Explain the clock skew error, and give it an anchor to link to (GRYT-282) - #27
Merged
Merged
Conversation
…282) Nothing in troubleshooting covered a wrong clock, which is what a fresh VPS usually has: timedatectl reporting "System clock synchronized: no" and "NTP service: n/a", with set-ntp answering "NTP not supported" because systemd-timesyncd is not installed at all. That is an ordinary starting point, and the two commands that fix it are not guessable. The heading anchor is what the client now links to from the error itself, so it has to keep its id. Says why the check exists as well as how to fix it. A message about an expired identity proof reads like an attack, and the reassurance that nothing is wrong with the server's identity is the part somebody needs before they start looking for a compromise. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pairs with the client change in Gryt-chat/client#156, which links to
#server-clock-is-wrongon this page. The heading id has to stay put or that link dies.Hit for real on a fresh Debian VPS:
timedatectlreportedSystem clock synchronized: noandNTP service: n/a, andtimedatectl set-ntp trueansweredNTP not supportedbecausesystemd-timesyncdwasn't installed at all. That's an ordinary starting point for a new box, and the two commands that fix it aren't guessable from the error.The section says why the check exists as well as how to fix it. "Your identity proof expired" reads like something is attacking you, and the sentence confirming that nothing is wrong with the server's identity is the part somebody needs before they start hunting for a compromise.
Also notes that container hosts inherit the clock from the machine underneath, so it's fixed there rather than inside the container.
yarn buildclean, anchor confirmed present in the generated HTML.🤖 Generated with Claude Code