====== Linux Timekeeping ====== ntpdate pool.ntp.org ntpq -p ntpstat grep ntp /var/log/messages ===== Ubuntu ===== https://linuxconfig.org/how-to-change-timezone-on-ubuntu-18-04-bionic-beaver-linux https://feeding.cloud.geek.nz/posts/time-synchronization-with-ntp-and-systemd/ :!: ''systemd-timesyncd'' is a client-only, lightweight, simple, replacement for ''ntpd''. It cannot act as a time server. timedatectl set-timezone America/Phoenix timedatectl status systemctl restart systemd-timesyncd.service ===== CentOS ===== Here we: - Set the correct timezone - Set the actual time - Set the NTP daemon to automatically start on system boot - Start the NTP daemon - Verify the NTP daemon is working properly rm /etc/localtime ln -s /usr/share/zoneinfo/America/Phoenix /etc/localtime ntpdate pool.ntp.org chkconfig ntpd on service ntpd start tail /var/log/messages ===== SME Server ===== Already functions as NTP server. cat /var/log/ntpd/current |tai64nlocal ===== Ubuntu ===== sudo apt-get install ntp sudo service ntp restart ===== Server Preference ===== Setting a local time server may noticeably speed up boot times. Edit /etc/ntp.conf and add a line for your preferred server: vi /etc/ntp.conf server 192.168.2.1 prefer If the initscripts run ntpdate, you can replace /etc/ntp/step-tickers: sudo cp -a /etc/ntp/step-tickers /etc/ntp/step-tickers.orig sudo vim /etc/ntp/step-tickers 192.168.2.1 ===== NTP Servers ===== 0.us.pool.ntp.org 1.us.pool.ntp.org 2.us.pool.ntp.org 3.us.pool.ntp.org ===== Local Network Server ===== Edit the config file, uncomment and modify: vim /etc/ntp.conf # Hosts on local network are less restricted. restrict 192.168.2.0 mask 255.255.255.0 nomodify notrap broadcast 192.168.2.255 sudo service ntpd restart ===== Public Server ===== https://www.digitalocean.com/community/tutorials/how-to-configure-ntp-for-use-in-the-ntp-pool-project-on-ubuntu-16-04 ===== Firewall ===== Open UDP port 123 on the firewall: http://www.ghidinelli.com/2008/09/25/iptables-firewall-rules-for-ntpd-time-synchronization /sbin/iptables -A INPUT -p udp -s 192.168.30.0/24 --dport 123 -j ACCEPT /sbin/iptables -A OUTPUT -p udp --sport 123 -j ACCEPT service iptables save or: system-config-securitylevel-tui 123:udp netstat -uapn|grep 123