ea9d391bb5
Since the 4.2.8 upgrade, ntpd is broken on NixOS: Dec 28 19:06:54 hagbard ntpd[27723]: giving up resolving host 1.nixos.pool.ntp.org: Servname not supported for ai_socktype (-8) This appears to be because DNS resolution doesn't work in chroots anymore (due to /etc being missing). So disable chroots for now. It's probably better to use systemd's containment facilities anyway.
92 lines
1.6 KiB
Nix
92 lines
1.6 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
|
|
inherit (pkgs) ntp;
|
|
|
|
stateDir = "/var/lib/ntp";
|
|
|
|
ntpUser = "ntp";
|
|
|
|
configFile = pkgs.writeText "ntp.conf" ''
|
|
driftfile ${stateDir}/ntp.drift
|
|
|
|
restrict 127.0.0.1
|
|
restrict -6 ::1
|
|
|
|
${toString (map (server: "server " + server + " iburst\n") config.services.ntp.servers)}
|
|
'';
|
|
|
|
ntpFlags = "-c ${configFile} -u ${ntpUser}:nogroup";
|
|
|
|
in
|
|
|
|
{
|
|
|
|
###### interface
|
|
|
|
options = {
|
|
|
|
services.ntp = {
|
|
|
|
enable = mkOption {
|
|
default = !config.boot.isContainer;
|
|
description = ''
|
|
Whether to synchronise your machine's time using the NTP
|
|
protocol.
|
|
'';
|
|
};
|
|
|
|
servers = mkOption {
|
|
default = [
|
|
"0.nixos.pool.ntp.org"
|
|
"1.nixos.pool.ntp.org"
|
|
"2.nixos.pool.ntp.org"
|
|
"3.nixos.pool.ntp.org"
|
|
];
|
|
description = ''
|
|
The set of NTP servers from which to synchronise.
|
|
'';
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
###### implementation
|
|
|
|
config = mkIf config.services.ntp.enable {
|
|
|
|
# Make tools such as ntpq available in the system path.
|
|
environment.systemPackages = [ pkgs.ntp ];
|
|
|
|
users.extraUsers = singleton
|
|
{ name = ntpUser;
|
|
uid = config.ids.uids.ntp;
|
|
description = "NTP daemon user";
|
|
home = stateDir;
|
|
};
|
|
|
|
systemd.services.ntpd =
|
|
{ description = "NTP Daemon";
|
|
|
|
wantedBy = [ "multi-user.target" ];
|
|
|
|
preStart =
|
|
''
|
|
mkdir -m 0755 -p ${stateDir}
|
|
chown ${ntpUser} ${stateDir}
|
|
'';
|
|
|
|
serviceConfig = {
|
|
ExecStart = "@${ntp}/bin/ntpd ntpd -g -n ${ntpFlags}";
|
|
};
|
|
};
|
|
|
|
};
|
|
|
|
}
|