chrony 时间服务器 安装

安装

yum install chrony

配置

目前国内有很多时间服务器节点，我们只需要从中选取几个作为我们的上游时间节点即可。

以下是我已经修改好的配置文件，主要改动了两处：一是增加了4个上游时间服务器节点，我这里选取了两个阿里云时间服务器、两个腾讯云服务器，二是设置允许哪些地址的服务器同步时间，allow 0.0.0.0/0，这里表示允许所有IP段。

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (https://www.pool.ntp.org/join.html).
pool 2.centos.pool.ntp.org iburst

# Use NTP servers from DHCP.
sourcedir /run/chrony-dhcp

# Record the rate at which the system clock gains/losses time.
driftfile /var/lib/chrony/drift

# Allow the system clock to be stepped in the first three updates
# if its offset is larger than 1 second.
makestep 1.0 3

# Enable kernel synchronization of the real-time clock (RTC).
rtcsync

# Enable hardware timestamping on all interfaces that support it.
#hwtimestamp *

# Increase the minimum number of selectable sources required to adjust
# the system clock.
#minsources 2

# Allow NTP client access from local network.
#allow 192.168.0.0/16
# 开启访问网段
allow 0.0.0.0/0
# Serve time even if not synchronized to a time source.
# 没有同步 则做为源
local stratum 10

# Require authentication (nts or key option) for all NTP sources.
#authselectmode require

# Specify file containing keys for NTP authentication.
#keyfile /etc/chrony.keys

# Save NTS keys and cookies.
#ntsdumpdir /var/lib/chrony

# Insert/delete leap seconds by slewing instead of stepping.
#leapsecmode slew

# Get TAI-UTC offset and leap seconds from the system tz database.
leapsectz right/UTC

# Specify directory for log files.
logdir /var/log/chrony

# Select which information is logged.
#log measurements statistics tracking

启用

systemctl start chronyd
systemctl status chronyd

查看时间同步是否正常

timedatectl

开放端口

firewall-cmd --add-service=ntp --permanent
firewall-cmd --add-port=123/udp --permanent
firewall-cmd --reload

其他

检查有多少个时间服务器在线

chronyc activity

查看同步源服务器列表

chronyc -n sources -v

官网

https://chrony.tuxfamily.org/doc/3.4/chrony.conf.html

引用 https://blog.whsir.com/post-6084.html