SYNTAX

tlsdated.conf is the configuration file for the tlsdated(8) daemon. The config file is formatted as a list of key-value pairs, one per line, separated by whitespace. Whitespace inside values is preserved, so

foo bar baz quxx

represents the key foo mapping to the value bar baz quxx. Empty lines and lines beginning with # are ignored; leading whitespace on lines is stripped. For boolean options, the value yes or no value at all indicates that the option should be switched on, and all other values indicate that the option should be switched off. Note that trailing whitespace is preserved in values.

OPTIONS

base-path [string]

Sets the path to tlsdated's cache directory.

dry-run [bool]

If enabled, don't actually adjust the system time.

jitter [int]

Add or subtract up to this many seconds from the steady-state interval when checking. This helps prevent correlation between sequential checks and smooth load on time hosts.

max-tries [int]

How many times to try running the tlsdate subprocess.

min-steady-state-interval [int]

Do not check more than once this many seconds when in steady state.

should-load-disk [bool]

If enabled, try loading the current timestamp out of the cache directory.

should-netlink [bool]

If enabled, use a netlink socket to get network events; otherwise, read network events from stdin.

should-save-disk [bool]

If enabled, save the current timestamp to the cache directory every so often and at exit.

should-sync-hwclock [bool]

If enabled, set the hwclock to the fetched time.

steady-state-interval [int]

Check at least once this many seconds when in steady state.

subprocess-timeout [int]

How many seconds to wait for the subprocess to exit.

verbose [bool]

If enabled, tlsdated will be annoyingly verbose in syslog and on stdout.

wait-between-tries [int]

How long to wait between runs of the subprocess.

SOURCES

You can list one or more sources to fetch time from. The format of these is:

source

host www.example.com
port 443
proxy socks5://127.0.0.1:9050

end

AUTHOR

Jacob Appelbaum <jacob at appelbaum dot net>