Re: Impact of multiple NTP implementations in containers on host chronyd
"Kevin P. Fleming" <lists.chrony-users-OTXIk8dSW/[email protected]> Mon, 19 Jan 2026 05:46:09 -0500
| Newsgroups | gmane.comp.time.chrony.user |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Jan 19, 2026, at 05:30, Jan L=C3=BCbbe wrote: > On Linux, setting the system clock is protected by CAP_SYS_TIME, see > capabilities(7). So just don't give your containers this capability. > podman/docker drop it by default. Unless of course you are granting CAP_SYS_ADMIN to your containers, in w= hich case you've got much larger problems than the system clock being mo= dified! -- To unsubscribe email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org with "unsubscribe" in the subject. For help email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org with "help" in the subject. Trouble? Email [email protected]