We tried configuring NTP, however time synchronisation fails, probably because the time discrepancy between the hardware clock and the NTP server is too large. We of course adjusted the system clock in the UEFI Setup, however IncusOS doesn’t seem to care, which is very strange. As an example the system time shown over IPMI (which is correct):
An this is the time shown on IncusOS:
This of course affects stuff like the OIDC integration, specifically the expiration of access tokens.
In general, I think it would be beneficial to be able to set the system clock over the API.
@gibmat can you check if there’s something we need to do to make timesyncd more aggressive? I thought I saw it compensate for very large time deltas before, but maybe not given the issue here.
I’ve just finished performing some tests, and even with multi-year clock skews systemd-resolved sets the clock properly.
We’ve seen instances in the past where a firewall is blocking NTP traffic originating from IncusOS, either in both directions or just incoming. Can you double-check if that might be the case for you?
Hi.
Sorry for the delay.
Yes, it was actually a firewall issue on our side. After fixing the problem. Synchronization worked even with big time drifts.
Thank you very much for taking the time to test it out
