Recommit for updates in build 25

Jenkinsfile

@@ -1,127 +0,0 @@
-pipeline {
-    agent {
-      label 'puppet'
-    }
-
-    post {
-        always {
-            deleteDir() /* clean up our workspace */
-        }
-        success {
-            updateGitlabCommitStatus state: 'success'
-        }
-        failure {
-            updateGitlabCommitStatus state: 'failed'
-            step([$class: 'Mailer', notifyEveryUnstableBuild: true, recipients: 'support@confdroid.com', sendToIndividuals: true])
-        }
-    }
-
-    options {
-          gitLabConnection('gitlab.confdroid.com')
-    }
-
-    stages {
-
-      stage('pull master') {
-        steps {
-          sshagent(['edd05eb6-26b5-4c7b-a5cc-ea2ab899f4fa']) {
-            sh '''
-                git config user.name "Jenkins Server"
-                git config user.email jenkins@confdroid.com
-                # Ensure we're on the development branch (triggered by push)
-                git checkout development
-                # Create jenkins branch from development
-                git checkout -b jenkins-build-$BUILD_NUMBER
-                # Optionally merge master into jenkins to ensure compatibility
-                git merge origin/master --no-ff || { echo "Merge conflict detected"; exit 1; }
-            '''
-        }
-      }
-    }
-
-      stage('puppet parser') {
-        steps {
-          sh '''for file in $(find . -iname \'*.pp\'); do
-            /opt/puppetlabs/bin/puppet parser validate --color false --render-as s --modulepath=modules $file || exit 1;
-            done;'''
-          }
-        }
-
-      stage('check templates') {
-        steps{
-          sh '''for file in $(find . -iname \'*.erb\');
-            do erb -P -x -T "-" $file | ruby -c || exit 1;
-            done;'''
-        }
-      }
-
-      stage('puppet-lint') {
-        steps {
-          sh '''/usr/local/bin/puppet-lint . \\
-                --no-variable_scope-check \\
-                || { echo "Puppet lint failed"; exit 1; }
-            '''
-          }
-        }
-
-      stage('SonarScan') {
-         steps {
-            withCredentials([string(credentialsId: 'sonar-token', variable: 'SONAR_TOKEN')]) {
-              sh '''
-              /opt/sonar-scanner/bin/sonar-scanner \
-                -Dsonar.projectKey=confdroid_ntp \
-                -Dsonar.sources=. \
-                -Dsonar.host.url=https://sonarqube.confdroid.com \
-                -Dsonar.token=$SONAR_TOKEN
-                '''
-              }
-            }
-          }
-
-      stage('create Puppet documentation') {
-        steps {
-          sh '/opt/puppetlabs/bin/puppet strings'
-        }
-      }
-
-      stage('update repo') {
-        steps {
-          sshagent(['edd05eb6-26b5-4c7b-a5cc-ea2ab899f4fa']) {
-            sh '''
-                git config user.name "Jenkins Server"
-                git config user.email jenkins@confdroid.com
-                git rm -r --cached .vscode || echo "No .vscode to remove from git"
-                git add -A && git commit -am "Recommit for updates in build $BUILD_NUMBER" || echo "No changes to commit"
-                git push origin HEAD:master
-            '''
-        }
-      }
-    }
-      stage('Mirror to Gitea') {
-        steps {
-          sshagent(['edd05eb6-26b5-4c7b-a5cc-ea2ab899f4fa']) {
-            withCredentials([usernamePassword(
-              credentialsId: 'Jenkins-gitea',
-              usernameVariable: 'GITEA_USER',
-              passwordVariable: 'GITEA_TOKEN')]) {
-              script {
-                // Checkout from GitLab (already done implicitly)
-                  sh '''
-                    git checkout master
-                    git pull origin master
-                    git branch -D development
-                    git branch -D jenkins-build-$BUILD_NUMBER
-                    git rm -f Jenkinsfile
-                    git rm -r --cached .vscode || echo "No .vscode to remove from git"
-                    git commit --amend --no-edit --allow-empty
-                    git remote add master https://sourcecode.confdroid.com/confdroid/confdroid_ntp.git
-                    git -c credential.helper="!f() { echo username=${GITEA_USER}; echo password=${GITEA_TOKEN}; }; f" \
-                    push master --mirror
-                  '''
-            }
-          }
-        }
-      }
-    }
-  }
-}

README.md

@@ -34,7 +34,7 @@ This module differentiates between client- and server configuration. If the `FQD
 
 If you have no local time server(s), leave  `cy_use_lan_server` at `false` (default), else set it to `true`. This affects only client configurations.
 
