checkfleet

NTP / clock drift check

ntp — NTP / clock drift

Clock offset and stratum over SNTP, because drift silently breaks TLS and JWT validation.

checkfleet check ntp --config checkfleet.yml

NTP clock-offset check via a hand-rolled SNTP query (UDP, zero dependency). Clock drift silently breaks TLS validation and JWT expiry.

  • Estimated clock offset past offset_warn_ms/offset_crit_ms → WARN/BAD.
  • An unsynchronized server (stratum 0 kiss-o’-death, or ≥16) → BAD.
  • Unreachable / no reply → ERROR.

See Configuration → checks.ntp.

See the full module reference for every check, or configuration for the config keys.