Quick Config | chronyd will not start in LXD containers

0
linfra-ntp-tube-clock

I have been working to get FreeIPA server installed and configured in an LXD container and found that the installation dept failing and complained that chronyd.service would not start. I tried manually restarting the service unsuccessfully. Off to Google I went.

After lot of searching, I was able to find the answer here in a post from another blog related to IP Clients. It seems that the if is very simple and only required editing the unit script to add an additional flag to the start command (-x) as outlined below.

# Edit vi /usr/lib/systemd/system/chronyd.service
root@ldc01 ~]# vi vi /usr/lib/systemd/system/chronyd.service

[Unit]
Description=NTP client/server
Documentation=man:chronyd(8) man:chrony.conf(5)
After=ntpdate.service sntp.service ntpd.service
Conflicts=ntpd.service systemd-timesyncd.service
ConditionCapability=CAP_SYS_TIME

[Service]
Type=forking
PIDFile=/run/chrony/chronyd.pid
EnvironmentFile=-/etc/sysconfig/chronyd
ExecStart=/usr/sbin/chronyd -x $OPTIONS
ExecStartPost=/usr/libexec/chrony-helper update-daemon
ExecStopPost=/usr/libexec/chrony-helper remove-daemon-state
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full

[Install]
WantedBy=multi-user.target

I made this change and reloaded the daemons (systemctl reload-daemons) and this resolved the issue. FreeIPA installation was successful in my LXD container.

Leave a Reply