## SECTION=networking # chrony configuration menuconfig CHRONY tristate prompt "chrony " select LIBC_M select LIBCAP select LIBSECCOMP if CHRONY_SECCOMP select NETTLE if CHRONY_USE_NETTLE select PPS_TOOLS if CHRONY_PPS_REFCLK help This will install the Chrony NTPD Daemon (chronyd) Chrony is a pair of programs which are used to maintain the accuracy of the system clock on a computer. The two programs are called chronyd and chronyc . Chronyd is a background (daemon) program, which can be started at boot time, Chronyc provides a user interface to chronyd for monitoring its performance and configuring various settings. See https://chrony.tuxfamily.org/ for details. if CHRONY config CHRONY_USE_NETTLE bool prompt "Use nettle crypto library" help Use nettle crypto library for stronger keys than MD5 in NTP authentication. config CHRONY_SECCOMP bool default y prompt "Enable seccomp sandboxing" help Enables seccomp sandboxing to reduce the attack surface. config CHRONY_ADVANCED_COMMAND bool prompt "Enable advanced monitoring command" help This allows getting advanced NTP time synchronization status monitoring from the service. config CHRONY_PPS_REFCLK bool prompt "Enable support for PPS devices" help Pulse per second devices signal the start of every second with high precision. comment "install options ---" config CHRONY_INSTALL_CHRONY_COMMAND bool prompt "Install chrony command helper" help Install a command helper in /usr/bin/chrony_command, which extracts the command access key from /etc/chrony/chrony.keys and uses it to run one given command. Note: The user needs access to the chrony.keys file. config CHRONY_INSTALL_CHRONY_STAT bool prompt "Install chrony statistics helper" help Install a convenience wrapper in /usr/bin/chrony_stat, which gives a short overview for your configured time sources. Usage /usr/bin/chrony_stat [ --full | --bool | --skew | --short-skew | --help ] --full or no argument: show server name and verbose status --bool show server name and a) true, if timesource is currently synced b) false otherwise --skew show servername and a) estimated error, if timesource is currently synced b) false otherwise --short-skew show estimated error, if timesource is currently synced suppress all other servers config CHRONY_INSTALL_CONFIG bool default y prompt "Install chrony config files" help Install /etc/chrony/chrony.conf and /etc/chrony/chony.keys. if CHRONY_INSTALL_CONFIG config CHRONY_DEFAULT_ACCESS_KEY string prompt "setup default access key for chronyc" default "undefined" help This will install a default access key with the given content to the chrony.keys file. This is used by /etc/init.d/chrony to access status data, etc. config CHRONY_DEFAULT_NTP_SERVER string prompt "setup default ntp peer" default "10.1.1.2" help This will set the ntp server for simple configurations. endif config CHRONY_STARTSCRIPT bool default y depends on INITMETHOD_BBINIT prompt "install /etc/init.d/chrony" config CHRONY_SYSTEMD_UNIT bool default y depends on INITMETHOD_SYSTEMD prompt "install systemd unit files" endif