add ntpd to sync the container's clock

I'm not sure why this is necessary, but a Chef run failed because the
container's clock was too out of sync. So worth a try...