7 Commits

Author SHA1 Message Date
Jeffrey Zhang
72ee7dac7c Support multi local chrony servers
In the old implementation, if there is no external ntp server, only one
local chrony server is supported. If multi chrony-server is configured,
chrony client can not sync with them.

In the new implementation
* use VIP to connect chrony-server, which ensure multi local chrony
  servers are supported.
* chrony servers depend on VIP. So chrony-server group should be
  the same with haproxy group.
* prevent chrony client sync from itself.
* Change owner to chrony:kolla for chrony log folder
* fix keysfile path
* use chrony user for centos and ubuntu image
* fix permission issue for /var/lib/chrony folder

Closes-Bug: #1705200
Change-Id: I6e85fda9824b5ddc7a96895425c5932a3566c27e
2017-07-26 03:38:05 +00:00
zhubingbing
79b49e2f58 Add makestep in chrony.conf
Normally chronyd will cause the system to gradually correct any time offset, by slowing down or speeding up the clock as required.
In certain situations, the system clock might be so far adrift
that this slewing process would take a very long time to correct the system clock

Change-Id: I939b6aae1dbeb133203085ec68bdb9f7936ee9ef
Closes-Bug: #1696056
2017-06-06 16:28:28 +08:00
James McCarthy
274291463e Change default permissions in jinja templates.
Many of the templates use 600, remove unnecessary permission
on these templates to bring them in line with the others.

Change-Id: I30fe1b3822b9c7bb6ab98729fc519dc1d603db27
2017-05-26 12:29:02 +01:00
Jenkins
b595f236d0 Merge "Fix permission on chrony.conf" 2017-05-16 08:02:45 +00:00
Jeffrey Zhang
7b05bb7322 Add local directive for chrony
The local keyword is used to allow chronyd to appear synchronised to
real time (from the viewpoint of clients polling it), even if it has no
current synchronisation source.

Change-Id: I27d945abb87a37d2fdf972a58c51e2f0994e3de8
Closes-Bug: #1688682
2017-05-06 10:06:17 +08:00
Paul Bourke
6f9ab26f68 Fix permission on chrony.conf
Chrony drops root to user 'chrony' on startup, so it's config file
should be owned by user this user.

Change-Id: I8ba976cc685d2e50e09211f67507487a1e0e3c5f
2017-05-04 10:40:52 +01:00
Jeffrey Zhang
093d2828fc Add chrony ansible role
Change-Id: I49503275a8b3700185ee0395d9beee7397f5fccf
Implements: blueprint add-chrony-service
2017-01-22 22:15:21 +08:00