kemonine

/

Archived

This repository has been archived on 2022-08-05. You can view files and clone it, but cannot push or open issues or pull requests.

1.3 KiB

Raw Blame History

Chrony

Setup alternative ntp that does well with systems that may or may not always be online.

Inspiration / Further Reading

Install


apt update
apt install chrony
systemctl enable chrony # Enable service
systemctl start chrony # Start service
chronyc activity # Verify install successful
systemctl disable ntp.service # Disable std ntpd (replaced by chrony)

Configuration


cat >> /etc/chrony/chrony.conf <<EOF
allow 172.16.16.0/24
allow 172.17.17.0/24
allow 172.18.18.0/24
allow 172.30.0.0/16

# Allow large clock adjustments (you want this as there is no RTC on most SBCs)
makestep 1 -1
EOF

Run systemctl restart chrony to pickup the changes.

Allow NTP access via internal/trusted networks


firewall-cmd --permanent --zone=internal --add-service ntp
firewall-cmd --permanent --zone=trusted --add-service ntp
firewall-cmd --reload
firewall-cmd --info-zone internal
firewall-cmd --info-zone trusted