Merge chrony from Debian unstable for mantic

[Bryce Harrington]

Upstream: tbd
Debian: 4.3-2 4.3-3
Ubuntu: 4.3-1ubuntu4

Debian new has 4.3-3, which may be available for merge soon.

If it turns out this needs a sync rather than a merge, please change the tag 'needs-merge' to 'needs-sync', and (optionally) update the title as desired.

### New Debian Changes ###

chrony (4.3-2) unstable; urgency=medium

  * debian/control:
    - Bump Standards-Version to 4.6.2 (no changes needed).

  * debian/copyright:
    - Update copyright year for debian/*.

  * debian/.gitlab-ci.yml:
    - Use the recommended syntax to skip a job.

  * debian/install:
    - Install the chrony-wait.service systemd unit.

  * debian/postinst:
    - Ensure that chronyd can read the /etc/chrony/chrony.keys file after
    dropping root privileges.

  * debian/postrm:
    - Remove the override for /etc/chrony/chrony.keys when purging chrony.

  * debian/rules:
    - Do not enable nor start chrony-wait.service for the time being.

  * debian/tests/upstream-simulation-test-suite:
    - Run each test only once. Running several iterations is no longer
    relevant since we use a hard coded seed.

  [ Taylor Stearns ]
  * debian/chrony.conf:
    - Replace U+2019 with ASCII quote. (MR: !10)

 -- Vincent Blut <email address hidden> Fri, 27 Jan 2023 22:51:17 +0100

chrony (4.3-1) unstable; urgency=medium

  * Import upstream version 4.3:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/copyright:
    - Update copyright years.

  [ Bastian Blank ]
  * debian/chrony.service:
    - Let systemd handle directories. (MR: !9)

 -- Vincent Blut <email address hidden> Wed, 31 Aug 2022 13:32:14 +0200

chrony (4.3~pre1-1) experimental; urgency=medium

  * Import upstream version 4.3-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/chrony.lintian-overrides:
    - Update lintian override syntax.

  * debian/control:
    - Bump Standards-Version to 4.6.1 (no changes needed).

  * debian/patches/*:
    - Drop ensure_awk_commands_in_008-ntpera_test_return_an_integer.patch,
    applied upstream.
    - Refresh nm-dispatcher-dhcp_Move-server_dir-to-run.patch.

  * debian/tests/upstream-simulation-test-suite:
    - Update clknetsim version.

 -- Vincent Blut <email address hidden> Thu, 11 Aug 2022 14:12:25 +0200

chrony (4.2-2) unstable; urgency=medium

  * debian/usr.sbin.chronyd:
    - Allow reading the chronyd configuration file that timemaster(8)
    generates. Thanks to Michael Lestinsky for the report! (Closes: #1004745)

 -- Vincent Blut <email address hidden> Tue, 01 Feb 2022 20:42:35 +0100

chrony (4.2-1) unstable; urgency=medium

  * Import upstream version 4.2:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/chrony.service:
    - Adopt upstream service unit hardening options.

  * debian/copyright:
    - Update copyright years.

  * debian/patches/*:
    - Drop patches applied upstream.
    - Add ensure_awk_commands_in_008-ntpera_test_return_an_integer.patch

  * debian/test/upstream-simulation-test-suite:
    - Update clknetsim version.

 -- Vincent Blut <email address hidden> Thu, 13 Jan 2022 14:01:35 +0100

chrony (4.1-4) unstable; urgency=medium

  * debian/:

### Old Ubuntu Delta ###

chrony (4.3-1ubuntu4) lunar; urgency=medium

  * Let upstream-simulation-test-suite depend on tzdata-legacy as well
    (LP: #2008076)

 -- Benjamin Drung <email address hidden> Wed, 15 Mar 2023 15:42:10 +0100

chrony (4.3-1ubuntu3) lunar; urgency=medium

  * Depend on tzdata-legacy for reading leapsectz from
    /usr/share/zoneinfo/right/UTC (LP: #2008076)

