linux/meta-openembedded.git/meta-networking/recipes-support/chrony, branch master

chrony: Ensure /var/lib/chrony belongs to correct user/group

2026-01-23T06:01:05+00:00

Signed-off-by: Andreas Schulz Signed-off-by: Khem Raj

chrony: remove buildtime installation of /var/lib/chrony

2025-11-13T18:15:06+00:00

Since commit 3200122d68 (chrony: create /var/lib/chrony by systemd-tmpfiles) tmpfiles.d mechanism already ensures populating /var/lib/chrony at runtime. Introduce volatiles mechanism to make sure the directory is created at runtime for sysvinit as well. Since /var/lib/chrony is populated at runtime, stop packaging at build time. this helps to align towards stateless system expectations or when updates are done via meta-updater. Signed-off-by: Vishwas Udupa Signed-off-by: Khem Raj

chrony: upgrade 4.7 -> 4.8

2025-10-30T04:02:20+00:00

0001-Fix-compilation-with-musl.patch is obsolete due to 948ecf8 ("hash: include util.h for MIN macro") included in chrony since version 3.5. From chrony's NEWS [1] for the 4.8 release: Enhancements ------------ * Add maxunreach option to limit selection of unreachable sources * Add -u option to chronyc to drop root privileges (default chronyc user is set by configure script) Bug fixes --------- * Hide chronyc socket to mitigate unsafe permissions change * Fix refclock extpps option to work on Linux >= 6.15 * Validate refclock samples for reachability updates [1] https://chrony-project.org/news.html Signed-off-by: Bastian Krause Signed-off-by: Khem Raj

chrony: upgrade 4.6.1 -> 4.7

2025-07-22T23:39:48+00:00

Changelog: ========== - Add opencommands directive to select remote monitoring commands - Add interval option to driftfile directive - Add waitsynced and waitunsynced options to local directive - Add sanity checks for integer values in configuration - Add support for systemd Type=notify service - Add RTC refclock driver - Allow PHC refclock to be specified with network interface name - Don’t require multiple refclock samples per poll to simplify filter configuration - Keep refclock reachable when dropping samples with large delay - Improve quantile-based filtering to adapt faster to larger delay - Improve logging of selection failures - Detect clock interference from other processes - Try to reopen message log (-l option) on cyclelogs command - Fix sourcedir reloading to not multiply sources - Fix tracking offset after failed clock step - Drop support for NTS with Nettle < 3.6 and GnuTLS < 3.6.14 - Drop support for building without POSIX threads Signed-off-by: Liu Yiding Signed-off-by: Khem Raj

chrony: use inherit_defer for conditional inherit of useradd

2025-04-19T21:36:08+00:00

conditionnal inherit is missed when PACKAGECONFIG privdrop is activated after this inherit, eg in .bbappend. Signed-off-by: Andreas Fenkart Signed-off-by: Khem Raj

chrony: fix /sbin/nologin path in useradd cmdline

2025-04-19T21:36:08+00:00

/sbin/nologin instead of /bin/nologin Signed-off-by: Andreas Fenkart Signed-off-by: Khem Raj

chrony: Add nts support through PACKAGECONFIG

2025-03-19T16:17:26+00:00

Chronyd is supporting NTS (network time security) protocol, however, to build the application with this support, it require having gnutls at build time. This commit adds a PACKAGECONFIG line, allowing users to control whether the supporting application will have nts or not. Signed-off-by: Omri Sarig Signed-off-by: Khem Raj

chrony: upgrade 4.5 -> 4.6.1

2025-01-14T16:52:03+00:00

Changelog: ============ Enhancements ------------ * Add ntsaeads directive to enable only selected AEAD algorithms for NTS * Add activate option to local directive to set activation threshold * Add ipv4 and ipv6 options to server/pool/peer directive * Add kod option to ratelimit directive for server KoD RATE support * Add leapseclist directive to read NIST/IERS leap-seconds.list file * Add ptpdomain directive to set PTP domain for NTP over PTP * Allow disabling pidfile * Improve copy server option to accept unsynchronised status instantly * Log one selection failure on start * Add offset command to modify source offset correction * Add timestamp sources to ntpdata report Workarounds ----------- * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm (by default the keys are generated differently than in RFC 8915 for compatibility with chrony server and client versions 4.4, 4.5, and 4.6) * Switch to compliant NTS keys if first response from server is NTS NAK Bug fixes --------- * Fix crash on sources reload during initstepslew or RTC initialisation * Fix source refreshment to not repeat failed name resolving attempts Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

chrony: fix do_fetch error

2025-01-02T15:38:58+00:00

Change the SRC_URI to the correct value due to the following error: WARNING: chrony-4.5-r0.wr2401 do_fetch: Failed to fetch URL https://download.tuxfamily.org/chrony/chrony-4.5.tar.gz, attempting MIRRORS if available Signed-off-by: Jiaying Song Signed-off-by: Khem Raj

recipes: Start WORKDIR -> UNPACKDIR transition

2024-05-23T15:44:44+00:00

Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj