Inventory railiance01 time sync and pick S1 IaC owner.

RCLK-WP-0005-T01: systemd-timesyncd only, UTC, Ubuntu NTP defaults.
Canonical owner is railiance-infra; railiance-hosts is superseded.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-14 12:03:28 +02:00
parent 672064b0d5
commit 1a6784d5ac
2 changed files with 59 additions and 2 deletions

View file

@ -0,0 +1,50 @@
# RCLK-WP-0005-T01 — railiance01 time inventory and IaC ownership
Captured 2026-09-14T09:59:48Z over SSH `railiance01`. Read-only. No clock,
daemon, or IaC was changed.
## Live host
| Fact | Observed |
| --- | --- |
| Node | `239.62.205.92.host.secureserver.net` / 92.205.62.239 |
| Virtualization | KVM, OpenStack Nova |
| OS | Ubuntu 24.04.4 LTS |
| Timezone | `Etc/UTC` |
| RTC | UTC (`RTC in local TZ: no`) |
| Synchronized | yes |
| NTP service | active |
| Daemon | **systemd-timesyncd only** (chrony/ntp/ntpd inactive) |
| Config file | `/etc/systemd/timesyncd.conf` — stock comments, `#NTP=` unset |
| Upstream | compile-time default `ntp.ubuntu.com` (IPv6 `2620:2d:4000:1::3f`) |
| Stratum | 2 |
| Offset / delay / jitter | −634 µs / 17.8 ms / 3.4 ms |
| Poll | 34 min 8 s |
| timesyncd uptime | since 2026-09-05 03:03:49 UTC |
| Second daemon | none |
Egress to UDP/123 on Ubuntu NTP is currently working. Listeners were not
opened by this inspection. No secret was read.
## Canonical IaC owner
| Repo | Role |
| --- | --- |
| **railiance-infra** | Canonical S1 substrate. Owns host UTC daemon IaC going forward. |
| railiance-hosts | **Superseded** (INTENT banner, verified 2026-08-11). Do not start new work or a second timesync tree here. |
| railiance-clock | Application-clock contract and packaging. Must not install a host NTP daemon or take `CAP_SYS_TIME`. |
| railiance-bootstrap | Sequences a new estate; does not own ongoing S1 time operation. |
`railiance-plan-host` in infra mentions “Time sync (systemd-timesyncd or
chrony)” as a checklist line only. No Ansible role, cloud-init NTP stanza, or
Goss check currently declares the live timesyncd unit. The running daemon is
**adopted Ubuntu default**, not a reviewed source revision.
## Adoption vs diff
Adopt the existing single daemon (`systemd-timesyncd`) rather than introducing
chrony. Do not mix daemons. Declaring NTP servers, holdover, and health export
is **RCLK-WP-0005-T02**, after RCLK-WP-0002 pins UTC/leap/quality. Residual:
`RAIL-HO-WP-0013`.
RCLK-WP prefix ownership stays `railiance-clock`.

View file

@ -4,7 +4,7 @@ type: workplan
title: "Deploy clock infrastructure through owner-managed infrastructure as code"
domain: infotech
repo: railiance-clock
status: ready
status: active
owner: codex
topic_slug: custodian
created: "2026-09-14"
@ -26,7 +26,7 @@ Production applies require concrete owner admission, not just this plan's existe
```task
id: RCLK-WP-0005-T01
status: todo
status: done
priority: high
state_hub_task_id: "883743c4-d368-5f94-878b-0e122eab39ee"
```
@ -41,6 +41,13 @@ work records before handing off any execution; no duplicate configuration trees.
Acceptance: reviewed source-path/owner matrix, live read-only inventory receipt,
explicit adoption of existing settings or a bounded source diff; no second daemon.
**Done 2026-09-14.** Receipt:
`docs/evidence/2026-09-14-host-time-inventory.md`. Live: UTC,
systemd-timesyncd only, synchronized to `ntp.ubuntu.com`, stock config.
Canonical S1 owner is **railiance-infra**; railiance-hosts is superseded.
Adopt the existing daemon; do not add chrony. Residual `RAIL-HO-WP-0013`
declares it in IaC after RCLK-WP-0002.
## Implement declarative host UTC discipline and verification
```task