配置本地yum源安装ntp服务:
配置yum源:
[root@hadoop-master ~]# cd /etc/yum.repos.d/
[root@hadoop-master yum.repos.d]#mkdir bak
[root@hadoop-master yum.repos.d]#mv * bak
[root@hadoop-master yum.repos.d]#cp ./bak/CentOS-Media.repo CentOS-Media.repo
[root@hadoop-master yum.repos.d]#vi CentOS-Media #编辑yum源配置文件如下显示
配置yum源:
[root@hadoop-master ~]# cd /etc/yum.repos.d/
[root@hadoop-master yum.repos.d]#mkdir bak
[root@hadoop-master yum.repos.d]#mv * bak
[root@hadoop-master yum.repos.d]#cp ./bak/CentOS-Media.repo CentOS-Media.repo
[root@hadoop-master yum.repos.d]#vi CentOS-Media #编辑yum源配置文件如下显示
[c7-media]
name=CentOS-$releasever - Media
baseurl=file:///mnt/iso
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
name=CentOS-$releasever - Media
baseurl=file:///mnt/iso
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
[root@hadoop-master yum.repos.d]mkdir /mnt/iso
[root@hadoop-master yum.repos.d]mount /dev/cdrom /mnt/iso #挂载镜像文件到/mnt/iso
[root@hadoop-master yum.repos.d]yum clean all
[root@hadoop-master yum.repos.d]yum list |wc -l #输出结果为9000+表示yum配置成功
[root@hadoop-master yum.repos.d]mount /dev/cdrom /mnt/iso #挂载镜像文件到/mnt/iso
[root@hadoop-master yum.repos.d]yum clean all
[root@hadoop-master yum.repos.d]yum list |wc -l #输出结果为9000+表示yum配置成功
使用yum安装ntpd服务:
[root@hadoop-master yum.repos.d]yum install -y ntp*
[root@hadoop-master yum.repos.d]rpm -qa | grep ntp #输出类似如下信息安装成功
fontpackages-filesystem-1.44-8.el7.noarch
python-ntplib-0.3.2-1.el7.noarch
ntp-4.2.6p5-25.el7.centos.2.x86_64
ntp-doc-4.2.6p5-25.el7.centos.2.noarch
ntp-perl-4.2.6p5-25.el7.centos.2.noarch
ntpdate-4.2.6p5-25.el7.centos.2.x86_64
配置启动NTP服务器:
[root@hadoop-master ~]vi /etc/ntp.conf #编辑ntp配置文件在最后添加一下内容,192.168.44.1和192.168.44.2为ntp server的地址
logfile /var/log/ntp.log
[root@hadoop-master yum.repos.d]yum install -y ntp*
[root@hadoop-master yum.repos.d]rpm -qa | grep ntp #输出类似如下信息安装成功
fontpackages-filesystem-1.44-8.el7.noarch
python-ntplib-0.3.2-1.el7.noarch
ntp-4.2.6p5-25.el7.centos.2.x86_64
ntp-doc-4.2.6p5-25.el7.centos.2.noarch
ntp-perl-4.2.6p5-25.el7.centos.2.noarch
ntpdate-4.2.6p5-25.el7.centos.2.x86_64
配置启动NTP服务器:
[root@hadoop-master ~]vi /etc/ntp.conf #编辑ntp配置文件在最后添加一下内容,192.168.44.1和192.168.44.2为ntp server的地址
logfile /var/log/ntp.log
server 192.168.44.1
fudge 192.168.44.1 stratum 10
server 192.168.44.2
fudge 192.168.44.1 stratum 9
fudge 192.168.44.1 stratum 10
server 192.168.44.2
fudge 192.168.44.1 stratum 9
[root@hadoop-master ~]touch /var/log/ntp.log #创建ntp日志文件
[root@hadoop-master ~]ntpdate 192.168.44.1 #与ntp server同步时间,避免时间相差太多,实际生产环境中的系统谨慎操作
[root@hadoop-master ~]systemctl start ntpd.service #启动ntp服务
[root@hadoop-master ~]systemctl enable ntpd.service #设置ntp服务开机自启动
[root@hadoop-master ~]systemctl status ntpd.service #查看ntp运行状态,如下显示
● ntpd.service - Network Time Service
Loaded: loaded (/usr/lib/systemd/system/ntpd.service; enabled; vendor preset: disabled)
Active: active (running) since 一 2018-03-19 11:31:09 CST; 3h 4min ago
Main PID: 1485 (ntpd)
CGroup: /system.slice/ntpd.service
└─1485 /usr/sbin/ntpd -u ntp:ntp -g
[root@hadoop-master ~]ntpdate 192.168.44.1 #与ntp server同步时间,避免时间相差太多,实际生产环境中的系统谨慎操作
[root@hadoop-master ~]systemctl start ntpd.service #启动ntp服务
[root@hadoop-master ~]systemctl enable ntpd.service #设置ntp服务开机自启动
[root@hadoop-master ~]systemctl status ntpd.service #查看ntp运行状态,如下显示
● ntpd.service - Network Time Service
Loaded: loaded (/usr/lib/systemd/system/ntpd.service; enabled; vendor preset: disabled)
Active: active (running) since 一 2018-03-19 11:31:09 CST; 3h 4min ago
Main PID: 1485 (ntpd)
CGroup: /system.slice/ntpd.service
└─1485 /usr/sbin/ntpd -u ntp:ntp -g
3月 19 11:31:09 hadoop-slave1 systemd[1]: Starting Network Time Service...
3月 19 11:31:09 hadoop-slave1 ntpd[1485]: proto: precision = 0.038 usec
3月 19 11:31:09 hadoop-slave1 systemd[1]: Started Network Time Service.
