Product SiteDocumentation Site

14.5.2. Using chronyc for Remote Administration

To configure chrony to connect to a remote instance of chronyd, issue a command in the following format:
~]$ chronyc -h hostname
Where hostname is the host name to connect to. The default is to connect to the local daemon.
To configure chrony to connect to a remote instance of chronyd on a non-default port, issue a command in the following format:
~]$ chronyc -h hostname -p port
Where port is the port in use for controlling and monitoring by the remote instance of chronyd.
Note that commands issued at the chronyc command prompt are not persistent. Only commands in the configuration file are persistent.
The first command must be the password command at the chronyc command prompt as follows:
chronyc> password password
200 OK
The password should not have any spaces.
If the password is not an MD5 hash, the hashed password must be preceded by the authhash command as follows:
chronyc> authhash SHA1
chronyc> password HEX:A6CFC50C9C93AB6E5A19754C246242FC5471BCDF
200 OK
The password or hash associated with the command key for a remote system is best obtained by SSH. An SSH connection should be established to the remote machine and the ID of the command key from /etc/chrony.conf and the command key in /etc/chrony.keys memorized or stored securely for the duration of the session.