Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
packages/net/chrony/files/chrony.conf

21 lines
388 B
Text
Raw Normal View History

chrony: rework loading of configuration Instead of loading /etc/chrony/chrony.conf from the file generated from the chrony UCI configuration, use the confdir directive in the main config to load the generated file. This should make it obvious that chrony is configured in UCI and it can also be easily disabled. Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 16:02:49 +00:00
# Load UCI configuration
confdir /var/etc/chrony.d
chrony: import from oldpackages Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2015-09-22 18:54:41 +00:00
chrony: improve hotplug script - Use the chronyc onoffline command to update state of all sources per current routing configuration - Don't ignore the "ifupdate" action - Add NTP servers from DHCP for the interface that went up instead of the wan4+wan6 interfaces - Save the servers to files loaded by the sourcedir directive to not lose them when chronyd is restarted, and remove them when the interface goes down Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 19:02:48 +00:00
# Load NTP servers from DHCP if enabled in UCI
sourcedir /var/run/chrony-dhcp
chrony: import from oldpackages Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2015-09-22 18:54:41 +00:00
# Log clock errors above 0.5 seconds
logchange 0.5
# Don't log client accesses
noclientlog
chrony: set rtcsync config option Else the system will always stay in UNSYNC state. Even if there is no real RTC. See chrony minimal config: http://chrony.tuxfamily.org/faq.html#_what_is_the_minimum_recommended_configuration_for_an_ntp_client Signed-off-by: Stefan Sydow <st@metafly.info>
2017-02-10 16:02:54 +00:00
chrony: improve configuration Extend configuration of NTP sources in UCI: - Add nts option to enable NTS - Add disabled option to allow inactive sources Add nts section to UCI with: - rtccheck option to disable certificate time checks on systems that don't have an RTC to avoid the chicken-and-egg problem (it is less secure, but still should be better than no NTS at all) - systemcerts option to disable system certificates - trustedcerts option to specify path to trusted certificates Save NTS keys and cookies by default to avoid unnecessary NTS-KE sessions when restarted or switching back to an already used NTS source. Also, save the drift to stabilize the clock after chronyd restart. Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 19:57:35 +00:00
# Mark the system clock as synchronized
chrony: set rtcsync config option Else the system will always stay in UNSYNC state. Even if there is no real RTC. See chrony minimal config: http://chrony.tuxfamily.org/faq.html#_what_is_the_minimum_recommended_configuration_for_an_ntp_client Signed-off-by: Stefan Sydow <st@metafly.info>
2017-02-10 16:02:54 +00:00
rtcsync
chrony: improve configuration Extend configuration of NTP sources in UCI: - Add nts option to enable NTS - Add disabled option to allow inactive sources Add nts section to UCI with: - rtccheck option to disable certificate time checks on systems that don't have an RTC to avoid the chicken-and-egg problem (it is less secure, but still should be better than no NTS at all) - systemcerts option to disable system certificates - trustedcerts option to specify path to trusted certificates Save NTS keys and cookies by default to avoid unnecessary NTS-KE sessions when restarted or switching back to an already used NTS source. Also, save the drift to stabilize the clock after chronyd restart. Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 19:57:35 +00:00
# Record the clock's drift
driftfile /var/run/chrony/drift
# Save NTS keys and cookies
ntsdumpdir /var/run/chrony
Reference in a new issue Copy permalink