a32f34b408
Knife-Zero doesn't include Berkshelf support, so vendoring everything in the repo is convenient again
130 lines
4.1 KiB
Ruby
130 lines
4.1 KiB
Ruby
#
|
|
# Cookbook:: ntp
|
|
# Recipe:: default
|
|
# Author:: Joshua Timberman (<joshua@chef.io>)
|
|
# Author:: Tim Smith (<tsmith@chef.io>)
|
|
#
|
|
# Copyright:: 2009-2017, Chef Software, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
::Chef::Resource.send(:include, Opscode::Ntp::Helper)
|
|
|
|
case node['platform_family']
|
|
when 'windows'
|
|
include_recipe 'ntp::windows_client'
|
|
when 'mac_os_x'
|
|
include_recipe 'ntp::mac_os_x_client'
|
|
# On OS X we only support simple client config and nothing more
|
|
return 0
|
|
else
|
|
|
|
node['ntp']['packages'].each do |ntppkg|
|
|
package ntppkg
|
|
end
|
|
|
|
package 'Remove ntpdate' do
|
|
package_name 'ntpdate'
|
|
action :remove
|
|
only_if { node['platform_family'] == 'debian' && node['platform_version'].to_i >= 16 }
|
|
end
|
|
|
|
[node['ntp']['varlibdir'], node['ntp']['statsdir']].each do |ntpdir|
|
|
directory ntpdir do
|
|
owner node['ntp']['var_owner']
|
|
group node['ntp']['var_group']
|
|
mode '0755'
|
|
end
|
|
end
|
|
|
|
cookbook_file node['ntp']['leapfile'] do
|
|
owner node['ntp']['conf_owner']
|
|
group node['ntp']['conf_group']
|
|
mode '0644'
|
|
source 'ntp.leapseconds'
|
|
notifies :restart, "service[#{node['ntp']['service']}]"
|
|
end
|
|
|
|
include_recipe 'ntp::apparmor' if node['ntp']['apparmor_enabled']
|
|
end
|
|
|
|
if node['ntp']['servers'].empty?
|
|
node.default['ntp']['servers'] = [
|
|
'0.pool.ntp.org',
|
|
'1.pool.ntp.org',
|
|
'2.pool.ntp.org',
|
|
'3.pool.ntp.org',
|
|
]
|
|
Chef::Log.debug 'No NTP servers specified, using default ntp.org server pools'
|
|
end
|
|
|
|
if node['ntp']['listen'].nil? && !node['ntp']['listen_network'].nil?
|
|
if node['ntp']['listen_network'] == 'primary'
|
|
node.normal['ntp']['listen'] = node['ipaddress']
|
|
else
|
|
require 'ipaddr'
|
|
net = IPAddr.new(node['ntp']['listen_network'])
|
|
|
|
node['network']['interfaces'].each do |_iface, addrs|
|
|
addrs['addresses'].each do |ip, params|
|
|
addr = IPAddr.new(ip) if params['family'].eql?('inet') || params['family'].eql?('inet6')
|
|
node.normal['ntp']['listen'] = addr if net.include?(addr)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
node.default['ntp']['tinker']['panic'] = 0 if node['virtualization'] &&
|
|
node['virtualization']['role'] == 'guest' &&
|
|
node['ntp']['disable_tinker_panic_on_virtualization_guest']
|
|
|
|
template node['ntp']['conffile'] do
|
|
source 'ntp.conf.erb'
|
|
owner node['ntp']['conf_owner']
|
|
group node['ntp']['conf_group']
|
|
mode '0644'
|
|
notifies :restart, "service[#{node['ntp']['service']}]" unless node['ntp']['conf_restart_immediate']
|
|
notifies :restart, "service[#{node['ntp']['service']}]", :immediately if node['ntp']['conf_restart_immediate']
|
|
variables(
|
|
lazy { { ntpd_supports_native_leapfiles: ntpd_supports_native_leapfiles } }
|
|
)
|
|
end
|
|
|
|
if node['ntp']['sync_clock'] && !platform_family?('windows')
|
|
execute "Stop #{node['ntp']['service']} in preparation for ntpdate" do
|
|
command node['platform_family'] == 'freebsd' ? '/usr/bin/true' : '/bin/true'
|
|
action :run
|
|
notifies :stop, "service[#{node['ntp']['service']}]", :immediately
|
|
end
|
|
|
|
execute 'Force sync system clock with ntp server' do
|
|
command node['platform_family'] == 'freebsd' ? 'ntpd -q' : "ntpd -q -u #{node['ntp']['var_owner']}"
|
|
action :run
|
|
notifies :start, "service[#{node['ntp']['service']}]"
|
|
end
|
|
end
|
|
|
|
execute 'Force sync hardware clock with system clock' do
|
|
command 'hwclock --systohc'
|
|
action :run
|
|
only_if { node['ntp']['sync_hw_clock'] && !(platform_family?('windows') || platform_family?('freebsd')) }
|
|
end
|
|
|
|
service node['ntp']['service'] do
|
|
supports status: true, restart: true
|
|
action [:enable, :start]
|
|
timeout 120 if platform_family?('windows')
|
|
retries 3
|
|
retry_delay 5
|
|
end
|