ibanez, radius: Move NTP service to ibanez.
authorMark Wooding <mdw@distorted.org.uk>
Tue, 7 Jun 2011 12:14:53 +0000 (13:14 +0100)
committerMark Wooding <mdw@distorted.org.uk>
Tue, 7 Jun 2011 12:14:53 +0000 (13:14 +0100)
Turns out running NTP in guests is a bad plan.

ibanez.m4
radius.m4

index 5fc1ecd..f826e04 100644 (file)
--- a/ibanez.m4
+++ b/ibanez.m4
@@ -48,5 +48,8 @@ m4_divert(82)m4_dnl
 allowservices inbound tcp \
        ssh
 
+## We have to provide NTP service.  The guests sync to our clock.
+ntpclient inbound 158.152.1.76 158.152.1.204 194.159.253.2
+
 m4_divert(-1)
 ###----- That's all, folks --------------------------------------------------
index b97f481..c1dcb90 100644 (file)
--- a/radius.m4
+++ b/radius.m4
@@ -60,7 +60,6 @@ run iptables -A inbound -j ACCEPT \
 
 ## Other interesting things.
 dnsresolver inbound
-ntpclient inbound 158.152.1.76 158.152.1.204 194.159.253.2
 
 m4_divert(-1)
 ###----- That's all, folks --------------------------------------------------