GNU bug report logs - #27759
NTP pool vendor zone

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 27759 in the body.
You can then email your comments to 27759 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: bug-guix <at> gnu.org
Subject: NTP pool vendor zone
Date: Tue, 18 Jul 2017 17:42:56 -0400

[Message part 1 (text/plain, inline)]

Currently our ntp-service uses the top-level NTP pool servers [0]:

(define %ntp-servers
  ;; Default set of NTP servers.
  '("0.pool.ntp.org"
    "1.pool.ntp.org"
    "2.pool.ntp.org"))

However, the NTP Pool project requests that operating system vendors
(that's us!) don't use these servers directly [1]:

------
You must get approval from the server operator before you hardcode any
IP addresses or hostnames. This is easy to get if your own organization
runs the NTP servers you are planning to use. In most other cases you
will not get it.

Do not use the standard pool.ntp.org names as a default configuration in
your system. The NTP Pool can offer services for you, but it must be
setup in advance (see below).
------

They recommend we apply for a vendor zone instead [2]. We would not have
to run our own NTP servers.

Does anyone know if GNU or the FSF have a vendor zone we could use?
Otherwise, we should apply for one and adjust our ntp-service.

[0]
https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/services/networking.scm?id=ec5c24f9a8421172a0cf9133d512014b31815a76#n336

[1]
http://www.pool.ntp.org/en/vendors.html#basic-guidelines

[2]
http://www.pool.ntp.org/en/vendors.html#vendor-zone

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 27759 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Leo Famulari <leo <at> famulari.name>
Cc: 27759 <at> debbugs.gnu.org
Subject: Re: bug#27759: NTP pool vendor zone
Date: Wed, 19 Jul 2017 22:40:20 +0200

Leo Famulari <leo <at> famulari.name> skribis:

> Currently our ntp-service uses the top-level NTP pool servers [0]:
>
> (define %ntp-servers
>   ;; Default set of NTP servers.
>   '("0.pool.ntp.org"
>     "1.pool.ntp.org"
>     "2.pool.ntp.org"))
>
> However, the NTP Pool project requests that operating system vendors
> (that's us!) don't use these servers directly [1]:

Oops!  I had read about this before and then forgot.

> They recommend we apply for a vendor zone instead [2]. We would not have
> to run our own NTP servers.
>
> Does anyone know if GNU or the FSF have a vendor zone we could use?
> Otherwise, we should apply for one and adjust our ntp-service.

Apparently 1.gnu.pool.ntp.org does not exist, so I suppose we can apply
for one.

I’ll email the GNU maintainer list to let them know and double-check.

Thanks,
LUdo’.

Message #11 received at 27759 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 27759 <at> debbugs.gnu.org
Subject: Re: bug#27759: NTP pool vendor zone
Date: Thu, 20 Jul 2017 14:59:14 -0400

[Message part 1 (text/plain, inline)]

On Wed, Jul 19, 2017 at 10:40:20PM +0200, Ludovic Courtès wrote:
> Leo Famulari <leo <at> famulari.name> skribis:
> > They recommend we apply for a vendor zone instead [2]. We would not have
> > to run our own NTP servers.
> >
> > Does anyone know if GNU or the FSF have a vendor zone we could use?
> > Otherwise, we should apply for one and adjust our ntp-service.
> 
> Apparently 1.gnu.pool.ntp.org does not exist, so I suppose we can apply
> for one.
> 
> I’ll email the GNU maintainer list to let them know and double-check.

Based on that discussion, I've applied for guix.pool.ntp.org.

[signature.asc (application/pgp-signature, inline)]

Message #14 received at 27759 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 27759 <at> debbugs.gnu.org
Subject: Re: bug#27759: NTP pool vendor zone
Date: Sat, 29 Jul 2017 22:43:22 -0400

[Message part 1 (text/plain, inline)]

On Thu, Jul 20, 2017 at 02:59:14PM -0400, Leo Famulari wrote:
> On Wed, Jul 19, 2017 at 10:40:20PM +0200, Ludovic Courtès wrote:
> > Leo Famulari <leo <at> famulari.name> skribis:
> > > They recommend we apply for a vendor zone instead [2]. We would not have
> > > to run our own NTP servers.
> > >
> > > Does anyone know if GNU or the FSF have a vendor zone we could use?
> > > Otherwise, we should apply for one and adjust our ntp-service.
> > 
> > Apparently 1.gnu.pool.ntp.org does not exist, so I suppose we can apply
> > for one.
> > 
> > I’ll email the GNU maintainer list to let them know and double-check.
> 
> Based on that discussion, I've applied for guix.pool.ntp.org.