3月 19 11:31:09 hadoop-slave1 ntpd[1485]: 0.0.0.0 c01d 0d kern kernel time sync enabled
3月 19 11:31:09 hadoop-slave1 ntpd[1485]: proto: precision = 0.038 usec
3月 19 11:31:09 hadoop-slave1 systemd[1]: Started Network Time Service.
3月 19 11:31:09 hadoop-slave1 ntpd[1485]: 0.0.0.0 c01d 0d kern kernel time sync enabled
[root@hadoop-master ~]cat /var/log/ntp.log #查看是否有日志生成,如下显示
19 Mar 11:31:09 ntpd[1485]: ntp_io: estimated max descriptors: 1024, initial socket boundary: 16
19 Mar 11:31:09 ntpd[1485]: Listen and drop on 0 v4wildcard 0.0.0.0 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen and drop on 1 v6wildcard :: UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 2 lo 127.0.0.1 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 3 ens33 192.168.44.129 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 4 lo ::1 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 5 ens33 fe80::d021:6426:dea2:8293 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listening on routing socket on fd #22 for interface updates
19 Mar 11:31:09 ntpd[1485]: inappropriate address 192.168.44.1 for the fudge command, line ignored
19 Mar 11:31:09 ntpd[1485]: 0.0.0.0 c016 06 restart
19 Mar 11:31:09 ntpd[1485]: 0.0.0.0 c012 02 freq_set kernel 0.000 PPM
19 Mar 11:31:09 ntpd[1485]: 0.0.0.0 c011 01 freq_not_set
19 Mar 11:31:09 ntpd[1485]: ntp_io: estimated max descriptors: 1024, initial socket boundary: 16
19 Mar 11:31:09 ntpd[1485]: Listen and drop on 0 v4wildcard 0.0.0.0 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen and drop on 1 v6wildcard :: UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 2 lo 127.0.0.1 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 3 ens33 192.168.44.129 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 4 lo ::1 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listen normally on 5 ens33 fe80::d021:6426:dea2:8293 UDP 123
19 Mar 11:31:09 ntpd[1485]: Listening on routing socket on fd #22 for interface updates
19 Mar 11:31:09 ntpd[1485]: inappropriate address 192.168.44.1 for the fudge command, line ignored
19 Mar 11:31:09 ntpd[1485]: 0.0.0.0 c016 06 restart
19 Mar 11:31:09 ntpd[1485]: 0.0.0.0 c012 02 freq_set kernel 0.000 PPM
19 Mar 11:31:09 ntpd[1485]: 0.0.0.0 c011 01 freq_not_set
[root@hadoop-master ~]ntpq -p #查看ntp运行情况
remote refid st t when poll reach delay offset jitter
==============================================================================
gateway 51.140.127.197 3 u 16 64 377 0.360 304.511 1.901
remote refid st t when poll reach delay offset jitter
==============================================================================
gateway 51.140.127.197 3 u 16 64 377 0.360 304.511 1.901
[root@hadoop-master ~]reboot #重启操作系统,检查ntp是否自启动,并按照上诉查看步骤检查ntp服务
安装配置中遇到的问题汇总:
1、使用ntpdate 192.168.44.1 同步ntp server时间时报错:no server suitable for synchronization found
a、首先想到的ntp服务器的端口没有打通,ping和服务端的防火墙检查后没有问题,ntp服务端的UDP端口123要打开。
b、排除网络问题后,使用ntpdate -d 192.168.44.1发现有这样的信息:192.168.44.1: Server dropped: strata too high和stratum 16,上网查资料发现是ntp服务端的时间同步尚未
完成,手动在server上同步时间解决,也可以等服务器自动同步好后,再执行,等待时间为10分钟左右
2、一台设备设置systemctl enable ntpd.service 重启后,ntp服务未被拉起。
经过排查,发现该设备开机启动了chrony服务,该服务会停止ntp服务,将该服务器停止,并取消开机自启动后解决。
3、一台设备的日志写不到日志文件中
查看日志文件的读写权限没有问题,手动将ntp服务重启后,查看message日志,发现有这样的信息:
SELinux is preventing ntpd from open access on the file /var/log/ntp.log. For complete SELinux messages run: sealert -l 9994be74-15b6-4b45-bb8f-0436c97d49f8
运行sealert -l 9994be74-15b6-4b45-bb8f-0436c97d49f8根据指引操作即可解决
也可以停止selinux来解决该问题。
1、使用ntpdate 192.168.44.1 同步ntp server时间时报错:no server suitable for synchronization found
a、首先想到的ntp服务器的端口没有打通,ping和服务端的防火墙检查后没有问题,ntp服务端的UDP端口123要打开。
b、排除网络问题后,使用ntpdate -d 192.168.44.1发现有这样的信息:192.168.44.1: Server dropped: strata too high和stratum 16,上网查资料发现是ntp服务端的时间同步尚未
完成,手动在server上同步时间解决,也可以等服务器自动同步好后,再执行,等待时间为10分钟左右
2、一台设备设置systemctl enable ntpd.service 重启后,ntp服务未被拉起。
经过排查,发现该设备开机启动了chrony服务,该服务会停止ntp服务,将该服务器停止,并取消开机自启动后解决。
3、一台设备的日志写不到日志文件中
查看日志文件的读写权限没有问题,手动将ntp服务重启后,查看message日志,发现有这样的信息:
SELinux is preventing ntpd from open access on the file /var/log/ntp.log. For complete SELinux messages run: sealert -l 9994be74-15b6-4b45-bb8f-0436c97d49f8
运行sealert -l 9994be74-15b6-4b45-bb8f-0436c97d49f8根据指引操作即可解决
也可以停止selinux来解决该问题。