Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 6 Jul 2022 19:47:34 +1000
From:      Peter Jeremy <peterj@freebsd.org>
To:        John Kennedy <warlock@phouka.net>
Cc:        freebsd-arm@freebsd.org
Subject:   Re: RPI4 + ntpdate + unbound
Message-ID:  <YsVaNqwNAdlEoHdj@server.rulingia.com>
In-Reply-To: <Yr/DPWc9Y%2Brp0J78@phouka1.phouka.net>
References:  <Yr/DPWc9Y%2Brp0J78@phouka1.phouka.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--4j4IsX0Cnb6tLfEa
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2022-Jul-01 21:02:05 -0700, John Kennedy <warlock@phouka.net> wrote:
>  So I've got a RPI4 (no system time stored in NVRAM) that I did a stock
>type FreeBSD install on setting the time with ntpdate and the unbound
>DNS server (aiming for DNSSEC).  As many people have noted before me,
>that setup is sort of broken because you can't look up DNSSEC hosts if
>you think it's 1970.  No NTP time servers =3D=3D no date reset =3D=3D no D=
NS.

If you're running UFS, the system clock should get set to the timestamp
in the superblock.   That will be the last sync before the previous
shutdown so it'll be minutes to hours out of date but that should be
recent enough for DNSSEC to work.

Note that this only works on UFS - see
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D254058

As an alternative option, the RTC in both the Rock64 and RockPro64
are supported.

--=20
Peter Jeremy

--4j4IsX0Cnb6tLfEa
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEE7rKYbDBnHnTmXCJ+FqWXoOSiCzQFAmLFWjFfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEVF
QjI5ODZDMzA2NzFFNzRFNjVDMjI3RTE2QTU5N0EwRTRBMjBCMzQACgkQFqWXoOSi
CzRFfQ/7BJBpFjMybIyr+Lo/hAy2vIG5BaAaEMcPM2+e5yitd4Hz7+0hFVU4ovKV
tQYvkW4Zpc/6HMycp2G+zPDVBP5VuEMLrc17I+YWc63mWwjwBLsCImUGb/73HEjs
0X5TU5/qosf5qtUnFc/+wKa16BcF9Z49KH0sQVoBE/lM8x6cAkVJIgLfj7PQbHIA
kLz+8HmTGhypSNmYjSZwW2M213Rn+XMkAq55EWnILWyghgqgByBAwNFaPtLMmv49
NkBvgEWq3/cglDzGqL5klKkUr9MkGpMsqo6ZMP5KKgAAAj3gVDLRIXQPNLuRxs7g
n1YLrdFvqGLC/mZUYU7HXjEUgvNTOVMlnptgQH0YMCgVBpGB+X7BY3RFeoXmIfL+
FWhDbBuF9onA7Cr+YY9s4+r0MD+kF+rzSQSsGyFN8Lp6iCTaKAsbNANQGdZcmxKJ
PCTOTKpGJR1ol963GiLgosM+gLtv9thAS2yjp5WQFOrNwGdzfyPrsQQ1LCdQP2+a
Au0XIUWcmabDgdyyvwLeJ/+hhjxoxEd19D2FA+Zo5wJtuVOvIJJsD3aSX52kShxr
0hN3EsN+4EG/ZmgIionJ8dfWPAWguS9++5zz0rBhjVAIvqM32Fyo+xUxksa/bJF3
kCZt7MwtJrOoxgc6a0OWV1xa0wRyjKumvIkIpFwdyeReCUJN17o=
=RMQX
-----END PGP SIGNATURE-----

--4j4IsX0Cnb6tLfEa--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?YsVaNqwNAdlEoHdj>