Ezinsukwini ezimbalwa ezedlule kwethulwa inguqulo entsha yephrojekthi ye-Chrony 4.2, okuyinto inikeza ukuqaliswa okuzimele kweklayenti le-NTP neseva esetshenziselwa ukuvumelanisa isikhathi esiqondile ezinhlobonhlobo zokusabalalisa kwe-Linux, okuhlanganisa i-Fedora, Ubuntu, i-SUSE / i-openSUSE, ne-RHEL / CentOS.
Uhlelo isekela ukucaciswa kwe-NTPv4 (RFC 5905) kanye nephrothokholi ye-NTS (Network Time Security), esebenzisa i-Public Key Infrastructure Elements (PKI) futhi ivumela ukusetshenziswa kwe-TLS kanye Nokubethela Okuqinisekisiwe Ngedatha Ehambisanayo (AEAD) ukuze kuvikelwe isikhathi nge-cryptographic nokuvumelanisa.
Mayelana ne-Chrony 4.2
Ukuze uthole idatha yesikhathi esiqondile, womabili amaseva e-NTP angaphandle namawashi okubhekisela angasetshenziswa, isibonelo, ngokusekelwe kubamukeli be-GPS, uma usebenzisa ukuthi yikuphi ukunemba okungafinyelelwa ezingeni lamafrakshini ama-microsecond.
Le phrojekthi ekuqaleni yayiklanyelwe ukusebenza kahle ezindaweni ezingazinzile, okuhlanganisa amanethiwekhi angathembekile anoxhumo olunqanyuliwe, ukubambezeleka okuphezulu nokulahlekelwa kwephakethe, ukusebenza emishinini ebonakalayo, namasistimu anamazinga okushisa ahlukahlukene (izinga lokushisa lithinta ukusebenza kwewashi lehadiwe).
Ukunemba okujwayelekile phakathi kwemishini emibili evumelaniswe nge-inthanethi amamillisecond ambalwa; ku-LAN, ukunemba ngokuvamile kungamashumi ama-microseconds. Ngesitembu sesikhathi sezingxenyekazi zekhompyutha noma iwashi lereferensi yehadiwe, ukunemba okungaphansi kwama-microsecond kungenzeka.
Izinhlelo ezimbili zifakiwe ku-chrony, i-chronyd iyi-daemon engaqalwa ngesikhathi sokuqalisa, futhi i-chronyc iwuhlelo lokusebenzisa umugqa womyalo olungasetshenziswa ukuqapha ukusebenza kwe-chrony nokushintsha amapharamitha wokusebenza ahlukahlukene ngenkathi isebenza.
Izici ezintsha eziyinhloko ze-Chrony 4.2
Kule nguqulo entsha ye-Chrony 4.2 wengeze usekelo lokuhlola lwe inkambu enweba amandla ephrothokholi I-NTPv4 futhi isetshenziselwa ukuthuthukisa ukuzinza kwesikhathi, kanye nokunciphisa ukubambezeleka nokusabalala kwenani.
Kuyakhulunywa futhi esimemezelweni sokuthi wengeze usekelo lokuhlola lokudlulisela phambili i-NTP mayelana ne-Precision Time Protocol (PTP).
Futhi kumodi yokuhlanganisa iseva lokhu kuthuthukisiwe ukuze kuthuthukiswe ukwethembeka, ngaphezu kokwengeza izibalo zokuhlanganisa embikweni wezibalo zeseva.
Ukuqaliswa kwe- I-NTS yengeza usekelo lwe-algorithm yokubethela ye-AES-CMAC kanye nekhono lokusebenzisa imisebenzi ye-GnuTLS hashi.
Enye into entsha egqamayo yile ukuhambisana nendawo yokusebenza yeSolaris, njengoba kule nguqulo entsha ihunyushwe njengereferensi yephrojekthi ye-Illumos, eqhubeka nokushintsha i-kernel, isitaki senethiwekhi, izinhlelo zamafayela, abashayeli, imitapo yolwazi, kanye nesethi eyinhloko yezinsiza ze-OpenSolaris. Ku-Illumos, isebenzise ukukhubaza izilungiselelo zewashi le-kernel.
Kwezinye izinguquko okugqamile kule nguqulo entsha:
- Ukusekelwa okuthuthukisiwe kwamaklayenti amaningi ngemuva komhumushi wekheli elilodwa (NAT).
- Kubuyekezwe isihlungi sekholi yesistimu ngokusekelwe kumshini we-seccomp.
Okokugcina, uma unentshisekelo yokwazi okwengeziwe ngayo yale nguqulo entsha ye-Chrony 4.2 ungabheka imininingwane Kulesi sixhumanisi esilandelayo.
Ungayifaka kanjani i-Chrony 4.2 ku-Linux?
Kulabo abanentshisekelo yokukwazi ukufaka lolu hlelo kusistimu yabo, bangakwenza lokho ngokulandela imiyalelo esabelana ngayo ngezansi.
Uma ungumsebenzisi we-Debian, Ubuntu nanoma yikuphi okususelwe kulokhu, ungafaka ngokuvula itheminali bese uthayipha umyalo olandelayo kuyo:
sudo apt install chrony
Manje uma ungumsebenzisi we-CentOS, RHEL nanoma yikuphi ukusatshalaliswa okusekelwe kulokhu, umyalo ongawusebenzisa yilokhu okulandelayo:
sudo yum -y install chrony
Endabeni yalabo abangabasebenzisi be-Fedora, insiza ingafakwa ngokuthayipha:
sudo dnf -y install chrony
Ngenkathi kulabo abangabasebenzisi be-Arch Linux, Manjaro, Arco Linux nanoma yikuphi okunye ukusatshalaliswa okusekelwe ku-Arch Linux, bangafaka nge:
sudo pacman -S chrony