时钟同步-注意客户端和服务端都需要开启123端口 udp协议

 确认时钟源

chronyc sources -v

chronyc tracking

Linux ❉ Chronyd时间同步服务器详解_wangjie722703的博客-CSDN博客

 local stratum 10: 即使自己未能通过网络时间服务器同步到时间,也允许将本地时间作为标准时间授时给其它客户端

确认 端口是否打开

 Nmap -sU -p 123 192.168.0.10

Nmap是一款功能强大的网络探测和安全评估工具,是渗透测试和网络安全评估中必不可少的工具之一.

一文教你学会网络安全必备安全工具，轻松入门

 系统运维-Linux使用Chrony实现NTP时钟同步服务_拾柒SHY的博客-CSDN博客

转载：系统运维-Linux使用Chrony实现NTP时钟同步服务

Chrony：是一个开源自由的网络时间协议NTP的服务端和客户端软件 它能使服务端系统时间保持与服务器系统时间同步

实验环境

服务端：192.168.100.200
客户端：192.168.100.10
首先一般默认都是已安装在Linux系统中的 若没有安装 则执行安装

yum install chrony* -y
然后编辑服务端的chrony配置文件

vim /etc/chrony.conf
 
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (https://www.pool.ntp.org/join.html).
#pool 2.pool.ntp.org iburst        //注释此行
server 192.168.100.200 iburst      //添加此行 server+服务端ip+iburst
 
# Use NTP servers from DHCP.
sourcedir /run/chrony-dhcp
 
# Record the rate at which the system clock gains/losses time.
driftfile /var/lib/chrony/drift
 
# Allow the system clock to be stepped in the first three updates
# if its offset is larger than 1 second.
makestep 1.0 3
 
# Enable kernel synchronization of the real-time clock (RTC).
rtcsync
 
# Enable hardware timestamping on all interfaces that support it.
#hwtimestamp *
 
# Increase the minimum number of selectable sources required to adjust
# the system clock.
#minsources 2
 
# Allow NTP client access from local network.
allow 192.168.100.0/24        //要设置允许的网络段
 
# Serve time even if not synchronized to a time source.
local stratum 10                //取消注释此行
 
# Require authentication (nts or key option) for all NTP sources.
#authselectmode require
 
# Specify file containing keys for NTP authentication.
keyfile /etc/chrony.keys
 
# Save NTS keys and cookies.
ntsdumpdir /var/lib/chrony
 
# Insert/delete leap seconds by slewing instead of stepping.
#leapsecmode slew
 
# Get TAI-UTC offset and leap seconds from the system tz database.
leapsectz right/UTC
 
# Specify directory for log files.
logdir /var/log/chrony
 
# Select which information is logged.
#log measurements statistics tracking

服务器端就配置完成了 接下来保存退出

配置客户端

vim /etc/chrony.conf
 
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (https://www.pool.ntp.org/join.html).
#pool 2.pool.ntp.org iburst        //注释此行
server 192.168.100.200 iburst      //添加此行 server+服务端ip+iburst
 
# Use NTP servers from DHCP.
sourcedir /run/chrony-dhcp
 
# Record the rate at which the system clock gains/losses time.
driftfile /var/lib/chrony/drift
 
# Allow the system clock to be stepped in the first three updates
# if its offset is larger than 1 second.
makestep 1.0 3
 
# Enable kernel synchronization of the real-time clock (RTC).
rtcsync
 
# Enable hardware timestamping on all interfaces that support it.
#hwtimestamp *
 
# Increase the minimum number of selectable sources required to adjust
# the system clock.
#minsources 2
 
# Allow NTP client access from local network.
#allow 192.168.0.0/16
 
# Serve time even if not synchronized to a time source.
#local stratum 10
 
# Require authentication (nts or key option) for all NTP sources.
#authselectmode require
 
# Specify file containing keys for NTP authentication.
keyfile /etc/chrony.keys
 
# Save NTS keys and cookies.
ntsdumpdir /var/lib/chrony
 
# Insert/delete leap seconds by slewing instead of stepping.
#leapsecmode slew
 
# Get TAI-UTC offset and leap seconds from the system tz database.
leapsectz right/UTC
 
# Specify directory for log files.
logdir /var/log/chrony
 
# Select which information is logged.
#log measurements statistics tracking

客户端也就配置完成了 接下来重启并设置自启服务端和客户端的chrony

systemctl restart chronyd        #重启chrony
systemctl enable chronyd        #设置自启
接下来客户端查看同步情况

chronyc sources                    #客户机查看同步源
 
MS Name/IP address         Stratum Poll Reach LastRx Last sample               
===============================================================================
^* 192.168.100.200            10  10   377   759  -8687ns[-9982ns] +/-  227us            #同步成功
就同步成功了 如果同步失败检查是否关闭了selinux和firewalld
————————————————
版权声明：本文为CSDN博主「拾柒SHY」的原创文章，遵循CC 4.0 BY-SA版权协议，转载请附上原文出处链接及本声明。
原文链接：https://blog.csdn.net/m0_60984906/article/details/128552398