debcrafters-packages team mailing list archive
-
debcrafters-packages team
-
Mailing list archive
-
Message #01236
[Bug 2111342] Re: Install time-daemon with NTS support by default
Agreed and thanks for the clarifying discussion,
I had to unblock a currently moving systemd 257.6-1ubuntu1 in the NEW queue first (synced with Nick, accepted now), once all of it is in proposed I can resolve the priorities on this one.
--
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/2111342
Title:
Install time-daemon with NTS support by default
Status in Ubuntu:
Fix Committed
Status in chrony package in Ubuntu:
New
Status in systemd package in Ubuntu:
New
Status in ubuntu-meta package in Ubuntu:
New
Status in ubuntu-release-upgrader package in Ubuntu:
New
Bug description:
Ubuntu shall be secure by default, therefore utilize Network Time
Security (NTS), as time is the trust anchor for many cryptography
related processes (e.g. certificates).
NTS was previously enabled in chrony (LP: #2084585) and comes pre-
installed in certain Ubuntu cloud images. Still, in Ubuntu
Desktop/Server and other generic Ubuntu images we rely on systemd-
timesyncd (without support for NTS [1]). This leads to a situation
where we have to maintain two time-daemons in "main", while still not
using NTS on most systems.
[1] https://github.com/systemd/systemd/issues/9481
References: spec-FO207, SD-2171, chrony MIR (LP: #1744072)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2111342/+subscriptions
References