sunjizzle/diskless-workstation
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Adding secure NTP

Browse Source
This commit is contained in:
Audiobuzz
2026-07-11 17:32:05 +09:30
parent 8325818c1b
commit fbb8100ecd
16 changed files with 929 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files
serving/defaults.env
+5
View File
@@ -91,6 +91,11 @@ AUDIT_HOST=audit.fleet.lab
# *.fleet.lab like the boot/nvme/audit names. Must match the agent server cert SAN
# (server-pki.sh AGENT_SANS).
MGMT_HOST=manager.fleet.lab
# NTS-authenticated NTP server name (secure_ntp). Baked into the image's
# chrony.conf (Packer var ntp_server) so every host syncs authenticated time here;
# resolved per-environment to this serving host. MUST match the NTS server cert SAN
# issued by serving/chrony/nts-cert.sh.
NTP_HOST=ntp.fleet.lab
# --- NVMe/TCP target -------------------------------------------------------
# Per-version subsystem NQN base. The long-lived target serves each rootfs