Change log for chrony package in Debian

chrony (4.5-2) unstable; urgency=medium

  * debian/copyright:
    - Update copyright year for debian/*.

  * debian/control:
    - Build depend on pkgconf instead of pkg-config.
    - Bump Standards-Version to 4.7.0 (no changes needed).

  * debian/rules:
    - Disable seccomp on loong64 until libseccomp in Debian supports it.

  * debian/tests/upstream-simulation-test-suite:
    - Build clknetsim with extra CFLAGS on armel and armhf architectures as it
    needs to use the same time_t as the chronyd binary.
    - Update clknetsim version.
    - Prevent connection timeout on slow architectures.
    - Remove unused environment variable.

  [ Bryce Harrington ]
  * debian/usr.sbin.chronyd:
    - Fix failure to start timemaster due to lack of rw permissions on chrony
    socket. (LP: #2032805)
    - Allow the default UNIX domain socket address to be used by the
    reflock_sock service in the AppArmor configuration.

 -- Vincent Blut <email address hidden>  Thu, 25 Apr 2024 15:52:18 +0200

chrony (4.5-1) unstable; urgency=medium

  * Import upstream version 4.5:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * Upload to unstable.

  * debian/copyright:
    - Update copyright attribution.

 -- Vincent Blut <email address hidden>  Tue, 05 Dec 2023 16:35:17 +0100

chrony (4.5~pre1-1) experimental; urgency=medium

  *  Import upstream version 4.5-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.
    - Drop unneeded symlink creation.

 -- Vincent Blut <email address hidden>  Wed, 22 Nov 2023 22:20:11 +0100

chrony (4.4-3) unstable; urgency=medium

  * Rely solely on dh_installsystemd to install the systemd units in the
    correct location. (Closes: #1054222)

 -- Vincent Blut <email address hidden>  Thu, 19 Oct 2023 23:47:52 +0200

chrony (4.4-2) unstable; urgency=medium

  * debian/control:
    - Add version constraint on adduser. (Closes: #1051822)

  * debian/.gitlab-ci.yml:
    - Run CI on unstable.

 -- Vincent Blut <email address hidden>  Thu, 14 Sep 2023 20:28:27 +0200

chrony (4.4-1) unstable; urgency=medium

  * Import upstream version 4.4:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/:
    - Update links to point to new chrony location.

  * debian/copyright:
    - Update copyright years.

  * debian/install:
    - Install the chronyd-restricted systemd unit.

  * debian/patches/:
    - Add debianize-chronyd-restricted-unit-file.patch.

  * debian/rules:
    - Do not enable nor start chronyd-restricted.service.

 -- Vincent Blut <email address hidden>  Wed, 09 Aug 2023 17:50:42 +0200

chrony (4.3-4) unstable; urgency=medium

  * debian/control:
    - Depend on tzdata-legacy.
    right/* timezones have been split into a separate tzdata-legacy package.
    Since chronyd reads '/usr/share/zoneinfo/right/UTC' to determine when will
    the next leap second occur we have to depend on this new package.

  * debian/tests/control:
    - Let upstream-simulation-test-suite depend on tzdata-legacy.

 -- Vincent Blut <email address hidden>  Wed, 21 Jun 2023 20:06:47 +0200

chrony (4.4~pre2-1) experimental; urgency=medium

  * Import upstream version 4.4-pre2:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.
    - Update clknetsim seed. This prevents the '148-replacement' test from
    failing.

 -- Vincent Blut <email address hidden>  Wed, 21 Jun 2023 19:12:19 +0200

chrony (4.4~pre1-1) experimental; urgency=medium

  * Merge branch 'debian/unstable' into 'debian/latest'.

  * Import upstream version 4.4-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.

 -- Vincent Blut <email address hidden>  Wed, 10 May 2023 16:26:48 +0200

chrony (4.3-2+deb12u1) unstable; urgency=medium

  * debian/usr.sbin.chronyd:
    - Modify the AppArmor profile to allow more gpsd socket names. This will
    avoid the need for users to override the profile to let chronyd consume PPS
    samples or serial time supplied by gpsd over a Unix-domain socket.
    Thanks to Ryan Govostes for the report. (Closes: #1034519)

 -- Vincent Blut <email address hidden>  Mon, 08 May 2023 22:05:00 +0200

chrony (4.3-3) experimental; urgency=medium

  * debian/control:
    - Depend on tzdata-legacy. right/* timezones have been split into a
    separate tzdata-legacy package. Since chronyd reads
    '/usr/share/zoneinfo/right/UTC' to determine when will the next leap second
    occur we have to depend on this new package. (LP: #2008076)

  * debian/.gitlab-ci.yml:
    - Run CI on experimental. This is necessary as long as tzdata-legacy is
    available in experimental only.

  * debian/tests/control:
    - Let upstream-simulation-test-suite depend on tzdata-legacy.

 -- Vincent Blut <email address hidden>  Mon, 27 Mar 2023 19:57:20 +0200

chrony (4.3-2) unstable; urgency=medium

  * debian/control:
    - Bump Standards-Version to 4.6.2 (no changes needed).

  * debian/copyright:
    - Update copyright year for debian/*.

  * debian/.gitlab-ci.yml:
    - Use the recommended syntax to skip a job.

  * debian/install:
    - Install the chrony-wait.service systemd unit.

  * debian/postinst:
    - Ensure that chronyd can read the /etc/chrony/chrony.keys file after
    dropping root privileges.

  * debian/postrm:
    - Remove the override for /etc/chrony/chrony.keys when purging chrony.

  * debian/rules:
    - Do not enable nor start chrony-wait.service for the time being.

  * debian/tests/upstream-simulation-test-suite:
    - Run each test only once. Running several iterations is no longer
    relevant since we use a hard coded seed.

  [ Taylor Stearns ]
  * debian/chrony.conf:
    - Replace U+2019 with ASCII quote. (MR: !10)

 -- Vincent Blut <email address hidden>  Fri, 27 Jan 2023 22:51:17 +0100

chrony (4.3-1) unstable; urgency=medium

  * Import upstream version 4.3:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/copyright:
    - Update copyright years.

  [ Bastian Blank ]
  * debian/chrony.service:
    - Let systemd handle directories. (MR: !9)

 -- Vincent Blut <email address hidden>  Wed, 31 Aug 2022 13:32:14 +0200

chrony (4.2-3) unstable; urgency=medium

  * debian/patches/:
    - Add allow-rseq-in-seccomp-filter.patch. (Closes: #1017790)

 -- Vincent Blut <email address hidden>  Sat, 20 Aug 2022 18:43:50 +0200

chrony (4.3~pre1-1) experimental; urgency=medium

  * Import upstream version 4.3-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/chrony.lintian-overrides:
    - Update lintian override syntax.

  * debian/control:
    - Bump Standards-Version to 4.6.1 (no changes needed).

  * debian/patches/*:
    - Drop ensure_awk_commands_in_008-ntpera_test_return_an_integer.patch,
    applied upstream.
    - Refresh nm-dispatcher-dhcp_Move-server_dir-to-run.patch.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.

 -- Vincent Blut <email address hidden>  Thu, 11 Aug 2022 14:12:25 +0200

chrony (3.4-4+deb10u2) buster; urgency=medium

  * debian/usr.sbin.chronyd:
    - Allow reading the chronyd configuration file that timemaster(8)
    generates. Thanks to Michael Lestinsky for the report! (Closes: #1004745)

 -- Vincent Blut <email address hidden>  Tue, 15 Mar 2022 13:45:14 +0100

chrony (4.0-8+deb11u2) bullseye; urgency=medium

  * debian/usr.sbin.chronyd:
    - Allow reading the chronyd configuration file that timemaster(8)
    generates. Thanks to Michael Lestinsky for the report! (Closes: #1004745)

 -- Vincent Blut <email address hidden>  Mon, 14 Mar 2022 22:17:25 +0100

chrony (4.2-2) unstable; urgency=medium

  * debian/usr.sbin.chronyd:
    - Allow reading the chronyd configuration file that timemaster(8)
    generates. Thanks to Michael Lestinsky for the report! (Closes: #1004745)

 -- Vincent Blut <email address hidden>  Tue, 01 Feb 2022 20:42:35 +0100

chrony (4.2-1) unstable; urgency=medium

  * Import upstream version 4.2:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/chrony.service:
    - Adopt upstream service unit hardening options.

  * debian/copyright:
    - Update copyright years.

  * debian/patches/*:
    - Drop patches applied upstream.
    - Add ensure_awk_commands_in_008-ntpera_test_return_an_integer.patch

  * debian/test/upstream-simulation-test-suite:
    - Update clknetsim version.

 -- Vincent Blut <email address hidden>  Thu, 13 Jan 2022 14:01:35 +0100

chrony (4.0-8+deb11u1) bullseye; urgency=medium

  * debian/patches/:
    - Add fix-seccomp-filter-for-BINDTODEVICE-socket-option.patch to be able
    to bind a socket to a network device with a name longer than 3 characters
    when the system call filter is enabled. (Closes: #995207)

 -- Vincent Blut <email address hidden>  Tue, 19 Oct 2021 22:02:40 +0200

chrony (4.1-4) unstable; urgency=medium

  * debian/:
    - Remove empty preinst maintainer script.

  * debian/chrony.lintian-overrides:
    - Remove unused overrides.

  * debian/control:
    - Bump Standards-Version to 4.6.0 (no changes needed).

  * debian/patches/*:
    - Add fix-seccomp-filter-for-BINDTODEVICE-socket-option.patch.
    (Closes: #995207)

  * debian/usr.sbin.chronyd:
    - Add 'vim:syntax=apparmor' modline.
    - Add feature ABI rule. Starting with AppArmor 3.0, policy needs to contain
    an abi rule to indicate which feature abi the policy was developed under.

 -- Vincent Blut <email address hidden>  Thu, 07 Oct 2021 15:23:28 +0200

chrony (4.1-3) unstable; urgency=medium

  * Upload to unstable.

  * debian/patches/:
    - Add allow-clone3-and-pread64-in-seccomp-filter.patch.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.

 -- Vincent Blut <email address hidden>  Sun, 15 Aug 2021 15:08:56 +0200

chrony (4.1-2) experimental; urgency=medium

  * Merge branch 'debian/unstable' into 'debian/latest'.

  * debian/rules:
    - Remove needless dh_auto_test override.

  [ Christian Ehrhardt ]
  * debian/tests/helper-functions:
    - Improve chronyd restart logic. While rendering the tests more readable,
    this also fixes ntp-server-and-nts-auth test on Ubuntu.

  [ Debian Janitor ]
  * debian/{control,chrony.maintscript}:
    - Remove constraints unnecessary since stretch.

 -- Vincent Blut <email address hidden>  Sat, 26 Jun 2021 17:16:45 +0200

chrony (4.0-8) unstable; urgency=medium

  * debian/patches/:
    - Add allow-BINDTODEVICE-option-in-seccomp-filter.patch to enable support
    for binding sockets to a device without having to disable the seccomp
    filter.
    - Add allow-getuid32-in-seccomp-filter.patch. Upstream found out that
    getuid32() needed to be allowed in the seccomp filter to enable some NTS
    operations on i686. This may affect other 32-bits architectures.

 -- Vincent Blut <email address hidden>  Thu, 13 May 2021 16:51:41 +0200

chrony (4.1-1) experimental; urgency=medium

  * Import upstream version 4.1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/copyright:
    - Update copyright years.

  * debian/upstream/signing-key.asc:
    - Update Miroslav Lichvar's key.

  * debian/watch:
    - Add upstream version mangle to transform -pre to ~pre.

 -- Vincent Blut <email address hidden>  Fri, 14 May 2021 00:25:34 +0200

chrony (4.1~pre1-1) experimental; urgency=medium

  * Import upstream version 4.1-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/control:
    - Now that the upstream system tests support 'ss', replace the net-tools
    build-dependency by iproute2.

  * debian/NEWS:
    - Mention that lines in *.sources files must be terminated by a trailing
    newline.

  * debian/patches/:
    - Drop allow-IP_TOS-socket-option-in-seccomp-filter.patch. Applied
    upstream.

  * debian/postinst:
    - Do not redirect 'chronyd -p' stderr to /dev/null. Not needed anymore.

  * debian/sources.d/README:
    - Mention that lines in *.sources files must be terminated by a trailing
    newline.

  * debian/tests/dynamically-add-source:
    - Terminate the line in dummy-server.sources with the newline control
    character.

  * debian/tests/fragmented-configuration:
    - Do not redirect 'chronyd -p' stderr to /dev/null. Not needed anymore.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.

