openEuler 22.03 (LTS-SP1)服务器用ntpd同步GPS时间服务器的案例

本文记录了openEuler 22.03 (LTS-SP1)的二级时间服务器用chronyd不能自动同步GPS时间服务器，改用ntpd同步GPS时间服务器成功的案例

一、环境简述

1、本环境中有两台GPS一级时间服务器，IP如下：

192.168.188.66

192.168.188.74

2、有一台openeuler系统的服务器拟作为网络中的二级时间服务器对全网进行授时

系统版本：

[root@localhost ~]# cat /etc/os-release  NAME="openEuler" VERSION="22.03 (LTS-SP1)" ID="openEuler" VERSION_ID="22.03" PRETTY_NAME="openEuler 22.03 (LTS-SP1)" ANSI_COLOR="0;31"

 IP地址：192.168.168.33

二、问题现象

1、使用chronyd进行时间服务器同步设置

配置如下：

[root@localhost ~]# egrep -v "^#|^$" /etc/chrony.conf server 192.168.188.66 iburst server 192.168.188.74 iburst driftfile /var/lib/chrony/drift makestep 1.0 3 rtcsync allow 192.0.0.0/8 local stratum 10 keyfile /etc/chrony.keys logdir /var/log/chrony log measurements statistics tracking

2、启动服务

[root@localhost ~]# systemctl start chronyd [root@localhost ~]# systemctl status chronyd ● chronyd.service - NTP client/server      Loaded: loaded (/usr/lib/systemd/system/chronyd.service; enabled; vendor preset: enabled)      Active: active (running) since Fri 2024-06-21 20:37:38 CST; 5s ago        Docs: man:chronyd(8)              man:chrony.conf(5)     Process: 392366 ExecStart=/usr/sbin/chronyd $OPTIONS (code=exited, status=0/SUCCESS)    Main PID: 392368 (chronyd)       Tasks: 1 (limit: 2469658)      Memory: 360.0K      CGroup: /system.slice/chronyd.service              └─ 392368 /usr/sbin/chronyd  Jun 21 20:37:38 irmsogg1733 systemd[1]: Starting NTP client/server... Jun 21 20:37:38 irmsogg1733 chronyd[392368]: chronyd version 4.1 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASY> Jun 21 20:37:38 irmsogg1733 chronyd[392368]: Initial frequency -46.668 ppm Jun 21 20:37:38 irmsogg1733 systemd[1]: Started NTP client/server.

服务正常启动

3、检查服务器同步情况

[root@localhost ~]# chronyc sourcestats -v                               .- Number of sample points in measurement set.                             /    .- Number of residual runs with same sign.                            |    /    .- Length of measurement set (time).                            |   |    /      .- Est. clock freq error (ppm).                            |   |   |      /           .- Est. error in freq.                            |   |   |     |           /         .- Est. offset.                            |   |   |     |          |          |   On the -.                            |   |   |     |          |          |   samples. \                            |   |   |     |          |          |             | Name/IP Address            NP  NR  Span  Frequency  Freq Skew  Offset  Std Dev ============================================================================== 192.168.188.66               0   0     0     +0.000   2000.000     +0ns  4000ms 192.168.188.74               0   0     0     +0.000   2000.000     +0ns  4000ms [root@localhost ~]# chronyc sources -v         .-- Source mode  '^' = server, '=' = peer, '#' = local clock.  / .- Source state '*' = current best, '+' = combined, '-' = not combined, | /             'x' = may be in error, '~' = too variable, '?' = unusable. ||                                                 .- xxxx [ yyyy ] +/- zzzz ||      Reachability register (octal) -.           |  xxxx = adjusted offset, ||      Log2(Polling interval) --.      |          |  yyyy = measured offset, ||                                \     |          |  zzzz = estimated error. ||                                 |    |           \ MS Name/IP address         Stratum Poll Reach LastRx Last sample                =============================================================================== ^? 192.168.188.66                 0   8     0     -     +0ns[   +0ns] +/-    0ns ^? 192.168.188.74                 0   8     0     -     +0ns[   +0ns] +/-    0ns

经长时间观察，服务器前面始终为?，发现无法完成自动同步将服务器状态转为“*”或“-”。

4、检查一级服务器授时能力

[root@localhost ~]# chronyc activity -v 200 OK 2 sources online 0 sources offline 0 sources doing burst (return to online) 0 sources doing burst (return to offline) 0 sources with unknown address [root@localhost ~]# chronyc tracking -v Reference ID    : 7F7F0101 () Stratum         : 10 Ref time (UTC)  : Fri Jun 21 11:31:11 2024 System time     : 0.000000004 seconds slow of NTP time Last offset     : +0.000000000 seconds RMS offset      : 0.000000000 seconds Frequency       : 44.979 ppm slow Residual freq   : +0.000 ppm Skew            : 0.000 ppm Root delay      : 0.000000000 seconds Root dispersion : 0.000000000 seconds Update interval : 0.0 seconds Leap status     : Normal

 可以看到两个时间服务器源是在线的，但tracking信息不正常

5、手动同步时间测试

[root@localhost ~]# ntpdate 192.168.188.66     21 Jun 19:19:21 ntpdate[391367]: adjust time server 192.168.188.66 offset +0.017640 sec [root@localhost ~]# ntpdate 192.168.188.74 21 Jun 19:19:34 ntpdate[391368]: adjust time server 192.168.188.74 offset +0.012333 sec [root@localhost ~]# chronyc -a makestep 200 OK

 手动测试一级时间服务器时间同步正常，授时端口也正常，看来chronyd与该GPS时间服务器同步存在什么问题。

三、问题处理

1、卸载chronyd

考虑到一级GPS时间服务器能正常授时，chronyd又无法完成与一级GPS时间服务器的自动同步，于是卸载chronyd，改用ntpd进行尝试（ntpd和chronyd都能启动ntp时间服务器，同时运行是有冲突的，最好只保留一个）。

[root@localhost ~]# yum remove chrony         Dependencies resolved. =======================================================================================================================================  Package                     Architecture             Version                             Repository                              Size ======================================================================================================================================= Removing:  chrony                      x86_64                   4.1-3.oe2203sp1                     @openEuler2203SP1LTS                   435 k Removing unused dependencies:  libedit                     x86_64                   3.1-29.oe2203sp1                    @openEuler2203SP1LTS                   232 k  timedatex                   x86_64                   0.6-3.oe2203sp1                     @openEuler2203SP1LTS                    52 k  Transaction Summary ======================================================================================================================================= Remove  3 Packages  Freed space: 718 k Is this ok [y/N]: y Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                                                                               1/1    Running scriptlet: chrony-4.1-3.oe2203sp1.x86_64                                                                                 1/1    Running scriptlet: chrony-4.1-3.oe2203sp1.x86_64                                                                                 1/3  Removed /etc/systemd/system/multi-user.target.wants/chronyd.service.    Erasing          : chrony-4.1-3.oe2203sp1.x86_64                                                                                 1/3  warning: /etc/chrony.conf saved as /etc/chrony.conf.rpmsave    Running scriptlet: chrony-4.1-3.oe2203sp1.x86_64                                                                                 1/3    Erasing          : libedit-3.1-29.oe2203sp1.x86_64                                                                               2/3    Running scriptlet: timedatex-0.6-3.oe2203sp1.x86_64                                                                              3/3  Unit /etc/systemd/system/timedatex.service is masked, ignoring.    Erasing          : timedatex-0.6-3.oe2203sp1.x86_64                                                                              3/3    Running scriptlet: timedatex-0.6-3.oe2203sp1.x86_64                                                                              3/3    Verifying        : chrony-4.1-3.oe2203sp1.x86_64                                                                                 1/3    Verifying        : libedit-3.1-29.oe2203sp1.x86_64                                                                               2/3    Verifying        : timedatex-0.6-3.oe2203sp1.x86_64                                                                              3/3   Removed:   chrony-4.1-3.oe2203sp1.x86_64              libedit-3.1-29.oe2203sp1.x86_64              timedatex-0.6-3.oe2203sp1.x86_64               Complete!

2、安装ntpd

[root@localhost ~] # yum install ntp Last metadata expiration check: 0:51:16 ago on Fri 21 Jun 2024 07:47:25 PM CST. Dependencies resolved. =======================================================================================================================================  Package                    Architecture            Version                                 Repository                            Size ======================================================================================================================================= Installing:  ntp                        x86_64                  4.2.8p15-7.oe2203sp1                    openEuler2203SP1LTS                  619 k Installing dependencies:  autogen                    x86_64                  5.18.16-3.oe2203sp1                     openEuler2203SP1LTS                  469 k  libedit                    x86_64                  3.1-29.oe2203sp1                        openEuler2203SP1LTS                   92 k  ntp-help                   noarch                  4.2.8p15-7.oe2203sp1                    openEuler2203SP1LTS                  1.3 M Installing weak dependencies:  ntpstat                    noarch                  0.6-4.oe2203sp1                         openEuler2203SP1LTS                   11 k  timedatex                  x86_64                  0.6-3.oe2203sp1                         openEuler2203SP1LTS                   29 k  Transaction Summary ======================================================================================================================================= Install  6 Packages  Total download size: 2.4 M Installed size: 5.3 M Is this ok [y/N]: y Downloading Packages: (1/6): libedit-3.1-29.oe2203sp1.x86_64.rpm                                                              19 MB/s |  92 kB     00:00     (2/6): autogen-5.18.16-3.oe2203sp1.x86_64.rpm                                                           29 MB/s | 469 kB     00:00     (3/6): ntpstat-0.6-4.oe2203sp1.noarch.rpm                                                              9.3 MB/s |  11 kB     00:00     (4/6): ntp-4.2.8p15-7.oe2203sp1.x86_64.rpm                                                              24 MB/s | 619 kB     00:00     (5/6): timedatex-0.6-3.oe2203sp1.x86_64.rpm                                                            3.7 MB/s |  29 kB     00:00     (6/6): ntp-help-4.2.8p15-7.oe2203sp1.noarch.rpm                                                         42 MB/s | 1.3 MB     00:00     --------------------------------------------------------------------------------------------------------------------------------------- Total                                                                                                   63 MB/s | 2.4 MB     00:00      Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                                                                               1/1    Running scriptlet: timedatex-0.6-3.oe2203sp1.x86_64                                                                              1/6    Installing       : timedatex-0.6-3.oe2203sp1.x86_64                                                                              1/6    Running scriptlet: timedatex-0.6-3.oe2203sp1.x86_64                                                                              1/6  Unit /etc/systemd/system/timedatex.service is masked, ignoring.    Installing       : ntp-help-4.2.8p15-7.oe2203sp1.noarch                                                                          2/6    Installing       : libedit-3.1-29.oe2203sp1.x86_64                                                                               3/6    Installing       : autogen-5.18.16-3.oe2203sp1.x86_64                                                                            4/6    Installing       : ntpstat-0.6-4.oe2203sp1.noarch                                                                                5/6    Running scriptlet: ntp-4.2.8p15-7.oe2203sp1.x86_64                                                                               6/6    Installing       : ntp-4.2.8p15-7.oe2203sp1.x86_64                                                                               6/6    Running scriptlet: ntp-4.2.8p15-7.oe2203sp1.x86_64                                                                               6/6    Verifying        : autogen-5.18.16-3.oe2203sp1.x86_64                                                                            1/6    Verifying        : libedit-3.1-29.oe2203sp1.x86_64                                                                               2/6    Verifying        : ntp-4.2.8p15-7.oe2203sp1.x86_64                                                                               3/6    Verifying        : ntp-help-4.2.8p15-7.oe2203sp1.noarch                                                                          4/6    Verifying        : ntpstat-0.6-4.oe2203sp1.noarch                                                                                5/6    Verifying        : timedatex-0.6-3.oe2203sp1.x86_64                                                                              6/6   Installed:   autogen-5.18.16-3.oe2203sp1.x86_64             libedit-3.1-29.oe2203sp1.x86_64           ntp-4.2.8p15-7.oe2203sp1.x86_64              ntp-help-4.2.8p15-7.oe2203sp1.noarch           ntpstat-0.6-4.oe2203sp1.noarch            timedatex-0.6-3.oe2203sp1.x86_64            Complete!

3、配置ntpd

[root@localhost chrony]# egrep -v "^#|^$" /etc/ntp.conf    driftfile /var/lib/ntp/drift restrict default nomodify notrap nopeer noepeer noquery restrict source nomodify notrap noepeer noquery restrict 127.0.0.1  restrict ::1 server 192.168.188.66 iburst server 192.168.188.74 iburst tos maxclock 5 includefile /etc/ntp/crypto/pw keys /etc/ntp/keys