-The value for `cy_server_fqdn` is a string rather array, assuming either a single time server or a round-robin DNS entry for this, returning several values for the time server (not configured by this module).
+The value for `cy_server_fqdn` is a string rather array, assuming either a single time server or a round-robin DNS CNAME entry returning several values for the time server (not configured by this module).
 
 INSTALLATION
 

doc/file.README.html

@@ -105,9 +105,9 @@
 
 <p>This module differentiates between client- and server configuration. If the <code>FQDN</code> of the puppet client matches the value of <code>cy_server_fqdn</code>, it assumes this to be an ntp time server, else it will be a client.</p>
 
-<p>If you have no local time server(s), leave the default for <code>cy_server_fqdn</code>.</p>
+<p>If you have no local time server(s), leave <code>cy_use_lan_server</code> at <code>false</code> (default), else set it to <code>true</code>. This affects only client configurations.</p>
 
-<p>The value for <code>cy_server_fqdn</code> is a string rather array, assuming either a single time server or a round-robin DNS entry for this, returning several values for the time server (not configured by this module).</p>
+<p>The value for <code>cy_server_fqdn</code> is a string rather array, assuming either a single time server or a round-robin DNS CNAME entry returning several values for the time server (not configured by this module).</p>
 
 <p>INSTALLATION</p>
 <ul><li>

doc/index.html

@@ -105,9 +105,9 @@
 
 <p>This module differentiates between client- and server configuration. If the <code>FQDN</code> of the puppet client matches the value of <code>cy_server_fqdn</code>, it assumes this to be an ntp time server, else it will be a client.</p>
 
-<p>If you have no local time server(s), leave the default for <code>cy_server_fqdn</code>.</p>
+<p>If you have no local time server(s), leave <code>cy_use_lan_server</code> at <code>false</code> (default), else set it to <code>true</code>. This affects only client configurations.</p>
 
-<p>The value for <code>cy_server_fqdn</code> is a string rather array, assuming either a single time server or a round-robin DNS entry for this, returning several values for the time server (not configured by this module).</p>
+<p>The value for <code>cy_server_fqdn</code> is a string rather array, assuming either a single time server or a round-robin DNS CNAME entry returning several values for the time server (not configured by this module).</p>
 
 <p>INSTALLATION</p>
 <ul><li>

doc/puppet_classes/confdroid_ntp_3A_3Amain_3A_3Adirs.html

@@ -109,7 +109,27 @@
 11
 12
 13
-14</pre>
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+33
+34</pre>
       </td>
       <td>
         <pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
@@ -120,8 +140,28 @@ class confdroid_ntp::main::dirs (
   require confdroid_ntp::main::install
 
   # /var/log/chrony
+  file { &#39;/var/log/chrony&#39;:
+    ensure   =&gt; directory,
+    owner    =&gt; &#39;chrony&#39;,
+    group    =&gt; &#39;chrony&#39;,
+    mode     =&gt; &#39;0750&#39;,
+    selrange =&gt; s0,
+    selrole  =&gt; object_r,
+    seltype  =&gt; chrony_var_log_t,
+    seluser  =&gt; system_u,
+  }
 
   # /var/lib/chrony
+  file { &#39;/var/lib/chrony&#39;:
+    ensure   =&gt; directory,
+    owner    =&gt; &#39;chrony&#39;,
+    group    =&gt; &#39;chrony&#39;,
+    mode     =&gt; &#39;0750&#39;,
+    selrange =&gt; s0,
+    selrole  =&gt; object_r,
+    seltype  =&gt; chrony_var_lib_t,
+    seluser  =&gt; system_u,
+  }
 }</pre>
       </td>
     </tr>

doc/puppet_classes/confdroid_ntp_3A_3Aparams.html

@@ -266,6 +266,24 @@
         —
         <div class='inline'>
 <p>Log information to record. Valid values are ‘measurements’, ‘statistics’, and ‘tracking’.</p>
+</div>
+      
+    </li>
+  
+    <li>
+      
+        <span class='name'>cy_use_lan_server</span>
+      
+      
+        <span class='type'>(<tt>Boolean</tt>)</span>
+      
+      
+        <em class="default">(defaults to: <tt>false</tt>)</em>
+      
+      
+        &mdash;
+        <div class='inline'>
+<p>Whether to use a local LAN server or external pool.</p>
 </div>
       
