fill in: ntp
fill in: some systemd
    i added more rules than strictly required, mostly related to systemd potentially mounting on various directories