Chrony 4.2 yakatoburitswa uye idzi ndidzo nhau dzayo

Mazuva mashoma apfuura the kutangwa kweiyo vhezheni itsva yeChrony 4.2 chirongwa, iyo inopa yakazvimirira kuita kweNTP mutengi uye sevha iyo inoshandiswa kuwiriranisa nguva chaiyo pane akasiyana Linux kugoverwa, kusanganisira Fedora, Ubuntu, SUSE / openSUSE, uye RHEL / CentOS.

Purogiramu inotsigira iyo NTPv4 yakatarwa (RFC 5905) uye NTS (Network Time Security) protocol, inoshandisa Public Key Infrastructure Elements (PKI) uye inogonesa kushandiswa kweTLS uye Authenticated Encryption neAssociated Data (AEAD) ye cryptographic kuchengetedza nguva uye kuwiriranisa.

Nezve Chrony 4.2

Kuti uwane iyo data yenguva chaiyo, ese ari maviri ekunze NTP maseva uye mareferenzi wachi anogona kushandiswa, semuenzaniso, zvichibva pane vanogamuchira GPS, kana uchishandisa iyo chaiyo inogona kuwanikwa pamwero wezvikamu zvemicrosecond.

Iyo purojekiti pakutanga yakagadzirirwa kushanda zvakanaka munzvimbo dzisina kugadzikana, kusanganisira kusavimbika network ane disconnected connections, high latency uye packet kurasikirwa, kushanda pamashini chaiwo, uye masisitimu ane tembiricha dzakasiyana (tembiricha inokanganisa hardware wachi yekushanda).

Kunyatsojeka pakati pemichina miviri yakawiriraniswa pamusoro peInternet mamillisecond mashoma; paLAN, iko kurongeka kunowanzoita makumi emamicroseconds. Iine chitambi chenguva yehardware kana wachi yereferensi yehardware, kunyatsoita isingasviki mamicroseconds kunogona kuitika.

Zvirongwa zviviri zvinosanganisirwa muchrony, chronyd idhimoni rinogona kutangwa panguva yebhutsu, uye chronyc chirongwa chekuraira mutsara chinogona kushandiswa kutarisa chrony pakuita uye kushandura akasiyana siyana ekushanda paramita ichiri kushanda.

Huru hutsva maficha eChrony 4.2

Mune iyi vhezheni itsva yeChrony 4.2 akawedzera tsigiro yekuedza ye munda unowedzera kugona kweprotocol NTPv4 uye inoshandiswa kuvandudza kugadzikana kwenguva, pamwe nekuderedza kunonoka uye kukosha kupararira.

Izvo zvinotaurwa zvakare mukuzivisa kuti yakawedzera tsigiro yekuyedza yekuendesa mberi kweNTP nezve Precision Time Protocol (PTP).

Zvakare mune sevha collation mode izvi zvakagadziridzwa kuvandudza kuvimbika, mukuwedzera pakuwedzera collation statistics kune server statistics report.

Kuitwa kwe NTS inowedzera tsigiro yeAES-CMAC encryption algorithm uye kugona kushandisa GnuTLS hashi mabasa.

Chimwe chitsva chinomira pachena ndeche kuenderana neSolaris inoshanda nharaunda, sezviri muiyi vhezheni itsva yakashandurwa sereferenzi yeIllumos purojekiti, iyo inoenderera mberi nekushandura kernel, networking stack, mafaira masisitimu, vatyairi, maraibhurari, uye musimboti seti yeOpenSolaris system utilities. Kune Illumos, yakashandisa kudzima kernel wachi marongero.

Yeimwe shanduko zvinomira mushanduro iyi nyowani:

  • Rutsigiro rwakavandudzwa rwevatengi vakawanda kuseri kwemuturikiri wekero imwechete (NAT).
  • Yakagadziridzwa sisitimu yekufona sefa zvichibva pane seccomp michina.

Finalmente, kana iwe uchifarira kuziva zvakawanda nezvazvo yeiyi vhezheni nyowani yeChrony 4.2 unogona kutarisa iwo maficha Mune inotevera chinongedzo.

Maitiro ekuisa Chrony 4.2 paLinux?

Kune avo vanofarira kukwanisa kuisa iyi yekushandisa pane yavo system, vanogona kuzviita nekutevera mirairo yatinogovera pazasi.

Kana iwe uri mushandisi weDebian, Ubuntu kana chero chinobva pane izvi, unogona kuita yekumisikidza nekuvhura terminal uye nekunyora murairo unotevera mairi:

sudo apt install chrony

Zvino kana iwe uri mushandisi weCentOS, RHEL kana chero kugovera kunoenderana neizvi, murairo wekushandisa ndeuyu unotevera:
sudo yum -y install chrony

Munyaya yeavo vari vashandisi veFedora, iyo yekushandisa inogona kuiswa nekunyora:
sudo dnf -y install chrony

Ipo kune avo vari vashandisi veArch Linux, Manjaro, Arco Linux kana chero kumwe kugovera kwakavakirwa paArch Linux, vanogona kuisa ne:

sudo pacman -S chrony


Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira iyo data: Miguel Ángel Gatón
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako