On 2019-11-21, dmitry.sensei <dmitry.sen...@gmail.com> wrote:
> Hi!
>
> Since "-s" key had been deleted how I can setup time on startup?
>
In both 6.6 and -current, the normal case is to use "constraints" which
are queried over HTTPS with special logic to handle incorrect clocks
(the TLS certificate date is checked based on the reported time not the
machine clock time; DNSsec is also relaxed if necessary as this also
relies on clock time).
When constraints are used, provided the NTP servers are in a window
close enough to the constraints servers, the clock is set automatically
without using -s.
For 6.6:
-s was still present, but it is only meant for special cases.
In -current:
-s has been removed because people were using it to force the clock with
no concern about the safety of the network path to the NTP server/s.
Normally the constraints mechanism should be used instead. There is
another mechanism for special use cases in -current, see ntpd.conf(5)
("useful for boot-time correction in environments where constraints
cannot be used") but this should not be used in the normal case.
