summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support/chrony
Commit message (Collapse)AuthorAgeFilesLines
* chrony: upgrade 4.6.1 -> 4.7Liu Yiding12 hours2-10/+9
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Add opencommands directive to select remote monitoring commands - Add interval option to driftfile directive - Add waitsynced and waitunsynced options to local directive - Add sanity checks for integer values in configuration - Add support for systemd Type=notify service - Add RTC refclock driver - Allow PHC refclock to be specified with network interface name - Don’t require multiple refclock samples per poll to simplify filter configuration - Keep refclock reachable when dropping samples with large delay - Improve quantile-based filtering to adapt faster to larger delay - Improve logging of selection failures - Detect clock interference from other processes - Try to reopen message log (-l option) on cyclelogs command - Fix sourcedir reloading to not multiply sources - Fix tracking offset after failed clock step - Drop support for NTS with Nettle < 3.6 and GnuTLS < 3.6.14 - Drop support for building without POSIX threads Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: use inherit_defer for conditional inherit of useraddAndreas Fenkart2025-04-191-1/+1
| | | | | | | | conditionnal inherit is missed when PACKAGECONFIG privdrop is activated after this inherit, eg in .bbappend. Signed-off-by: Andreas Fenkart <afenkart@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: fix /sbin/nologin path in useradd cmdlineAndreas Fenkart2025-04-191-1/+1
| | | | | | | /sbin/nologin instead of /bin/nologin Signed-off-by: Andreas Fenkart <afenkart@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Add nts support through PACKAGECONFIGOmri Sarig2025-03-191-0/+1
| | | | | | | | | | | Chronyd is supporting NTS (network time security) protocol, however, to build the application with this support, it require having gnutls at build time. This commit adds a PACKAGECONFIG line, allowing users to control whether the supporting application will have nts or not. Signed-off-by: Omri Sarig <omri.sarig13@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.5 -> 4.6.1Wang Mingyu2025-01-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ Enhancements ------------ * Add ntsaeads directive to enable only selected AEAD algorithms for NTS * Add activate option to local directive to set activation threshold * Add ipv4 and ipv6 options to server/pool/peer directive * Add kod option to ratelimit directive for server KoD RATE support * Add leapseclist directive to read NIST/IERS leap-seconds.list file * Add ptpdomain directive to set PTP domain for NTP over PTP * Allow disabling pidfile * Improve copy server option to accept unsynchronised status instantly * Log one selection failure on start * Add offset command to modify source offset correction * Add timestamp sources to ntpdata report Workarounds ----------- * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm (by default the keys are generated differently than in RFC 8915 for compatibility with chrony server and client versions 4.4, 4.5, and 4.6) * Switch to compliant NTS keys if first response from server is NTS NAK Bug fixes --------- * Fix crash on sources reload during initstepslew or RTC initialisation * Fix source refreshment to not repeat failed name resolving attempts Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: fix do_fetch errorJiaying Song2025-01-021-1/+1
| | | | | | | | Change the SRC_URI to the correct value due to the following error: WARNING: chrony-4.5-r0.wr2401 do_fetch: Failed to fetch URL https://download.tuxfamily.org/chrony/chrony-4.5.tar.gz, attempting MIRRORS if available Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Start WORKDIR -> UNPACKDIR transitionKhem Raj2024-05-231-2/+2
| | | | | | | Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.4 -> 4.5Wang Mingyu2024-01-081-1/+1
| | | | | | | | | | | | | Changelog ======== * Add support for AES-GCM-SIV in GnuTLS * Add support for corrections from PTP transparent clocks * Add support for systemd socket activation * Fix presend in interleaved mode * Fix reloading of modified sources from sourcedir Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.3 -> 4.4Wang Mingyu2023-08-152-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | arm_eabi.patch refreshed for 4.4 Changelog: =========== * Add support for AES-GCM-SIV with Nettle >= 3.9 to shorten NTS cookies to avoid some length-specific blocking of NTP on Internet * Add support for multiple refclocks using extpps option on one PHC * Add maxpoll option to hwtimestamp directive to improve PHC tracking with low packet rates * Add hwtstimeout directive to configure timeout for late timestamps * Handle late