Comments (6)
I just reviewed #11, thanks for working on that!
Regarding:
Or: we could try to detect the most common ntp packages (i.e. ntp, chrony + systemd-timesyncd), keep the one installed and only else install the given one.
I think it makes sense to use a global default, and for the systems that are supposed to ship something else, we should adjust the configuration accordingly. But too much dynamic behavior might not be worth the trouble, at least yet? :)
from ansible-role-base.
What about setting a variable base_ntp_client
to let us choose which ntp package should be installed? Just created the PR #11. Please have look. Thx!
from ansible-role-base.
Or: we could try to detect the most common ntp packages (i.e. ntp
, chrony
+ systemd-timesyncd
), keep the one installed and only else install the given one.
from ansible-role-base.
Thx for the review! Full ACK on "too much dynamic behavior might not be worth the trouble, at least yet? :)" 😉
Just another note (to self): As this is (currently) not supported by this role, we should document how to use non-default / local time servers.
For systemd-timesyncd
it is /etc/systemd/timesyncd.conf
:
[Time]
NTP=ntp1.example.com ntp2.example.com ntp3.example.com ntp4.example.com
For ntp
it is /etc/ntp.conf
:
pool time.example.com iburst
or
server time.example.com iburst
We use iburst
by default. I think it is still ok. From ntp.conf(5):
iburst: When the server is unreachable, send a burst of six packets instead of the usual one. The packet spacing is normally 2 s; [...]
We should use server
instead of pool
if no round-robin DNS is involved, though.
from ansible-role-base.
After some digging I think we should favor chrony over ntp (from Choosing Between NTP Daemons):
Chrony should be preferred for all systems except for the systems that are managed or monitored by tools that do not support chrony, or the systems that have a hardware reference clock which cannot be used with chrony.
The list in Differences Between ntpd and chronyd is too long to quote.
from ansible-role-base.
Another good Comparison of NTP implementations.
from ansible-role-base.
Related Issues (11)
- Remove mdadm if no MD array is needed
- ansible-role-base/templates/apt/sources.list.j2: support more dynamic usage
- Do not set PermitRootLogin
- shellcheck reports warnings for services.fact HOT 1
- bsd-mailx is missing
- Base package selection includes deprecated apt-transport-https package HOT 1
- Add support for samba_exporter
- Add ntpsec support for Debian/bookworm
- netcat-openbsd should be installed
- Update default package list
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ansible-role-base.