-
Notifications
You must be signed in to change notification settings - Fork 328
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
add key distribution #314
add key distribution #314
Conversation
| @@ -178,7 +176,7 @@ Disables the monitoring facility in NTP. Valid options: 'true' or 'false'. Defau | |||
|
|
|||
| Specifies an NTP driftfile. Valid options: string containing an absolute path. Default value: '/var/lib/ntp/drift' (except on AIX and Solaris) | |||
|
|
|||
| #### `fudge` | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This space is supposed to be there, actually http://spec.commonmark.org/0.24/#atx-headings
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok. thank you for the link. I'll revert the changes.
|
Looks good! Could you update this acceptance test to use the new parameter instead of puppetlabs-ntp/spec/acceptance/ntp_parameters_spec.rb Lines 98 to 113 in 9937d96
|
| @@ -210,14 +212,20 @@ Specifies the complete path and location of the MD5 key file containing the keys | |||
|
|
|||
| Specifies the key identifier to use with the ntpdc utility program. Valid options: value in the range of 1 to 65,534 inclusive. Default value: ' ' | |||
|
|
|||
| #### `keys_trusted`: | |||
| ####`keys_template` | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do you really need this parameter? We don't usually add parameters to change the template used, preferring that PRs be sent to expand the existing templates. So would it work for you to not add this parameter?
The keys_file defaults to /etc/ntp/keys on many platforms, but the packages do not create that directory. There is a parameter, config_dir that can be used to manage this directory, though in our acceptance tests there was a line that did an mkdir of this directory which was removed in PR puppetlabs#314 and covered up the fact that the module would not work by default on many platforms. This should get the tests working again, and update the debian/ubuntu defaults to their documented defaults. Both Debian and Ubuntu actually specify /etc/ntp.keys as the default. And freebsd, sles, opensuse, and archlinux. RedHat is the only OS with /etc/ntp/keys as the true default, against the ntpd standard.
I need to distribute keys to our nodes. And this works for me.