This unit is provided by:
Options
-
[Install]
-
WantedBy=multi-user.target
-
-
[Service]
-
CapabilityBoundingSet=
-
DevicePolicy=closed
-
DynamicUser=yes
-
ExecStart=/usr/bin/chronyc -h 127.0.0.1,::1 waitsync 0 0.1 0.0 1
-
IPAddressAllow=localhost
-
IPAddressDeny=any
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateUsers=yes
-
ProcSubset
Introduced in systemd 247=pid -
ProtectClock
Introduced in systemd 245=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectProc
Introduced in systemd 247=invisible -
ProtectSystem
Introduced in systemd 214=strict -
RemainAfterExit=yes
-
RestrictAddressFamilies=AF_INET AF_INET6
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
StandardOutput=null
-
SystemCallArchitectures=native
-
SystemCallFilter=@system-service ~@privileged @resources
-
TimeoutStartSec=180
-
Type=oneshot
-
UMask=0777
-
-
[Unit]
-
After=chronyd.service
-
Before=time-sync.target
-
Description=Wait for chrony to synchronize system clock
-
Documentation=man:chronyc(1)
-
Requires=chronyd.service
-
Wants=time-sync.target
-
Additionnal notes
Nothing here.