Chrony时间同步
NTP(Network Time Protocol,网络时间协议)是用来使网络中的各个计算机时间同步的一种协议.它的用于是把计算机的时钟同步到世界协调时UTC,其精度在局域网内可达0.1ms,在网络网上绝大多数的地方其精度可以达到1-50ms.
1.chrony服务部署
//查看一下由哪个包提供的
[root@ntp-server ~]# yum provides chronyd
Loaded plugins: product-id, search-disabled-repos, subscription-manager
This system is not registered with an entitlement server. You can use subscription-manager to register.
chrony-3.1-2.el7.x86_64 : An NTP client/server
Repo : dvd
Matched from:
Filename : /usr/sbin/chronyd
//安装chrony服务
[root@ntp-server ~]# yum install chrony
Loaded plugins: product-id, search-disabled-repos, subscription-manager
This system is not registered with an entitlement server. You can use subscription-manager to register.
dvd | 4.1 kB 00:00:00
Resolving Dependencies
–> Running transaction check
—> Package chrony.x86_64 0:3.1-2.el7 will be installed
–> Processing Dependency: libseccomp.so.2()(64bit) for package: chrony-3.1-2.el7.x86_64
–> Running transaction check
—> Package libseccomp.x86_64 0:2.3.1-3.el7 will be installed
–> Finished Dependency Resolution
Dependencies Resolved
==========================================================================================
Package Arch Version Repository Size
==========================================================================================
Installing:
chrony x86_64 3.1-2.el7 dvd 237 k
Installing for dependencies:
libseccomp x86_64 2.3.1-3.el7 dvd 56 k
Transaction Summary
==========================================================================================
Install 1 Package (+1 Dependent package)
Total download size: 293 k
Installed size: 761 k
Is this ok [y/d/N]: y
Downloading packages:
——————————————————————————————
Total 1.6 MB/s | 293 kB 00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : libseccomp-2.3.1-3.el7.x86_64 1/2
Installing : chrony-3.1-2.el7.x86_64 2/2
Verifying : chrony-3.1-2.el7.x86_64 1/2
Verifying : libseccomp-2.3.1-3.el7.x86_64 2/2
Installed:
chrony.x86_64 0:3.1-2.el7
Dependency Installed:
libseccomp.x86_64 0:2.3.1-3.el7
Complete!
//启动服务
[root@ntp-server ~]# systemctl start chrony
chrony-dnssrv@ chronyd.service chrony-wait.service
[root@ntp-server ~]# systemctl start chronyd
chrony服务相关命令
| 参数 | 解释 |
|---|---|
| list-timezones | 列出可用时区信息 |
| set-timezone | 设置时区 |
| set-ntp | 启用NTP |
| status | 查看状态 |
[root@ntp-server ~]# timedatectl
Local time: Tue 2018-08-21 14:02:35 CST
Universal time: Tue 2018-08-21 06:02:35 UTC
RTC time: Tue 2018-08-21 06:02:33
Time zone: Asia/Shanghai (CST, +0800)
NTP enabled: n/a
NTP synchronized: no
RTC in local TZ: no
DST active: n/a
[root@ntp-server ~]# timedatectl
list-timezones set-ntp set-timezone
set-local-rtc set-time status
[root@ntp-server ~]# timedatectl list-timezones | grep -i shanghai
Asia/Shanghai
//关闭NTP
[root@ntp-server ~]# timedatectl set-ntp false
[root@ntp-server ~]# timedatectl
Local time: Tue 2018-08-21 14:15:36 CST
Universal time: Tue 2018-08-21 06:15:36 UTC
RTC time: Tue 2018-08-21 06:15:36
Time zone: Asia/Shanghai (CST, +0800)
NTP enabled: no
NTP synchronized: yes
RTC in local TZ: no
DST active: n/a
//启用NTP
[root@ntp-server ~]# timedatectl set-ntp true
[root@ntp-server ~]# timedatectl
Local time: Tue 2018-08-21 14:16:02 CST
Universal time: Tue 2018-08-21 06:16:02 UTC
RTC time: Tue 2018-08-21 06:16:02
Time zone: Asia/Shanghai (CST, +0800)
NTP enabled: yes
NTP synchronized: no
RTC in local TZ: no
DST active: n/a
//查看一下ntpdate由哪个包提供的
[root@ntp-server ~]# yum provides ntpdate
Loaded plugins: product-id, search-disabled-repos, subscription-manager
This system is not registered with an entitlement server. You can use subscription-manager to register.
ntpdate-4.2.6p5-25.el7_3.2.x86_64 : Utility to set the date and time via NTP
Repo : dvd
//如果没有请安装ntpdate
[root@ntp-server ~]# yum install ntpdate.x86_64
Loaded plugins: product-id, search-disabled-repos, subscription-manager
This system is not registered with an entitlement server. You can use subscription-manager to register.
