mirror of
https://gitlab.com/chrony/chrony.git
synced 2025-12-04 15:05:08 -05:00
e30f937f6a
DNSSEC requires the system time to be synced in order to work, as the signature date and expiration need to be checked by resolvers. But it is possible that syncing the times requires doing DNS queries. Add a paragraph to the FAQ explaining how to break this cycle by asking nss-resolved to always avoid DNSSEC when chronyd tries to resolve hostnames.