linux 时间同步ntp和chrony服务搭建配置

admin

查看时间同步源的信息。
6 X3 N$ X' V  z+ s) J0 f, Q# chronyc sourcestats -v
210 Number of sources = 1
                             .- Number of sample points in measurement set.
% R- l' q& l; d( F7 B/ _                            /    .- Number of residual runs with same sign.
1 X" H3 I7 a4 {! z                           |    /    .- Length of measurement set (time).
! g$ O/ ~+ P& w1 \/ G( S# ?4 T                           |   |    /      .- Est. clock freq error (ppm).
9 X5 E/ B  H* c5 ?                           |   |   |      /           .- Est. error in freq.
                           |   |   |     |           /         .- Est. offset.
                           |   |   |     |          |          |   On the -.
# y4 ^1 T9 t2 i9 h                           |   |   |     |          |          |   samples. \
                           |   |   |     |          |          |             |
2 i$ ~. ~2 j% ]1 XName/IP Address            NP  NR  Span  Frequency  Freq Skew  Offset  Std Dev
==============================================================================
' @. b, v5 c/ _) W- Jpromote.cache-dns.local     0   0     0     +0.000   2000.000     +0ns  4000ms

admin

[root@361way ~]# chronyc
4 c% Q* \! ]5 gchrony version 1.29.1
Copyright (C) 1997-2003, 2007, 2009-2013 Richard P. Curnow and others
chrony comes with ABSOLUTELY NO WARRANTY.  This is free software, and
% L- m0 L2 `9 u% o& `8 B# Ryou are welcome to redistribute it under certain conditions.  See the
GNU General Public License version 2 for details.
" z: T8 [. Z( i1 H! ~chronyc> activity
9 D  C5 K' Y5 i' R- c1 F/ q2 w200 OK
3 sources online
# m" R- v. k) N" a0 sources offline
0 sources doing burst (return to online)
0 B/ b6 h6 ]* I+ @6 u' K2 H7 Z0 sources doing burst (return to offline)
0 sources with unknown address
/ p7 I. r. R/ W) K6 Y" Xchronyc> help
6 x% X. A' D- w. D! ~$ Y# JCommands:
, c: ?) i7 d7 n; kaccheck <address> : Check whether NTP access is allowed to <address>
activity : Check how many NTP sources are online/offline
' n/ Y8 X- Q4 t# _add peer <address> ... : Add a new NTP peer
add server <address> ... : Add a new NTP server
: y8 H; ?1 [) Fallow [<subnet-addr>] : Allow NTP access to that subnet as a default
allow all [<subnet-addr>] : Allow NTP access to that subnet and all children
/ t( G5 I; X1 Y. yburst <n-good>/<n-max> [<mask>/<masked-address>] : Start a rapid set of measurements
clients : Report on clients that have accessed the server
' R2 G& C# a0 Y" {" `7 i5 c0 Jcmdaccheck <address> : Check whether command access is allowed to <address>
4 M0 T# S1 e) p' V& Fcmdallow [<subnet-addr>] : Allow command access to that subnet as a default
cmdallow all [<subnet-addr>] : Allow command access to that subnet and all children
cmddeny [<subnet-addr>] : Deny command access to that subnet as a default
……………………省略

admin

配置NTP server 服务器 #yum install -y ntp
●        编辑ntp 配置  vim /etc/ntp.conf
3 X4 L; @  Z# c' edriftfile /var/lib/ntp/drift
restrict default nomodify notrap nopeer noquery
restrict 127.0.0.1
9 H( z2 w3 M9 J% y9 prestrict ::1
) a- c( Y9 @' T* O" v7 j) a" _+ \( G) Rserver 127.127.1.0                              　　
+ g6 G) E7 F5 G: mfudge 127.127.1.0 stratum 0                  
includefile /etc/ntp/crypto/pw
: N5 ?+ f) c2 H, \  Bkeys /etc/ntp/keys
+ W  k8 i  a5 ^) N/ b% n- `disable monitor
$ y. R: \4 @- \2 C7 Q* \●        编辑ntp 服务器的配置
$ P/ I; q  v. T7 ?# vim  /etc/sysconfig/iptables

  -A INPUT -p udp --dport 123 -j ACCEPT

# systemctl restart iptables
9 {$ ~1 V; A0 n+ _( m6 R# systemctl restart iptables.service
: H, D3 x3 y+ O0 L5 p/ m9 K●        将系统时间写入硬件
8 N. i: K; p# D2 q9 }2 O  # hwclock --systohc
●        重新启动NTP服务
% ]$ P& v# D  N. l5 ]    # service ntpd restart

admin

设定NTP主机来源（其中prefer表示优先主机），192.168.7.49是本地的NTP服务器，所以优先指定从该主机同步时间。
& H# ~% ?& d9 b9 ]; c
server 192.168.7.49 prefer