Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Jul 2024 13:31:52 -0600
From:      Warner Losh <imp@bsdimp.com>
To:        Cy Schubert <cy@freebsd.org>
Cc:        src-committers@freebsd.org, dev-commits-src-all@freebsd.org,  dev-commits-src-main@freebsd.org
Subject:   Re: git: 66f360515d28 - main - rc.conf: Leap-seconds sources: Add IANA back
Message-ID:  <CANCZdfpc_xjNgrGk9VEdmZZgg7deTiOD%2BqWvS7hhzrMMcKpXXg@mail.gmail.com>
In-Reply-To: <202407191825.46JIPS14063151@gitrepo.freebsd.org>
References:  <202407191825.46JIPS14063151@gitrepo.freebsd.org>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
There's risk to our IPv6 folks if we MFC this. This file is the old one
still (and it took them 6 weeks to get the last one updated past its
expiration date).

The IERS one is up to date, expires Jun 2025. The IANA has a december
expiration date finally, though we leared 3 weeks ago there's no leap in
December, so that's why the IERS one was updated.

So this is better than nothing, but we're setting ourselves up for a
problem this December / January....

The last time this issue came up, I was kinda opposed to FreeBSD running
this since IERS did. However, I either didn't know at the time, or didn't
appreciate at the time the lack of IPv6 for this data source would be a
problem. Since we have no other reliable source, maybe we need to stand up
a FreeBSD mirror after all.

So this is better than nothing, but we may need to do more.

Warner

On Fri, Jul 19, 2024 at 12:25 PM Cy Schubert <cy@freebsd.org> wrote:

> The branch main has been updated by cy:
>
> URL:
> https://cgit.FreeBSD.org/src/commit/?id=66f360515d2829d261c0ad7bd516e9dd18c2dd83
>
> commit 66f360515d2829d261c0ad7bd516e9dd18c2dd83
> Author:     Cy Schubert <cy@FreeBSD.org>
> AuthorDate: 2024-07-19 18:04:43 +0000
> Commit:     Cy Schubert <cy@FreeBSD.org>
> CommitDate: 2024-07-19 18:24:31 +0000
>
>     rc.conf: Leap-seconds sources: Add IANA back
>
>     11da791920ba switched Leap-seconds source from IANA to IERS, as IERS
>     is the canonoical source. The problem ist that IERS is not accessible
>     from IPv6 only networks. To work around this we must add IANA back in
>     order to provide IPv6-only users a source for leap-seconds fetch.
>
>     PR:             279413
>     Fixes:          11da791920ba
>     MFC after:      3 days
> ---
>  libexec/rc/rc.conf | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/libexec/rc/rc.conf b/libexec/rc/rc.conf
> index 1ee1573bbdba..583d4fd2970e 100644
> --- a/libexec/rc/rc.conf
> +++ b/libexec/rc/rc.conf
> @@ -420,7 +420,7 @@ ntp_src_leapfile="/etc/ntp/leap-seconds"
>                                 # Initial source for ntpd leapfile
>  ntp_db_leapfile="/var/db/ntpd.leap-seconds.list"
>                                 # Canonical place to get the leap seconds
> from
> -ntp_leapfile_sources="
> https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list"
> +ntp_leapfile_sources="
> https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list
> https://data.iana.org/time-zones/tzdb/leap-seconds.list"
>                                 # Source from which to fetch leapfile
>  ntp_leapfile_fetch_opts="-mq"  # Options to use for ntp leapfile fetch,
>                                 # e.g. --no-verify-peer
>

[-- Attachment #2 --]
<div dir="ltr"><div>There&#39;s risk to our IPv6 folks if we MFC this. This file is the old one still (and it took them 6 weeks to get the last one updated past its expiration date).</div><div><br></div><div>The IERS one is up to date, expires Jun 2025. The IANA has a december expiration date finally, though we leared 3 weeks ago there&#39;s no leap in December, so that&#39;s why the IERS one was updated.</div><div><br></div><div>So this is better than nothing, but we&#39;re setting ourselves up for a problem this December / January....</div><div><br></div><div>The last time this issue came up, I was kinda opposed to FreeBSD running this since IERS did. However, I either didn&#39;t know at the time, or didn&#39;t appreciate at the time the lack of IPv6 for this data source would be a problem. Since we have no other reliable source, maybe we need to stand up a FreeBSD mirror after all.</div><div><br></div><div>So this is better than nothing, but we may need to do more.</div><div><br></div><div>Warner</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jul 19, 2024 at 12:25 PM Cy Schubert &lt;<a href="mailto:cy@freebsd.org">cy@freebsd.org</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">The branch main has been updated by cy:<br>
<br>
URL: <a href="https://cgit.FreeBSD.org/src/commit/?id=66f360515d2829d261c0ad7bd516e9dd18c2dd83" rel="noreferrer" target="_blank">https://cgit.FreeBSD.org/src/commit/?id=66f360515d2829d261c0ad7bd516e9dd18c2dd83</a><br>;
<br>
commit 66f360515d2829d261c0ad7bd516e9dd18c2dd83<br>
Author:     Cy Schubert &lt;cy@FreeBSD.org&gt;<br>
AuthorDate: 2024-07-19 18:04:43 +0000<br>
Commit:     Cy Schubert &lt;cy@FreeBSD.org&gt;<br>
CommitDate: 2024-07-19 18:24:31 +0000<br>
<br>
    rc.conf: Leap-seconds sources: Add IANA back<br>
<br>
    11da791920ba switched Leap-seconds source from IANA to IERS, as IERS<br>
    is the canonoical source. The problem ist that IERS is not accessible<br>
    from IPv6 only networks. To work around this we must add IANA back in<br>
    order to provide IPv6-only users a source for leap-seconds fetch.<br>
<br>
    PR:             279413<br>
    Fixes:          11da791920ba<br>
    MFC after:      3 days<br>
---<br>
 libexec/rc/rc.conf | 2 +-<br>
 1 file changed, 1 insertion(+), 1 deletion(-)<br>
<br>
diff --git a/libexec/rc/rc.conf b/libexec/rc/rc.conf<br>
index 1ee1573bbdba..583d4fd2970e 100644<br>
--- a/libexec/rc/rc.conf<br>
+++ b/libexec/rc/rc.conf<br>
@@ -420,7 +420,7 @@ ntp_src_leapfile=&quot;/etc/ntp/leap-seconds&quot;<br>
                                # Initial source for ntpd leapfile<br>
 ntp_db_leapfile=&quot;/var/db/ntpd.leap-seconds.list&quot;<br>
                                # Canonical place to get the leap seconds from<br>
-ntp_leapfile_sources=&quot;<a href="https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list" rel="noreferrer" target="_blank">https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list</a>&quot;<br>;
+ntp_leapfile_sources=&quot;<a href="https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list" rel="noreferrer" target="_blank">https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list</a>; <a href="https://data.iana.org/time-zones/tzdb/leap-seconds.list" rel="noreferrer" target="_blank">https://data.iana.org/time-zones/tzdb/leap-seconds.list</a>&quot;<br>;
                                # Source from which to fetch leapfile<br>
 ntp_leapfile_fetch_opts=&quot;-mq&quot;  # Options to use for ntp leapfile fetch,<br>
                                # e.g. --no-verify-peer<br>
</blockquote></div>
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CANCZdfpc_xjNgrGk9VEdmZZgg7deTiOD%2BqWvS7hhzrMMcKpXXg>