Ensure systemd-timesyncd is configured - FallbackNTP


systemd-timesyncd is a daemon that has been added for synchronizing the system clock across the network. It implements an SNTP client. In contrast to NTP implementations such as chrony or the NTP reference server this only implements a client side, and does not bother with the full NTP complexity, focusing only on querying time from one remote server and synchronizing the local clock to it. The daemon runs with minimal privileges, and has been hooked up with networkd to only operate when network connectivity is available. The daemon saves the current clock to disk every time a new NTP sync has been acquired, and uses this to possibly correct the system clock early at bootup, in order to accommodate for systems that lack an RTC such as the Raspberry Pi and embedded devices, and make sure that time monotonically progresses on these systems, even if it is not always correct. To make use of this daemon a new system user and group 'systemd-timesync' needs to be created on installation of systemd.

Note: The systemd-timesyncd service specifically implements only SNTP. This minimalistic service will set the system clock for large offsets or slowly adjust it for smaller deltas. More complex use cases are not covered by systemd-timesyncd.

This recommendation only applies if timesyncd is in use on the system.


Proper configuration is vital to ensuring time synchronization is working properly.


Run the following command to enable systemd-timesyncd

# systemctl enable systemd-timesyncd.service

edit the file /etc/systemd/timesyncd.conf and add/modify the following lines in accordance with local site policy

NTP=0.ubuntu.pool.ntp.org 1.ubuntu.pool.ntp.org 2.ubuntu.pool.ntp.org

FallbackNTP=ntp.ubuntu.com 3.ubuntu.pool.ntp.org


Run the following commands to start systemd-timesyncd.service

# systemctl start systemd-timesyncd.service

# timedatectl set-ntp true

Additional Information:

some versions of systemd have been compiled without systemd-timesycnd. On these distributions, chrony or NTP should be used instead of systemd-timesycnd.

Not all options are avalible on all versions of systemd-timesyncd

See Also


Item Details


References: 800-53|AU-8, CSCv7|6.1

Plugin: Unix

Control ID: 5b85a90e9aa0d02ad30db243188d1a578c40663deb21201a239810820f3e3cee