First version

files/lockdown/wait-for-time.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Wait for the clock before the desktop starts (at most 30 seconds)
+After=chrony.service firewall.service contest-dns.service contest-proxy.service
+Wants=chrony.service
+Before=display-manager.service
+
+[Service]
+Type=oneshot
+# Three checks 10 seconds apart, then the desktop starts anyway
+ExecStart=-/usr/bin/chronyc waitsync 3 1
+TimeoutStartSec=45
+
+[Install]
+WantedBy=multi-user.target