 4、启动ntpd

[root@localhost chrony]# systemctl start ntpd

5、查看服务状态

[root@localhost chrony]# systemctl status ntpd ● ntpd.service - Network Time Service      Loaded: loaded (/usr/lib/systemd/system/ntpd.service; enabled; vendor preset: disabled)      Active: active (running) since Fri 2024-06-21 20:40:16 CST; 2min 38s ago    Main PID: 392489 (ntpd)       Tasks: 2 (limit: 2469658)      Memory: 1.6M      CGroup: /system.slice/ntpd.service              └─ 392489 /usr/sbin/ntpd -u ntp:ntp -g  Jun 21 20:40:16 localhost ntpd[392489]: Listen and drop on 1 v4wildcard 0.0.0.0:123 Jun 21 20:40:16 localhost ntpd[392489]: Listen normally on 2 lo 127.0.0.1:123 Jun 21 20:40:16 localhost ntpd[392489]: Listen normally on 3 bond0 192.168.168.33:123 Jun 21 20:40:16 localhost ntpd[392489]: Listen normally on 4 lo [::1]:123 Jun 21 20:40:16 localhost ntpd[392489]: Listening on routing socket on fd #23 for interface updates Jun 21 20:40:16 localhost ntpd[392489]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized Jun 21 20:40:16 localhost ntpd[392489]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized Jun 21 20:40:16 localhost systemd[1]: Started Network Time Service.

 6、检查时间同步情况

[root@localhost chrony]# ntpq -p      remote           refid      st t when poll reach   delay   offset  jitter ============================================================================== +192.168.188.66   .GPS.            1 u   11   64   77    1.705  +15.730  12.199 *192.168.188.74   .GPS.            1 u    8   64   77    1.670  +16.038  12.284

 发现ntpd能够正常跟踪一级GPS时间服务器，相关数据显示正常。

7、使能ntpd让其开机启动

[root@localhost chrony]# systemctl enable ntpd Created symlink /etc/systemd/system/multi-user.target.wants/ntpd.service → /usr/lib/systemd/system/ntpd.service.

8、通过网内其它主机进行时间同步测试

其它主机chronyd将时间服务器设置为二级服务器192.168.168.33进行同步测试

[root@localhost2 ~]# chronyc sources -v    .-- Source mode  '^' = server, '=' = peer, '#' = local clock.  / .- Source state '*' = current best, '+' = combined, '-' = not combined, | /             'x' = may be in error, '~' = too variable, '?' = unusable. ||                                                 .- xxxx [ yyyy ] +/- zzzz ||      Reachability register (octal) -.           |  xxxx = adjusted offset, ||      Log2(Polling interval) --.      |          |  yyyy = measured offset, ||                                \     |          |  zzzz = estimated error. ||                                 |    |           \ MS Name/IP address         Stratum Poll Reach LastRx Last sample                =============================================================================== ^* 192.168.168.33                  2   6   377    17  -4658us[-7129us] +/-   11ms

可以看到，能正确获取到时间，且显示二级服务器192.168.168.33处于第二层。

9、检查时间获取情况

[root@localhost2 ~]#  chronyc tracking -v Reference ID    : 0AE31121 (192.168.168.33) Stratum         : 3 Ref time (UTC)  : Fri Jun 21 14:13:29 2024 System time     : 0.000004623 seconds fast of NTP time Last offset     : +0.000003086 seconds RMS offset      : 0.000103144 seconds Frequency       : 16.338 ppm slow Residual freq   : +0.001 ppm Skew            : 0.072 ppm Root delay      : 0.001930163 seconds Root dispersion : 0.007009792 seconds Update interval : 64.7 seconds Leap status     : Normal

10、用时间同步检查工具检查

可以看到 二级服务器192.168.168.33是从一级时间服务器192.168.188.74获取的时间，与“ntpq -p”检查结果一致，确认二级时间服务器自动同步GPS时间服务器并进行分发的配置ok,运行完成正常。

四、问题分析

网络中的GPS一级时间服务器启用时间较早，估计使用了较早的时间协议。chronyd对比ntpd能更快地且更准确地同步系统时钟，但ntp更多的NTP运行协议，它支持RFC 5905的所有操作模式，包括广播、多播和manycast服务器/客户端，它还支持自动密钥协议（RFC 5906）来使用公钥加密对服务器进行身份验证，因此本例可能就是因为chronyd不能完全支持GPS一级时间服务器的NTP协议，而使用ntpd则能较好地运行。

附：本文中相关配置详解见《ntpd和chronyd时间服务器配置样例及详解》