 -- Vincent Blut <email address hidden>  Mon, 10 May 2021 18:56:53 +0200

chrony (4.0-7) unstable; urgency=medium

  * debian/patches/:
    - Add allow-IP_TOS-socket-option-in-seccomp-filter.patch to enable the use
    of the 'dscp' directive.

 -- Vincent Blut <email address hidden>  Thu, 08 Apr 2021 16:21:16 +0200

chrony (4.0-6) unstable; urgency=medium

  * debian/tests/helper-functions:
    - Instead of running 'systemctl restart chrony.service', use
    __restart_chronyd() in the __no_system_clock_control() function.
    - Run 'sleep 3' only if chronyd has successfully restarted.

  [ Christian Ehrhardt ]
  * debian/tests/{dynamically-add-source,ntp-server-and-nts-auth}:
    - Reduce default Ubuntu config to make space for testcase config.

  * debian/tests/helper-functions:
    - Add more common functions and update some tests to use them.
    - Wait after restarting chronyd. Without this, some tests break on Ubuntu by
    checking state too early.

 -- Vincent Blut <email address hidden>  Sun, 21 Feb 2021 21:59:22 +0100

chrony (4.0-5) unstable; urgency=medium

  * Follow DEP-14 branch naming conventions:
    master -> debian/latest
    upstream -> upstream/latest

  * debian/chrony.service:
    - Enable some hardening settings.

  * debian/control:
    - Remove Joachim Wiedorn from the Uploaders field. This decision was taken
    in agreement with him. Thanks a lot, Joachim, for your work on chrony and
    for your benevolence when you handed me its maintenance.
    - Point Vcs-Git to the debian/latest branch.

  * debian/dirs:
    - Do not create the /etc/apparmor.d/force-complain directory. Not needed
    anymore.

  * debian/postrm:
    - Remove /run/chrony-dhcp on purge.

  * debian/preinst:
    - Drop old migration code snippet. It was used to put the newly provided
    AppArmor profile in complain mode when upgrading chrony to prevent
    regressions this profile could have caused. (Closes: #905485)

 -- Vincent Blut <email address hidden>  Thu, 04 Feb 2021 19:49:22 +0100

chrony (4.0-4) unstable; urgency=medium

  * debian/chrony.examples:
    - Provide example configuration files.

  * debian/postinst:
    - Run adduser unconditionally.
    - Use 'chronyd -p' to check the whole configuration.

  * debian/tests/:
    - Prevent dynamically-add-source and ntp-server-and-nts-auth tests from
    failing on chronyd's preparation step.
    - Don't pass 'set -u' to dynamically-add-source and
    ntp-server-and-nts-auth scripts.

  * debian/tests/control:
    - Mark dynamically-add-source as skippable.

 -- Vincent Blut <email address hidden>  Thu, 21 Jan 2021 20:02:39 +0100

chrony (4.0-3) unstable; urgency=medium

  * debian/:
    - chronyd's configuration can now be fragmented. Please see
    /etc/chrony/conf.d/README for more information.
    - NTP sources can be specified in /etc/chrony/sources.d. Please see
    /etc/chrony/sources.d/README for more information.

  * debian/chrony.conf:
    - Include configuration files found in /etc/chrony/conf.d.
    - Use NTP sources found in /etc/chrony/sources.d.
    - Get TAI-UTC offset and leap seconds from the system tz database by using
    the "leapsectz right/UTC" directive. This directive must be commented out
    when using time sources serving leap-smeared time. (Closes: #974845)
    - Add missing comment.

  * debian/chrony.default:
    - Switch the seccomp filter to level 1.

  * debian/chrony.lintian-overrides:
    - Override breakout-link.

  * debian/control:
    - Add tzdata to the dependencies.
    - Bump Standards-Version to 4.5.1 (no changes required).

  * debian/copyright:
    - Update copyright year for debian/*.

  * debian/postinst:
    - Use dpkg-statoverride to manage mode bits and ownership of
    /var/l{ib,og}/chrony.

  * debian/postrm:
    - Remove overrides for /var/l{ib,og}/chrony on purge.

  * debian/rules:
    - Drop '--without-readline' option. GNU readline support has been dropped
    upstream due to license incompatibility.
    - Replace -F -1 by -F 1 in the sed invocation.

  * debian/tests/:
    - Add fragmented-configuration autopkgtest.
    - Add dynamically-add-source autopkgtest.
    - Add ntp-server-and-nts-auth autopkgtest.

  * debian/tests/control:
    - Mark ntp-server-and-nts-auth as skippable.

  * debian/tests/fragmented-configuration:
    - Use another directive for the test since "leapsectz right/UTC" is now
    used by default.

  * debian/tests/helper-functions:
    - Add __no_system_clock_control() function.

  * debian/tests/upstream-simulation-test-suite:
    - Always use the same seed to get deterministic results.

  * debian/upstream/metadata:
    - Remove obsolete field Name. Thanks to Debian Janitor <email address hidden>.

  * debian/usr.sbin.chronyd:
    - Make use of the @{run} variable.

 -- Vincent Blut <email address hidden>  Mon, 18 Jan 2021 21:58:52 +0100

chrony (4.0-2) unstable; urgency=medium

  * Merge branch 'experimental' into 'master'.

  * Upload to unstable.

 -- Vincent Blut <email address hidden>  Tue, 13 Oct 2020 15:59:33 +0200

chrony (4.0-1) experimental; urgency=medium

  * Import upstream version 4.0:
    - This release adds support for the Network Time Security (NTS)
    authentication mechanism (RFC 8915).
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

 -- Vincent Blut <email address hidden>  Wed, 07 Oct 2020 19:14:51 +0200

chrony (4.0~pre4-2) experimental; urgency=medium

  * debian/postinst:
    - Fix user and group ownership of "/var/lib/chrony" to allow chronyd
    to write in it. This will also fix a regression in the 104-systemdirs
    test.

 -- Vincent Blut <email address hidden>  Sat, 03 Oct 2020 11:20:02 +0200

chrony (4.0~pre4-1) experimental; urgency=medium

  * Import upstream version 4.0-pre4:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * Merge branch 'master' into experimental. (Closes: #970421)

  * debian/chrony.conf:
    - Use NTP sources from /run/chrony-dhcp.
    - Save NTS keys and cookies in /var/lib/chrony/.

  * debian/chrony-dnssrv@.service:
    - Update "chrony-helper" path.

  * debian/chrony.dhcp:
    - Save NTP servers from DHCP to /run/chrony-dhcp/$interface.sources.

