From nobody Fri Jul 8 05:45:42 2022 X-Original-To: freebsd-arm@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id D914D12ADD9E for ; Fri, 8 Jul 2022 05:46:40 +0000 (UTC) (envelope-from darius@dons.net.au) Received: from midget.dons.net.au (2403-5800-5200-4700-225-90ff-fe47-39b4.ip6.aussiebb.net [IPv6:2403:5800:5200:4700:225:90ff:fe47:39b4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "dons.net.au", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4LfMj95MWHz3XGT for ; Fri, 8 Jul 2022 05:46:37 +0000 (UTC) (envelope-from darius@dons.net.au) Received: from midget.dons.net.au (localhost [127.0.0.1]) by midget.dons.net.au (8.17.1/8.16.1) with ESMTPS id 2685jvq1042417 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Fri, 8 Jul 2022 15:16:01 +0930 (ACST) (envelope-from darius@dons.net.au) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=dons.net.au; s=default; t=1657259165; bh=7WtV9HsRvZvlvlX9ZOuT2TVyPYAIJJ8IBZGEoGmrgIk=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=gYSChVT7VGPdD4/+kvP6ur6PY2rM+gH1l/NJKKaWxVbtTTKuM2q5hrNA4si7+1Qwv wfltgEbEVF6O6jxmEOvDr7MDU8Ot8S7Pl9sGHURBb7/C8wT5+RNWG8334sdX8iJ/cp 0o/t8Pj9RDcFmnfe7Du0//DwtqXUZqWOp8MGapTw= Received: (from mailnull@localhost) by midget.dons.net.au (8.17.1/8.16.1/Submit) id 2685jo5C042414 for ; Fri, 8 Jul 2022 15:15:50 +0930 (ACST) (envelope-from darius@dons.net.au) X-MIMEDefang-Relay-a1a524833438212bf543e143edafb27bc4d2c346: 2403:5800:5200:4700:2505:d015:d36b:ade7 Received: from smtpclient.apple ([IPv6:2403:5800:5200:4700:2505:d015:d36b:ade7] [2403:5800:5200:4700:2505:d015:d36b:ade7]) by 2403-5800-5200-4700-225-90ff-fe47-39b4.ip6.aussiebb.net (envelope-sender ) (MIMEDefang) with ESMTP id 2685jojP042403; Fri, 08 Jul 2022 15:15:50 +0930 Content-Type: text/plain; charset=us-ascii List-Id: Porting FreeBSD to ARM processors List-Archive: https://lists.freebsd.org/archives/freebsd-arm List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arm@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.100.31\)) Subject: Re: RPI4 + ntpdate + unbound From: "Daniel O'Connor" In-Reply-To: Date: Fri, 8 Jul 2022 15:15:42 +0930 Cc: freebsd-arm@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <8FBD6A2A-0A20-4DDA-A4D6-4D1DA8C469AF@dons.net.au> References: To: John Kennedy X-Mailer: Apple Mail (2.3696.100.31) X-Spam-Score: 1.3 (*) No, score=1.3 required=5.0 tests=RDNS_NONE,SPF_HELO_NONE, T_SCC_BODY_TEXT_LINE,T_SPF_PERMERROR autolearn=no autolearn_force=no version=3.4.5 X-Scanned-By: MIMEDefang 2.84 on 10.0.2.1 X-Rspamd-Queue-Id: 4LfMj95MWHz3XGT X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=dons.net.au header.s=default header.b=gYSChVT7; dmarc=pass (policy=quarantine) header.from=dons.net.au; spf=pass (mx1.freebsd.org: domain of darius@dons.net.au designates 2403:5800:5200:4700:225:90ff:fe47:39b4 as permitted sender) smtp.mailfrom=darius@dons.net.au X-Spamd-Result: default: False [-1.50 / 15.00]; NEURAL_HAM_SHORT(-1.00)[-1.000]; MV_CASE(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[dons.net.au,quarantine]; R_SPF_ALLOW(-0.20)[+mx]; R_DKIM_ALLOW(-0.20)[dons.net.au:s=default]; MIME_GOOD(-0.10)[text/plain]; MLMMJ_DEST(0.00)[freebsd-arm]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; RCPT_COUNT_TWO(0.00)[2]; TO_MATCH_ENVRCPT_SOME(0.00)[]; ASN(0.00)[asn:4764, ipnet:2403:5800::/32, country:AU]; FROM_HAS_DN(0.00)[]; DKIM_TRACE(0.00)[dons.net.au:+]; TO_DN_SOME(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arm@freebsd.org]; MID_RHS_MATCH_FROM(0.00)[] X-ThisMailContainsUnwantedMimeParts: N > On 2 Jul 2022, at 13:32, John Kennedy wrote: > So I've got a RPI4 (no system time stored in NVRAM) that I did a = stock > type FreeBSD install on setting the time with ntpdate and the unbound > DNS server (aiming for DNSSEC). As many people have noted before me, > that setup is sort of broken because you can't look up DNSSEC hosts if > you think it's 1970. No NTP time servers =3D=3D no date reset =3D=3D = no DNS. If you are interested in a hardware solution you can add an RTC to an = RPI4 quite cheaply. For example: = https://core-electronics.com.au/ds1307-rtc-module-with-battery-for-raspber= ry-pi.html I needed the trick from this thread to get it working though: https://lists.freebsd.org/pipermail/freebsd-arm/2021-May/023713.html I also needed a dtso based on this: = https://github.com/seiyo/freebsd-rpi-b-ds1307/blob/main/ds1307.dtso (Also changed brcm,bcm2708 to brcm,bcm2385) -- Daniel O'Connor "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum