Add timesync prechecks

If not running containerised chrony, we need to check that host
has its own means of system clock synchronization.

Change-Id: I31b3e9ed625d63a4bf82c674593522268c20ec4c
Partial-Bug: #1885689

ansible/roles/prechecks/tasks/main.yml

@@ -2,6 +2,10 @@
 - include_tasks: host_os_checks.yml
   when: prechecks_enable_host_os_checks | bool
 
+- include_tasks: timesync_checks.yml
+  when:
+    - not enable_chrony | bool
+
 - include_tasks: datetime_checks.yml
 
 - include_tasks: port_checks.yml

ansible/roles/prechecks/tasks/timesync_checks.yml

+---
+- name: Checking timedatectl status
+  become: true
+  command: timedatectl status
+  register: timedatectl_status
+  changed_when: false
+
+- name: Fail if no (S)NTP service is running
+  fail:
+    msg: >-
+      timedatectl does not see any (S)NTP service running.
+      Please ensure you have (S)NTP client working.
+  when:
+    - "'service: active' not in timedatectl_status.stdout"
+    # Ubuntu Bionic (18.04)
+    - "'service active: yes' not in timedatectl_status.stdout"
+
+- name: Fail if the clock is not synchronized
+  fail:
+    msg: >-
+      timedatectl sees the system clock as unsynchronized.
+      Please wait for synchronization.
+  when:
+    - "'synchronized: yes' not in timedatectl_status.stdout"

releasenotes/notes/timesync-prechecks-24d71d1ad7f8cad2.yaml

+---
+features:
+  - |
+    Adds timesync prechecks which run when containerised chrony is not enabled
+    to ensure the host has its system clock synchronized.