Re: RPI4 + ntpdate + unbound

Peter Jeremy <[email protected]>
Newsgroups gmane.os.freebsd.devel.arm
Message-ID <[email protected]>
On 2022-Jul-01 21:02:05 -0700, John Kennedy <[email protected]> wrote:
>  So I've got a RPI4 (no system time stored in NVRAM) that I did a stock
>type FreeBSD install on setting the time with ntpdate and the unbound
>DNS server (aiming for DNSSEC).  As many people have noted before me,
>that setup is sort of broken because you can't look up DNSSEC hosts if
>you think it's 1970.  No NTP time servers == no date reset == no DNS.

If you're running UFS, the system clock should get set to the timestamp
in the superblock.   That will be the last sync before the previous
shutdown so it'll be minutes to hours out of date but that should be
recent enough for DNSSEC to work.

Note that this only works on UFS - see
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254058

As an alternative option, the RTC in both the Rock64 and RockPro64
are supported.

-- 
Peter Jeremy
signature.asc (application/pgp-signature, 963 B)
-----BEGIN PGP SIGNATURE-----
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=RMQX
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.