X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/c881dbd93ab4931ef32ffe330cadca78b63ffaba..40e04dda9c896503238eef130e6bed4f06bd1738:/cookbooks/ntp/templates/default/chrony.conf.erb

diff --git a/cookbooks/ntp/templates/default/chrony.conf.erb b/cookbooks/ntp/templates/default/chrony.conf.erb
index 1cae6d797..b3948809d 100644
--- a/cookbooks/ntp/templates/default/chrony.conf.erb
+++ b/cookbooks/ntp/templates/default/chrony.conf.erb
@@ -19,7 +19,8 @@ allow 127.0.0.1/32
 allow ::1/128
 
 # Run an initial NTP sync on daemon startup
-initstepslew 30 time.cloudflare.com time.google.com <%= node[:ntp][:servers].join(" ") %>
+# Use a few IPs here to workaround DNSSEC failure if time is wrong: https://github.com/openstreetmap/operations/issues/654
+initstepslew 30 216.239.35.0 216.239.35.4 216.239.35.8 216.239.35.12 time.google.com time.cloudflare.com <%= node[:ntp][:servers].join(" ") %>
 
 <% if node[:lsb][:release].to_f >= 22.04 -%>
 # Use NTP sources found in /etc/chrony/sources.d.