faraphel/chrony
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update example config files

Browse source
This commit is contained in:
Miroslav Lichvar 2013-06-20 16:19:36 +02:00
parent 0e298bedf6
commit 821226e473
2 changed files with 32 additions and 36 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
examples/chrony.conf.example
View file

@ -40,21 +40,21 @@
# more 'NTP servers'. You will probably find that your Internet Service # more 'NTP servers'. You will probably find that your Internet Service
# Provider or company have one or more NTP servers that you can specify. # Provider or company have one or more NTP servers that you can specify.
# Failing that, there are a lot of public NTP servers. There is a list # Failing that, there are a lot of public NTP servers. There is a list
# you can access at: # you can access at http://support.ntp.org/bin/view/Servers/WebHome or
# http://support.ntp.org/bin/view/Servers/WebHome # you can use servers from the pool.ntp.org project.
! server ntp0.your-isp.com ! server 0.pool.ntp.org iburst
! server ntp1.your-isp.com ! server 1.pool.ntp.org iburst
! server ntp.public-server.org ! server 2.pool.ntp.org iburst
# However, for dial-up use you probably want these instead. The word # However, for dial-up use you probably want these instead. The word
# 'offline' means that the server is not visible at boot time. Use # 'offline' means that the server is not visible at boot time. Use
# chronyc's 'online' command to tell chronyd that these servers have # chronyc's 'online' command to tell chronyd that these servers have
# become visible after you go on-line. # become visible after you go on-line.
! server ntp0.your-isp.com offline ! server 0.pool.ntp.org offline
! server ntp1.your-isp.com offline ! server 1.pool.ntp.org offline
! server ntp.public-server.org offline ! server 2.pool.ntp.org offline
# You may want to specify NTP 'peers' instead. If you run a network # You may want to specify NTP 'peers' instead. If you run a network
# with a lot of computers and want several computers running chrony to # with a lot of computers and want several computers running chrony to
@ -89,7 +89,7 @@
# immediately so that it doesn't gain or lose any more time. You # immediately so that it doesn't gain or lose any more time. You
# generally want this, so it is uncommented. # generally want this, so it is uncommented.
driftfile /etc/chrony.drift driftfile /var/lib/chrony/drift
# If you want to use the program called chronyc to configure aspects of # If you want to use the program called chronyc to configure aspects of
# chronyd's operation once it is running (e.g. tell it the Internet link # chronyd's operation once it is running (e.g. tell it the Internet link
@ -122,7 +122,7 @@ commandkey 1
# Enable these two options to use this. # Enable these two options to use this.
! dumponexit ! dumponexit
! dumpdir /var/log/chrony ! dumpdir /var/lib/chrony
# chronyd writes its process ID to a file. If you try to start a second # chronyd writes its process ID to a file. If you try to start a second
# copy of chronyd, it will detect that the process named in the file is # copy of chronyd, it will detect that the process named in the file is
@ -133,17 +133,16 @@ commandkey 1
####################################################################### #######################################################################
### INITIAL CLOCK CORRECTION ### INITIAL CLOCK CORRECTION
# This option is only useful if your NTP servers are visible at boot # This option is useful to quickly correct the clock on start if it's
# time. This probably means you are on a LAN. If so, the following # off by a large amount. The value '10' means that if the error is less
# option will choose the best-looking of the servers and correct the
# system time to that. The value '10' means that if the error is less
# than 10 seconds, it will be gradually removed by speeding up or # than 10 seconds, it will be gradually removed by speeding up or
# slowing down your computer's clock until it is correct. If the error # slowing down your computer's clock until it is correct. If the error
# is above 10 seconds, an immediate time jump will be applied to correct # is above 10 seconds, an immediate time jump will be applied to correct
# it. Some software can get upset if the system clock jumps (especially # it. The value '1' means the step is allowed only on the first update
# backwards), so be careful! # of the clock. Some software can get upset if the system clock jumps
# (especially backwards), so be careful!
! initstepslew 10 ntp0.your-company.com ntp1.your-company.com ntp2.your-company.com ! makestep 10 1
####################################################################### #######################################################################
### LOGGING ### LOGGING
@ -255,13 +254,6 @@ commandkey 1
# put into chronyc to allow you to modify chronyd's parameters. By # put into chronyc to allow you to modify chronyd's parameters. By
# default all you can do is view information about chronyd's operation. # default all you can do is view information about chronyd's operation.
# Some people have reported that the need the following line to allow
# chronyc to work even on the same machine. This should not be
# necessary, and the problem is being investigated. You can leave this
# line enabled, as it's benign otherwise.
cmdallow 127.0.0.1
####################################################################### #######################################################################
### REAL TIME CLOCK ### REAL TIME CLOCK
# chronyd can characterise the system's real-time clock. This is the # chronyd can characterise the system's real-time clock. This is the
@ -273,7 +265,7 @@ cmdallow 127.0.0.1
# You need to have 'enhanced RTC support' compiled into your Linux # You need to have 'enhanced RTC support' compiled into your Linux
# kernel. (Note, these options apply only to Linux.) # kernel. (Note, these options apply only to Linux.)
! rtcfile /etc/chrony.rtc ! rtcfile /var/lib/chrony/rtc
# Your RTC can be set to keep Universal Coordinated Time (UTC) or local # Your RTC can be set to keep Universal Coordinated Time (UTC) or local
# time. (Local time means UTC +/- the effect of your timezone.) If you # time. (Local time means UTC +/- the effect of your timezone.) If you

26
examples/chrony.keys.example
View file

@ -1,26 +1,30 @@
####################################################################### #######################################################################
# #
# This is an example chrony keys file. You should copy it to /etc/chrony.keys # This is an example chrony keys file. You should copy it to /etc/chrony.keys
# after editing it to set up the key(s) you want to use. In most situations, # after editing it to set up the key(s) you want to use. It should be readable
# you will require a single key (the 'commandkey') so that you can supply a # only by root or the user chronyd drops the root privileges to. In most
# password to chronyc to enable you to modify chronyd's operation whilst it is # situations, you will require a single key (the 'commandkey') so that you can
# running. # supply a password to chronyc to enable you to modify chronyd's operation
# whilst it is running.
# #
# Copyright 2002 Richard P. Curnow # Copyright 2002 Richard P. Curnow
# #
####################################################################### #######################################################################
# A valid key line looks like this # A valid key line looks like this
1 a_key #1 MD5 HEX:B028F91EA5C38D06C2E140B26C7F41EC
# It must consist of an integer, followed by whitespace, followed by a block of # The key should be random for maximum security. If you wanted to use the
# text with no spaces in it. (You cannot put a space in a key). If you wanted # above line as your commandkey (i.e. chronyc password) you would put the
# to use the above line as your commandkey (i.e. chronyc password), you would # following line into chrony.conf (remove the # from the start):
# put the following line into chrony.conf (remove the # from the start):
# commandkey 1 # commandkey 1
# You might want to define more keys if you use the MD5 authentication facility # A secure command key can be generated and added to the keyfile automatically
# by adding the following directive to chrony.conf:
# generatecommandkey
# You might want to define more keys if you use the authentication facility
# in the network time protocol to authenticate request/response packets between # in the network time protocol to authenticate request/response packets between
# trusted clients and servers. # trusted clients and servers.