Kwiintsuku ezimbalwa ezidlulileyo i ukukhutshwa kwenguqulelo entsha yeprojekthi yeChrony 4.2eyiphi ibonelela ngophumezo oluzimeleyo lomxumi we-NTP kunye nomncedisi esetyenziselwa ukulungelelanisa ixesha elichanekileyo kwiintlobo ezahlukeneyo zokusasazwa kweLinux, kuquka iFedora, Ubuntu, SUSE / openSUSE, kunye neRHEL / CentOS.
Inkqubo ixhasa iinkcukacha ze-NTPv4 (RFC 5905) kunye ne-NTS (i-Network Time Security) protocol, esebenzisa i-Public Key Infrastructure Elements (PKI) kwaye yenza ukusetyenziswa kwe-TLS kunye ne-Encryption eQinisekisiweyo nge-Associated Data (AEAD) yokukhusela i-cryptographic yexesha kunye nokuvumelanisa.
Malunga ne-Chrony 4.2
Ukufumana idatha yexesha elichanekileyo, zombini iiseva ze-NTP zangaphandle kunye neewotshi zereferensi zingasetyenziswa, umzekelo, ngokusekelwe kubamkeli beGPS, xa usebenzisa ukuchaneka okunokuthi kuphunyezwe kwinqanaba lamaqhezu e-microsecond.
Le projekthi Ekuqaleni yayiyilelwe ukusebenza ngokufanelekileyo kwindawo engazinzanga, kubandakanywa amanethiwekhi angathembekiyo kunye noxhumo olunqanyuliweyo, i-latency ephezulu kunye nokulahleka kwepakethi, ukusebenza kumatshini obonakalayo, kunye neenkqubo ezinokushisa okuhlukeneyo (ubushushu buchaphazela ukusebenza kwewashi ye-hardware).
Ukuchaneka okuqhelekileyo phakathi koomatshini ababini abadityaniswa kwi-Intanethi ziimilliseconds ezimbalwa; kwi-LAN, ukuchaneka kudla ngokuba ngamashumi amasekhondi amancinci. Ngesitampu sexesha sehardware okanye iwotshi yereferensi yehardware, ukuchaneka okungaphantsi kwee-microseconds kunokwenzeka.
Iiprogram ezimbini zibandakanyiwe kwi-chrony, i-chronyd yidaemon enokuthi iqalwe ngexesha lokuqalisa, kwaye i-chronyc yinkqubo yojongano lomgca womyalelo enokuthi isetyenziswe ukubeka iliso kwi-chrony yokusebenza kunye nokutshintsha iiparameters zokusebenza ezahlukeneyo ngelixa iqhuba.
Iimpawu ezintsha eziphambili zeChrony 4.2
Kolu guqulelo lutsha lweChrony 4.2 yongeza inkxaso yovavanyo ye intsimi eyandisa ubunakho beprotocol NTPv4 kwaye isetyenziselwa ukuphucula ukuzinza kwexesha, kunye nokunciphisa ukulibaziseka kunye nokusasazeka kwexabiso.
Kukwakhankanyiwe nakwisibhengezo sokuba yongeza inkxaso yovavanyo logqithiso lwe-NTP Malunga neProtocol yeXesha lokuChaneka (PTP).
Kwakhona kwimodi yokudibanisa iseva oku kuye kwaphuculwa ukuphucula ukuthembeka, ngaphezu kokongeza izibalo zokudibanisa kwingxelo yeenkcukacha zomncedisi.
Ukuphunyezwa kwe I-NTS yongeza inkxaso ye-algorithm ye-encryption ye-AES-CMAC kunye nokukwazi ukusebenzisa imisebenzi ye-GnuTLS hash.
Enye into entsha ebalaseleyo yi ukuhambelana nendawo yokusebenza yeSolaris, njengoko kule nguqulo intsha iguqulelwe njengesalathiso seprojekthi ye-Illumos, eqhubeka nokuvelisa i-kernel, istaki sothungelwano, iinkqubo zefayile, abaqhubi, amathala eencwadi, kunye neseti engundoqo yenkqubo ye-OpenSolaris eziluncedo. Kwi-Illumos, iphumeze ukuvala useto lwewotshi ye-kernel.
Olunye utshintsho evelele kule nguqulo intsha:
- Inkxaso ephuculweyo yabathengi abaninzi ngasemva komguquleli wedilesi enye (NAT).
- Isihluzo sefowuni esihlaziyiweyo esekwe kwindlela ye-seccomp.
Gqibela, ukuba unomdla wokwazi okungakumbi ngayo kolu guqulelo lutsha lweChrony 4.2 ungajonga iinkcukacha Kule khonkco ilandelayo.
Uyifaka njani iChrony 4.2 kwiLinux?
Kwabo banomdla wokukwazi ukufaka olu ncedo kwinkqubo yabo, banokukwenza oko ngokulandela imiyalelo esabelana ngayo ngezantsi.
Ukuba ungumsebenzisi weDebian, Ubuntu okanye nayiphi na enye into ephuma kwezi, ungayifaka ngokuvula i-terminal kwaye uchwetheze lo myalelo ulandelayo kuyo:
sudo apt install chrony
Ngoku ukuba ungumsebenzisi we-CentOS, i-RHEL okanye naluphi na unikezelo olusekwe kwezi, umyalelo wokusetyenziswa ngulo ulandelayo:
sudo yum -y install chrony
Kwimeko yabo bangabasebenzisi beFedora, into eluncedo inokufakwa ngokuchwetheza:
sudo dnf -y install chrony
Ngelixa abo bangabasebenzisi beArch Linux, Manjaro, Arco Linux okanye naluphi na olunye usasazo olusekwe kwiArch Linux, banokufaka nge:
sudo pacman -S chrony