{"id":2884,"date":"2017-11-29T21:04:51","date_gmt":"2017-11-29T13:04:51","guid":{"rendered":"http:\/\/cn.hostease.com\/xueyuan\/?p=2884"},"modified":"2017-11-29T21:04:51","modified_gmt":"2017-11-29T13:04:51","slug":"chrony%e6%97%b6%e9%97%b4%e5%90%8c%e6%ad%a5%e6%9c%8d%e5%8a%a1%e4%bd%bf%e7%94%a8%e8%af%b4%e6%98%8e","status":"publish","type":"post","link":"https:\/\/cn.hostease.com\/xueyuan\/jishu\/linux\/chrony%e6%97%b6%e9%97%b4%e5%90%8c%e6%ad%a5%e6%9c%8d%e5%8a%a1%e4%bd%bf%e7%94%a8%e8%af%b4%e6%98%8e\/","title":{"rendered":"Chrony\u65f6\u95f4\u540c\u6b65\u670d\u52a1\u4f7f\u7528\u8bf4\u660e"},"content":{"rendered":"

1.1.1 chrony\u7b80\u4ecb<\/h3>\n

Chrony\u662f\u4e00\u4e2a\u5f00\u6e90\u7684\u81ea\u7531\u8f6f\u4ef6\uff0c\u5b83\u80fd\u4fdd\u6301\u7cfb\u7edf\u65f6\u949f\u4e0e\u65f6\u949f\u670d\u52a1\u5668\uff08NTP\uff09\u540c\u6b65\uff0c\u8ba9\u65f6\u95f4\u4fdd\u6301\u7cbe\u786e\u3002<\/p>\n

\u5b83\u7531\u4e24\u4e2a\u7a0b\u5e8f\u7ec4\u6210\uff1achronyd\u548cchronyc\u3002<\/p>\n

chronyd\u662f\u4e00\u4e2a\u540e\u53f0\u8fd0\u884c\u7684\u5b88\u62a4\u8fdb\u7a0b\uff0c\u7528\u4e8e\u8c03\u6574\u5185\u6838\u4e2d\u8fd0\u884c\u7684\u7cfb\u7edf\u65f6\u949f\u548c\u65f6\u949f\u670d\u52a1\u5668\u540c\u6b65\u3002\u5b83\u786e\u5b9a\u8ba1\u7b97\u673a\u589e\u51cf\u65f6\u95f4\u7684\u6bd4\u7387\uff0c\u5e76\u5bf9\u6b64\u8fdb\u884c\u8865\u507f\u3002<\/p>\n

chrony<\/strong>\u662fCentOS<\/a>7.x<\/strong>\u4e0a\u81ea\u5e26\u7684\u65f6\u95f4\u540c\u6b65\u8f6f\u4ef6<\/strong><\/p>\n

1.1.2 chrony\u7684\u64cd\u4f5c<\/h4>\n
\n
\n
# yum install -y chrony     -->\u5b89\u88c5\u670d\u52a1\r\n# systemctl start chronyd.service   -->\u542f\u52a8\u670d\u52a1\r\n# systemctl enable chronyd.service   -->\u8bbe\u7f6e\u5f00\u673a\u81ea\u542f\u52a8\uff0c\u9ed8\u8ba4\u662fenable\u7684<\/pre>\n<\/div>\n<\/div>\n
1.1.3 chrony\u914d\u7f6e\u6587\u4ef6<\/h4>\n
chrony\u670d\u52a1\u4f7f\u7528\u7684\u914d\u7f6e\u6587\u4ef6\u4e3a\/etc\/chrony.conf<\/p>\n
\u5176\u914d\u7f6e\u5185\u5bb9\u683c\u5f0f\u548cntpd\u670d\u52a1\u57fa\u672c\u76f8\u4f3c<\/p>\n
\n
[root@openvpn ~]# cat \/etc\/chrony.conf \r\n# Use public servers from the pool.ntp.org project.\r\n# Please consider joining the pool (https:\/\/www.pool.ntp.org\/join.html).\r\nserver 0.centos.pool.ntp.org iburst\r\nserver 1.centos.pool.ntp.org iburst\r\nserver 2.centos.pool.ntp.org iburst\r\nserver 3.centos.pool.ntp.org iburst\r\n\r\n# Record the rate at which the system clock gains\/losses time.\r\ndriftfile \/var\/lib\/chrony\/drift\r\n\r\n# Allow the system clock to be stepped in the first three updates\r\n# if its offset is larger than 1 second.\r\nmakestep 1.0 3\r\n\r\n# Enable kernel synchronization of the real-time clock (RTC).\r\nrtcsync\r\n\r\n# Enable hardware timestamping on all interfaces that support it.\r\n#hwtimestamp *\r\n\r\n# Increase the minimum number of selectable sources required to adjust\r\n# the system clock.\r\n#minsources 2\r\n\r\n# Allow NTP client access from local network.\r\n#allow 192.168.0.0\/16\r\n\r\n# Serve time even if not synchronized to a time source.\r\n#local stratum 10\r\n\r\n# Specify file containing keys for NTP authentication.\r\n#keyfile \/etc\/chrony.keys\r\n\r\n# Specify directory for log files.\r\nlogdir \/var\/log\/chrony\r\n\r\n# Select which information is logged.\r\n#log measurements statistics tracking<\/pre>\n
<\/div>\n<\/div>\n
1.1.4 \u914d\u7f6e\u53c2\u6570\u8bf4\u660e<\/h4>\n\n\n\n\n\n\n\n\n\n\n\n
\n
\u53c2\u6570<\/strong><\/p>\n<\/td>\n
\n
\u53c2\u6570\u8bf4\u660e<\/strong><\/p>\n<\/td>\n<\/tr>\n
server<\/strong><\/td>\n\u8be5\u53c2\u6570\u53ef\u4ee5\u591a\u6b21\u7528\u4e8e\u6dfb\u52a0\u65f6\u949f\u670d\u52a1\u5668\uff0c\u5fc5\u987b\u4ee5”server “\u683c\u5f0f\u4f7f\u7528\u3002\u4e00\u822c\u800c\u8a00\uff0c\u4f60\u60f3\u6dfb\u52a0\u591a\u5c11\u670d\u52a1\u5668\uff0c\u5c31\u53ef\u4ee5\u6dfb\u52a0\u591a\u5c11\u670d\u52a1\u5668<\/td>\n<\/tr>\n
stratumweight<\/strong><\/td>\nstratumweight\u6307\u4ee4\u8bbe\u7f6e\u5f53chronyd\u4ece\u53ef\u7528\u6e90\u4e2d\u9009\u62e9\u540c\u6b65\u6e90\u65f6\uff0c\u6bcf\u4e2a\u5c42\u5e94\u8be5\u6dfb\u52a0\u591a\u5c11\u8ddd\u79bb\u5230\u540c\u6b65\u8ddd\u79bb\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cCentOS\u4e2d\u8bbe\u7f6e\u4e3a0\uff0c\u8ba9chronyd\u5728\u9009\u62e9\u6e90\u65f6\u5ffd\u7565\u6e90\u7684\u5c42\u7ea7<\/td>\n<\/tr>\n
driftfile<\/strong><\/td>\nchronyd\u7a0b\u5e8f\u7684\u4e3b\u8981\u884c\u4e3a\u4e4b\u4e00\uff0c\u5c31\u662f\u6839\u636e\u5b9e\u9645\u65f6\u95f4\u8ba1\u7b97\u51fa\u8ba1\u7b97\u673a\u589e\u51cf\u65f6\u95f4\u7684\u6bd4\u7387\uff0c\u5c06\u5b83\u8bb0\u5f55\u5230\u4e00\u4e2a\u6587\u4ef6\u4e2d\u662f\u6700\u5408\u7406\u7684\uff0c\u5b83\u4f1a\u5728\u91cd\u542f\u540e\u4e3a\u7cfb\u7edf\u65f6\u949f\u4f5c\u51fa\u8865\u507f\uff0c\u751a\u81f3\u53ef\u80fd\u7684\u8bdd\uff0c\u4f1a\u4ece\u65f6\u949f\u670d\u52a1\u5668\u83b7\u5f97\u8f83\u597d\u7684\u4f30\u503c<\/td>\n<\/tr>\n
rtcsync<\/strong><\/td>\nrtcsync\u6307\u4ee4\u5c06\u542f\u7528\u4e00\u4e2a\u5185\u6838\u6a21\u5f0f\uff0c\u5728\u8be5\u6a21\u5f0f\u4e2d\uff0c\u7cfb\u7edf\u65f6\u95f4\u6bcf11\u5206\u949f\u4f1a\u62f7\u8d1d\u5230\u5b9e\u65f6\u65f6\u949f\uff08RTC\uff09<\/td>\n<\/tr>\n
allow\/deny<\/strong><\/td>\n\u8fd9\u91cc\u4f60\u53ef\u4ee5\u6307\u5b9a\u4e00\u53f0\u4e3b\u673a\u3001\u5b50\u7f51\uff0c\u6216\u8005\u7f51\u7edc\u4ee5\u5141\u8bb8\u6216\u62d2\u7eddNTP\u8fde\u63a5\u5230\u626e\u6f14\u65f6\u949f\u670d\u52a1\u5668\u7684\u673a\u5668<\/td>\n<\/tr>\n
cmdallow\/cmddeny<\/strong><\/td>\n\u8ddf\u4e0a\u9762\u76f8\u7c7b\u4f3c\uff0c\u53ea\u662f\u4f60\u53ef\u4ee5\u6307\u5b9a\u54ea\u4e2aIP\u5730\u5740\u6216\u54ea\u53f0\u4e3b\u673a\u53ef\u4ee5\u901a\u8fc7chronyd\u4f7f\u7528\u63a7\u5236\u547d\u4ee4<\/td>\n<\/tr>\n
bindcmdaddress<\/strong><\/td>\n\u8be5\u6307\u4ee4\u5141\u8bb8\u4f60\u9650\u5236chronyd\u76d1\u542c\u54ea\u4e2a\u7f51\u7edc\u63a5\u53e3\u7684\u547d\u4ee4\u5305\uff08\u7531chronyc\u6267\u884c\uff09\u3002\u8be5\u6307\u4ee4\u901a\u8fc7cmddeny\u673a\u5236\u63d0\u4f9b\u4e86\u4e00\u4e2a\u9664\u4e0a\u8ff0\u9650\u5236\u4ee5\u5916\u53ef\u7528\u7684\u989d\u5916\u7684\u8bbf\u95ee\u63a7\u5236\u7b49\u7ea7<\/td>\n<\/tr>\n
makestep<\/strong><\/td>\n\u901a\u5e38\uff0cchronyd\u5c06\u6839\u636e\u9700\u6c42\u901a\u8fc7\u51cf\u6162\u6216\u52a0\u901f\u65f6\u949f\uff0c\u4f7f\u5f97\u7cfb\u7edf\u9010\u6b65\u7ea0\u6b63\u6240\u6709\u65f6\u95f4\u504f\u5dee\u3002\u5728\u67d0\u4e9b\u7279\u5b9a\u60c5\u51b5\u4e0b\uff0c\u7cfb\u7edf\u65f6\u949f\u53ef\u80fd\u4f1a\u6f02\u79fb\u8fc7\u5feb\uff0c\u5bfc\u81f4\u8be5\u8c03\u6574\u8fc7\u7a0b\u6d88\u8017\u5f88\u957f\u7684\u65f6\u95f4\u6765\u7ea0\u6b63\u7cfb\u7edf\u65f6\u949f\u3002\u8be5\u6307\u4ee4\u5f3a\u5236chronyd\u5728\u8c03\u6574\u671f\u5927\u4e8e\u67d0\u4e2a\u9600\u503c\u65f6\u6b65\u8fdb\u8c03\u6574\u7cfb\u7edf\u65f6\u949f\uff0c\u4f46\u53ea\u6709\u5728\u56e0\u4e3achronyd\u542f\u52a8\u65f6\u95f4\u8d85\u8fc7\u6307\u5b9a\u9650\u5236\uff08\u53ef\u4f7f\u7528\u8d1f\u503c\u6765\u7981\u7528\u9650\u5236\uff09\uff0c\u6ca1\u6709\u66f4\u591a\u65f6\u949f\u66f4\u65b0\u65f6\u624d\u751f\u6548<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u68c0\u67e5ntp\u6e90\u670d\u52a1\u5668\u72b6\u60011.1.5 \u67e5\u770b\u540c\u6b65\u72b6\u6001<\/h4>\n
\n
\n
<\/div>\n
 [root@openvpn ~]# chronyc sourcestats\r\n210 Number of sources = 4\r\nName\/IP Address            NP  NR  Span  Frequency  Freq Skew  Offset  Std Dev\r\n==============================================================================\r\n61-216-153-105.HINET-IP.>   0   0     0     +0.000   2000.000     +0ns  4000ms\r\ndns1.synet.edu.cn          18   9   62m     +0.312      1.706  +7548ns  1920us\r\nntp2.itcompliance.dk        0   0     0     +0.000   2000.000     +0ns  4000ms\r\nmx.comglobalit.com         22  11  270m     +0.660      0.184    +37ms   987us<\/pre>\n<\/div>\n<\/div>\n
\u67e5\u770bntp\u8be6\u7ec6\u7684\u540c\u6b65\u72b6\u6001<\/p>\n
\n
[root@openvpn ~]# chronyc sources -v\r\n210 Number of sources = 4\r\n\r\n  .-- Source mode  '^' = server, '=' = peer, '#' = local clock.\r\n \/ .- Source state '*' = current synced, '+' = combined , '-' = not combined,\r\n| \/   '?' = unreachable, 'x' = time may be in error, '~' = time too variable.\r\n||                                                 .- xxxx [ yyyy ] +\/- zzzz\r\n||      Reachability register (octal) -.           |  xxxx = adjusted offset,\r\n||      Log2(Polling interval) --.      |          |  yyyy = measured offset,\r\n||                                \\     |          |  zzzz = estimated error.\r\n||                                 |    |           \\\r\nMS Name\/IP address         Stratum Poll Reach LastRx Last sample               \r\n===============================================================================\r\n^? 61-216-153-105.HINET-IP.>     0  10     0     -     +0ns[   +0ns] +\/-    0ns\r\n^* dns1.synet.edu.cn             2   8   377    38   +536us[+6474us] +\/-   21ms\r\n^? ntp2.itcompliance.dk          0  10     0     -     +0ns[   +0ns] +\/-    0ns\r\n^- mx.comglobalit.com            2  10   377   477    +37ms[  +45ms] +\/-  210ms<\/pre>\n
<\/div>\n<\/div>\n
chronyc<\/em><\/strong>\u547d\u4ee4\u53c2\u6570\u8bf4\u660e\uff1a<\/em><\/strong><\/p>\n\n\n\n\n\n\n\n\n\n\n
\n
\u53c2\u6570<\/strong><\/p>\n<\/td>\n
\n
\u53c2\u6570\u8bf4\u660e<\/strong><\/p>\n<\/td>\n<\/tr>\n
accheck\u00a0<\/strong><\/td>\n\u68c0\u67e5NTP\u8bbf\u95ee\u662f\u5426\u5bf9\u7279\u5b9a\u4e3b\u673a\u53ef\u7528<\/td>\n<\/tr>\n
activity\u00a0<\/strong><\/td>\n\u8be5\u547d\u4ee4\u4f1a\u663e\u793a\u6709\u591a\u5c11NTP\u6e90\u5728\u7ebf\/\u79bb\u7ebf<\/td>\n<\/tr>\n
add server<\/strong><\/td>\n\u624b\u52a8\u6dfb\u52a0\u4e00\u53f0\u65b0\u7684NTP\u670d\u52a1\u5668\u3002<\/td>\n<\/tr>\n
clients\u00a0<\/strong><\/td>\n\u5728\u5ba2\u6237\u7aef\u62a5\u544a\u5df2\u8bbf\u95ee\u5230\u670d\u52a1\u5668<\/td>\n<\/tr>\n
delete\u00a0 \u00a0<\/strong><\/td>\n\u624b\u52a8\u79fb\u9664NTP\u670d\u52a1\u5668\u6216\u5bf9\u7b49\u670d\u52a1\u5668<\/td>\n<\/tr>\n
settime\u00a0<\/strong><\/td>\n\u624b\u52a8\u8bbe\u7f6e\u5b88\u62a4\u8fdb\u7a0b\u65f6\u95f4<\/td>\n<\/tr>\n
tracking\u00a0<\/strong><\/td>\n\u663e\u793a\u7cfb\u7edf\u65f6\u95f4\u4fe1\u606f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u67e5\u770b\u65e5\u671f\u65f6\u95f4\u3001\u65f6\u533a\u53caNTP\u72b6\u6001\uff1a# timedatectl1.1.6 \u5176\u4ed6\u65f6\u95f4\u8bbe\u7f6e\u76f8\u5173\u6307\u4ee4<\/h4>\n
\n
\n
\u67e5\u770b\u65e5\u671f\u65f6\u95f4\u3001\u65f6\u533a\u53caNTP\u72b6\u6001\uff1a# timedatectl\r\n\u67e5\u770b\u65f6\u533a\u5217\u8868\uff1a# timedatectl list-timezones\r\n\u4fee\u6539\u65f6\u533a# timedatectl set-timezone Asia\/Shanghai\r\n\u4fee\u6539\u65e5\u671f\u65f6\u95f4\uff1a# timedatectl set-time \"2015-01-21 11:50:00\"\uff08\u53ef\u4ee5\u53ea\u4fee\u6539\u5176\u4e2d\u4e00\u4e2a\uff09\r\n\u5f00\u542fNTP\uff1a# timedatectl set-ntp true\/flase<\/pre>\n<\/div>\n<\/div>\n
1.1.7 chrony\u7684\u4f18\u52bf<\/h4>\n
