monogon-dev / monogon

The Monogon Monorepo. May contain traces of peanuts and a ✨pure Go Linux userland✨. Work in progress!
https://monogon.tech
Apache License 2.0
377 stars 9 forks source link

Time synchronization #3

Closed leoluk closed 3 years ago

leoluk commented 3 years ago

(originally reported in T560)

There appears to be a distinct lack of full NTP implementations in memory-safe languages, and plain NTP is prone to various man-in-the-middle attacks.

We may get away with something like Roughtime for most workloads.

For workloads like CockroachDB or others that require very precise time, we may have to run a fully-featured NTP client like chrony or even a PTP client in a sandbox.

q3k commented 3 years ago

The big question here is what sort of time system do we even use. Standard NTP UTC? Smeared NTP UTC? PTP?

After a quick internal discussion, the consensus seems to be as follows:

But we'll come back to the discussion when we actually start designing and implementing it.

lorenz commented 3 years ago

MVP implementation in e306d780504ae3ddfad3eb852c7adc5ec9757d89