Marc S. Weidner
60374476ab
Some checks failed
💙 Generating a PUBLIC Live ISO. / 💙 Generating a PUBLIC Live ISO. (push) Has been cancelled
🔐 Generating a Private Live ISO TRIXIE. / 🔐 Generating a Private Live ISO TRIXIE. (push) Has been cancelled
🛡️ Retrieve DNSSEC status of coresecret.dev. / 🛡️ Retrieve DNSSEC status of coresecret.dev. (push) Successful in 1m6s
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m47s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
143 lines
4.0 KiB
Bash
143 lines
4.0 KiB
Bash
#!/bin/bash
|
|
# SPDX-Version: 3.0
|
|
# SPDX-CreationInfo: 2025-10-10; WEIDNER, Marc S.; <msw@coresecret.dev>
|
|
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
|
|
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
|
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
|
|
# SPDX-FileType: SOURCE
|
|
# SPDX-License-Identifier: LicenseRef-CNCL-1.1 OR LicenseRef-CCLA-1.1
|
|
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
|
|
# SPDX-PackageName: CISS.debian.live.builder
|
|
# SPDX-Security-Contact: security@coresecret.eu
|
|
|
|
set -Ceuo pipefail
|
|
|
|
#######################################
|
|
# Minimal leap-second probe for Debian/chrony systems.
|
|
# - Prints kernel leap flags & TAI offset (delta AT).
|
|
# - Reads tzdata's leap-seconds list (authoritative TAI-UTC).
|
|
# - Shows chrony tracking summary (incl. leap status).
|
|
# - Demonstrates 23:59:60 rendering via TZ=right/UTC.
|
|
# Globals:
|
|
# None
|
|
# Arguments:
|
|
# None
|
|
# Returns:
|
|
# 0: on success
|
|
#######################################
|
|
main() {
|
|
### 1) System TZ and tzdata source.
|
|
printf "System TZ link: [%s]\n\n" "$(readlink -f /etc/localtime || true)"
|
|
|
|
if [[ -f /usr/share/zoneinfo/leap-seconds.list ]]; then
|
|
|
|
declare tz_leap_line tz_tai tz_ntp ts_human
|
|
|
|
tz_leap_line="$(awk '($1 !~ /^#/) {L=$0} END{print L}' /usr/share/zoneinfo/leap-seconds.list)"
|
|
tz_ntp="$(awk '{print $1}' <<<"${tz_leap_line}")"
|
|
tz_tai="$(awk '{print $2}' <<<"${tz_leap_line}")"
|
|
ts_human="$(awk -F'#' '{gsub(/^[[:space:]]+/, "", $2); print $2}' <<<"${tz_leap_line}")"
|
|
|
|
printf "tzdata delta AT (TAI-UTC): %s s [last change at: %s; NTP ts: %s]\n\n" "${tz_tai:-?}" "${ts_human:-?}" "${tz_ntp:-?}"
|
|
|
|
else
|
|
|
|
printf "tzdata leap-seconds.list not found.\n"
|
|
|
|
fi
|
|
|
|
### 2) Kernel view (requires adjtimex).
|
|
if command -v adjtimex >/dev/null 2>&1; then
|
|
|
|
printf "Kernel time status (adjtimex -p):\n"
|
|
adjtimex -p | sed 's/^/ /'
|
|
declare k_tai
|
|
k_tai="$(adjtimex -p | awk '/^tai:/ {print $2}')"
|
|
|
|
if [[ -n "${k_tai:-}" ]]; then
|
|
|
|
printf "Kernel-exported delta AT [tai]: %s s\n" "${k_tai}"
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
printf "Package: 'adjtimex' not found. Install 'adjtimex' for kernel leap/TAI details.\n\n"
|
|
|
|
fi
|
|
|
|
### 3) Chrony summary.
|
|
if command -v chronyc >/dev/null 2>&1; then
|
|
|
|
printf "\n"
|
|
printf "chronyc tracking:\n"
|
|
chronyc -n tracking | sed 's/^/ /'
|
|
|
|
else
|
|
|
|
printf "Package: 'chronyc' not found. Skipping chrony status.\n\n"
|
|
|
|
fi
|
|
|
|
### 4) right/UTC demonstration of 23:59:60 (uses 2016-12-31 leap).
|
|
if [[ -f /usr/share/zoneinfo/right/UTC ]]; then
|
|
|
|
printf "\n"
|
|
printf "right/UTC leap rendering check (expect 23:59:60):\n\n"
|
|
TZ=right/UTC date -ud '2017-01-01 00:00:00 -1 second' || true
|
|
|
|
else
|
|
|
|
printf "\n"
|
|
printf "File: 'tzdata right/UTC' zone not installed; skipping 23:59:60 demo.\n\n"
|
|
|
|
fi
|
|
|
|
printf "\n"
|
|
printf "Hint:\n"
|
|
|
|
printf " - delta AT (TAI-UTC) should match tzdata and kernel (chrony sets kernel TAI if leapsectz/leapseclist is used).\n"
|
|
printf " - For monotonic intervals, apps must use CLOCK_MONOTONIC, not CLOCK_REALTIME.\n"
|
|
|
|
return 0
|
|
}
|
|
|
|
### Build right/UTC from tzdata leap table if missing.
|
|
if [[ ! -e /usr/share/zoneinfo/right/UTC ]]; then
|
|
|
|
install -d -m 0755 /usr/share/zoneinfo/right
|
|
|
|
### Minimal zic source for a fixed UTC zone.
|
|
declare -r tmp_src="/tmp/UTC.src"
|
|
printf 'Zone UTC 0 - UTC\n' > "${tmp_src}"
|
|
|
|
### Prefer the zic-format leapseconds file.
|
|
declare leap_zic="/usr/share/zoneinfo/leapseconds"
|
|
|
|
if [[ -s "${leap_zic}" ]]; then
|
|
|
|
zic -d /usr/share/zoneinfo/right -L "${leap_zic}" "${tmp_src}"
|
|
|
|
else
|
|
|
|
echo "WARNING: ${leap_zic} not found; building right/UTC without leap info." >&2
|
|
zic -d /usr/share/zoneinfo/right -L /dev/null "${tmp_src}"
|
|
|
|
fi
|
|
|
|
rm -f "${tmp_src}"
|
|
|
|
fi
|
|
|
|
if [[ -e /usr/share/zoneinfo/right/UTC ]]; then
|
|
|
|
### Expect to see 'Sat Dec 31 23:59:60 UTC 2016' rendered in right/UTC
|
|
TZ=right/UTC date -ud '2017-01-01 00:00:00 -1 second' || true
|
|
|
|
fi
|
|
|
|
main "$@"
|
|
|
|
exit 0
|
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|