chronyd 部暑

蓝~天~

于 2024-03-12 09:46:48 发布

阅读量416

点赞数 7

文章标签： chroy

本文链接：https://blog.csdn.net/u010533742/article/details/136479949

版权

本文详细介绍了如何在CentOS系统中安装和配置chrony时间同步服务，包括服务器端和客户端的配置，以及如何通过systemd设置chronyd服务。

摘要由CSDN通过智能技术生成

安装chrony

sed -e 's|^mirrorlist=|#mirrorlist=|g' \
         -e 's|^#baseurl=http://mirror.centos.org/centos|baseurl=https://mirrors.ustc.edu.cn/centos|g' \
         -i.bak \
         /etc/yum.repos.d/CentOS-Base.repo

yum install chrony -y

server端配置

cat > /etc/chrony.conf << 'EOF'
server ntp1.aliyun.com iburst
server time1.cloud.tencent.com iburst
server 0.cn.pool.ntp.org iburst

pool pool.ntp.org iburst
pool 2.debian.pool.ntp.org iburst

driftfile /var/lib/chrony/drift

makestep 1.0 3

rtcsync

dumpdir /var/lib/chrony

local stratum 10

allow 0.0.0.0/0

maxupdateskew 100.0

stratumweight 0

logdir /var/log/chrony
log statistics measurements tracking
noclientlog
EOF

client端配置

cat > /etc/chrony.conf << 'EOF'
server 192.168.11.100 iburst

driftfile /var/lib/chrony/drift

makestep 1.0 3

rtcsync

dumpdir /var/lib/chrony

allow 0.0.0.0/0

maxupdateskew 100.0

stratumweight 0

logdir /var/log/chrony
log statistics measurements tracking
noclientlog
EOF

cat > /lib/systemd/system/chronyd.service << 'EOF'
[Unit]
Description=chrony, an NTP client/server
Documentation=https://chrony.tuxfamily.org/documentation.html
Conflicts=systemd-timesyncd.service openntpd.service ntpd.service ntp.service ntpsec.service
After=network.target
ConditionCapability=CAP_SYS_TIME

[Service]
# sysctl net.netfilter.nf_conntrack_count
Type=forking
PIDFile=/var/run/chrony/chronyd.pid
ExecStart=/usr/sbin/chronyd -f /etc/chrony.conf
ExecStartPost=/sbin/iptables -t raw -A PREROUTING -p udp -m udp --dport 123 -j NOTRACK
ExecStartPost=/sbin/iptables -t raw -A OUTPUT -p udp -m udp --sport 123 -j NOTRACK
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full

[Install]
WantedBy=multi-user.target
EOF