From the vserver FAQ:
However, ntp is also a network daemon and could benefit from being jailed. "system level function" is quite a meaningless term in light of capabilities and vserver - which part of the system does it need? OK, it can have just that.
xntpd has some really brain-dead hard-coded assumptions (above and beyond those in glibc) that 127.0.0.1 is always the local host. Fortunately, on many systems 127.0.0.1 is not used by any vservers or programs running in the system context, so it can make sense to let it be used by the vserver that serves NTP.
You will need to:
This configuration has been seen to work before, however it seems that not all xntpd's like to run in this setup. The one in Debian woody seems to be OK.
The ntpd from woody is ok, too and works out of the box inside a vserver for me (2.6.9-vs-1.9.3). Other ntpds are crashing instantly with SIGSEGV :(
Even no need for 127.0.0.1 but I didn't found a possibility to use ntpq, so its hard to track down errors.