The DNS for {0,1,2,3}.guix.pool.ntp.org is live, and the attached patch
is working for me.

I think we should document that I am the administrative contact for the
"zone". Any suggestions for where to document that?

[0001-services-ntp-Use-the-NTP-pool-via-the-guix-zone.patch (text/plain, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #17 received at 27759 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Leo Famulari <leo <at> famulari.name>
Cc: 27759 <at> debbugs.gnu.org
Subject: Re: bug#27759: NTP pool vendor zone
Date: Sun, 30 Jul 2017 14:36:58 +0200

Hi Leo!

Leo Famulari <leo <at> famulari.name> skribis:

> On Thu, Jul 20, 2017 at 02:59:14PM -0400, Leo Famulari wrote:
>> On Wed, Jul 19, 2017 at 10:40:20PM +0200, Ludovic Courtès wrote:
>> > Leo Famulari <leo <at> famulari.name> skribis:
>> > > They recommend we apply for a vendor zone instead [2]. We would not have
>> > > to run our own NTP servers.
>> > >
>> > > Does anyone know if GNU or the FSF have a vendor zone we could use?
>> > > Otherwise, we should apply for one and adjust our ntp-service.
>> > 
>> > Apparently 1.gnu.pool.ntp.org does not exist, so I suppose we can apply
>> > for one.
>> > 
>> > I’ll email the GNU maintainer list to let them know and double-check.
>> 
>> Based on that discussion, I've applied for guix.pool.ntp.org.
>
> The DNS for {0,1,2,3}.guix.pool.ntp.org is live, and the attached patch
> is working for me.

Great!

> I think we should document that I am the administrative contact for the
> "zone". Any suggestions for where to document that?

At least as a comment in the definition of ‘%ntp-servers’?

Maybe we should also have a file in guix-maintenance.git listing
specific responsibilities like this, membership to linux-distros or
similar lists, privileged contact with upstream for specific packages,
etc.  WDYT?

> From e8fd9d703dba134dab7f008951e68d11d3d2ca21 Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo <at> famulari.name>
> Date: Sat, 29 Jul 2017 20:43:40 -0400
> Subject: [PATCH] services: ntp: Use the NTP pool via the 'guix' zone.
>
> * gnu/services/networking.scm (%ntp-servers): Use *.guix.pool.ntp.org.

Yes!  :-)

Thanks,
Ludo’.

Message #22 received at 27759-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 27759-done <at> debbugs.gnu.org
Subject: Re: bug#27759: NTP pool vendor zone
Date: Sun, 30 Jul 2017 20:28:18 -0400

[Message part 1 (text/plain, inline)]

On Sun, Jul 30, 2017 at 02:36:58PM +0200, Ludovic Courtès wrote:
> > I think we should document that I am the administrative contact for the
> > "zone". Any suggestions for where to document that?
> 
> At least as a comment in the definition of ‘%ntp-servers’?
> 
> Maybe we should also have a file in guix-maintenance.git listing
> specific responsibilities like this, membership to linux-distros or
> similar lists, privileged contact with upstream for specific packages,
> etc.  WDYT?

Yes, perhaps, although I'm worried it will fall out of sync and become
more frustrating than useful. For now I added a comment above
%ntp-servers.

> > From e8fd9d703dba134dab7f008951e68d11d3d2ca21 Mon Sep 17 00:00:00 2001
> > From: Leo Famulari <leo <at> famulari.name>
> > Date: Sat, 29 Jul 2017 20:43:40 -0400
> > Subject: [PATCH] services: ntp: Use the NTP pool via the 'guix' zone.
> >
> > * gnu/services/networking.scm (%ntp-servers): Use *.guix.pool.ntp.org.
> 
> Yes!  :-)

Pushed as 57f57a7bbfe1dbb2092ea082f575706fed03a42f!

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.