  * debian/chrony.lintian-overrides:
    - Override executable-in-usr-lib for NetworkManager dispatcher scripts.
    - Update NetworkManager dispatcher script name.

  * debian/chrony.ppp.ip-{down,up}:
    - Update PID file path.

  * debian/chrony.service:
    - Update PID file path.
    - Do not run 'chrony-helper update-daemon' after starting chronyd. Not
    needed anymore.

  * debian/control:
    - Build-depend on libgnutls28-dev to support NTS.
    - Build-depend on gnutls-bin for the test suite.
    - Bump debhelper-compat to 13.

  * debian/copyright:
    - Update copyright years.

  * debian/dirs:
    - Remove var/log/chrony as it will be created automatically if it doesn’t
    exist.

  * debian/if-{post-down,up}:
    - Update PID file path.

  * debian/init:
    - Update PID file path.
    - Drop the unnecessary '--remove pidfile' option from the stop target.
    - Do not run 'chrony-helper update-daemon' after starting chronyd. Not
    needed anymore.

  * debian/install:
    - Move "chrony-helper" to "/usr/libexec/chrony".

  * debian/links:
    - Update source and destination filenames.

  * debian/patches/:
    - Drop patches applied upstream.
    - Add nm-dispatcher-dhcp_Move-server_dir-to-run.patch.

  * debian/postinst:
    - Drop migration code from pre-Stretch.
    - Migrate NTP sources obtained from DHCP to /run/chrony-dhcp on upgrade
    from chrony < 4.0~pre4-1.
    - Remove staled PID file when upgrading from chrony < 4.0~pre4-1.

  * debian/rules:
    - Change the default PID file location from /run to /run/chrony.
    - Drop dh_missing --fail-missing. This is the default in debhelper 13.
    - Enable seccomp support by default on riscv64.
    - Update NetworkManager dispatcher script name from 20-chrony to
    20-chrony-onoffline.
    - Add DHCP NetworkManager dispatcher script to allow chronyd to use
    NTP sources obtained from NM's internal DHCP client.

  * debian/tests/:
    - Add some helper functions. Some tests will be updated thereafter
    to use them.

  * debian/tests/time-sources-from-dhcp-servers:
    - Adapt to the new way of using time sources from DHCP.
    - Improve sed invocation.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.
    - Cosmetic changes.

  * debian/tests/upstream-system-tests:
    - No need to stop systemd-timesyncd anymore since it is no more
    co-installable with chrony anymore.

  * debian/usr.sbin.chronyd:
    - Update PID file path.
    - Add dac_override and dac_read_search capabilities to give "root" the
    ability to write the PID file in /run/chrony/.
    - Prefix flag definition by "flags=".
    - Sort the capabilities.
    - Grant CAP_NET_RAW capability to allow an NTP socket to be bound to a
    device using the SO_BINDTODEVICE socket option on kernels before 5.7.
    - Add comments regarding capabilities.
    - Let chronyd create /var/l{ib,og}/chrony.
    - Remove a superfluous rule.
    - Allow reading of NTP sources in /run/chrony-dhcp/.

  * debian/watch:
    - Make use of special strings.

 -- Vincent Blut <email address hidden>  Fri, 02 Oct 2020 21:21:08 +0200

chrony (3.4-4+deb10u1) buster; urgency=medium

  * debian/patches/:
    - Add create-new-file-when-writing-pidfile.patch to prevent symlink race
    when writing to PID file (CVE-2020-14367).

  * debian/tests/:
    - Fix a regression when running upstream-simulation-test-suite autopkgtest
    on Buster.

  [ Matt Corallo ]
  * debian/usr.sbin.chronyd:
    - Fix temperature reading. (Closes: #970421)

 -- Vincent Blut <email address hidden>  Wed, 16 Sep 2020 13:44:04 +0200

chrony (3.5.1-2) unstable; urgency=medium

  [ Matt Corallo ]
  * debian/usr.sbin.chronyd:
    - Fix temperature reading. (Closes: #970421)

 -- Vincent Blut <email address hidden>  Wed, 16 Sep 2020 12:32:23 +0200

chrony (3.5.1-1) unstable; urgency=medium

  * Import upstream version 3.5.1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.
    - CVE-2020-14367: create new file when writing pidfile.

  * debian/chrony.lintian-overrides:
    - Remove unused override.

  [ Ville Skyttä ]
  * debian/chrony.conf:
    - Comment spelling fix. (MR: !5)

 -- Vincent Blut <email address hidden>  Thu, 20 Aug 2020 14:07:22 +0200

chrony (3.5-9) unstable; urgency=medium

  * debian/patches/:
    - Add allow-some-*time64-syscalls-in-seccomp-filter.patch. Needed for
    32-bit architectures with new system calls using 64-bit time_t.
    (LP: #1878005)

  * debian/tests/control:
    - Add needs-internet restriction to the upstream-simulation-test-suite
    test.

  [ Christian Ehrhardt ]
  * debian/tests/upstream-simulation-test-suite:
    - Skip if preparation steps fail.
    - Make preparation steps more verbose.

 -- Vincent Blut <email address hidden>  Tue, 19 May 2020 16:42:18 +0200

chrony (3.5-8) unstable; urgency=medium

  * debian/postrm:
    - Stop starting systemd-timesyncd in postrm. This is no longer relevant
    since systemd-timesyncd is a standalone package declaring
    Conflicts/Replaces/Provides: time-daemon. (Closes: #955773)

  [ Christian Ehrhardt ]
  * debian/tests/upstream-system-tests:
    - Stop chrony/systemd-timesynd before running these tests. (LP: #1870144)

 -- Vincent Blut <email address hidden>  Sun, 05 Apr 2020 17:44:31 +0200

chrony (3.5-7) unstable; urgency=medium

  * debian/chrony.maintscript:
    - Remove the /etc/NetworkManager/dispatcher.d/20-chrony conffile.

  * debian/control:
    - Support seccomp facility on riscv64. It should be noted that the system
    call filter will stay disabled by default on this architecture until
    Linux >= 5.5 hits unstable.
    - Bump libseccomp-dev build-dep to 2.4.3-1~ to provide seccomp facility on
    riscv64.
    - Break network-manager (<< 1.20.0-1~). Prior to this version,
    NetworkManager would not look for dispatcher scripts into
    /usr/lib/NetworkManager/dispatcher.d/.

  * debian/dirs:
    - Create the usr/lib/NetworkManager/dispatcher.d subdirectories.

