4aa493a829
https://chrony.tuxfamily.org/news.html#_20_aug_2020_chrony_3_5_1_released Fixes CVE-2020-14367
57 lines
2.0 KiB
Nix
57 lines
2.0 KiB
Nix
{ stdenv, fetchurl, pkgconfig, libcap, readline, texinfo, nss, nspr
|
||
, libseccomp, pps-tools }:
|
||
|
||
assert stdenv.isLinux -> libcap != null;
|
||
|
||
stdenv.mkDerivation rec {
|
||
pname = "chrony";
|
||
version = "3.5.1";
|
||
|
||
src = fetchurl {
|
||
url = "https://download.tuxfamily.org/chrony/${pname}-${version}.tar.gz";
|
||
sha256 = "19ywl8a3lb2id7lcna5hp2g4pjnfwdc9ihr0fk6i9m45vdq2za0v";
|
||
};
|
||
|
||
patches = [
|
||
./allow-clock_adjtime.patch
|
||
./fix-seccomp-build.patch
|
||
];
|
||
|
||
postPatch = ''
|
||
patchShebangs test
|
||
'';
|
||
|
||
buildInputs = [ readline texinfo nss nspr ]
|
||
++ stdenv.lib.optionals stdenv.isLinux [ libcap libseccomp pps-tools ];
|
||
nativeBuildInputs = [ pkgconfig ];
|
||
|
||
hardeningEnable = [ "pie" ];
|
||
|
||
configureFlags = [ "--chronyvardir=$(out)/var/lib/chrony" ]
|
||
++ stdenv.lib.optional stdenv.isLinux "--enable-scfilter";
|
||
|
||
meta = with stdenv.lib; {
|
||
description = "Sets your computer's clock from time servers on the Net";
|
||
homepage = "https://chrony.tuxfamily.org/";
|
||
repositories.git = "git://git.tuxfamily.org/gitroot/chrony/chrony.git";
|
||
license = licenses.gpl2;
|
||
platforms = with platforms; linux ++ freebsd ++ openbsd;
|
||
maintainers = with maintainers; [ fpletz thoughtpolice ];
|
||
|
||
longDescription = ''
|
||
Chronyd is a daemon which runs in background on the system. It obtains
|
||
measurements via the network of the system clock’s offset relative to
|
||
time servers on other systems and adjusts the system time accordingly.
|
||
For isolated systems, the user can periodically enter the correct time by
|
||
hand (using Chronyc). In either case, Chronyd determines the rate at
|
||
which the computer gains or loses time, and compensates for this. Chronyd
|
||
implements the NTP protocol and can act as either a client or a server.
|
||
|
||
Chronyc provides a user interface to Chronyd for monitoring its
|
||
performance and configuring various settings. It can do so while running
|
||
on the same computer as the Chronyd instance it is controlling or a
|
||
different computer.
|
||
'';
|
||
};
|
||
}
|