Fixed chrony configuration options #121
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Overall Review of Changes:
A general description of the changes made that are being requested for merge
Issue Fixes:
Issue not listed
Enhancements:
Current configuration contain wrong paths and unsupported directives:
By default on all my RHEL8 and RHEL9 based machines the keyfile is located in /etc/chrony.keys
Added configuration options for:
makestep:
rhel9cis_chrony_server_makestep
By default is set default configuration which was on my RHEL9 sandbox it is worth to look for interesting topic regarding virtual machines: https://unix.stackexchange.com/questions/484467/chrony-client-do-not-change-system-and-hardware-date
I had similar issue when the clock was not adjusted which generated problems with one of my clusters.
minsources:
rhel9cis_chrony_server_minsources
Worth looking into documentation: https://chrony-project.org/faq.html#_how_can_i_make_the_system_clock_more_secure
By default wanted to set this parameter as:
"{{ ((rhel9cis_time_synchronization_servers | length) / 2) | round | int }}"
but decided to set static number 2How has this been tested?:
Not tested