Michael Brodhead:
I've been reading up on NTP a bit and using ntpdate to occasionally update the system time is now deprecated. We're supposed to run ntpd. Ntpd docs make it sound like ntpd needs to run a listener to function at all.
I'd rather not add additional attack surface to my relay.
I agree.
The daemon would give you better precision and less "jumps", but running ntpdate via cron regularly should do it as well (tor does not need super sub-second exact time)