Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2024-12-27 05:12:33 +01:00
Code Issues Projects Releases Wiki Activity
aadcc009a0
shell-things/etc/chrony
History
Mikaela Suomalainen c302b10caf
chrony.d: restore log.conf
2020-11-01 11:57:57 +02:00
..
chrony.d chrony.d: restore log.conf 2020-11-01 11:57:57 +02:00
chrony.conf etc/chrony: break chrony.conf into README.md & chrony.d/ 2020-11-01 11:23:59 +02:00
README.md etc/chrony: break chrony.conf into README.md & chrony.d/ 2020-11-01 11:23:59 +02:00

README.md

Chrony config files

For some reason Debian package for Chrony doesn’t include other config files so that has to be done by hand like

confdir /etc/chrony/chrony.d

Windows

choco install nettime

Other random notes

On pools, the default maxsources is 4 and pools would be resolved until there would be 4 names while the documentation for Telia and Snopyta says they have only 3. Cloudflare again resolves to two per IP version, so I assume that means 2.

Commands of interest:

Chrony itself

Note: -N uses names specified in config instead of reverse name lookupping then.

  • chrony -N activity - what sources are doing
  • chrony -N authdata - can show that server uses NTS
  • chrony -N ntpdata - a lot of data on the servers
  • chronyc offline - offline mode
  • chronyc online - reconnects servers
  • chrony -N sources - used timeservers and their statuses
  • chrony -N tracking - local status (stratum and own clock etc.)

nmap

Checking that something is an NTP server? Needs root:

nmap -sU -p 123 --script=ntp-info 192.168.0.1

Checking that something has NTS?

nmap -p 4460 -Pn ntp.example.net

Firewall configuration

In case local clients or peers are wanted,

ufw allow from 192.168.0.0/16 to any port 123 proto udp
ufw allow from fe80::/10 to any port 123 proto udp

A bit wide 192.168.x.x, but so is conf.d/local-servers,conf and fe80://10 isn’t ULA either.