hardware transmit timestamps of NTP requests on all sockets * Handle mismatched 32/64-bit time_t in SOCK refclock samples * Improve source replacement * Log important changes made by command requests (chronyc) * Refresh address of NTP sources periodically * Request nanosecond kernel RX timestamping on FreeBSD * Set DSCP for IPv6 packets * Shorten NTS-KE retry interval when network is down * Update seccomp filter for musl * Warn if loading keys from file with unexpected permissions * Warn if source selection fails or falseticker is detected * Add selectopts command to modify source-specific selection options * Add timestamp sources to serverstats report and make its fields 64-bit * Add -e option to chronyc to indicate end of response Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* *.patch: add Upstream-Status to all patchesMartin Jansa2023-06-211-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-02-241-12/+12
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Remove the libcap and nss PACKAGECONFIGsPeter Kjellerstedt2022-11-121-3/+1
| | | | | | | | | | | | There is no need for these configs on their own and they would only mess up the sechash and privdrop configs. To actually enable sechash one also had to enable nss, and to enable privdrop one also had to enable libcap. This also avoids passing --with-libcap if privdrop is enabled since the option does not exist. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Make it possible to enable editline support againPeter Kjellerstedt2022-11-121-9/+0
| | | | | | | | | | | | | | Support for readline was dropped in Chrony 4.2. However, the --disable-readline option still remains (it is used to completely ignore all forms of command line editing, even though the only remaining variant is editline). So keeping the readline PACKAGECONFIG and making it pass --disable-readline when it is not enabled disabled support for editline, and if it was enabled it instead passed --without-editline, which also disabled support for editline. Thus there was no way to enable editline support. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: correct parameter to configure to disable readline usageFederico Pellegrin2022-10-061-1/+1
| | | | | | | | | | | The correct parameter to disable readline usage is --disable-readline and not --without-readline. See also chrony source at: https://github.com/mlichvar/chrony/blob/master/configure#L110 Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: add pkgconfig class as pkg-config is explicitly searched forFederico Pellegrin2022-10-061-1/+1
| | | | | | | | | | | | | | The configure script present in chrony will explicitly look for pkg-config and without the pkgconfig class it will fail: Checking for pkg-config : No This then affects the possibility (via image features or bbappend) to use features based on nettle/gnutls/nss which strictly require pkgconfig to be present and working. Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.2 -> 4.3Wang Mingyu2022-09-052-11/+9
| | | | | | | | arm_eabi.patch upgrade for 4.3 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: add support for config and source snippet includesJan Luebbe2022-08-241-0/+7
| | | | | | | | | | | | | | This makes it simpler to set specific config options or custom sources by adding snippet files to /etc/chrony/conf.d/ or /etc/chrony/sources.d/ instead of modifying a copy of the full configuration file. As new snippets can be added from separate recipes, targeted changes can be done in multiple layers. These specific directories are also used in Debian's default configuration. It is not an error if they are missing. Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: create /var/lib/chrony by systemd-tmpfilesChangqing Li2022-06-301-0/+4
| | | | | | | | | Ensure /var/lib/chrony exist to avoid error like: chronyd.service: Failed to set up mount namespacing: /run/systemd/unit-root/var/lib/chrony: No such> chronyd.service: Failed at step NAMESPACE spawning /usr/sbin/chronyd: No such file or directory Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-041-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.1 -> 4.2zhengruoqin2021-12-212-13/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | refresh arm_eabi.patch Changelog: ========== Enhancements -Add support for NTPv4 extension field improving synchronisation stability and resolution of root delay and dispersion (experimental) -Add support for NTP over PTP (experimental) -Add support for AES-CMAC and hash functions in GnuTLS -Improve server interleaved mode to be more reliable and support multiple clients behind NAT -Update seccomp filter -Add statistics about interleaved mode to serverstats report Bug fixes -Fix RTC support with 64-bit time_t on 32-bit Linux -Fix seccomp filter to work correctly with bind*device directives -Suppress kernel adjustments of system clock (dosynctodr) on illumos Other changes -Switch Solaris support to illumos Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Use new override syntax for USERADD_PARAMPeter Kjellerstedt2021-08-271-1/+1
