You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Apr 15, 2019. It is now read-only.
In order to maintain time against the Host OS which can be untrustworthy, we should implement ntp and configure ntpdate on a cronjob to resolve potential time drift issues.
The text was updated successfully, but these errors were encountered:
I have reviewed this suggestion and the idea has its merits but is impractical.
NTP needs to run as root and the container needs to run in privileged mode for it to be able to modify system time. Privileged mode exposes you to all sorts of problems and makes it lot more possible to compromise the host if the container was ever compromised.
A more viable solution is to run NTP on the docker host and mount the host time in the container:
In order to maintain time against the Host OS which can be untrustworthy, we should implement ntp and configure ntpdate on a cronjob to resolve potential time drift issues.
The text was updated successfully, but these errors were encountered: