使用chrony配置NTP服务器
此方式只适用于centos/redhat 7-8 1,先停用ntpd,如果有的话 systemctl stop ntpdsystemctl disable ntpd 2,安装chrony程序 yum install -y chrony 3,启动chrony程序 systemctl start chronydsystemctl enable chronyd 4,放开NTP服务端口 firewall-cmd --permanent --add-service=ntpfirewall-cmd --reload 或 关闭防火墙 systemctl stop firewalld systemctl enable firewalld 5,编辑下面的脚本 # vi ntp.sh 保存下面内容,并执行 #/bin/bash# Write NTP configuration# Backup chrony.confcurrentTimestamp=`date +%y-%m-%d-%H:%M:%S`chrony_conf="/etc/chrony.conf"chrony_conf_backup=$chrony_conf.chronyconfig.$currentTimestampif [ -f "$chrony_conf" ]; then echo backup $chrony_conf to $chrony_conf_backup cp $chrony_conf $chrony_conf_backupfi# Write chrony.confecho "# Welcome to the chrony configuration file. See chrony.conf(5) for more# Use public servers from the pool.ntp.org project.# Please consider joining the pool (http://www.pool.ntp.org/join.html).server ntp1.aliyun.com iburstserver ntp2.aliyun.com iburstserver ntp3.aliyun.com iburstserver ntp4.aliyun.com iburst# Record the rate at which the system clock gains/losses time.driftfile /var/lib/chrony/drift# Allow the system clock to be stepped in the first three updates# if its offset is larger than 1 second.makestep 1.0 3# Enable kernel synchronization of the real-time clock (RTC).rtcsync# Enable hardware timestamping on all interfaces that support it.#hwtimestamp *# Increase the minimum number of selectable sources required to adjust# the system clock.#minsources 2# Allow NTP client access from local network.#allow 192.168.0.0/16allow# Serve time even if not synchronized to a time source.local stratum 10# Specify file containing keys for NTP authentication.keyfile /etc/chrony.keys# Get TAI-UTC offset and leap seconds from the system tz database.leapsectz right/UTC# Specify directory for log files.logdir /var/log/chrony# Select which information is logged.log measurements statistics tracking" > $chrony_confecho "Restart chronyd deamon."systemctl restart chronydtimedatectl set-ntp yes 执行 # sh ntp.sh
测试:(客户端链接时间服务器)
一、Windows10客户端: 打开控制面板-日期与时间-Internet时间-更改时间,输入时间服务器地址-立即更新 Windows11: 打开控制面板-时间和语言-日期和时间-附加时钟--Internet时间-更改时间,输入时间服务器地址-立即更新 更改时间服务器时间: 先断网 禁用时间服务器同步时间 timedatectl set-ntp false 或 timedatectl set-ntp no 然后修改时间: timedatectl set-time 9:46:30 重启chronyd systemctl restart chronyd 启用时间服务器同步时间 timedatectl set-ntp true 或 timedatectl set-ntp yes 查看时间 timedatectl 或 date
在Windows上更新时间,发现时间与时间服务器时间同步 查看多少个客户端连接了时间服务器: # chronyc # clients # exit 退出
二、Linux客户端配置: 安装本地yum 1,先停用ntpd,如果有的话 systemctl stop ntpdsystemctl disable ntpd 2,安装chrony程序 yum install -y chrony 3,启动chrony程序 systemctl start chronydsystemctl enable chronyd 4、chrony.conf 修改两处 # vi /etc/chrony.conf # Use public servers from the pool.ntp.org project.# Please consider joining the pool (http://www.pool.ntp.org/join.html).server 192.168.2.188 iburst# Allow NTP client access from local network.allow 192.168.2.188
5、开启同步systemctl restart chronyd# 查看时间同步状态timedatectl status# 开启网络时间同步timedatectl set-ntp true
6、查看多少个客户端连接了时间服务器: # chronyc # clients # exit 退出
7、卸载chrony # yum remove chrony*
|