使用chrony配置NTP服务器

使用chrony配置NTP服务器

此方式只适用于centos/redhat 7-8

1，先停用ntpd，如果有的话

systemctl stop ntpdsystemctl disable ntpd

2，安装chrony程序

yum install -y chrony

3，启动chrony程序

systemctl start chronydsystemctl enable chronyd

4，放开NTP服务端口

firewall-cmd --permanent --add-service=ntpfirewall-cmd --reload

或

关闭防火墙

systemctl stop firewalld

systemctl enable firewalld

5，编辑下面的脚本

# vi ntp.sh

保存下面内容，并执行

#/bin/bash# Write NTP configuration# Backup chrony.confcurrentTimestamp=`date +%y-%m-%d-%H:%M:%S`chrony_conf="/etc/chrony.conf"chrony_conf_backup=$chrony_conf.chronyconfig.$currentTimestampif [ -f "$chrony_conf" ]; then echo backup $chrony_conf to $chrony_conf_backup cp $chrony_conf $chrony_conf_backupfi# Write chrony.confecho "# Welcome to the chrony configuration file. See chrony.conf(5) for more# Use public servers from the pool.ntp.org project.# Please consider joining the pool (http://www.pool.ntp.org/join.html).server ntp1.aliyun.com iburstserver ntp2.aliyun.com iburstserver ntp3.aliyun.com iburstserver ntp4.aliyun.com iburst# Record the rate at which the system clock gains/losses time.driftfile /var/lib/chrony/drift# Allow the system clock to be stepped in the first three updates# if its offset is larger than 1 second.makestep 1.0 3# Enable kernel synchronization of the real-time clock (RTC).rtcsync# Enable hardware timestamping on all interfaces that support it.#hwtimestamp *# Increase the minimum number of selectable sources required to adjust# the system clock.#minsources 2# Allow NTP client access from local network.#allow 192.168.0.0/16allow# Serve time even if not synchronized to a time source.local stratum 10# Specify file containing keys for NTP authentication.keyfile /etc/chrony.keys# Get TAI-UTC offset and leap seconds from the system tz database.leapsectz right/UTC# Specify directory for log files.logdir /var/log/chrony# Select which information is logged.log measurements statistics tracking" > $chrony_confecho "Restart chronyd deamon."systemctl restart chronydtimedatectl set-ntp yes

执行

# sh ntp.sh

测试：（客户端链接时间服务器）

一、Windows10客户端：

打开控制面板-日期与时间-Internet时间-更改时间，输入时间服务器地址-立即更新

Windows11：

打开控制面板-时间和语言-日期和时间-附加时钟--Internet时间-更改时间，输入时间服务器地址-立即更新

更改时间服务器时间：

先断网

禁用时间服务器同步时间

timedatectl set-ntp false  或    timedatectl set-ntp no

然后修改时间：

timedatectl set-time 9:46:30

重启chronyd

systemctl restart chronyd

启用时间服务器同步时间

timedatectl set-ntp true  或    timedatectl set-ntp yes

查看时间

timedatectl    或    date

在Windows上更新时间，发现时间与时间服务器时间同步

查看多少个客户端连接了时间服务器：

# chronyc

# clients

# exit 退出

二、Linux客户端配置：

安装本地yum

1，先停用ntpd，如果有的话

systemctl stop ntpdsystemctl disable ntpd

2，安装chrony程序

yum install -y chrony

3，启动chrony程序

systemctl start chronydsystemctl enable chronyd

4、chrony.conf 修改两处

# vi /etc/chrony.conf

# Use public servers from the pool.ntp.org project.# Please consider joining the pool (http://www.pool.ntp.org/join.html).server 192.168.2.188 iburst# Allow NTP client access from local network.allow 192.168.2.188

5、开启同步systemctl restart chronyd# 查看时间同步状态timedatectl status# 开启网络时间同步timedatectl set-ntp true

6、查看多少个客户端连接了时间服务器：

# chronyc

# clients

# exit 退出

7、卸载chrony

# yum remove chrony*

1111111111111