     </li>
@@ -281,7 +299,6 @@
         <pre class="lines">
 
 
-21
 22
 23
 24
@@ -314,41 +331,44 @@
 51
 52
 53
-54</pre>
+54
+55
+56</pre>
       </td>
       <td>
-        <pre class="code"><span class="info file"># File 'manifests/params.pp', line 21</span>
+        <pre class="code"><span class="info file"># File 'manifests/params.pp', line 22</span>
 
 class confdroid_ntp::params (
 
 # installation
-  Array $cy_reqpackages     = [&#39;chrony&#39;],
-  String $cy_pkg_ensure     = &#39;present&#39;,
+  Array $cy_reqpackages       = [&#39;chrony&#39;],
+  String $cy_pkg_ensure       = &#39;present&#39;,
 
 # configuration
-  String $cy_server_fqdn    = &#39;ntp.example.local&#39;,
-  Array $cy_conf_servers    = [&#39;0.pool.ntp.org&#39;, &#39;1.pool.ntp.org&#39;, &#39;2.pool.ntp.org&#39;, &#39;3.pool.ntp.org&#39;],
-  String $cy_min_sources    = &#39;3&#39;,
-  String $cy_client_allow   = &#39;192.168.1.0/24&#39;,
-  String $cy_leapsec_mode   = &#39;slew&#39;,
-  String $cy_leapsectz      = &#39;right/UTC&#39;,
-  String $cy_loginfo        = &#39;measurements statistics tracking&#39;,
+  Boolean $cy_use_lan_server  = false,
+  String $cy_server_fqdn      = &#39;ntp.example.local&#39;,
+  Array $cy_conf_servers      = [&#39;0.pool.ntp.org&#39;, &#39;1.pool.ntp.org&#39;, &#39;2.pool.ntp.org&#39;, &#39;3.pool.ntp.org&#39;],
+  String $cy_min_sources      = &#39;3&#39;,
+  String $cy_client_allow     = &#39;192.168.1.0/24&#39;,
+  String $cy_leapsec_mode     = &#39;slew&#39;,
+  String $cy_leapsectz        = &#39;right/UTC&#39;,
+  String $cy_loginfo          = &#39;measurements statistics tracking&#39;,
 
 ) {
 # facts
-  $fqdn                     = $facts[&#39;networking&#39;][&#39;fqdn&#39;]
-  $domain                   = $facts[&#39;networking&#39;][&#39;domain&#39;]
-  $os_name                  = $facts[&#39;os&#39;][&#39;name&#39;]
-  $os_release               = $facts[&#39;os&#39;][&#39;release&#39;][&#39;major&#39;]
+  $fqdn                       = $facts[&#39;networking&#39;][&#39;fqdn&#39;]
+  $domain                     = $facts[&#39;networking&#39;][&#39;domain&#39;]
+  $os_name                    = $facts[&#39;os&#39;][&#39;name&#39;]
+  $os_release                 = $facts[&#39;os&#39;][&#39;release&#39;][&#39;major&#39;]
 
 # dirs
 
 # files
-  $cy_conf_file             = &#39;/etc/chrony.conf&#39;
-  $cy_conf_erb              = &#39;confdroid_ntp/chrony.conf.erb&#39;
+  $cy_conf_file               = &#39;/etc/chrony.conf&#39;
+  $cy_conf_erb                = &#39;confdroid_ntp/chrony.conf.erb&#39;
 
 # service
-  $cy_service               = &#39;chronyd&#39;
+  $cy_service                 = &#39;chronyd&#39;
 
 # includes must be last
   include confdroid_ntp::main::config

manifests/main/dirs.pp

@@ -9,6 +9,26 @@ class confdroid_ntp::main::dirs (
   require confdroid_ntp::main::install
 
   # /var/log/chrony
+  file { '/var/log/chrony':
+    ensure   => directory,
+    owner    => 'chrony',
+    group    => 'chrony',
+    mode     => '0750',
+    selrange => s0,
+    selrole  => object_r,
+    seltype  => chrony_var_log_t,
+    seluser  => system_u,
+  }
 
   # /var/lib/chrony
+  file { '/var/lib/chrony':
+    ensure   => directory,
+    owner    => 'chrony',
+    group    => 'chrony',
+    mode     => '0750',
+    selrange => s0,
+    selrole  => object_r,
+    seltype  => chrony_var_lib_t,
+    seluser  => system_u,
+  }
 }

templates/chrony.conf.erb

@@ -57,7 +57,6 @@ logdir /var/log/chrony
 
 # Select which information is logged.
 log <%= @cy_loginfo %>
-
 <% end %>
 
 
@@ -117,5 +116,4 @@ logdir /var/log/chrony
 
 # Select which information is logged.
 log <%= @cy_loginfo %>
-
 <% end %>