puppetlabs-ntp
puppetlabs-ntp copied to clipboard
support Debian 12 / Bookworm / ntpsec
Use Case
Debian 12/Bookworm switched their ntp package to ntpsec: https://salsa.debian.org/debian/ntpsec/-/blob/debian/unstable/debian/NEWS
It is mostly a dropin replacement and the package copies configurations to new locations on upgrades so nothing breaks but you cannot modify the ntpd configuration via this module anymore after upgrade.
With a couple configuration changes it can be made to work so probably only few OS defaults need to be changed:
# default ntp is a transitional package install ntpsec
ntp::package_name: [ntpsec]
ntp::driftfile: /var/lib/ntpsec/ntp.drift
ntp::config: /etc/ntpsec/ntp.conf
ntp::daemon_config: /etc/default/ntpsec
some other minor things, ntp::statsdir is not created by the package so it may be good if it is created by the module if set
setting ntp::disable_auth: true
with ntpsec results in a syntax error warning during startup, other disable flags do seem to work.
(ntpsec also supports enable [auth |stats ...]
option)