From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#27759: NTP pool vendor zone Date: Tue, 18 Jul 2017 17:42:56 -0400 Message-ID: <20170718214256.GA20175@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="qMm9M+Fa2AknHoGS" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46923) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dXaIj-0001tW-Nn for bug-guix@gnu.org; Tue, 18 Jul 2017 17:45:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dXaIg-0000u0-Jf for bug-guix@gnu.org; Tue, 18 Jul 2017 17:45:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:44304) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dXaIg-0000tr-FY for bug-guix@gnu.org; Tue, 18 Jul 2017 17:45:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dXaIg-0000pE-6a for bug-guix@gnu.org; Tue, 18 Jul 2017 17:45:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46542) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dXaHS-0001BR-HY for bug-guix@gnu.org; Tue, 18 Jul 2017 17:43:47 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dXaHP-0008Fe-Ej for bug-guix@gnu.org; Tue, 18 Jul 2017 17:43:46 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:46915) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dXaHP-0008FW-77 for bug-guix@gnu.org; Tue, 18 Jul 2017 17:43:43 -0400 Received: from localhost (96-90-63-214-static.hfc.comcastbusiness.net [96.90.63.214]) by mail.messagingengine.com (Postfix) with ESMTPA id C42887E1FC for ; Tue, 18 Jul 2017 17:43:40 -0400 (EDT) Content-Disposition: inline List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 27759@debbugs.gnu.org --qMm9M+Fa2AknHoGS Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Currently our ntp-service uses the top-level NTP pool servers [0]: (define %ntp-servers ;; Default set of NTP servers. '("0.pool.ntp.org" "1.pool.ntp.org" "2.pool.ntp.org")) However, the NTP Pool project requests that operating system vendors (that's us!) don't use these servers directly [1]: ------ You must get approval from the server operator before you hardcode any IP addresses or hostnames. This is easy to get if your own organization runs the NTP servers you are planning to use. In most other cases you will not get it. Do not use the standard pool.ntp.org names as a default configuration in your system. The NTP Pool can offer services for you, but it must be setup in advance (see below). ------ They recommend we apply for a vendor zone instead [2]. We would not have to run our own NTP servers. Does anyone know if GNU or the FSF have a vendor zone we could use? Otherwise, we should apply for one and adjust our ntp-service. [0] https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/services/networking.scm?id=ec5c24f9a8421172a0cf9133d512014b31815a76#n336 [1] http://www.pool.ntp.org/en/vendors.html#basic-guidelines [2] http://www.pool.ntp.org/en/vendors.html#vendor-zone --qMm9M+Fa2AknHoGS Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAllugOAACgkQJkb6MLrK fwiquA/8DwhOwtwvNxtQ/Gsvl9IIIX8m8c1zhLF41Gf7k9GLt0ctH8adjzMcpBIx R6i8aoc4e1GIzFPBDl0qVPJQ13Qlsi0I4mMjmy3nvYI0wluEbUQlsaxeUxhYeupz grDwy3smgkIZOU5TK7JwGCXblH3KTscYCVRkZFEA+73LgMDGL37AImQJuh/G4OgP aDwzvHvNB5p/CCDJQQYAANrRmZm7Z6Wn/NsjbrEfzkA4irtMLwzD0GbPJv0PBUNi 8vMkc2SuXPs6yN47DXu5p7AHt1cVlTWO3R4pmtdNUntawxETIwN2NmYL9RvWvn9O 0rNuwuERL+0MBY7bknmO0qbXa1YqJMKlEERYsPX9FVzq0RqCCsqVn4GjyteYWNWO ocKgjnjNVto1TCbJBi0JrIR2V5gosKqyPvLPCsnCwKAeK1I61LfKInOB8v2fsPSi gmX35xp0nvVje6cuyr7ouG2DAhFxK6u2LQqTehyYiQid+RM9Fi1gQbPHANqTzstE K7+tdrmGVC18wQnEF/vZ63iXACZqKU2UW2sqGVtXZZYJzR6x6rKXXnj8EL8Ofxkh M6/TvuaCYyHIvC4Kfe6LoI/HtIOIGdD4Q7Zsl8kBAolRZJ+XX8ZUKVcDqeLRmHQr Ebf4kaxYLYrvc4FyKb+WV5bvBmKdZMyPPtzlv+SqHbEJLIzrsyU= =pGCx -----END PGP SIGNATURE----- --qMm9M+Fa2AknHoGS--