Revisions of chrony

buildservice-autocommit accepted request 1151495 from Martin Pluskal's avatar Martin Pluskal (pluskalm) (revision 122)
baserev update by copy to link target
Reinhard Max's avatar Reinhard Max (rmax) committed (revision 119)
- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir
buildservice-autocommit accepted request 1115592 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 118)
baserev update by copy to link target
Reinhard Max's avatar Reinhard Max (rmax) accepted request 1108478 from Fabian Vogt's avatar Fabian Vogt (favogt) (revision 117)
This speeds up building everywhere and gets rid of the timeout on
slower architectures. Unfortunately those sometimes fail the 124-tai
test because the tolerances are too tight (0.001004s > 0.001000).
Something for upstream?

- Use make quickcheck instead of make check to avoid >1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.
buildservice-autocommit accepted request 1104233 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 116)
baserev update by copy to link target
Reinhard Max's avatar Reinhard Max (rmax) committed (revision 115)
- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle >= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.
buildservice-autocommit accepted request 1038940 from Reinhard Max's avatar Reinhard Max (rmax) (revision 114)
baserev update by copy to link target
Reinhard Max's avatar Reinhard Max (rmax) accepted request 1038692 from Clemens Famulla-Conrad's avatar Clemens Famulla-Conrad (cfconrad) (revision 113)
- Install chrony DHCP dispatcher script for Networkmanager
  * chrony.nm-dispatcher.dhcp.patch /var/run to /run
buildservice-autocommit accepted request 1002167 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 112)
baserev update by copy to link target
Reinhard Max's avatar Reinhard Max (rmax) committed (revision 111)
- Update to 4.3:
  * Add local option to refclock directive to stabilise system
    clock with more stable free-running clock (e.g. TCXO, OCXO).
  * Add maxdelayquant option to server/pool/peer directive to
    replace maxdelaydevratio filter with long-term quantile-based
    filtering.
  * Add selection option to log directive.
  * Allow external PPS in PHC refclock without configurable pin.
  * Don't accept first interleaved response to minimise error in
    delay.
  * Don't use arc4random on Linux to avoid server performance loss.
  * Improve filter option to better handle missing NTP samples.
  * Improve stability with hardware timestamping and PHC refclock.
  * Update seccomp filter
- Update clknetsim to snapshot f00531b.
- Use a more specific conditional for the /usr/etc stuff.
Reinhard Max's avatar Reinhard Max (rmax) accepted request 1000645 from Stefan Schubert's avatar Stefan Schubert (schubi2) (revision 110)
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
buildservice-autocommit accepted request 978662 from Reinhard Max's avatar Reinhard Max (rmax) (revision 109)
baserev update by copy to link target
Reinhard Max's avatar Reinhard Max (rmax) accepted request 978120 from Stefan Schubert's avatar Stefan Schubert (schubi2) (revision 108)
- Moved 20-chrony file from user specif directory
  /etc/NetworkManager/dispatcher.d to vendor specific directory 
  /usr/lib/NetworkManager/dispatcher.d. So, users changes can
  still be done in /etc and will not be overwritten by an update.
Reinhard Max's avatar Reinhard Max (rmax) committed (revision 107)
- boo#1194206: Use /run instead of /var/run throughout.
- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.
Reinhard Max's avatar Reinhard Max (rmax) committed (revision 106)
- Update to 4.2
  * Add support for NTPv4 extension field improving synchronisation
    stability and resolution of root delay and dispersion
    (experimental)
  * Add support for NTP over PTP (experimental)
  * Add support for AES-CMAC and hash functions in GnuTLS
  * Improve server interleaved mode to be more reliable and support
    multiple clients behind NAT
  * Update seccomp filter
  * Fix RTC support with 64-bit time_t on 32-bit Linux
  * Fix seccomp filter to work correctly with bind*device directives
- Obsoleted patches:
  * chrony-refid-internal-md5.patch
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch
- Update clknetsim to snapshot 470b5e9.

- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).

- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
Reinhard Max's avatar Reinhard Max (rmax) committed (revision 105)
- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.
Reinhard Max's avatar Reinhard Max (rmax) accepted request 915264 from Johannes Segitz's avatar Johannes Segitz (jsegitz) (revision 104)
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
Reinhard Max's avatar Reinhard Max (rmax) committed (revision 103)
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .
Displaying revisions 1 - 20 of 122
openSUSE Build Service is sponsored by