📖 ~1 min read
Table of contents
Symptom & Impact
System clock drifts by several seconds and logs show NTP failures.
Environment & Reproduction
Firewalls block NTP, or chronyd lost sources.
Root Cause Analysis
All configured sources unreachable or marked falsetickers.
Quick Triage
Run `chronyc sources -v` and `chronyc tracking`.
Step-by-Step Diagnosis
Check firewalld for outbound UDP/123 and any IPv6 issues.

Solution – Primary Fix
Update `/etc/chrony.conf` with reachable pools and restart chronyd.
Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

Solution – Alternative Approaches
Force step on demand with `chronyc makestep`.
Verification & Acceptance Criteria
`chronyc tracking` shows offset near zero and sources active.
Rollback Plan
Restore prior chrony.conf if pool change is incorrect.
Prevention & Hardening
Pin to internal NTP servers with multiple sources.
Related Errors & Cross-Refs
Pairs with Kerberos/AD auth failures from clock skew.
Related tutorial: View the step-by-step tutorial for centos-stream-9.
View all centos-stream-9 tutorials on the Tutorials Hub →
Browse all common problems & solutions on the Tutorials Hub.
References & Further Reading
chronyd(8) and chrony.conf(5) man pages.
Need Expert Help?
If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.