| | | | | | | This was introduced in commit 18306e6f. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Fix privdrop packageconfigEaswar Hariharan2021-08-261-1/+10
| | | | | | | | | To drop root privileges on Linux-based systems, chrony requires a standard user to switch to and the use of capabilities. Fix up the privdrop packageconfig to account for this. Signed-off-by: Easwar Hariharan <easwar.hariharan@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-7/+7
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* chrony: upgrade 4.0 -> 4.1zhengruoqin2021-05-192-7/+7
| | | | | | | | Refresh the following patch: arm_eabi.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Upgrade to 4.0Khem Raj2020-11-234-245/+51
| | | | | | | | | | | | | | | | | | | | ChangeLog is here [1] Do not install /var/log as it conflicts with basefiles package Collected errors: * check_data_file_clashes: Package chrony wants to install file /var/log But that file is already provided by package * base-files Remove CVE patch since its upstream Forward port arm_eabi.patch patch Make builds reproducible [1] https://chrony.tuxfamily.org/news.html Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Patch CVE-2020-14367Anatol Belski2020-11-022-0/+205
| | | | | Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: update to 3.5Oleksandr Kravchuk2019-07-282-18/+20
| | | | | | | Also updated arm_eabi patch. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: update to 3.4Oleksandr Kravchuk2019-04-112-2/+36
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Update to version 3.3Robert Joslyn2018-05-172-6/+15
| | | | | Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* chrony: Update to version 3.2Robert Joslyn2018-01-082-18/+24
| | | | | | | Signed-of-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* chrony: fix build failure for arma9Joe Slater2017-03-242-2/+60
| | | | | | | | | | | | | | Eliminate references to syscalls not available for ARM_EABI. Also add a dependency on libseccomp which is needed for scfilter to work. Set PACKAGECONFIG to not enable scfilter, since kernel CONFIG_SECCOMP is unlikely to be set. This aligns the usage of libseccomp with that of other packages. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* Make use of the new bb.utils.filter() functionPeter Kjellerstedt2017-03-071-1/+1
| | | | | Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* chrony: remove unrecognized option ipv6Jackie Huang2016-12-141-1/+1
| | | | | | | | | | | The configure is not generated by autotools, and it's designed to enable ipv6 by default and have option --disable-ipv6 to disable it, but no --enable-ipv6, so remove it. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* chrony: add PACKAGECONFIG for nss, libcapMartin Jansa2016-09-261-1/+3
| | | | | | | | | | | * fixes autodetected dependencies http://logs.nslu2-linux.org/buildlogs/oe/world/log.report.20160905_011801.log chrony-2.4: chronyc rdepends on nss, but it isn't a build dependency, missing nss in DEPENDS or PACKAGECONFIG? [build-deps] chrony-2.4: chrony rdepends on libcap, but it isn't a build dependency, missing libcap in DEPENDS or PACKAGECONFIG? [build-deps] chrony-2.4: chrony rdepends on nss, but it isn't a build dependency, missing nss in DEPENDS or PACKAGECONFIG? [build-deps] * also use PACKAGECONFIG_CONFARGS instead of EXTRA_OECONF in do_configure Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* chrony: control ipv6 support based on DISTRO_FEATURESJackie Huang2016-09-051-1/+4
| | | | | | | | | Add PACKAGECONFIG for ipv6 and control it based on DISTRO_FEATURES. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* meta-oe: remove trailing spacesMartin Jansa2016-08-221-2/+2
| | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* meta-oe: fix indentationMartin Jansa2016-08-221-2/+3
| | | | | | | | * remove tabs which sneaked in since last cleanup * meta-oe layers are using consistent indentation with 4 spaces, see http://www.openembedded.org/wiki/Styleguide Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* chrony: Versatile implementation of NTPHenry Hallam2016-06-163-0/+229
chrony is an alternative to ntpd. In particular it may be useful for quasi-realtime embedded systems that have a pulse-per-second time reference available and need to rapidly synchronize to it after boot, which appears to be unachievable with ntpd. Signed-off-by: Henry Hallam <henry@pericynthion.org> Reviewed-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 12:00:47 +0000