  * debian/links:
    - Change the location of the NetworkManager dispatcher script.

  * debian/patches/:
    - Add allow-renameat2-in-seccomp-filter.patch. Required as the riscv64
    architecture does not support the rename() and renameat() system calls.

  * debian/rules:
    - Move the NetworkManager dispatcher script in
     /usr/lib/NetworkManager/dispatcher.d/.

 -- Vincent Blut <email address hidden>  Tue, 17 Mar 2020 15:21:53 +0100

chrony (3.5-6) unstable; urgency=medium

  * debian/chrony.service:
    - Don’t conflict with systemd-timesyncd.service.
    A few users complain that chronyd does not start at boot. The way the
    Conflict= directive works internally might cause both systemd-timesyncd
    and chronyd to be inactive at boot. So by relying solely on the
    disable-with-time-daemon.conf drop-in file provided by systemd, we should
    get rid of this malfunction while still preventing these two time daemons
    from being active at the same time. Kudos notably go to Santiago Vila for
    the report and providing SSH access to a GCE instance where the issue was
    reproducible and Michael Biebl for debugging. (Closes: #947936)

  * debian/control:
    - Bump Standards-Version to 4.5.0 (no changes required).
    - No need to explicitly conflict with ntp as it now provides time-daemon.

  * debian/copyright:
    - Update copyright year for debian/*.

  * debian/patches/:
    - Add allow-clock_adjtime-in-seccomp-filter.patch.
    glibc 2.31 switched the adjtimex() function to the clock_adjtime
    system call.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version. This new version supports glibc >= 2.31 headers.
    (LP: #1866753)

  * debian/tests/control:
    - Run the upstream-simulation-test-suite as root.

 -- Vincent Blut <email address hidden>  Tue, 10 Mar 2020 19:17:16 +0100

chrony (3.5-5) unstable; urgency=medium

  * debian/control:
    - Bump standard-version to 4.4.1 (no change required).

  * debian/install:
    - Install 50-chrony.list in /usr/lib/systemd/ntp-units.d.

  * debian/ntp-units.d/50-chrony.list:
    - Allow timedated to interact with chronyd.

  * debian/patches/*:
    - Cherry-pick upstream commits to better manage RTCs that don't support
    interrupts. This fixes an issue exhibited when a specific upstream system
    test is run on the Ubuntu CI. Thank to Christian Ehrhardt for working
    with Miroslav Lichvar to address this problem.

  * debian/tests/control:
    - Use @builddeps@ as a test dependency for upstream_system_tests.

  [ Christian Ehrhardt ]
  * debian/tests/upstream-simulation-test-suite:
    - Redirect stderr on make call to stdout. On some architectures (e.g. armhf)
    the clksim tests compile but throw some warnings. (MR: !2)

 -- Vincent Blut <email address hidden>  Sun, 22 Dec 2019 17:30:40 +0100

chrony (3.5-4) unstable; urgency=medium

  * debian/tests/control:
    - Add @builddeps@ to the list of dependencies needed by the
    upstream-simulation-test-suite test.

 -- Vincent Blut <email address hidden>  Fri, 30 Aug 2019 00:49:20 +0200

chrony (3.5-3) unstable; urgency=medium

  * debian/chrony.lintian-overrides:
    - Override package-supports-alternative-init-but-no-init.d-script. This
    is a false positive. chrony-dnssrv@.service isn’t a daemon but a oneshot
    service, not started at boot, whose role is to lookup for _ntp._udp DNS SRV
    records.

  * debian/chrony.service:
    - Pull in time-sync.target and order chrony before it as recommended in
    systemd.special(7).

  * debian/control:
    - Bump standard-version to 4.4.0 (no changes required).

  * debian/.gitlab-ci.yml:
    - Switch to standard Salsa Pipeline.
    - Skip the reprotest job for as long as it is run as root due to problems
    with chrony system tests.

  * debian/tests/*:
    - Revamp the upstream-simulation-test-suite test.
    - Adjust dpkg dependencies for upstream-simulation-test-suite.
    - Adjust restrictions for upstream-simulation-test-suite.
    - Introduce upstream-system-tests. Add a new set of tests for testing
    basic chronyd functionality. Destructive tests are run in a virtual
    machine.
    - Add ethtool to the list of dependencies needed by
    run_destructive_system_tests.
    - exit 77 if upstream-simulation-test-suite is run on non-Linux and mark
    the test as skippable. Thanks to Paul Gevers <email address hidden> for the
    suggestion.
    - Make artifacts() exit 1. Again, thanks to Paul Gevers.

 -- Vincent Blut <email address hidden>  Tue, 13 Aug 2019 17:57:47 +0200

chrony (3.5-2) unstable; urgency=medium

  * Merge branch “experimental” into “master”.

  * debian/chrony.dhcp:
    - Fix shellcheck warnings. Patch imported from Fedora.

  * debian/chrony-helper:
    - Fix shellcheck warnings. Patch imported from Fedora.

  * debian/clean:
    - Drop obsolete entries.

  * debian/copyright:
    - Update copyright years.
    - Update copyright holder for the configure script.

  * debian/patches/*:
    - Add update_processing_of_packet_log.patch. This fixes a regression in
    the simulation tests exhibited by the recent clknetsim changes.
    (Closes: #931181)

  * debian/rules:
    - Use dh_missing --fail-missing.

  * debian/tests/upstream-simulation-test-suite:
    - Use a known good clknetsim commit. This should prevent regressions from
    on-going “clknetsim” development.

  * debian/usr.sbin.chronyd:
    - Grant access rights only to the ntp_signd socket. (Closes: #928170)

  [ Christian Ehrhardt ]
  * debian/postrm:
    - Re-establish systemd-timesyncd on removal. (MR: !1)

 -- Vincent Blut <email address hidden>  Sat, 06 Jul 2019 20:33:41 +0200

chrony (3.5-1) experimental; urgency=medium

  * Import upstream version 3.5:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/control:
    - Ignore net-tools and procps build-dependencies if the profile nocheck is
    active.

  * debian/rules:
    - No test suite should be run if nocheck is passed to DEB_BUILD_OPTIONS.

 -- Vincent Blut <email address hidden>  Wed, 15 May 2019 18:44:12 +0200

chrony (3.5~pre1-1) experimental; urgency=medium

  * Import upstream version 3.5-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/.gitlab-ci.yml:
    - Use .build-package template job instead of .build-unstable. The latter
    is deprecated.

  * debian/chrony.keys:
    - Fix the comment about the location of the list of supported hash
    functions and output encoding. These information are now available by
    consulting the “keyfile” directive in the chrony.conf(5) man page.

  * debian/control:
    - Drop dependency on lsb-base. Is is required when booting with sysvinit
    and initscripts, however initscripts already Depends on lsb-base.
    - Build-depend on net-tools and procps. kill, netstat and ps are needed
    for the new system tests executed at build time (iff building as root).

  * debian/copyright:
    - Add an entry for test/system/* files.

  * debian/patches/*:
    - Drop all patches, they have been applied upstream.

  * debian/postinst:
    - Drop migration code from pre-stretch.

  * debian/README.Debian:
    - Fix information related to the chrony.keys file.

 -- Vincent Blut <email address hidden>  Sun, 12 May 2019 22:16:14 +0200

chrony (3.0-4+deb9u2) stretch; urgency=medium

  * debian/patches/*:
    - Add allow-_llseek-in-seccomp-filter.patch. Needed on various 32-bit
    plateforms to log the {raw}measurements and statistics information when
    the seccomp filter is enabled. Thanks a lot to Francesco Poli (wintermute)
    <email address hidden> for the report. (Closes: #923137)
    - Add allow-waitpid-in-seccomp-filter.patch. Needed to correctly stop
    chronyd on some plateforms when the seccomp filter is enabled.

 -- Vincent Blut <email address hidden>  Wed, 06 Mar 2019 11:13:29 +0100

chrony (3.4-4) unstable; urgency=medium

  * debian/patches/*:
    - Add allow-further-syscalls-in-seccomp-filter.patch. Supplementing the
    seccomp filter whitelist with those syscalls is a prerequisite, notably for
    the arm64 architecture.

  [ Leigh Brown ]
  * debian/patches/*:
    - Add allow-recv-send-in-seccomp-filter.patch. Necessary on armel and
    ppc64el. Other architectures might also be affected. (Closes: #924494)

 -- Vincent Blut <email address hidden>  Mon, 18 Mar 2019 19:35:34 +0100

chrony (3.4-3) unstable; urgency=medium

  * debian/.gitlab-ci.yml:
    - Check for missing hardening flags.

  * debian/patches/*:
    - Add allow-_llseek-in-seccomp-filter.patch. Needed on various 32-bit
    plateforms to log the {raw}measurements and statistics information when
    the seccomp filter is enabled. Thanks a lot to Francesco Poli (wintermute)
    <email address hidden> for the report. (Closes: #923137)
    - Add allow-waitpid-in-seccomp-filter.patch. Needed to correctly stop
    chronyd on some plateforms when the seccomp filter is enabled.

 -- Vincent Blut <email address hidden>  Mon, 04 Mar 2019 23:32:12 +0100

chrony (3.4-2) unstable; urgency=medium

  * debian/.gitlab-ci.yml:
    - Replace home-made GitLab CI with the standard Salsa pipeline.
    - Allow autopkgtest job to fail. The time-sources-from-dhcp-servers test
    currently fails due to a testbed issue on salsa CI.

  * debian/chrony.default:
    - Enable the system call filter by default.

  * debian/control:
    - Bump standard-version to 4.3.0 (no changes required).
    - Use the new debhelper-compat (= 12) notation and drop d/compat.
    - Add Pre-Depends: ${misc:Pre-Depends}. Debhelper compatibility level 12
    makes use of the “--skip-systemd-native” flag from “invoke-rc.d”. Adding
    Pre-Depends: ${misc:Pre-Depends} to d/control ensure that we have a recent
    enough version of “init-system-helpers”.
    - Suggest networkd-dispatcher.

  * debian/copyright:
    - Add myself as a copyright holder for 2019.

  * debian/links:
    - Now that “networkd-dispatcher” is in the Debian archive, link
    NetworkManager dispatcher script to networkd-dispatcher routable and off
    states. Patch cherry-picked from Ubuntu; thanks to Christian Ehrhardt
    <email address hidden> for working on this.

  * debian/NEWS:
    - Report that a system call filter is now enabled by default and the way
    to disable it if needed.

  * debian/rules:
    - Don’t enable the system call filter on some architectures due to missing
    support in the “libseccomp” and/or the Linux kernel.

  * debian/upstream/:
    - Strip upstream key from extra signatures. Thanks lintian!
    - Remove the Miroslav-Lichvar.txt file as it serves no purpose.

  * debian/usr.sbin.chronyd:
    - Don’t include “tunables/sys”. The etc/apparmor.d/tunables/sys file has
    been deprecated in AppArmor 2.13.1! The @{sys} variable is now defined in
    “tunables/kernelvars” which is included in “tunables/global”.

 -- Vincent Blut <email address hidden>  Wed, 13 Feb 2019 17:08:17 +0100

chrony (3.4-1) unstable; urgency=medium

  * Import upstream version 3.4:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * Merge branch “experimental” into “master”.

  * debian/chrony.service:
    - Conflict with ntpsec.service.

  * debian/copyright:
    - Update copyright years.

  * debian/patches/*:
    - Remove fix-samplefilt-unit-test-to-work-with-low-precision-clock.patch,
    fixed upstream.

 -- Vincent Blut <email address hidden>  Fri, 21 Sep 2018 14:12:03 +0200

chrony (3.4~pre1-2) experimental; urgency=medium

  * debian/patches/*:
    - Cherry-pick upstream patch to fix samplefilt unit test to work with
    low-precision clocks. This should prevent chrony from failing to build
    from source on HPPA and Alpha.

 -- Vincent Blut <email address hidden>  Mon, 10 Sep 2018 18:39:58 +0200

chrony (3.4~pre1-1) experimental; urgency=medium

  * Import upstream version 3.4-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/:
    - Add “.gitlab-ci.yml” file to use GitLab Continuous Integration.

  * debian/chrony.if-{post-down,up}:
    - Use the new “onoffline” command to tell chronyd to switch all sources to
    the online or offline status according to the current network configuration.

  * debian/chrony.ppp.ip-{down,up}:
    - As for ifupdown scripts, use the “onoffline” command.

  * debian/control:
    - Bump standard-version to 4.2.1 (no changes required).

  * debian/patches/*:
    - Remove fall-back-to-urandom.patch. Applied in this prerelease.

  * debian/post{inst,rm}:
    - Use “command -v” instead of “which” to enhance portability.

