy-changes
mailing list