chef/cookbooks/ntp/recipes/default.rb
2017-06-09 21:23:42 +02:00

130 lines
4.1 KiB
Ruby

#
# Cookbook:: ntp
# Recipe:: default
# Author:: Joshua Timberman (<joshua@chef.io>)
# Author:: Tim Smith (<tsmith@chef.io>)
#
# Copyright:: 2009-2017, Chef Software, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
::Chef::Resource.send(:include, Opscode::Ntp::Helper)
case node['platform_family']
when 'windows'
include_recipe 'ntp::windows_client'
when 'mac_os_x'
include_recipe 'ntp::mac_os_x_client'
# On OS X we only support simple client config and nothing more
return 0
else
node['ntp']['packages'].each do |ntppkg|
package ntppkg
end
package 'Remove ntpdate' do
package_name 'ntpdate'
action :remove
only_if { node['platform_family'] == 'debian' && node['platform_version'].to_i >= 16 }
end
[node['ntp']['varlibdir'], node['ntp']['statsdir']].each do |ntpdir|
directory ntpdir do
owner node['ntp']['var_owner']
group node['ntp']['var_group']
mode '0755'
end
end
cookbook_file node['ntp']['leapfile'] do
owner node['ntp']['conf_owner']
group node['ntp']['conf_group']
mode '0644'
source 'ntp.leapseconds'
notifies :restart, "service[#{node['ntp']['service']}]"
end
include_recipe 'ntp::apparmor' if node['ntp']['apparmor_enabled']
end
if node['ntp']['servers'].empty?
node.default['ntp']['servers'] = [
'0.pool.ntp.org',
'1.pool.ntp.org',
'2.pool.ntp.org',
'3.pool.ntp.org',
]
Chef::Log.debug 'No NTP servers specified, using default ntp.org server pools'
end
if node['ntp']['listen'].nil? && !node['ntp']['listen_network'].nil?
if node['ntp']['listen_network'] == 'primary'
node.normal['ntp']['listen'] = node['ipaddress']
else
require 'ipaddr'
net = IPAddr.new(node['ntp']['listen_network'])
node['network']['interfaces'].each do |_iface, addrs|
addrs['addresses'].each do |ip, params|
addr = IPAddr.new(ip) if params['family'].eql?('inet') || params['family'].eql?('inet6')
node.normal['ntp']['listen'] = addr if net.include?(addr)
end
end
end
end
node.default['ntp']['tinker']['panic'] = 0 if node['virtualization'] &&
node['virtualization']['role'] == 'guest' &&
node['ntp']['disable_tinker_panic_on_virtualization_guest']
template node['ntp']['conffile'] do
source 'ntp.conf.erb'
owner node['ntp']['conf_owner']
group node['ntp']['conf_group']
mode '0644'
notifies :restart, "service[#{node['ntp']['service']}]" unless node['ntp']['conf_restart_immediate']
notifies :restart, "service[#{node['ntp']['service']}]", :immediately if node['ntp']['conf_restart_immediate']
variables(
lazy { { ntpd_supports_native_leapfiles: ntpd_supports_native_leapfiles } }
)
end
if node['ntp']['sync_clock'] && !platform_family?('windows')
execute "Stop #{node['ntp']['service']} in preparation for ntpdate" do
command node['platform_family'] == 'freebsd' ? '/usr/bin/true' : '/bin/true'
action :run
notifies :stop, "service[#{node['ntp']['service']}]", :immediately
end
execute 'Force sync system clock with ntp server' do
command node['platform_family'] == 'freebsd' ? 'ntpd -q' : "ntpd -q -u #{node['ntp']['var_owner']}"
action :run
notifies :start, "service[#{node['ntp']['service']}]"
end
end
execute 'Force sync hardware clock with system clock' do
command 'hwclock --systohc'
action :run
only_if { node['ntp']['sync_hw_clock'] && !(platform_family?('windows') || platform_family?('freebsd')) }
end
service node['ntp']['service'] do
supports status: true, restart: true
action [:enable, :start]
timeout 120 if platform_family?('windows')
retries 3
retry_delay 5
end