 -- Vincent Blut <email address hidden>  Sun, 02 Sep 2018 19:14:08 +0200

chrony (3.3-3) unstable; urgency=medium

  * debian/:
    - Normalize packaging with “wrap-and-sort -ab”.

  * debian/control:
    - Bump standard-version to 4.2.0:
        ↳ Install upstream release notes as “/usr/share/doc/chrony/NEWS.gz”.
          Installing these as “/usr/share/doc/package/changelog.gz” is now
          deprecated.

  * debian/patches/:
    - Cherry-pick upstream patch to avoid hangs when starting
    chronyd on newer kernels by falling back to urandom.
    Thanks to Gustavo Scalet <email address hidden> for the report and
    the initial patch. (LP: #1787366, Closes: #906276)

  * debian/upstream/metadata:
    - Add DEP12 upstream metadata file.

 -- Vincent Blut <email address hidden>  Sat, 18 Aug 2018 16:23:19 +0200

chrony (3.3-2) unstable; urgency=medium

  * debian/chrony.service:
    - Conflict with ntp.service.

  * debian/control:
    - Bump standard-version to 4.1.4 (no changes required).
    - Switch to the Nettle cryptographic library for hash functions.

  [ Helmut Grohne ]
  * debian/rules:
    - Pass CC to make and set “--host-system” to fix FTCBFS. (Closes: #895852)

  [ Christian Ehrhardt ]
  * debian/usr.sbin.chronyd:
    - Support all paths suggested in the man page.
    (LP: #1771028, Closes: #898614)

 -- Vincent Blut <email address hidden>  Mon, 14 May 2018 21:37:30 +0200

chrony (3.3-1) unstable; urgency=medium

  * Import upstream version 3.3:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * Merge branch “experimental” into “master”.

  * debian/copyright:
    - Update copyright year.

  * debian/usr.sbin.chronyd:
    - Allow CAP_NET_ADMIN to support HW timestamping. (LP: #1761327)

 -- Vincent Blut <email address hidden>  Thu, 05 Apr 2018 02:08:31 +0200

chrony (3.2-5) unstable; urgency=medium

  [ Christian Ehrhardt ]
  * debian/usr.sbin.chronyd:
    - Allow write access to RTC, PPS and PTP devices.
    (Closes: #891201, LP: #1751241)

 -- Vincent Blut <email address hidden>  Wed, 28 Feb 2018 17:31:08 +0100

chrony (3.3~pre1-1) experimental; urgency=medium

  * Import upstream version 3.3-pre1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/copyright:
    - Add “hash_nettle.c” copyright information and update copyright year of
    test/unit/*

 -- Vincent Blut <email address hidden>  Thu, 15 Mar 2018 13:58:21 +0100

chrony (3.2-4) unstable; urgency=medium

  * debian/changelog:
    - Remove trailing spaces.

  * debian/chrony-dnssrv@.service:
    - Use NTP servers obtained from DNS SRV records.

  * debian/chrony-dnssrv@.timer:
    - Periodic lookup of DNS SRV records.

  * debian/chrony-helper:
    - New helper script to make use of NTP servers obtained from DHCP and
    _ntp._udp DNS SRV records.

  * debian/chrony.dhcp:
    - Add a dhclient-exit-hook script to add/remove NTP servers depending
    on the operations invoked by the DHCP client. (Closes: #889656)

  * debian/chrony.service:
    - Run “/usr/lib/chrony/chrony-helper update-daemon” after starting chronyd.

  * debian/control:
    - Suggest dnsutils. The dig utility is used to update files with NTP
    servers from DNS SRV records.

  * debian/init:
    - Run “/usr/lib/chrony/chrony-helper update-daemon” after starting chronyd.

  * debian/install:
    - Install the chrony-helper script in /usr/lib/chrony.
    - Install chrony-dnssrv@.* files in /lib/systemd/system.

  * debian/postinst:
    - Don’t use recursive chown as this is vulnerable to hardlink attacks on
    mainline, non-Debian kernels that do not have fs.protected_hardlinks=1.
    Thanks Lintian!

  * debian/postrm:
    - Remove “/run/chrony” on purge.

  * debian/rules:
    - Install the dhclient-exit-hook script in /etc/dhcp/dhclient-enter-hooks.

  * debian/tests/:
    - Use autopkgtest to ensure that chronyd can use NTP servers obtained from
    DHCP servers.

 -- Vincent Blut <email address hidden>  Tue, 20 Feb 2018 18:27:10 +0100

chrony (3.2-3) unstable; urgency=medium

  [ Christian Ehrhardt ]
  * debian/chrony.default:
    - Mention systemd service file in the comment.

  * debian/chrony.service:
    - Support the DAEMON_OPTS variable from “/etc/default/chrony” in systemd
    environment. (LP: #1746081, Closes: #889012)

  * debian/usr.sbin.chronyd:
    - Allow the creation of /run/chrony on demand.
    (LP: #1746444, Closes: #889011)

 -- Vincent Blut <email address hidden>  Wed, 07 Feb 2018 21:27:09 +0100

chrony (3.2-2) unstable; urgency=medium

  * Initial AppArmor profile for chronyd. Thanks to Jamie
    Strandboge <email address hidden>. (Closes: #888038)

  * debian/compat:
    - Bump to debhelper compat 11.

  * debian/control:
    - Bump standard-version to 4.1.3 (no changes required).
    - Build depend on debhelper ≥ 11.
    - Set “Rules-Requires-Root: no”.
    - Move Vcs-* to salsa.debian.org.

  * debian/copyright:
    - Add myself as a copyright holder for 2018.

  * debian/postinst:
    - Don’t force removal of cron file since it doesn’t exist anymore.

  * debian/preinst:
    - Update the chrony version on which to act.
    - Add the debhelper token.

  * debian/usr.sbin.chronyd:
    - Improve AppArmor profile to support more chronyd features and ease
    portability with other distros.

 -- Vincent Blut <email address hidden>  Sun, 28 Jan 2018 19:33:46 +0100

Available diffs

• diff from 3.2-1ubuntu3 (in Ubuntu) to 3.2-2 (2.0 KiB)

chrony (3.0-4+deb9u1) stretch; urgency=medium

  * debian/chrony.if-up:
    - Do not pass the “burst” command to chronyc as the script could return an
    error in certain situations. As a consequence, that would prevent ifupdown
    from writing the current state of the interfaces in /run/network/ifstate.
    Thanks to John Eikenberry <email address hidden> for reporting that issue.
    (Closes: #868491)

  * debian/chrony.ppp.ip-up:
    - Take the same action as for the “chrony.if-up” script as a precautionary
    measure.

 -- Vincent Blut <email address hidden>  Sat, 22 Jul 2017 17:24:44 +0200

chrony (3.2-1) unstable; urgency=medium

  * Import upstream version 3.2:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

 -- Vincent Blut <email address hidden>  Fri, 15 Sep 2017 11:37:10 +0200

chrony (3.2~pre2-1) experimental; urgency=medium

  * Import upstream version 3.2-pre2:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/control:
    - Bump standard-version to 4.1.0 (no changes required).

  * debian/copyright:
    - Update copyright years.

 -- Vincent Blut <email address hidden>  Wed, 30 Aug 2017 15:48:37 +0200

chrony (3.2~pre1-1) experimental; urgency=medium

  * Import upstream version 3.2-pre1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/patches/*:
    - Remove allow_getpid_in_seccomp_filter.patch and update the series file
    accordingly.

  * debian/tests/upstream-simulation-test-suite:
    - Run tests in multiple iterations.

 -- Vincent Blut <email address hidden>  Tue, 25 Jul 2017 21:13:22 +0200

chrony (3.1-5) unstable; urgency=medium

  * debian/chrony.if-up:
    - Do not pass the “burst” command to chronyc as the script could return an
    error in certain situations. As a consequence, that would prevent ifupdown
    from writing the current state of the interfaces in /run/network/ifstate.
    Thanks to John Eikenberry <email address hidden> for reporting that issue.
    (Closes: #868491)

  * debian/chrony.ppp.ip-up:
    - Take the same action as for the “chrony.if-up” script as a precautionary
    measure.

 -- Vincent Blut <email address hidden>  Mon, 17 Jul 2017 16:47:56 +0200

Available diffs

• diff from 3.1-4 to 3.1-5 (757 bytes)

chrony (3.1-4) unstable; urgency=medium

  * Now that Stretch has been released (\o/), let’s upload chrony 3.1 to
    unstable.

  * debian/:
    - Remove the menu file used to launch “chronyc”. It is a CLI only tool,
    thus it probably does not make a lot of sense to keep it in the Debian
    menu.

  * debian/control:
    - Drop dependency on pre-jessie util-linux version.
    - Bump standard-version to 4.0.0 (no changes required).

  * debian/tests/upstream-simulation-test-suite:
    - Fix the leading comment which mentioned “vm” despite the fact that the
    test runs in a container.

 -- Vincent Blut <email address hidden>  Mon, 19 Jun 2017 02:30:10 +0200

Available diffs

• diff from 3.0-4 to 3.1-4 (27.3 KiB)

chrony (3.1-3) experimental; urgency=medium

  * debian/chrony.if-{post-down,up}:
    - Remove unnecessary “else” statements.

  * debian/chrony.ppp.ip-down:
    - Don’t check and delete “/var/run/chrony-ppp-up”, that file doesn’t exist
    anymore.
    - Check for pid file existence instead of calling “pidof”.

  * debian/chrony.ppp.ip-up:
    - Don’t create “/var/run/chrony-ppp-up” file after the ppp link came up.
    - Check for pid file existence instead of calling “pidof”.
    - Don’t call “chronyc” using its absolute path.
    - Check for the presence of a default route before advising “chronyd” that
    the network connectivity to the sources is ready.

  * debian/init:
    - Check if “$PIDFILE” exists before taking action.
    - Do not print informational messages.
    - Remove the “chronyd” pid file when stopping as it doesn’t do it on
    its own.
    - Rework the “restart|force-reload” pattern.
    - Make use of some init-functions.
    - Print a message if “chronyd” is already running while attempting to start
    it.
    - Do not delete “/var/run/chrony-ppp-up”, that file doesn’t exist anymore.

  * d/rules:
    - Move the default pid file from “/var/run” to “/run”.

  * d/tests/*:
    - Use autopkgtest facility to run the upstream simulation test suite.

 -- Vincent Blut <email address hidden>  Sun, 14 May 2017 17:26:15 +0200

chrony (3.0-4) unstable; urgency=medium

  * debian/patches/*:
    - Backport commit 768bce799bfe to make chrony operable with the syscall
    filtering feature enabled in level 1. (Closes: #861258)

 -- Vincent Blut <email address hidden>  Wed, 26 Apr 2017 17:39:44 +0200

Available diffs

• diff from 3.0-3 to 3.0-4 (967 bytes)

chrony (3.1-2) experimental; urgency=medium

  * Merge branch 'master' into experimental. (Closes: #861258)

  * debian/patches/*:
    - Remove the “fix_time_smoothing_in_interleaved_mode.patch” patch. Not
    needed anymore.

 -- Vincent Blut <email address hidden>  Wed, 26 Apr 2017 21:17:43 +0200

chrony (3.0-3) unstable; urgency=medium

  * debian/patches/*:
    - Backport an upstream patch to fix time smoothing in interleaved mode.
    (Closes: #854424)

 -- Vincent Blut <email address hidden>  Tue, 07 Feb 2017 00:37:24 +0100

Available diffs

• diff from 3.0-2 to 3.0-3 (1.1 KiB)

chrony (3.1-1) experimental; urgency=medium

  * Import upstream version 3.1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/chrony.conf:
    - Remove the “hwclockfile” directive. Unneeded now that the configure
    script allows us to set the default path to the adjtime file via the
    “--with-hwclockfile” option.

  * debian/copyright:
    - Update copyright years.

  * debian/rules:
    - Specify default path to hwclock adjtime file.

 -- Vincent Blut <email address hidden>  Thu, 02 Feb 2017 19:24:30 +0100

chrony (3.0-2) unstable; urgency=medium

  * debian/chrony.conf:
    - Disable logging by default, it waste some disk space and users are
    probably better served by “chronyc sources” and “chronyc sourcestats”
    commands anyway.

  * debian/chrony.service:
    - Remove the “Restart=on-failure” option. There are possible security
    implications for NTP clients.

  * debian/dirs:
    - Add etc/logrotate.d to avoid build failure.

  * Remove our logrotate configuration file in favour of the upstream’s one.

 -- Vincent Blut <email address hidden>  Wed, 18 Jan 2017 15:26:31 +0100

Available diffs

• diff from 3.0-1 to 3.0-2 (1.2 KiB)