Proper configuration for Chrony

[TommyTran732]

Hi,

I am seeing some conflicting information on the forum, so I hope to find some clarifications here :)

- I want to use NTS, so I installed the Chrony plugin. I enabled NTS client support and added NTS peers.
- Some posts suggest that the NTP servers should be removed from NTP settings (the Service -> Network Time) so that ntpd stops running and will not run at boot. I followed this advice as I don't want an unnecessary service running on my system. However, I wonder if this is strictly necessary or if Chrony would have overriden NTPd anyways?
- The default port for chrony is 323 somehow. Is it to avoid conflict with NTPd?
- As far as I understand, chrony will automatically set the time. There is no need for a cronjob to sync with the chrony daemon. Is this correct?
- Someone said that if I change the port to 123, I will need to set up a cronjob to synchronize the time. If what I said above is correct, why is this the case? Is this person just wrong?

[charles.adams]

Hi, I also am looking to switch to the Chrony plugin due to NTP problems on my device and have nearly all the same confusions as you and wanted to find out if you found the answers?

[newsense]

- Some posts suggest that the NTP servers should be removed from NTP settings (the Service -> Network Time) so that ntpd stops running and will not run at boot. I followed this advice as I don't want an unnecessary service running on my system. However, I wonder if this is strictly necessary or if Chrony would have overriden NTPd anyways?

Yes it is necessary.

- The default port for chrony is 323 somehow. Is it to avoid conflict with NTPd?

Once you complete the previous step you can run Chrony on port 123.

- As far as I understand, chrony will automatically set the time. There is no need for a cronjob to sync with the chrony daemon. Is this correct?

Yes

- Someone said that if I change the port to 123, I will need to set up a cronjob to synchronize the time. If what I said above is correct, why is this the case? Is this person just wrong?

No cron needed.


If you want Chrony to be the sole NTP authority in your environment you'll need to add the VLANs in scope to Chrony and set up a port forward rule redirecting all outbound udp/123 traffic to 127.0.0.1 port NTP