bundle agent ntp
{
# Use custom ntp configuration for networked clients (package systemd-timesyncd
# is installed by default). On the internal ntp server (default: 'tjener'), the
# ntpsec package is installed.
# Keep systemd-timesyncd default settings for roaming workstations.
# Note: In case the ntpsec package is installed, the conflicting
# systemd-timesyncd package gets removed (but not purged).

vars:

  "timesyncd_conf_file" string => "/usr/lib/systemd/timesyncd.conf.d/.";

files:

  debian.timesyncd.!standalone.!roaming.installation::

    "$(timesyncd_conf_file)"
      create => "true";

    "/usr/lib/systemd/timesyncd.conf.d/debian-edu-timesyncd.conf"
      copy_from => local_cp("/usr/share/debian-edu-config/debian-edu-timesyncd.conf"),
      perms => mog("644","root","root");

commands:

  # Make sure ntpsec gets installed

  debian.server.installation::

    "/usr/bin/apt-get install -y ntpsec"
      contain => in_shell;
}