From nobody Wed Jul 6 09:47:34 2022 X-Original-To: freebsd-arm@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 0FB0A1D0EBAC for ; Wed, 6 Jul 2022 09:47:43 +0000 (UTC) (envelope-from peterj@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4LdF8G6mgdz3G2D; Wed, 6 Jul 2022 09:47:42 +0000 (UTC) (envelope-from peterj@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1657100863; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=FFqJxaSmwXnmji/PxndmJUbSngcnkWTWglEpuRhsTHs=; b=KKZ/oEbnG+56zwRJVtrW97T5OJ/5045EbLjCjwH7GkaiSEfduTrFcgEMiiMnJUOFqWt1bu 6kMwR28PCiIy21vQtZkUR4J/l2eyLLr+2wibbtw1hwEcMcZsQR0Ef7HJ9Xjp9P9570TJLv y3XteIDXoMx4AvMLlmWsjqg7kdDuzCUbXNEm3Z+OB/7OHLb0ABtexR2u+YTbJNZLUGWzac AsSgi1LaJzCwEY9z8ibNUY52jxwPwWiUF2X+yqQXP2oES2TM8opstNYRubQyrhdw4dd+gu hrmoEYikEEKMPsG0Q80DuKRH89fst0/D9RxTrNNB+sxJtFDIWR372nxJPucffQ== Received: from server.rulingia.com (ppp239-208.static.internode.on.net [59.167.239.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: peterj) by smtp.freebsd.org (Postfix) with ESMTPSA id D79C3349C7; Wed, 6 Jul 2022 09:47:41 +0000 (UTC) (envelope-from peterj@freebsd.org) Date: Wed, 6 Jul 2022 19:47:34 +1000 From: Peter Jeremy To: John Kennedy Cc: freebsd-arm@freebsd.org Subject: Re: RPI4 + ntpdate + unbound Message-ID: References: List-Id: Porting FreeBSD to ARM processors List-Archive: https://lists.freebsd.org/archives/freebsd-arm List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arm@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="4j4IsX0Cnb6tLfEa" Content-Disposition: inline In-Reply-To: X-PGP-Key: http://www.rulingia.com/keys/peter.pgp ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1657100862; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=FFqJxaSmwXnmji/PxndmJUbSngcnkWTWglEpuRhsTHs=; b=Non4bcyUYdwe3fcbVqzwn/+E1FqrsV00aZ+iOTneo/ltKlT1LosQCHeWG5ASez8qpAofPw heexWk3qsbkq8K6ceApDS3rVj9KLD3LOI+X0lXBqx8yDloFz0On54waqutVNe8agR+xt8F bANRqNh8d3/oonXemXdA3DOsBnyXppstxxDfEfLJftDsFNK15/LSSLFbkG/o8f8CCquUVG hOld69CUH5loah6cVBy9ULSOHUEzxXX2vGgDMQOLdzwBgrVFulRNh5rdJMl3GgeoBueGjt 7qdXiyK2tqS3BLAqfRUozGqUi9dfLDQwar9qH5qSyggYvDMaUjUehhIy/dP2IQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1657100862; a=rsa-sha256; cv=none; b=bhlEVApFSBlVA+xPUN8NILZkVSJpPZjVq7P8+6/g9xdb7Xbpv2tUhLVhvjYl4z5Q86Yqs5 WpWjETmwPWXBDZ8B960I/kuvtafcwfO3+pGoSyxtdVQCt7bGOEBXdXzcVizdjk3dmntZM+ NYH/CScqqf6PDBBVpQn5Em2EVMHwmogfVfStzxpBZnLB3k7Lp8d1g5iIqq5viTqhjhqQ/u vrCyHhStTiIGEgSit0zQ8R+7PeeuuJ9lAzQaocfjlUZcbIaEXqQ2/TkL5+UWZFNae4O+6T 9LVL0xZdxsHWZVOedTB7w/xpU1wbWxGElknTb982BBZ//cgEoPovR3FTtr7wgQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N --4j4IsX0Cnb6tLfEa Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2022-Jul-01 21:02:05 -0700, John Kennedy wrote: > So I've got a RPI4 (no system time stored in NVRAM) that I did a stock >type FreeBSD install on setting the time with ntpdate and the unbound >DNS server (aiming for DNSSEC). As many people have noted before me, >that setup is sort of broken because you can't look up DNSSEC hosts if >you think it's 1970. No NTP time servers =3D=3D no date reset =3D=3D no D= NS. If you're running UFS, the system clock should get set to the timestamp in the superblock. That will be the last sync before the previous shutdown so it'll be minutes to hours out of date but that should be recent enough for DNSSEC to work. Note that this only works on UFS - see https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D254058 As an alternative option, the RTC in both the Rock64 and RockPro64 are supported. --=20 Peter Jeremy --4j4IsX0Cnb6tLfEa Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE7rKYbDBnHnTmXCJ+FqWXoOSiCzQFAmLFWjFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEVF QjI5ODZDMzA2NzFFNzRFNjVDMjI3RTE2QTU5N0EwRTRBMjBCMzQACgkQFqWXoOSi CzRFfQ/7BJBpFjMybIyr+Lo/hAy2vIG5BaAaEMcPM2+e5yitd4Hz7+0hFVU4ovKV tQYvkW4Zpc/6HMycp2G+zPDVBP5VuEMLrc17I+YWc63mWwjwBLsCImUGb/73HEjs 0X5TU5/qosf5qtUnFc/+wKa16BcF9Z49KH0sQVoBE/lM8x6cAkVJIgLfj7PQbHIA kLz+8HmTGhypSNmYjSZwW2M213Rn+XMkAq55EWnILWyghgqgByBAwNFaPtLMmv49 NkBvgEWq3/cglDzGqL5klKkUr9MkGpMsqo6ZMP5KKgAAAj3gVDLRIXQPNLuRxs7g n1YLrdFvqGLC/mZUYU7HXjEUgvNTOVMlnptgQH0YMCgVBpGB+X7BY3RFeoXmIfL+ FWhDbBuF9onA7Cr+YY9s4+r0MD+kF+rzSQSsGyFN8Lp6iCTaKAsbNANQGdZcmxKJ PCTOTKpGJR1ol963GiLgosM+gLtv9thAS2yjp5WQFOrNwGdzfyPrsQQ1LCdQP2+a Au0XIUWcmabDgdyyvwLeJ/+hhjxoxEd19D2FA+Zo5wJtuVOvIJJsD3aSX52kShxr 0hN3EsN+4EG/ZmgIionJ8dfWPAWguS9++5zz0rBhjVAIvqM32Fyo+xUxksa/bJF3 kCZt7MwtJrOoxgc6a0OWV1xa0wRyjKumvIkIpFwdyeReCUJN17o= =RMQX -----END PGP SIGNATURE----- --4j4IsX0Cnb6tLfEa--