Chrony for Debian
-----------------

 Notes about Debian-specific changes:

 - Default chrony’s configuration files are located in the /etc/chrony directory.
   It is filled by two important files:
        → chrony.conf (configuration of the chronyd daemon, see man 5 chrony.conf
          for further information)

        → chrony.keys (lists keys used for NTP packets authentication and/or
          authentication of administrator commands entered via chronyc, see
          § 4.2.24 in /usr/share/doc/chrony/chrony.txt.gz)

 - We also provide /etc/ppp/ip-up.d/chrony and /etc/ppp/ip-down.d/chrony
   to put chronyd online/offline depending on the PPP link status.

 - Since version 1.31.1-1, we create the _chrony system user to which chronyd
   will drop root privileges on initialisation. For users already allowing
   chronyd to drop root privileges in favor of the user configured by the "user"
   directive in chrony.conf, your configuration will remain unchanged and will
   still work as it did. However, if you don’t want to deviate from Debian’s
   default configuration, delete or comment out the "user" directive in
   chrony.conf and recursively change the owner of the /var/lib/chrony and
   /var/log/chrony directories. For example:

        # sed -i 's/^user/#user/' /etc/chrony/chrony.conf
        # chown -R _chrony:_chrony /var/l{ib,og}/chrony

 Some hints:

 Arranged for a random password to be generated at installation time and
 installed in chrony.keys as key 1 (unless chrony.keys already has something
 in it). You may change this password if you wish.

 The scripts /etc/ppp/ip-up.d/chrony and /etc/ppp/ip-down.d/chrony
 read the key ID configured with the 'commandkey' directive in the
 configuration file (chrony.conf) and use the correspondent password
 from /etc/chrony/chrony.keys to send chronyc commands.

 The standard Debian chrony installation is designed for systems with an
 intermittent dial-up connection.  If you have such a system the most you
 should need to do is edit /etc/chrony/chrony.conf a bit. If you have not
 such a system you should read the documentation and create an appropriate
 configuration (you should read the documentation anyway).

 If chronyd is installed, it will be started on bootup and will attempt to
 contact the default server whenever you connect to your ISP.


 -- Vincent Blut <vincent.debian@free.fr>  Tue, 13 Oct 2015 14:46:59 +0200
