openstack/ansible-hardening
Code Issues Proposed changes

Merge "Chrony: new NTP server defaults"

Browse Source
This commit is contained in:
Zuul 2019-01-10 19:15:18 +00:00 committed by Gerrit Code Review
commit ebb0f3ed83
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -271,7 +271,7 @@ security_ntp_servers:
- 2.pool.ntp.org
- 3.pool.ntp.org
# NTP server options.
security_ntp_server_options: offline maxpoll 10 minpoll 8
security_ntp_server_options: iburst
# Configure Chrony to synchronize the hardware clock
security_ntp_sync_rtc: false
# Chrony limits access to clients that are on certain subnets. Adjust the

6
releasenotes/notes/chrony-ntp-server-defaults-7cd2e3a80723e0bd.yaml Normal file
View File

@ -0,0 +1,6 @@
---
upgrade:
- Changed the default NTP server options in ``chrony.conf``. The ``offline``
option has been removed, ``minpoll``/``maxpoll`` have been removed in favour of
the upstream defaults, while the ``iburst`` option was added to speed up
initial time synchronization.