 -- Benjamin Drung <email address hidden> Wed, 15 Mar 2023 09:26:25 +0100

chrony (4.3-1ubuntu2) lunar; urgency=medium

  * No-change rebuild for glibc 2.37

 -- Bryce Harrington <email address hidden> Thu, 09 Feb 2023 07:26:02 +0000

chrony (4.3-1ubuntu1) lunar; urgency=medium

  * Merge with Debian unstable (LP: #1993389). Remaining changes:
    - d/chrony.conf: use ubuntu ntp pool and server
      (LP #1744664, #1754358)
    - Set -x as default if unable to set time (e.g. in containers) (LP #1589780)
      Chrony is a single service which acts as both NTP client (i.e. syncing the
      local clock) and NTP server (i.e. providing NTP services to the network),
      and that is both desired and expected in the vast majority of cases.
      But in containers syncing the local clock is usually impossible, but this
      shall not break the providing of NTP services to the network.
      To some extent this makes chrony's default config more similar to 'ntpd',
      which complained in syslog but still provided NTP server service in those
      cases.
      + debian/chrony.service: allow the service to run without CAP_SYS_TIME
      + debian/control: add new dependency libcap2-bin for
        capsh (usually installed anyway, but make them explicit to be sure).
      + debian/chrony.default: new option SYNC_IN_CONTAINER to not fall
        back (Default off)
      + debian/chronyd-starter.sh: wrapper to handle special cases in
        containers and if CAP_SYS_TIME is missing. Effectively allows
        running the NTP server in containers on a default installation
        and avoid failing to sync time (or if allowed to sync, avoid
        multiple containers fighting over it by accident).
      + debian/install: make chrony-starter.sh available on install.
      + debian/docs, debian/README.container: provide documentation
        about the handling of this case.
  * Dropped:
    - d/patches/add-rseq.patch: Add 'rseq' to list of acceptable syscalls to fix
      tests with glibc 2.35.
      [Included in upstream 4.3 release]

 -- Bryce Harrington <email address hidden> Mon, 09 Jan 2023 19:41:47 -0800

[Bryce Harrington (bryce)]

Uploaded 4.3-2ubuntu1 to -proposed; awaiting migration:

https://ubuntu-archive-team.ubuntu.com/proposed-migration/update_excuses.html#chrony

[Launchpad Janitor (janitor)]

This bug was fixed in the package chrony - 4.3-2ubuntu1

---------------
chrony (4.3-2ubuntu1) mantic; urgency=medium

  * Merge with Debian unstable (LP: #2018062). Remaining changes:
    - d/chrony.conf: use ubuntu ntp pool and server
      (LP #1744664, #1754358)
    - Set -x as default if unable to set time (e.g. in containers) (LP #1589780)
      Chrony is a single service which acts as both NTP client (i.e. syncing the
      local clock) and NTP server (i.e. providing NTP services to the network),
      and that is both desired and expected in the vast majority of cases.
      But in containers syncing the local clock is usually impossible, but this
      shall not break the providing of NTP services to the network.
      To some extent this makes chrony's default config more similar to 'ntpd',
      which complained in syslog but still provided NTP server service in those
      cases.
      + debian/chrony.service: allow the service to run without CAP_SYS_TIME
      + d/control: add new dependency libcap2-bin for capsh (usually
        installed anyway, but make them explicit to be sure).
      + d/chrony.default: new option SYNC_IN_CONTAINER to not fall
        back (Default off)
      + d/chronyd-starter.sh: wrapper to handle special cases in
        containers and if CAP_SYS_TIME is missing. Effectively allows
        running the NTP server in containers on a default installation
        and avoid failing to sync time (or if allowed to sync, avoid
        multiple containers fighting over it by accident).
      + d/install: make chrony-starter.sh available on install.
      + d/docs, d/README.container: provide documentation about the
        handling of this case.
    - Depend on tzdata-legacy for reading leapsectz from
      /usr/share/zoneinfo/right/UTC
      (LP #2008076)

 -- Bryce Harrington <email address hidden> Mon, 08 May 2023 22:15:26 -0700