Re: [chrony-dev] Failure of certain simulation tests

2024-04-25 Thread Vincent Blut
Le 2024-04-25 09:13, Miroslav Lichvar a écrit : > On Wed, Apr 24, 2024 at 04:46:07PM +0200, Vincent Blut wrote: > > The failing tests that initiated this thread are now fixed, however > > 002-largenetwork > > still fails though. > > I think that's the arm emulation

Re: [chrony-dev] Failure of certain simulation tests

2024-04-24 Thread Vincent Blut
Le 2024-04-24 12:17, Miroslav Lichvar a écrit : > On Thu, Apr 18, 2024 at 07:07:33PM +0200, Vincent Blut wrote: > > Le 2024-04-18 17:19, Miroslav Lichvar a écrit : > > > On Thu, Apr 18, 2024 at 04:06:54PM +0200, Vincent Blut wrote: > > > > So after building clknet

Re: [chrony-dev] Failure of certain simulation tests

2024-04-18 Thread Vincent Blut
Le 2024-04-18 17:19, Miroslav Lichvar a écrit : > On Thu, Apr 18, 2024 at 04:06:54PM +0200, Vincent Blut wrote: > > > The log shows that clknetsim is not built with the -D_LARGEFILE_SOURCE > > > -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 flags. It needs to use the same > &

Re: [chrony-dev] Failure of certain simulation tests

2024-04-18 Thread Vincent Blut
Hi, Le 2024-04-16 08:08, Miroslav Lichvar a écrit : > On Tue, Apr 16, 2024 at 12:25:53AM +0200, Vincent Blut wrote: > > I have yet to set up an armhf based environment to properly debug those > > failures, > > but the most likely cause seems to be the ongoing migrati

[chrony-dev] Failure of certain simulation tests

2024-04-15 Thread Vincent Blut
Hi Miroslav, I'm experiencing some issues with 4 simulation tests¹ on the armel and armhf architectures: SUMMARY: TOTAL 63 PASSED 59 FAILED 4(008-ntpera 115-cmdmontime 139-nts 145-rtc) (24508 24508 24508 24508) SKIPPED 0 () I have yet to set up an armhf based environment to

[chrony-dev] chronyd -p: read NTP sources defined in .sources files

2022-06-23 Thread Vincent Blut
Hi, Currently, 'chronyd -p' can read fragmented configuration files specified by the 'include' directive and those from the directories specified by the 'confdir' directive. I had a bug report [1] from a user who wants 'chronyd -p' to also print NTP sources specified in .sources files. What's

Re: [chrony-dev] 008-ntpera test failure

2022-01-12 Thread Vincent Blut
Hi, Le 2022-01-11 10:07, Miroslav Lichvar a écrit : > On Mon, Jan 10, 2022 at 03:34:28PM +0100, Vincent Blut wrote: > > SUMMARY: > > TOTAL 1 > > PASSED 0 > > FAILED 1(008-ntpera) (24505) > > SKIPPED 0 () > > > > Do you have any tips on

[chrony-dev] 008-ntpera test failure

2022-01-10 Thread Vincent Blut
Hi Miroslav, This test fails reproducibly with chrony 4.2 and clknetsim HEAD in a Debian LXC testbed. The error seems to happen in the second inner for loop. For the test to pass, we expect that the "check_sync" function returns 1. It does not here since the check_stat function returns 0 (i.e.

Re: [chrony-dev] Frequency transfer in NTP

2021-11-16 Thread Vincent Blut
Le 2021-11-16 12:04, Miroslav Lichvar a écrit : > On Thu, Jan 28, 2021 at 03:40:52PM +0100, Miroslav Lichvar wrote: > > I guess most people here don't follow the NTP WG list. There is one > > feature proposed for NTPv5 that I think would make a big difference > > for chrony: > > > >

Re: [chrony-dev] 4.0 release soon

2020-10-03 Thread Vincent Blut
On 2020-10-02T16:15+0200, Vincent Blut wrote: Hello, On 2020-10-01T16:57+0200, Vincent Blut wrote: Hi, On 2020-10-01T16:41+0200, Miroslav Lichvar wrote: The NTS specification (RFC 8915) has been published, so I think it would be a good time to make the final release. Unless anything major

Re: [chrony-dev] 4.0 release soon

2020-10-01 Thread Vincent Blut
On 2020-10-01T17:07+0200, Miroslav Lichvar wrote: On Thu, Oct 01, 2020 at 04:57:36PM +0200, Vincent Blut wrote: Hi, On 2020-10-01T16:41+0200, Miroslav Lichvar wrote: > The NTS specification (RFC 8915) has been published, so I think it > would be a good time to make the final release.

