rotuer; run chronyd for accurate time

examples/rotuer.nix

@@ -20,6 +20,7 @@ let
   inherit (pkgs)
     dropbear
     ifwait
+    writeText
     serviceFns;
 in rec {
   boot = {
@@ -139,6 +140,18 @@ in rec {
       ];
     };
 
+  services.ntp =
+    let config = writeText "chrony.conf" ''
+      pool pool.ntp.org iburst
+      dumpdir /run/chrony
+      makestep 1.0 3
+    '';
+    in longrun {
+      name = "ntp";
+      run = "${pkgs.chrony}/bin/chronyd -f ${config} -d";
+    };
+
+
   services.sshd = longrun {
     name = "sshd";
     run = ''
@@ -219,6 +232,7 @@ in rec {
       bridge
       hostap
       hostap5
+      ntp
       defaultroute4
       packet_forwarding
       dns

overlay.nix

@@ -55,19 +55,33 @@ extraPkgs // {
     ];
   });
 
-  ntp = prev.ntp.overrideAttrs(o: {
-    outputs = [
-      "out"
-      "man"
-      "perllib"
-      "doc"
-    ];
-    postInstall = ''
-      mkdir -p $perllib
-      moveToOutput "share/ntp" $perllib
-    '';
+  chrony = prev.chrony.override {
+    gnutls = null;
+    nss = null;
+    nspr = null;
+  };
 
-  });
+  ntp =
+    let
+      openssl = prev.openssl.overrideAttrs(o: {
+        preInstall = ''
+          find . -name libcrypto.so.3 -ls
+          $STRIP lib*.so.*
+        '';
+      });
+      ntp_ = prev.ntp.overrideAttrs(o: {
+        outputs = [
+          "out"
+          "man"
+          "perllib"
+          "doc"
+        ];
+        postInstall = ''
+          mkdir -p $perllib
+          moveToOutput "share/ntp" $perllib
+        '';
+      });
+    in ntp_.override { inherit openssl; };
 
   strace = prev.strace.override { libunwind = null; };