mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
From: Michael Olbrich <m.olbrich@pengutronix.de>
To: ptxdist@pengutronix.de
Subject: Re: [ptxdist] Chrony package option --without-tomcrypt makes chronyc unusable
Date: Wed, 16 Jun 2021 12:26:29 +0200	[thread overview]
Message-ID: <20210616102629.GJ839947@pengutronix.de> (raw)
In-Reply-To: <a952ede2-c2d0-3725-22f2-55d468d7871a@ppc-ag.de>

Hi,

I don't use chrony myself, so I can just look at the build-system.

On Tue, Jun 15, 2021 at 11:55:47AM +0200, Mircea Ciocan wrote:
> unless I'm doing something very wrong, the "out of the box" chrony package
> does not allow talking with the chronyc, the client and daemon control
> user-space utility, it doesn't even create the Unix socket:
> /var/run/chrony/chronyd.sock.
> 
> Once the line "--without-tomcrypt" in CHRONY_CONF_OPT is removed, everything
> will work OK.

This makes no sense at all. tomcrypt is a external library that is
currently not available in PTXdist. So removing this options should not
change anything.
Please take a look at the build (e.g. changes to config.h and Makefile) to
see what actually happens.

> Also the option "--with-user=chrony" may make the daemon more
> secure, but it certainly messes up the logging and drift files due to
> permissions of the /var/run and /var/log.

That's just the default user. And as far as I know, this works fine with
systemd. If you use busybox init, then maybe the init script needs to be
changed to create directories with the correct permissions.

Patches are welcome.

> Out of these only the tomcrypt removal is critical, if somebody can explain
> the reason behind it, or what can be done to enable the client functionality
> with the existing compile time options I'll be most happy, because now I had
> to move the rule to project rules and remove it.

Michael

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de


  reply	other threads:[~2021-06-16 10:27 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-06-15  9:55 Mircea Ciocan
2021-06-16 10:26 ` Michael Olbrich [this message]
2021-06-16 14:15   ` Bruno Thomsen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20210616102629.GJ839947@pengutronix.de \
    --to=m.olbrich@pengutronix.de \
    --cc=ptxdist@pengutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox