[Users] NTP Server in einer virtuellen Umgebung - SOLVED

Daniel Bauer mlist at dsb-gmbh.de
Mon Dec 12 13:54:40 EST 2011


From: <lst_hoe02 at kwsoft.de>
> Zitat von Daniel Bauer <mlist at dsb-gmbh.de>:
>
>> From: <lst_hoe02 at kwsoft.de>
>>> Zitat von Daniel Pittman <daniel at rimspace.net>:
>>>
>>>> On Sun, Dec 11, 2011 at 07:09, Daniel Bauer <mlist at dsb-gmbh.de>
>>>> wrote:
>>>>
>>>>> I've a VPS for my internal LAN, which should also be used as a NTP
>>>>> server.
>>>>> The HN has already syncronized the time by de.pool.ntp.org, so the
>>>>> time is
>>>>> also ok inside the VPS.
>>>>> The NTP server inside the VPS stalled, ntpq -p shows:
>>>>
>>>> You don't need NTP inside the container, just on the HN.  The VE
>>>> can't
>>>> set the time anyhow.
>>>
>>> Not really true. You need special capabilities assigned to the VE to
>>> let it manage your system clock. So if you need ntp inside the VE 
>>> you
>>> should do something like "vzctl set <VEID> --capability 
>>> sys_time:on",
>>> install ntp inside the VE and deinstall it on the HN.
>>
>> But that's not what I want.
>>
>> I want the HN to be a NTP client, so that all (HN + VE) have a valid
>> time.
>> This works already.
>>
>> I want the VE to be a NTP server for the local LAN, without beeing a
>> NTP Client.
>> That doesn't work.
>
> NTP by default only works as server if it has a valid timesource. By
> default it does not use the "local clock" because its unreliable. On
> the other hand NTP always try to adjust the local clock if it has a
> valid timesource. This does not work in a VE if you don't set the
> capability to adjust the clock, NTP will even run as "root" if it is
> not able to adjust the local clock with the intended user.
>
> If you insist on your network design your options are:
> - Let the VE NTP get the time from the HN and let it run as root on 
> the
> VE
> - Try to hack NTP use the local clock as timesource and not try to
> update

the solution was not to take localhost, but
> server 127.127.1.0
> fudge 127.127.1.0 stratum 12
now it works.

Thanks a lot
Daniel 



More information about the Users mailing list