[linux]NTP实现外网时间同步并且多台机器之间的时间同步

1.环境准备三台节点

bdp01
bdp02
bdp03

2.每台机器下载ntp

yum -y install ntp*

2.主节点bdp01的配置

主要部分：1.注释掉四个server（#部分）；
2.设置外网的时间同步（后面追加的部分）

# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).

driftfile /var/lib/ntp/drift

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default nomodify notrap nopeer noquery

# Permit all access over the loopback interface.  This could


# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1

# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#server 0.centos.pool.ntp.org iburst
#server 1.centos.pool.ntp.org iburst
#server 2.centos.pool.ntp.org iburst
#server 3.centos.pool.ntp.org iburst

#broadcast 192.168.1.255 autokey        # broadcast server
#broadcastclient                        # broadcast client
#broadcast 224.0.1.1 autokey            # multicast server
#multicastclient 224.0.1.1              # multicast client
#manycastserver 239.255.254.254         # manycast server
#manycastclient 239.255.254.254 autokey # manycast client
# Enable public key cryptography.
#crypto



includefile /etc/ntp/crypto/pw

# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys

# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8

# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats

# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor
## 允许内网其他机器同步时间
restrict 192.168.0.0 mask 255.255.254.0 nomodify noap
server 210.72.145.44 perfer                   ## 时间服务器
server 202.112.10.36
server 59.124.196.83
# allow update time by the upper server
## 允许时间服务器主动修改本机时间
restrict 210.72.145.44 nomodify notrap noquery
restrict 202.112.10.36 nomodify notrap noquery
restrict 59.124.196.83 nomodify notrap noquery
## 时间服务器不可用，使用本地时间
server  127.127.1.0
fudge   127.127.1.0 stratum 10

3.从节点的配置
利用主节点提供的server
主要部分：1.注释掉四个server（#部分）
2.设置bdp01的时间同步（后面追加的部分）

# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).

driftfile /var/lib/ntp/drift

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default nomodify notrap nopeer noquery

# Permit all access over the loopback interface.  This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1

# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#server 0.centos.pool.ntp.org iburst
#server 1.centos.pool.ntp.org iburst
#server 2.centos.pool.ntp.org iburst
#server 3.centos.pool.ntp.org iburst

#broadcast 192.168.1.255 autokey        # broadcast server
#broadcastclient                        # broadcast client
#broadcast 224.0.1.1 autokey            # multicast server
#multicastclient 224.0.1.1              # multicast client
#manycastserver 239.255.254.254         # manycast server
#manycastclient 239.255.254.254 autokey # manycast client

# Enable public key cryptography.
#crypto

includefile /etc/ntp/crypto/pw

# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys

# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8

# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats

# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor

## 时间服务器设置为主节点ip
server 192.168.0.101
server 192.168.0.101 prefer
## 允许主节点主动修改本机时间
restrict 192.168.0.101 nomodify notrap noquery
## 如主节点不可用，使用本机时间
server  127.127.1.0
fudge   127.127.1.0 stratum 10

4.修改本机的是区间为上海

ps：这是我弄好配置之后时间一直跟windows的对不上出现的问题，如果你的机器是上海的时间请忽略此步

[root@bdp02 hadoop]# ls -l /etc/localtime
lrwxrwxrwx. 1 root root 33 May  2 09:23 /etc/localtime -> /usr/share/zoneinfo/Asia/Shanghai

如果不是Asia/Shanghai，执行如下：

4.1 使用

1.查看已安装的时区文件

tzselect

2.设置环境变量

export TZ='Asia/Shanghai'

3.更改Linux系统时区

sudo rm -f /etc/localtime
sudo ln -s /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
reboot

4.2 使用Systemd更改Linux系统时区

如果使用的 Linux 系统使用 Systemd，还可以使用 timedatectl 命令来更改 Linux 系统范围的时区。在 Systemd 下有一个名为 systemd-timedated 的系统服务负责调整系统时钟和时区使用 timedatectl 命令对此系统服务进行配置。

sudo timedatectl set-timezone 'Asia/Shanghai'

5.ntp一些命令

date -s "20191001 00:00:00"     #修改成任意时间
service ntpd status/start/stop  #启动停止状态
ntpdate -u 192.168.0.96         #手动同步时间
ntpq -p