\u66f4\u5feb\u7684\u540c\u6b65\u53ea\u9700\u8981\u6570\u5206\u949f\u800c\u975e\u6570\u5c0f\u65f6\u65f6\u95f4\uff0c\u4ece\u800c\u6700\u5927\u7a0b\u5ea6\u51cf\u5c11\u4e86\u65f6\u95f4\u548c\u9891\u7387\u8bef\u5dee\uff0c\u8fd9\u5bf9\u4e8e\u5e76\u975e\u5168\u5929 24 \u5c0f\u65f6\u8fd0\u884c\u7684\u53f0\u5f0f\u8ba1\u7b97\u673a\u6216\u7cfb\u7edf\u800c\u8a00\u975e\u5e38\u6709\u7528\u3002<\/p>\n
\u80fd\u591f\u66f4\u597d\u5730\u54cd\u5e94\u65f6\u949f\u9891\u7387\u7684\u5feb\u901f\u53d8\u5316\uff0c\u8fd9\u5bf9\u4e8e\u5177\u5907\u4e0d\u7a33\u5b9a\u65f6\u949f\u7684\u865a\u62df\u673a\u6216\u5bfc\u81f4\u65f6\u949f\u9891\u7387\u53d1\u751f\u53d8\u5316\u7684\u8282\u80fd\u6280\u672f\u800c\u8a00\u975e\u5e38\u6709\u7528\u3002<\/p>\n
\u5728\u521d\u59cb\u540c\u6b65\u540e\uff0c\u5b83\u4e0d\u4f1a\u505c\u6b62\u65f6\u949f\uff0c\u4ee5\u9632\u5bf9\u9700\u8981\u7cfb\u7edf\u65f6\u95f4\u4fdd\u6301\u5355\u8c03\u7684\u5e94\u7528\u7a0b\u5e8f\u9020\u6210\u5f71\u54cd\u3002<\/p>\n
\u5728\u5e94\u5bf9\u4e34\u65f6\u975e\u5bf9\u79f0\u5ef6\u8fdf\u65f6\uff08\u4f8b\u5982\uff0c\u5728\u5927\u89c4\u6a21\u4e0b\u8f7d\u9020\u6210\u94fe\u63a5\u9971\u548c\u65f6\uff09\u63d0\u4f9b\u4e86\u66f4\u597d\u7684\u7a33\u5b9a\u6027\u3002<\/p>\n
\u65e0\u9700\u5bf9\u670d\u52a1\u5668\u8fdb\u884c\u5b9a\u671f\u8f6e\u8be2\uff0c\u56e0\u6b64\u5177\u5907\u95f4\u6b47\u6027\u7f51\u7edc\u8fde\u63a5\u7684\u7cfb\u7edf\u4ecd\u7136\u53ef\u4ee5\u5feb\u901f\u540c\u6b65\u65f6\u949f\u3002<\/p>\n
1.2\u00a0<\/em>\u8bf4\u660e<\/em><\/h3>\n
chrony\u4e0entp\u90fd\u662f\u65f6\u95f4\u540c\u6b65\u8f6f\u4ef6<\/p>\n
\u4e24\u4e2a\u8f6f\u4ef6\u4e0d\u80fd\u591f\u540c\u65f6\u5f00\u542f\uff0c\u4f1a\u51fa\u73b0\u65f6\u95f4\u51b2\u7a81\u3002\u5efa\u8bae\u914d\u7f6entp\u8f83\u4e3a\u7b80\u5355\uff0c\u4f7f\u7528\u65b9\u4fbf\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
1.1.1 chrony\u7b80\u4ecb Chrony\u662f\u4e00\u4e2a\u5f00\u6e90\u7684\u81ea\u7531\u8f6f\u4ef6\uff0c\u5b83\u80fd\u4fdd\u6301\u7cfb\u7edf\u65f6\u949f\u4e0e\u65f6\u949f\u670d\u52a1\u5668\uff08NTP\uff09\u540c\u6b65\uff0c\u8ba9 … \u9605\u8bfb\u66f4\u591a<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[49],"tags":[794],"class_list":["post-2884","post","type-post","status-publish","format-standard","hentry","category-linux","tag-chrony"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/2884","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/comments?post=2884"}],"version-history":[{"count":1,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/2884\/revisions"}],"predecessor-version":[{"id":2885,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/2884\/revisions\/2885"}],"wp:attachment":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/media?parent=2884"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/categories?post=2884"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/tags?post=2884"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}