Resolving Dependencies
–> Running transaction check
—> Package ntpdate.x86_64 0:4.2.6p5-25.el7_3.2 will be installed
–> Finished Dependency Resolution
Dependencies Resolved
==========================================================================================
Package Arch Version Repository Size
==========================================================================================
Installing:
ntpdate x86_64 4.2.6p5-25.el7_3.2 dvd 86 k
Transaction Summary
==========================================================================================
Install 1 Package
Total download size: 86 k
Installed size: 121 k
Is this ok [y/d/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : ntpdate-4.2.6p5-25.el7_3.2.x86_64 1/1
Verifying : ntpdate-4.2.6p5-25.el7_3.2.x86_64 1/1
Installed:
ntpdate.x86_64 0:4.2.6p5-25.el7_3.2
Complete!
2.配置时间同步服务器
[root@ntp-server ~]# vim /etc/chrony.conf
server ntp1.aliyun.com iburst
server ntp2.aliyun.com iburst
server ntp3.aliyun.com iburst
server ntp4.aliyun.com iburst
server ntp5.aliyun.com iburst
server ntp6.aliyun.com iburst
server ntp7.aliyun.com iburst
allow 172.16.10.0/24
//验证服务端是否能同步时间
[root@ntp-server ~]# chronyc sources -v
210 Number of sources = 1
.– Source mode ‘^’ = server, ‘=’ = peer, ‘#’ = local clock.
/ .- Source state ‘*’ = current synced, ‘+’ = combined , ‘-‘ = not combined,
| / ‘?’ = unreachable, ‘x’ = time may be in error, ‘~’ = time too variable.
|| .- xxxx [ yyyy ] +/- zzzz
|| Reachability register (octal) -. | xxxx = adjusted offset,
|| Log2(Polling interval) –. | | yyyy = measured offset,
|| | | zzzz = estimated error.
|| | |
MS Name/IP address Stratum Poll Reach LastRx Last sample
===============================================================================
^* 120.25.115.20 2 6 17 22 -117us[ -948us] +/- 24ms
//看一下服务器时间
[root@ntp-server ~]# date
Tue Aug 21 15:31:29 CST 2018
//看一下客户端时间 时间不对需要同步
[root@ntp-client ~]# date
Fri Aug 20 14:10:28 CST 2010
//ntp服务器地址
ens35: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.16.10.20 netmask 255.255.255.0 broadcast 172.16.10.255
inet6 fe80::da6c:394e:1ef7:c236 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:6e:66:65 txqueuelen 1000 (Ethernet)
RX packets 6 bytes 480 (480.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 21 bytes 1614 (1.5 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
//客户端同步,时间已经同步正确
[root@ntp-client ~]# ntpdate 172.16.10.20
21 Aug 15:35:10 ntpdate[2421]: step time server 172.16.10.20 offset 252552056.617240 sec
You have new mail in /var/spool/mail/root
[root@ntp-client ~]# date
Tue Aug 21 15:35:15 CST 2018
//第一种方式设置定时任务
[root@ntp-client ~]# which ntpdate
/usr/sbin/ntpdate
[root@ntp-client ~]# crontab -e
*/2 * * * * /usr/sbin/ntpdate 172.16.10.20 &>/dev/null
//第二种方式客户端编辑配置文件服务器指向172.168.10.20
[root@ntp-client ~]# vim /etc/chrony.conf
server 172.16.10.20 iburst
//启动服务查看服务运行状态
[root@ntp-client ~]# systemctl restart chronyd
[root@ntp-client ~]# systemctl status chronyd
● chronyd.service – NTP client/server
Loaded: loaded (/usr/lib/systemd/system/chronyd.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2018-08-21 15:52:11 CST; 6s ago
Docs: man:chronyd(8)
man:chrony.conf(5)
Process: 3012 ExecStartPost=/usr/libexec/chrony-helper update-daemon (code=exited, status=0/SUCCESS)
Process: 3009 ExecStart=/usr/sbin/chronyd $OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 3011 (chronyd)
Tasks: 1
CGroup: /system.slice/chronyd.service
└─3011 /usr/sbin/chronyd
Aug 21 15:52:10 ntp-client systemd[1]: Starting NTP client/server…
Aug 21 15:52:11 ntp-client chronyd[3011]: chronyd version 3.2 starting (+CMDMON +NTP …G)
Aug 21 15:52:11 ntp-client chronyd[3011]: Frequency -37.840 +/- 1000000.000 ppm read …ft
Aug 21 15:52:11 ntp-client systemd[1]: Started NTP client/server.
Aug 21 15:52:15 ntp-client chronyd[3011]: Selected source 172.16.10.20
Hint: Some lines were ellipsized, use -l to show in full.
//差不多一分钟同步了
[root@ntp-client ~]# date
Tue Aug 10 08:32:32 CST 2010
[root@ntp-client ~]# date
Tue Aug 10 08:32:33 CST 2010
[root@ntp-client ~]# date
Tue Aug 21 16:04:24 CST 2018
[root@ntp-client ~]# date
Tue Aug 21 16:04:25 CST 2018