Re: [chrony-dev] 4.0 release soon

2020-10-01 Thread Vincent Blut
Hi, On 2020-10-01T16:41+0200, Miroslav Lichvar wrote: The NTS specification (RFC 8915) has been published, so I think it would be a good time to make the final release. Unless anything major shows up, I'll make it on Monday. If anyone has any forgotten bug reports, or was planning to do some

Re: [chrony-dev] [GIT] chrony/chrony.git branch master updated. 4.0-pre3-5-g7d3798d

2020-09-01 Thread Vincent Blut
On 2020-09-01T14:30+0200, Miroslav Lichvar wrote: On Tue, Sep 01, 2020 at 02:08:06PM +0200, Vincent Blut wrote: Hi Miroslav, On 2020-09-01T12:11+0200, g...@tuxfamily.net wrote: > commit 9ca250755f139c2383ada58198ecfcd7a22954a1 > Author: Miroslav Lichvar > Date: Mon Aug 31 15:1

Re: [chrony-dev] [GIT] chrony/chrony.git branch master updated. 4.0-pre3-5-g7d3798d

2020-09-01 Thread Vincent Blut
system trusted certificates due to p11-kit >= 0.23.21 getting the program name from /proc/self/exe. readlinkat() should be added for arm64 and riscv64, then. Patch attached. Cheers, Vincent From 9917844fb0ac2a588ca77f3b0c36b371125e012e Mon Sep 17 00:00:00 2001 From: Vincent Blut D

Re: [chrony-dev] [GIT] chrony/chrony.git annotated tag 3.5.1 created. 3.5.1

2020-08-26 Thread Vincent Blut
On 2020-08-26T20:02+0200, Miroslav Lichvar wrote: On Wed, Aug 26, 2020 at 03:42:17PM +0200, Vincent Blut wrote: True! But some admins/users may have overridden the default PID file location where the _chrony system user have write access. If so, let’s protect them from this vulnerability

Re: [chrony-dev] [GIT] chrony/chrony.git annotated tag 3.5.1 created. 3.5.1

2020-08-26 Thread Vincent Blut
On 2020-08-26T15:30+0200, Miroslav Lichvar wrote: On Wed, Aug 26, 2020 at 03:15:48PM +0200, Vincent Blut wrote: Miroslav, Matthias, thanks a lot for working on this. I backported this patch to chrony 3.0 for our previous stable release (Debian 9). Would someone please check that everything

Re: [chrony-dev] [GIT] chrony/chrony.git annotated tag 3.5.1 created. 3.5.1

2020-08-26 Thread Vincent Blut
Hey there, On 2020-08-20T08:55+0200, g...@tuxfamily.net wrote: This is an automated email from git. It was generated because a ref change was pushed to the "chrony/chrony.git" repository. The annotated tag, 3.5.1 has been created at 571a7971cad5537a0e98a3c90aa0b02f5d047c3f (tag)

Re: [chrony-dev] Experimental NTS support

2020-06-08 Thread Vincent Blut
On 2019-03-27T14:31+0100, Miroslav Lichvar wrote: On Wed, Mar 27, 2019 at 08:23:13AM -0500, Lonnie Abelbeck wrote: > On Mar 27, 2019, at 6:22 AM, Miroslav Lichvar wrote: > > I've been working on an implementation of the new NTP public-key > authentication called Network Time Security (NTS).

Re: [chrony-dev] [PATCH] sys_linux: allow clock_gettime64 in seccomp filter

2020-05-14 Thread Vincent Blut
On 2020-05-14T15:35+0200, Miroslav Lichvar wrote: On Thu, May 14, 2020 at 03:26:20PM +0200, Vincent Blut wrote: #ifdef __NR_clock_gettime64 SCMP_SYS(clock_gettime64), #endif would fly for you‽ Yes. By the way, shouldn’t we add *time64 variants to some of our already whistelisted

Re: [chrony-dev] [PATCH] sys_linux: allow clock_gettime64 in seccomp filter

2020-05-14 Thread Vincent Blut
On 2020-05-14T11:15+0200, Miroslav Lichvar wrote: On Thu, May 14, 2020 at 09:15:31AM +0200, Miroslav Lichvar wrote: On Wed, May 13, 2020 at 09:40:07PM +0200, Vincent Blut wrote: > Hi Miroslav, > > We got a bug report¹ showing that chronyd might not start correctly,

