[Unit]
Description=One-Shot Network Time Service
After=network.target nss-lookup.target

[Service]
Type=oneshot
PrivateTmp=true
ExecStart=/usr/bin/ntpd -q -g -u ntp:ntp
ControlGroup=cpu:/

[Install]
WantedBy=multi-user.target