Re: git: 66f360515d28 - main - rc.conf: Leap-seconds sources: Add IANA back

From: Warner Losh <imp_at_bsdimp.com>
Date: Fri, 19 Jul 2024 19:31:52 UTC
There's risk to our IPv6 folks if we MFC this. This file is the old one
still (and it took them 6 weeks to get the last one updated past its
expiration date).

The IERS one is up to date, expires Jun 2025. The IANA has a december
expiration date finally, though we leared 3 weeks ago there's no leap in
December, so that's why the IERS one was updated.

So this is better than nothing, but we're setting ourselves up for a
problem this December / January....

The last time this issue came up, I was kinda opposed to FreeBSD running
this since IERS did. However, I either didn't know at the time, or didn't
appreciate at the time the lack of IPv6 for this data source would be a
problem. Since we have no other reliable source, maybe we need to stand up
a FreeBSD mirror after all.

So this is better than nothing, but we may need to do more.

Warner

On Fri, Jul 19, 2024 at 12:25 PM Cy Schubert <cy@freebsd.org> wrote:

> The branch main has been updated by cy:
>
> URL:
> https://cgit.FreeBSD.org/src/commit/?id=66f360515d2829d261c0ad7bd516e9dd18c2dd83
>
> commit 66f360515d2829d261c0ad7bd516e9dd18c2dd83
> Author:     Cy Schubert <cy@FreeBSD.org>
> AuthorDate: 2024-07-19 18:04:43 +0000
> Commit:     Cy Schubert <cy@FreeBSD.org>
> CommitDate: 2024-07-19 18:24:31 +0000
>
>     rc.conf: Leap-seconds sources: Add IANA back
>
>     11da791920ba switched Leap-seconds source from IANA to IERS, as IERS
>     is the canonoical source. The problem ist that IERS is not accessible
>     from IPv6 only networks. To work around this we must add IANA back in
>     order to provide IPv6-only users a source for leap-seconds fetch.
>
>     PR:             279413
>     Fixes:          11da791920ba
>     MFC after:      3 days
> ---
>  libexec/rc/rc.conf | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/libexec/rc/rc.conf b/libexec/rc/rc.conf
> index 1ee1573bbdba..583d4fd2970e 100644
> --- a/libexec/rc/rc.conf
> +++ b/libexec/rc/rc.conf
> @@ -420,7 +420,7 @@ ntp_src_leapfile="/etc/ntp/leap-seconds"
>                                 # Initial source for ntpd leapfile
>  ntp_db_leapfile="/var/db/ntpd.leap-seconds.list"
>                                 # Canonical place to get the leap seconds
> from
> -ntp_leapfile_sources="
> https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list"
> +ntp_leapfile_sources="
> https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list
> https://data.iana.org/time-zones/tzdb/leap-seconds.list"
>                                 # Source from which to fetch leapfile
>  ntp_leapfile_fetch_opts="-mq"  # Options to use for ntp leapfile fetch,
>                                 # e.g. --no-verify-peer
>