Re: [chrony-dev] [Regression 3.5 -> 4.0-pre1]: Could not remove /run/chronyd.pid : Permission denied

2020-05-13 Thread Vincent Blut
On 2020-05-12T09:05+0200, Miroslav Lichvar wrote: On Mon, May 11, 2020 at 07:05:21PM +0200, Vincent Blut wrote: From a quick glance, the rest seems to make sense. There is an issue with the Unix domain socket that I missed before. It would need to be bound and have the owner changed before

Re: [chrony-dev] [Regression 3.5 -> 4.0-pre1]: Could not remove /run/chronyd.pid : Permission denied

2020-05-05 Thread Vincent Blut
Hi, On 2020-04-28T10:26+0200, Miroslav Lichvar wrote: On Mon, Apr 27, 2020 at 10:12:59PM +0200, Vincent Blut wrote: $ getfacl /run/chrony 2>/dev/null # file: run/chrony # owner: _chrony # group: _chrony user::rwx group::r-x other::--- Nonetheless, from a security point of view, wo

[chrony-dev] [Regression 3.5 -> 4.0-pre1]: Could not remove /run/chronyd.pid : Permission denied

2020-04-07 Thread Vincent Blut
Hi, While preparing chrony 4.0-pre1 for Debian experimental, I observed that stopping chronyd throws the following error: chronyd[118401]: Could not remove /run/chronyd.pid : Permission denied I have yet to look for where the issue lies but as I’m unable to reproduce this with chrony 3.5,

[chrony-dev] [PATCH] sys_linux: allow renameat2 in seccomp filter

2020-01-16 Thread Vincent Blut
(). Cheers, Vincent From a92cd18bd025add6ff99c0f8dd719d2ee5b7d922 Mon Sep 17 00:00:00 2001 From: Vincent Blut Date: Thu, 16 Jan 2020 17:04:35 +0100 Subject: [PATCH] sys_linux: allow renameat2 in seccomp filter This is needed for architectures that support neither rename() nor renameat() (e.g. riscv64

Re: [chrony-dev] Re: [PATCH] test: check if RTC is RTC_UIE_ON capable

2019-12-11 Thread Vincent Blut
On 2019-12-11T16:13+0100, Christian Ehrhardt wrote: On Tue, Dec 10, 2019 at 5:59 PM Miroslav Lichvar wrote: On Tue, Dec 10, 2019 at 04:25:31PM +0100, Christian Ehrhardt wrote: > On Tue, Dec 10, 2019 at 4:19 PM Miroslav Lichvar > > I'm sorry for changing my mind, but I now think this case

[chrony-dev] Re: [PATCH] test: check if RTC is RTC_UIE_ON capable

2019-12-10 Thread Vincent Blut
On 2019-12-10T15:52+0100, Christian Ehrhardt wrote: The test might run on different platforms. If the platform happens to have a RTC that does exist but unable to have RTC_UIE_ON set the test will fall into an infinite hang. Exampls of bad clocks are: - ppc64el: rtc-generic - arm64: rtc-efi To

Re: [chrony-dev] Re: Are there known issues in destructive tests on arm64 or ppc64

2019-12-06 Thread Vincent Blut
On 2019-12-06T16:55+0100, Vincent Blut wrote: On 2019-12-06T10:21+0100, Christian Ehrhardt wrote: Hi chrony-dev, chrony is tested in Debian/Ubuntu on any update of related packages and while that was running I found that arm64 and ppc64 reproducibly hang [1][2]. OTOH arm64 and s390x

[chrony-dev] Re: Are there known issues in destructive tests on arm64 or ppc64

2019-12-06 Thread Vincent Blut
On 2019-12-06T10:21+0100, Christian Ehrhardt wrote: Hi chrony-dev, chrony is tested in Debian/Ubuntu on any update of related packages and while that was running I found that arm64 and ppc64 reproducibly hang [1][2]. OTOH arm64 and s390x reproducibly work. By the way, I just gave it a shot on

[chrony-dev] Re: Are there known issues in destructive tests on arm64 or ppc64

2019-12-06 Thread Vincent Blut
On 2019-12-06T12:35+0100, Christian Ehrhardt wrote: > > Could that be due to the use of “-x”? IFAIR you have extra stuff on > Ubuntu about that option. I was testing the current master tarball from upstream to avoid any confusion. =>

