Your message dated Mon, 30 Sep 2019 13:51:04 +0000
with message-id <[email protected]>
and subject line Bug#924192: fixed in ntpsec 1.1.7+dfsg1-1
has caused the Debian Bug report #924192,
regarding ntpsec: at boot ntpsec starts before DNS is available
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
924192: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924192
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ntpsec
Version: 1.1.3+dfsg1-2
Severity: important
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
the /etc/ntpsec/ntp.conf file (attached) has two "pool" directives and no
"server" directives.
So it requires DNS (hence network services) to find out the IP addresses it
needs for servers.
DNS fails on the first "peer" and (for some reason) succeeds on the second
"peer".
If ntpsec implemented the "preempt" option on "peer" directives, the first
"peer" would be
revisited after a few minutes and all would be well. But it doesn't. So the
first "peer"
is as if it never existed.
* What exactly did you do (or not do) that was effective (or ineffective)?
Wait several seconds after boot completes then issue "sudo service ntpset
restart"
* What was the outcome of this action?
This time around, it sees both sets of "peers".
* What outcome did you expect instead?
I would have hoped that the systemd stuff would wait until DNS was available
before starting up ntpsec.
Unfortunately, I don't know systemd configuration well enough to suggest a
patch.
*** End of the template - remove these template lines ***
Systemd log files of a representative boot can be provided if necessary.
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: armhf (armv7l)
Kernel: Linux 4.19.0-2-armmp (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages ntpsec depends on:
ii adduser 3.118
ii libc6 2.28-7
ii libcap2 1:2.25-2
ii libssl1.1 1.1.1a-1
ii lsb-base 10.2018112800
ii netbase 5.6
ii python3 3.7.2-1
ii python3-ntp 1.1.3+dfsg1-2
ii tzdata 2018i-1
Versions of packages ntpsec recommends:
ii cron [cron-daemon] 3.0pl1-132
ii systemd 241-1
Versions of packages ntpsec suggests:
ii apparmor 2.13.2-9
ii ntpsec-doc 1.1.3+dfsg1-2
pn ntpsec-ntpviz <none>
-- Configuration Files:
/etc/default/ntpsec changed:
NTPD_OPTS="-g -N"
IGNORE_DHCP="yes"
/etc/ntpsec/ntp.conf changed:
driftfile /var/lib/ntpsec/ntp.drift
leapfile /usr/share/zoneinfo/leap-seconds.list
statsdir /var/log/ntpsec/
statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
tos minclock 7 minsane 5
pool pool.rcthomas.org minpoll 3 maxpoll 6 prefer iburst
pool us.pool.ntp.org minpoll 6 maxpoll 10 iburst
restrict default kod nomodify nopeer noquery limited
restrict 127.0.0.1
restrict ::1
restrict 192.168.0.0 mask 255.255.240.0 nomodify
restrict 2001:4978:02d2:0001::0 mask ffff:ffff:ffff:ffff:0000:0000:0000:0000
nomodify
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: ntpsec
Source-Version: 1.1.7+dfsg1-1
We believe that the bug you reported is fixed in the latest version of
ntpsec, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Richard Laager <[email protected]> (supplier of updated ntpsec package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 29 Sep 2019 22:27:38 -0500
Source: ntpsec
Architecture: source
Version: 1.1.7+dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: Richard Laager <[email protected]>
Changed-By: Richard Laager <[email protected]>
Closes: 924192 926877 929756 931327 931414
Changes:
ntpsec (1.1.7+dfsg1-1) unstable; urgency=medium
.
* New upstream version (Closes: 931327)
- NTS is now implemented.
https://tools.ietf.org/html/draft-ietf-ntp-using-nts-for-ntp
We thank Cisco for sponsoring the NTS development.
- Lots of fixes and cleanups to PPS, both implementation and
documentation.
- Allow "prefer" on a "pps" peer to use it with any source.
- NIST lockclock mode is now a runtime option set by the (previously
unused) flag1 mode bit of the local-clock driver.
- The numeric literal argument of the 'time1' fudge option on a clock
can now have one or more letter suffixes that compensate for era
rollover in a GPS device. Each "g" adds the number of seconds in a
1024-week (10-bit) GPS era. Each "G" adds the number of seconds in a
8192-week (13-bit) GPS era.
- The neoclock4x driver has been removed, due to the hardware and the
vendor having utterly vanished from the face of the earth.
- Update libjsmn with upstream sync
- ntpviz: Add -T TERMINAL option.
- Fix slow DNS retries (Closes: 924192)
* Return to new upstream GPG key
* Drop many patches (merged upstream)
* Refresh Debian-specific patches
* ntpdate.8: Remove duplicated -o option
* ntpdate.8: Remove -p option (Closes: 926877)
* ntpdate.8: Remove -e option
* ntpdate.8: Remove inaccurate BUGS section
* Update ntpdate-debian.8 to match ntpdate.8
* Fix ntpdate -s (syslog) to fix the if-up hook (Closes: 931414)
* Fix cron jobs for systemd-cron (Closes: 929756)
* Sort debian/ntpsec.install
* Give the CloudFlare server as an example with NTS
* Add a hint to ntp.conf for NTS servers
* Add nts-keys file to AppArmor profile
* Add ssl_certs and ssl_keys to apparmor for NTS
* Update Standards-Version to 4.4.1 (no changes)
* Use python2 instead of python for ntploggps
* Fix a spelling error in ntp.conf.5
* Update to debhelper 12
* Fix/suppress dh_missing warnings
Checksums-Sha1:
ddf02e52abbc7984d85e22e3ecf257953bee40e7 2417 ntpsec_1.1.7+dfsg1-1.dsc
f985392f654c5718d0fcf3ec6da42eeb4da707a1 2566278 ntpsec_1.1.7+dfsg1.orig.tar.gz
66a6598d1613db595322b55709e3e14b29ffb3d7 45004
ntpsec_1.1.7+dfsg1-1.debian.tar.xz
aac880d38cdf9ce47fa0c465981f0ad5357b15b5 9558
ntpsec_1.1.7+dfsg1-1_amd64.buildinfo
Checksums-Sha256:
c4d7633b3d91a578e52b45c8b43608e06130a199250ff02d3507854a877dcab1 2417
ntpsec_1.1.7+dfsg1-1.dsc
2d448957d03ea8caa7b52e36b0b58d9eaddc02079c8f942653802d87815aff78 2566278
ntpsec_1.1.7+dfsg1.orig.tar.gz
628a0db41a180cf65e4dc2ca369e0089f7c8d195446e2763ef96df57e57b4d3f 45004
ntpsec_1.1.7+dfsg1-1.debian.tar.xz
f3a684291f79933a536672bc607ff5e7952c6240b0eb9fcfd17734ee13129db6 9558
ntpsec_1.1.7+dfsg1-1_amd64.buildinfo
Files:
382d9fef4e12065a3ca56adba21b2ade 2417 net optional ntpsec_1.1.7+dfsg1-1.dsc
e45bcf4b1afd68383b77e71c7c574709 2566278 net optional
ntpsec_1.1.7+dfsg1.orig.tar.gz
ea7d24facb99caca4bd304c065013044 45004 net optional
ntpsec_1.1.7+dfsg1-1.debian.tar.xz
3c8ce8496e03951ee67ac02f2036bfcf 9558 net optional
ntpsec_1.1.7+dfsg1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=YCdz
-----END PGP SIGNATURE-----
--- End Message ---
