Ansible-Roles/roles/chrony

chrony

chronyd is a daemon for synchronisation of the system clock. It can synchronise the clock with NTP servers, reference clocks (e.g. a GPS receiver), and manual input using wristwatch and keyboard via chronyc. It can also operate as an NTPv4 (RFC 5905) server and peer to provide a time service to other computers in the network.

Bugs

Not able to set time in rhel8 due to bug in rhel8

Version

• 4.1.1 --- Updated molecule test setup
• 4.1.0 --- Add support for RHEL10. The role now supports os_family = redhat
• 4.0.2 --- Change test setup to use Ansible Molecule
• 4.0.1 --- Allow Fedora CoreOS 41 and remove support for older fedora versions.
• 4.0.0 --- Updated for ansible-core 2.16. Removed support for Ubuntu Xenial and Ubuntu Bionic.
• 3.2.0 --- Added Ubuntu Noble support
• 3.1.3 --- Allow Fedora CoreOS 39
• 3.1.2 --- fix checkmode
• 3.1.1 --- bug fix, ansible-lint
• 3.1.0 --- added support for Fedora CoreOS (FCOS 38.x.x.x) but with no tests
• 3.0.1 --- bug fix, ansible-lint
• 3.0.0 --- updated to ansible version 2.12
• 2.3.0 --- added RHEL 9 and CentOS Stream 8 support
• 2.2.0 --- added configuration options to use role for ntp server configuration, including leap second smearing
• 2.1.0 --- add ubuntu jammy and removed centos8 support + rettet noe syntax i meta og template
• 2.0.0 --- remove ubuntu xenial support + add rtcsync and allow config
• 1.5.0 --- add support for setting timezone
• 1.4.0 --- add rhel8 and remove trusty+centos6
• 1.3.0 --- remove ubuntu precise from testing
• 1.2.1 --- fix lint problem
• 1.2.0 --- added ubuntu focal, 20.04
• 1.1.2 --- tested with Ansible 2.9.11
• 1.1.1 --- prepare for github
• 1.1.0 --- ensure NTP traffic on port 123, for firewall purposes
• 1.0.2 --- removed unsupported directive for v3
• 1.0.1 --- fixed restart when config changes
• 1.0.0 --- initial version
• master --- latest development version

Requirements

This role supports

• RedHat Based OS, version 8,9,10
• Ubuntu 20.04, 22.04, and 24.04
• CentOS 7
• CentOS Stream 8
• Fedora CoreOS 41

Role Variables

• chrony_allow_enable --- enable allow config, default false
• chrony_allow --- list of IP addresses/networks allowed to connect to chrony, default [127.0.0.1]
• chrony_disable_ntpd --- disable the old NTP daemon, default true
• chrony_enable --- enable chrony NTP daemon, default true
• chrony_log_enable --- enable logging, default false
• chrony_log --- configure logging (requires chrony_logging_enable set to true), default measurements statistics tracking
• chrony_logdir --- configure log directory (requires chrony_logging_enable set to true), default /var/log/chrony/
• chrony_ntp_servers --- list of NTP servers in use, default ['0.pool.ntp.org', '1.pool.ntp.org', '2.pool.ntp.org', '3.pool.ntp.org']
• chrony_rtcsync --- enable kernel synchronization of the real-time clock (RTC), default false
• chrony_smearing --- enable leap second smearing (should only be used for NTP servers), default false
• chrony_timezone --- timezone for the system. Run timedatectl list-timezones on any systemd system to list available timezones, default UTC

Dependencies

None.

Example Playbook

- hosts: servers
  roles:
     - role: chrony
       chrony_allow_enable: true
       chrony_allow:
         - 10.10.10.0/24
         - 127.0.0.1
         - ::/0
       chrony_disable_ntpd: true
       chrony_enable: true
       chrony_log_enable: true
       chrony_log: measurements statistics tracking
       chrony_logdir: /var/log/chrony/
       chrony_ntp_servers:
         - 0.ubuntu.pool.ntp.org
         - 1.ubuntu.pool.ntp.org
         - 2.ubuntu.pool.ntp.org
         - 3.ubuntu.pool.ntp.org
       chrony_rtcsync: true
       chrony_smearing: true
       chrony_timezone: "Europe/Oslo"

Testing

Testing is done using Ansible Molecule. It uses our libvirt-provision role as backend.

Testing is done Almalinux, and Ubuntu.

To run test:

molecule test

To run test step by step run:

molecule create
molecule converge
molecule idempotence
molecule verify
molecule destroy

License

GPLv2

Author Information

Created 2020 by IT Infrastructure at MET Norway Contactpoint: IT Infrastructure Basis Team

set vim: spell spelllang=en: