Compare commits

...

No commits in common. "main" and "docs" have entirely different histories.
main ... docs

24 changed files with 104 additions and 413 deletions

11
.gitignore vendored
View File

@ -1,11 +0,0 @@
# ---> Ansible
*.retry
plugins
library
# ---> Python
# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]
*$py.class

View File

@ -1,15 +0,0 @@
---
ansible:
custom_modules:
- iptables_raw
- openssl_pkcs12
- proxmox_kvm
- ucr
- corenetworks_dns
- corenetworks_token
rules:
exclude_files:
- "LICENSE*"
- "**/*.md"
- "**/*.ini"

View File

@ -1,7 +0,0 @@
---
default: True
MD013: False
MD041: False
MD024: False
MD004:
style: dash

View File

@ -1 +0,0 @@
LICENSE

View File

@ -1,47 +0,0 @@
---
when:
- event: [pull_request]
- event: [push, manual]
branch:
- ${CI_REPO_DEFAULT_BRANCH}
steps:
- name: generate
image: quay.io/thegeeklab/ansible-doctor
environment:
ANSIBLE_DOCTOR_EXCLUDE_FILES: molecule/
ANSIBLE_DOCTOR_FORCE_OVERWRITE: "true"
ANSIBLE_DOCTOR_LOG_LEVEL: INFO
ANSIBLE_DOCTOR_ROLE_NAME: ${CI_REPO_NAME}
ANSIBLE_DOCTOR_TEMPLATE: readme
- name: format
image: quay.io/thegeeklab/alpine-tools
commands:
- prettier -w README.md
- name: diff
image: quay.io/thegeeklab/alpine-tools
commands:
- git diff --color=always README.md
- name: publish
image: quay.io/thegeeklab/wp-git-action
settings:
action:
- commit
- push
author_email: ci-bot@rknet.org
author_name: ci-bot
branch: main
message: "[skip ci] automated docs update"
netrc_machine: gitea.rknet.org
netrc_password:
from_secret: gitea_token
when:
- event: [push, manual]
branch:
- ${CI_REPO_DEFAULT_BRANCH}
depends_on:
- test

View File

@ -1,30 +0,0 @@
---
when:
- event: [pull_request, tag]
- event: [push, manual]
branch:
- ${CI_REPO_DEFAULT_BRANCH}
steps:
- name: ansible-later
image: quay.io/thegeeklab/ansible-later:4
commands:
- ansible-later
environment:
FORCE_COLOR: "1"
- name: python-format
image: docker.io/python:3.12
commands:
- pip install -qq ruff
- ruff format --check --diff .
environment:
PY_COLORS: "1"
- name: python-lint
image: docker.io/python:3.12
commands:
- pip install -qq ruff
- ruff .
environment:
PY_COLORS: "1"

View File

@ -1,26 +0,0 @@
---
when:
- event: [tag]
- event: [push, manual]
branch:
- ${CI_REPO_DEFAULT_BRANCH}
runs_on: [success, failure]
steps:
- name: matrix
image: quay.io/thegeeklab/wp-matrix
settings:
homeserver:
from_secret: matrix_homeserver
password:
from_secret: matrix_password
roomid:
from_secret: matrix_roomid
username:
from_secret: matrix_username
when:
- status: [success, failure]
depends_on:
- docs

View File

@ -1,25 +0,0 @@
---
when:
- event: [pull_request, tag]
- event: [push, manual]
branch:
- ${CI_REPO_DEFAULT_BRANCH}
variables:
- &molecule_base
image: quay.io/thegeeklab/molecule:6
group: molecule
secrets:
- source: molecule_hcloud_token
target: HCLOUD_TOKEN
environment:
PY_COLORS: "1"
steps:
- name: molecule-default
<<: *molecule_base
commands:
- molecule test -s default
depends_on:
- lint

21
LICENSE
View File

@ -1,21 +0,0 @@
MIT License
Copyright (c) 2022 Robert Kaussow <mail@thegeeklab.de>
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is furnished
to do so, subject to the following conditions:
The above copyright notice and this permission notice (including the next
paragraph) shall be included in all copies or substantial portions of the
Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

View File

@ -1,11 +1,15 @@
# xoxys.chrony
---
title: chrony
type: docs
---
[![Build Status](https://ci.rknet.org/api/badges/ansible/xoxys.chrony/status.svg)](https://ci.rknet.org/repos/ansible/xoxys.chrony)
[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg?label=license)](https://gitea.rknet.org/ansible/xoxys.chrony/src/branch/main/LICENSE)
[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&amp;logoColor=white)](https://gitea.rknet.org/ansible/xoxys.chrony)
[![Build Status](https://img.shields.io/drone/build/ansible/xoxys.chrony?logo=drone&amp;server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.chrony)
[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.chrony/src/branch/main/LICENSE)
Setup chrony NTP.
## Table of content
<!--more-->
- [Requirements](#requirements)
- [Default Variables](#default-variables)
@ -16,16 +20,14 @@ Setup chrony NTP.
- [chrony_pool](#chrony_pool)
- [chrony_port](#chrony_port)
- [chrony_server](#chrony_server)
- [chrony_wait_service_enabled](#chrony_wait_service_enabled)
- [Dependencies](#dependencies)
- [License](#license)
- [Author](#author)
---
## Requirements
- Minimum Ansible version: `2.10`
- Minimum Ansible version: `2.1`
## Default Variables
@ -91,22 +93,8 @@ chrony_port: 0
chrony_server: []
```
### chrony_wait_service_enabled
#### Default value
```YAML
chrony_wait_service_enabled: false
```
## Dependencies
None.
## License
MIT
## Author
[Robert Kaussow](https://gitea.rknet.org/xoxys)

View File

@ -1,20 +0,0 @@
---
chrony_pool: 2.pool.ntp.org iburst
chrony_server: []
chrony_allow: []
# @var chrony_port:description: >
# The port option can be set to 0 to make chrony daemon to never open any listening port
# for server operation and to operate strictly in a client-only mode.
# @end
chrony_port: 0
chrony_ntsdumpdir: /var/lib/chrony
chrony_logdir: /var/log/chrony
chrony_log:
- measurements
- statistics
- tracking
chrony_wait_service_enabled: False

View File

@ -1,8 +0,0 @@
---
- name: Restart service
ansible.builtin.service:
name: chronyd.service
state: restarted
daemon_reload: True
enabled: True
listen: __chrony_restart

94
index.md Normal file
View File

@ -0,0 +1,94 @@
---
title: chrony
type: docs
---
[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&amp;logoColor=white)](https://gitea.rknet.org/ansible/xoxys.chrony)
[![Build Status](https://img.shields.io/drone/build/ansible/xoxys.chrony?logo=drone&amp;server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.chrony)
[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.chrony/src/branch/main/LICENSE)
Setup chrony NTP.
<!--more-->
- [Default Variables](#default-variables)
- [chrony_allow](#chrony_allow)
- [chrony_log](#chrony_log)
- [chrony_logdir](#chrony_logdir)
- [chrony_ntsdumpdir](#chrony_ntsdumpdir)
- [chrony_pool](#chrony_pool)
- [chrony_port](#chrony_port)
- [chrony_server](#chrony_server)
- [Dependencies](#dependencies)
---
## Default Variables
### chrony_allow
#### Default value
```YAML
chrony_allow: []
```
### chrony_log
#### Default value
```YAML
chrony_log:
- measurements
- statistics
- tracking
```
### chrony_logdir
#### Default value
```YAML
chrony_logdir: /var/log/chrony
```
### chrony_ntsdumpdir
#### Default value
```YAML
chrony_ntsdumpdir: /var/lib/chrony
```
### chrony_pool
#### Default value
```YAML
chrony_pool: 2.pool.ntp.org iburst
```
### chrony_port
The port option can be set to 0 to make chrony daemon to never open any listening port
for server operation and to operate strictly in a client-only mode.
#### Default value
```YAML
chrony_port: 0
```
### chrony_server
#### Default value
```YAML
chrony_server: []
```
## Dependencies
None.

View File

@ -1,26 +0,0 @@
---
galaxy_info:
# @meta author:value: [Robert Kaussow](https://gitea.rknet.org/xoxys)
author: Robert Kaussow <mail@thegeeklab.de>
namespace: xoxys
role_name: chrony
# @meta description: >
# [![Build Status](https://ci.rknet.org/api/badges/ansible/xoxys.chrony/status.svg)](https://ci.rknet.org/repos/ansible/xoxys.chrony)
# [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg?label=license)](https://gitea.rknet.org/ansible/xoxys.chrony/src/branch/main/LICENSE)
#
# Setup chrony NTP.
# @end
description: Setup chrony NTP
license: MIT
min_ansible_version: "2.10"
platforms:
- name: EL
versions:
- "9"
galaxy_tags:
- ntp
- chrony
dependencies: []
collections:
- xoxys.general
- community.general

View File

@ -1,5 +0,0 @@
---
- name: Converge
hosts: all
roles:
- role: xoxys.chrony

View File

@ -1,17 +0,0 @@
---
driver:
name: molecule_hetznercloud
dependency:
name: galaxy
options:
role-file: molecule/requirements.yml
requirements-file: molecule/requirements.yml
platforms:
- name: "rocky9-chrony"
server_type: "cx11"
image: "rocky-9"
provisioner:
name: ansible
log: False
verifier:
name: testinfra

View File

@ -1,11 +0,0 @@
---
- name: Prepare
hosts: all
gather_facts: False
tasks:
- name: Bootstrap Python for Ansible
ansible.builtin.raw: |
command -v python3 python ||
((test -e /usr/bin/apt && (apt -y update && apt install -y python-minimal)) ||
echo "Warning: Python not boostrapped due to unknown platform.")
changed_when: False

View File

@ -1,13 +0,0 @@
import os
import testinfra.utils.ansible_runner
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
os.environ["MOLECULE_INVENTORY_FILE"]
).get_hosts("all")
def test_chrony_running_and_enabled(host):
chrony = host.service("chronyd")
assert chrony.is_running
assert chrony.is_enabled

View File

@ -1,5 +0,0 @@
---
collections:
- name: community.general
roles: []

View File

@ -1,20 +0,0 @@
[tool.ruff]
exclude = [".git","__pycache__"]
line-length = 99
indent-width = 4
[tool.ruff.lint]
ignore = ["W191", "E111", "E114", "E117", "S101", "S105"]
select = ["F", "E", "I", "W", "S"]
[tool.ruff.format]
quote-style = "double"
indent-style = "space"
line-ending = "lf"
[tool.pytest.ini_options]
filterwarnings = [
"ignore::FutureWarning",
"ignore::DeprecationWarning",
]

View File

@ -1,47 +0,0 @@
---
- name: Install chrony
ansible.builtin.package:
name: chrony
state: present
- name: Create required directories
loop:
- name: /etc/systemd/system/time-sync.target.d
mode: "0755"
loop_control:
label: "{{ item.name }}"
ansible.builtin.file:
path: "{{ item.name }}"
state: directory
mode: "{{ item.mode }}"
- name: Deploy configuration file
ansible.builtin.template:
src: etc/chrony.conf.j2
dest: /etc/chrony.conf
owner: root
group: root
mode: "0644"
notify: __chrony_restart
- name: Deploy sysconfig file
ansible.builtin.template:
src: etc/sysconfig/chronyd.j2
dest: /etc/sysconfig/chronyd
owner: root
group: root
mode: "0644"
notify: __chrony_restart
- name: Ensure chronyd is up and running
ansible.builtin.service:
name: chronyd.service
state: started
daemon_reload: True
enabled: True
- name: Ensure chrony-wait state
ansible.builtin.service:
name: chrony-wait.service
daemon_reload: True
enabled: "{{ chrony_wait_service_enabled | bool }}"

View File

@ -1,28 +0,0 @@
#jinja2: lstrip_blocks: True
{{ ansible_managed | comment }}
{% if chrony_server | default([]) | length == 0 %}
pool {{ chrony_pool }}
{% endif %}
{% for server in chrony_server %}
server {{ server }}
{% endfor %}
port {{ chrony_port }}
sourcedir /run/chrony-dhcp
driftfile /var/lib/chrony/drift
makestep 1.0 3
rtcsync
{% if chrony_allow | length > 0 %}
{% for block in chrony_allow %}
allow {{ block }}
{% endfor %}
{% endif %}
keyfile /etc/chrony.keys
ntsdumpdir {{ chrony_ntsdumpdir }}
leapsectz right/UTC
logdir {{ chrony_logdir }}
log {{ chrony_log | join(" ") }}

View File

@ -1,4 +0,0 @@
#jinja2: lstrip_blocks: True
{{ ansible_managed | comment }}
# Command-line options for chronyd
OPTIONS="-F 2 -u chrony"

View File

@ -1,4 +0,0 @@
#jinja2: lstrip_blocks: True
{{ ansible_managed | comment }}
[Unit]
Requires=chrony-wait.service