| 1 |
# Mountaineer chrony: NTP client pointing at the public pool with iburst. |
| 2 |
# Operators with an organizational time source replace the pool line with |
| 3 |
# their NTP server(s) — that override goes in |
| 4 |
# /etc/chrony/chrony.conf.d/* if Alpine's chrony build supports a drop-in, |
| 5 |
# or by editing this file directly otherwise (TODO-verify on Alpine). |
| 6 |
|
| 7 |
pool 2.pool.ntp.org iburst maxsources 4 |
| 8 |
|
| 9 |
# Initial step: allow large clock corrections at startup, only once. |
| 10 |
# After the initial sync, chrony slews the clock smoothly. |
| 11 |
initstepslew 30 2.pool.ntp.org |
| 12 |
|
| 13 |
# Drift file lives on persistent storage so re-sync after reboot is faster. |
| 14 |
driftfile /var/lib/chrony/drift |
| 15 |
|
| 16 |
# Allow the system clock to be stepped if the offset exceeds 1 second |
| 17 |
# during the first three updates only. Production-shaped: a clock that |
| 18 |
# slews continuously is more honest than one that jumps. |
| 19 |
makestep 1.0 3 |
| 20 |
|
| 21 |
# Enable kernel synchronization of the real-time clock. |
| 22 |
rtcsync |
| 23 |
|
| 24 |
# Use only authenticated NTP if a key file exists. By default no NTS or |
| 25 |
# symmetric keys are configured; operators who need them add the relevant |
| 26 |
# server/key lines themselves. |
| 27 |
|
| 28 |
# Log level: terse. Sync events of interest land in /var/log/chrony/. |
| 29 |
logdir /var/log/chrony |
| 30 |
|
| 31 |
# Refuse to act as a server. |
| 32 |
port 0 |
| 33 |
cmdport 0 |
| 34 |
|