This unit is provided by:
Options
-
[Install]
-
[Service]
-
AmbientCapabilities=CAP_SYS_TIME
-
BusName=org.freedesktop.timesync1
-
CapabilityBoundingSet=CAP_SYS_TIME
-
Environment=SYSTEMD_NSS_RESOLVE_VALIDATE=0
-
ExecStart=!!/lib/systemd/systemd-timesyncd
-
ExecStart=!!/usr/lib/systemd/systemd-timesyncd
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateTmp=yes
-
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectProc
Introduced in systemd 247=invisible -
ProtectSystem
Introduced in systemd 214=strict -
Restart=always
-
RestartSec=0
-
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
RuntimeDirectory=systemd/timesync
-
StateDirectory=systemd/timesync
-
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service @clock
-
Type=notify
-
User=systemd-timesync
-
WatchdogSec=3min
-
-
[Unit]
-
After=systemd-sysusers.service
-
Before=time-set.target sysinit.target shutdown.target
-
ConditionCapability=CAP_SYS_TIME
-
ConditionVirtualization=!container
-
Conflicts=shutdown.target
-
DefaultDependencies=no
-
Description=Network Time Synchronization
-
Documentation=man:systemd-timesyncd.service(8)
-
Wants=time-set.target
-
Additionnal notes
Nothing here.