Two systemd things that I disable straight away on every box: systemd-resolved, and systemd-timesyncd. The former tries to be "smart" and therefore tends to mes

Two systemd things that I disable straight away on every box: systemd-resolved, and systemd-timesyncd. The former tries to be "smart" and therefore tends to mess up DNS in very simple scenarios (such as a box in a datacenter with a static IP) and the latter is just plain rubbish compared to chrony.