[chrony-dev] Re: Are there known issues in destructive tests on arm64 or ppc64

2019-12-06 Thread Vincent Blut
Hi Christian, On 2019-12-06T10:21+0100, Christian Ehrhardt wrote: Hi chrony-dev, chrony is tested in Debian/Ubuntu on any update of related packages and while that was running I found that arm64 and ppc64 reproducibly hang [1][2]. OTOH arm64 and s390x reproducibly work. ^

[chrony-dev] [PATCH] doc: fix typo in chrony.conf man page

2019-11-28 Thread Vincent Blut
Hi, Please accept the following patch to fix a typo in the chrony.conf man page. Good day, Vincent From f9869e568b6f9572f5a3747d2fb25efadb9e5a5c Mon Sep 17 00:00:00 2001 From: Vincent Blut Date: Thu, 28 Nov 2019 16:06:45 +0100 Subject: [PATCH] doc: fix typo in chrony.conf man page --- doc

Re: [chrony-dev] [PATCH] sys_linux: allow further syscalls in seccomp filter

2019-03-18 Thread Vincent Blut
On Mon, Mar 18, 2019 at 02:29:40PM +0100, Miroslav Lichvar wrote: On Fri, Mar 15, 2019 at 03:29:10PM +0100, Vincent Blut wrote: On Fri, Mar 15, 2019 at 12:22:15AM +0100, Vincent Blut wrote: > Hey Miroslav, > > Here is my work to make chronyd usuable on Debian 9 (current stable

Re: [chrony-dev] [PATCH] sys_linux: allow further syscalls in seccomp filter

2019-03-15 Thread Vincent Blut
On Fri, Mar 15, 2019 at 12:22:15AM +0100, Vincent Blut wrote: Hey Miroslav, Here is my work to make chronyd usuable on Debian 9 (current stable) arm64 with the seccomp filter enabled. Just tested on Debian unstable to check for any missing syscalls. Seems good so far. Cheers, Vincent From

Re: [chrony-dev] [PATCH] sys_linux: allow recv and send in seccomp filter

2019-03-14 Thread Vincent Blut
On Thu, Mar 14, 2019 at 09:12:31AM +0100, Miroslav Lichvar wrote: On Wed, Mar 13, 2019 at 06:10:20PM +0100, Vincent Blut wrote: Hey, I got a report that chronyd currently fails to start on Debian armel (ARM EABI). Patch attached! Applied, thanks. It looks like the seccomp support is now

[chrony-dev] [PATCH] sys_linux: allow recv and send in seccomp filter

2019-03-13 Thread Vincent Blut
Hey, I got a report that chronyd currently fails to start on Debian armel (ARM EABI). Patch attached! Cheers, Vincent From b5b784dfce0a61bc26c34abcf8f0c86cba19da3e Mon Sep 17 00:00:00 2001 From: Leigh Brown Date: Wed, 13 Mar 2019 17:56:08 +0100 Subject: [PATCH] sys_linux: allow recv and send

[chrony-dev] [PATCH] sys_linux: allow waitpid in seccomp filter

2019-02-28 Thread Vincent Blut
816e120580edba67eeb6ed92bd7d0775bb276a81 Mon Sep 17 00:00:00 2001 From: Vincent Blut Date: Thu, 28 Feb 2019 16:43:56 +0100 Subject: [PATCH] sys_linux: allow waitpid in seccomp filter --- sys_linux.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys_linux.c b/sys_linux.c index aee5a5e

[chrony-dev] [PATCH] sys_linux: allow _llseek in seccomp filter

2019-02-28 Thread Vincent Blut
Sep 17 00:00:00 2001 From: Vincent Blut Date: Thu, 28 Feb 2019 14:39:13 +0100 Subject: [PATCH] sys_linux: allow _llseek in seccomp filter This is needed on various 32-bit platforms to reposition read/write file offset on {raw}measurements and statistics log files. --- sys_linux.c | 8 1

Re: [chrony-dev] [GIT] chrony/chrony.git branch master updated. 3.3-77-g6e10e67

2018-09-10 Thread Vincent Blut
On Mon, Sep 10, 2018 at 03:02:05PM +0200, Miroslav Lichvar wrote: On Sat, Sep 08, 2018 at 02:04:49PM +0200, Vincent Blut wrote: > Just wanted to let you know that this test makes chrony-3.4-pre1 FTBFS > on HPPA. > > https://buildd.debian.org/status/fetch.php?pkg=chrony=hppa=

