Hi all!
I am running Kicksecure on my servers. But all of my servers needs NTP to be the same.
Does Kicksecure allow me to config like this?
[Internet NTP] ←(Tor+swdate fetch time data from the internet) [NTP server] (Chrony/NTPD Provide NTP to other machine on local internet)
Thanks in advance!
Might be time to think adding an option for users to disable sdwdate (TOR time sync) and switch to an alternative time source. Helping out users who are unable to use Tor but still want to benefit from everything else Kicksecure provides.
Since you can install Kicksecure without internet, somewhere in sysmaint that switchs either all Tor handling (disable service, sdwdate, remove/comment out torified apt sources.
The other would be two/three parts for TOR - [SDWDATE] [APT] [SERVICE] so its not all or nothing for enable/disable TOR.
I’m not entirely sure what this means; are you considering getting the time using sdwdate on one machine, then running an NTP server on that machine and pointing other machines on your network to use that NTP server? If so, it sounds like the only tricky part of this is setting up the NTP server, which is unspecific to Kicksecure. For the client-side configuration, you can disable sdwdate by following the instructions here:
Then install an NTP client of choice and configure it appropriately.
Disabling sdwdate is easy and already documented, see the Wiki page link above. Switching to an alternative time source is just a matter of installing and configuring an NTP client from there. It may not be as user-friendly as a GUI for this purpose, but most users shouldn’t be adjusting their time source, and those who know they need to probably have the needed skill to install and set up an NTP client.
Disabling the Tor service is also easy, though not supported. sudo systemctl mask tor && sudo systemctl mask tor@default.service or similar should do the trick. To disable Torified apt sources, I believe you can use repository-dist, although the exact way to de-onionize sources doesn’t seem to be documented and I haven’t tried doing it myself. Maybe follow:
But omit the --transport onion option.
Edited to correct the “disable Tor” command.