Bug#898530: reducing timesync errors

[Michael Biebl]

Control: tags -1 + moreinfo

On Sun, 13 May 2018 13:47:25 +0800 =?utf-8?B?56mN5Li55bC8?= Dan Jacobson
<jidanni at jidanni.org> wrote:
> Package: systemd
> Version: 238-4
> Severity: minor
> 
> Upon connecting to the Internet one sees
> 
> (1) systemd-resolved[482]: Server 127.0.0.1 does not support DNSSEC, downgrading to non-DNSSEC mode.
> (2) systemd-resolved[482]: DNSSEC validation failed for question ntp.org IN SOA: failed-auxiliary
> systemd-resolved[482]: DNSSEC validation failed for question pool.ntp.org IN DS: failed-auxiliary
> systemd-resolved[482]: DNSSEC validation failed for question 0.debian.pool.ntp.org IN DS: failed-auxiliary
> systemd-resolved[482]: DNSSEC validation failed for question 0.debian.pool.ntp.org IN SOA: failed-auxiliary
> systemd-resolved[482]: DNSSEC validation failed for question 0.debian.pool.ntp.org IN A: failed-auxiliary
> (3)systemd-timesyncd[483]: Timed out waiting for reply from 61.216.153.107:123 (0.debian.pool.ntp.org).
> (4)systemd-timesyncd[483]: Synchronized to time server 35.201.155.83:123 (0.debian.pool.ntp.org).
> 
> Well perhaps all the messages at (2) could be avoided as due to (1) we
> know not to attempt them.

I don't understand what you mean here. Please elaborate.

> Also maybe some better servers should be the defaults, so they don't
> time out at (3).

I'd say the debian ntp pool is a sane choice. You are of course welcome
to configure this to your own liking.

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20180526/d5c34312/attachment-0002.sig>