Re: [chrony-dev] [GIT] chrony/chrony.git branch master updated. 3.3-77-g6e10e67

2018-09-08 Thread Vincent Blut
On Wed, Sep 05, 2018 at 02:32:15PM +0200, Vincent Blut wrote: Hey Miroslav, On Fri, Aug 24, 2018 at 07:09:43PM +0200, g...@tuxfamily.net wrote: commit 7889d108c288ab2de54aaad9ab9b9a5bfaca0a6c Author: Miroslav Lichvar Date: Thu Aug 23 17:06:50 2018 +0200 test: add samplefilt unit test

Re: [chrony-dev] [GIT] chrony/chrony.git branch master updated. 3.3-77-g6e10e67

2018-09-05 Thread Vincent Blut
Hey Miroslav, On Fri, Aug 24, 2018 at 07:09:43PM +0200, g...@tuxfamily.net wrote: commit 7889d108c288ab2de54aaad9ab9b9a5bfaca0a6c Author: Miroslav Lichvar Date: Thu Aug 23 17:06:50 2018 +0200 test: add samplefilt unit test Just wanted to let you know that this test makes

[chrony-dev] Typo in chronyd man page

2017-11-30 Thread Vincent Blut
Hi, SIGSYS is incorrectly spelled in the chronyd man page. The attached patch fix that. Cheers, Vincent From 5ff708195cf200e2f8ffac4b09b4c005424baeba Mon Sep 17 00:00:00 2001 From: Vincent Blut <vincent.deb...@free.fr> Date: Thu, 30 Nov 2017 22:30:10 +0100 Subject: [PATCH] doc: fi

[chrony-dev] Typo in chrony.conf man page

2017-09-03 Thread Vincent Blut
Hello, While preparing chrony 3.2-pre2 for Debian, our tool lintian spotted a spelling error in the chrony.conf man page. Patch attached! Cheers, Vincent From 7e75ab0aa99ad1b6a23642015639dcf2724e1354 Mon Sep 17 00:00:00 2001 From: Vincent Blut <vincent.deb...@free.fr> Date: Sun, 3 Sep 2

Re: [chrony-dev] [GIT] chrony/chrony.git branch master updated. 3.1-17-g653d70e

2017-04-26 Thread Vincent Blut
On Wed, Apr 26, 2017 at 03:43:58PM +0200, Miroslav Lichvar wrote: On Wed, Apr 26, 2017 at 03:29:03PM +0200, Vincent Blut wrote: >sys_linux: allow sysinfo in seccomp filter > >It may be used by glob() in latest glibc. Do you have an idea about which commit in glibc justifies t

Re: [chrony-dev] Documentation patch

2016-10-21 Thread Vincent Blut
On Fri, Oct 21, 2016 at 04:35:55PM -0700, Bill Unruh wrote: On Fri, 21 Oct 2016, Bill Unruh wrote: On Sat, 22 Oct 2016, Rune Magnussen wrote: Hi When trying to install chrony from source, I found out that the README refered to INSTALL which does not exist. Also asciidoctor is needed during

Re: [chrony-dev] Retention of sources' measurement history

2016-10-10 Thread Vincent Blut
On Wed, Sep 07, 2016 at 11:19:24AM +0200, Miroslav Lichvar wrote: On Tue, Sep 06, 2016 at 12:40:08PM +0200, Miroslav Lichvar wrote: When the system clock is adjusted, all dump files are immediately invalid (even if they were not loaded), so we might want to remove all *.dat files in the dumpdir

Re: [chrony-dev] Retention of sources' measurement history

2016-10-10 Thread Vincent Blut
Hi Bill, Sorry for the delay in answering, I’ve been absorbed by high priority things and ended up forgetting about this thread. On Sat, Aug 27, 2016 at 01:20:13PM -0700, Bill Unruh wrote: On Sat, 27 Aug 2016, Vincent Blut wrote: Hi, Currently, the measurement history is persistent

[chrony-dev] Retention of sources' measurement history

2016-08-27 Thread Vincent Blut
Hi, Currently, the measurement history is persistent for each sources no matter if it is inspected by chronyd afterward. This persistence might cause some staled measurements. Thus, I think it would be nice to have a clean way (meaning not having to write a shell script ;-) ) to deal with