131

I have dockers running on Linode servers. At times, I see that the time is not right on the dockers. Currently I have changed the run script in every docker to include the following lines of code.

yum install -y ntp
service ntpd stop
ntpdate pool.ntp.org

What I would ideally like to do however is that the docker should sync time with the host. Is there a way to do this?

Ranjith Ramachandra
  • 10,399
  • 14
  • 59
  • 96
  • 1
    possible duplicate of [Will docker container auto sync time with the host machine?](http://stackoverflow.com/questions/22800624/will-docker-container-auto-sync-time-with-the-host-machine) – Ben Whaley Jul 03 '14 at 16:50
  • The container will use the same time as the host. See [this Q&A](http://stackoverflow.com/questions/22800624/will-docker-container-auto-sync-time-with-the-host-machine) with an answer from one of the Docker core developers. – Ben Whaley Jul 03 '14 at 16:51
  • This is a definite duplicate question, but the answer to even the other question is talking about time zone which I am not really bothered about. The comment to the answer makes it clear that the clock drift does not occur as the docker and host use the same clock. Thanks Ben for pointing it out. – Ranjith Ramachandra Jul 04 '14 at 06:33
  • 12
    **WARNING**: there is some confusion about what a ***host*** is. On operating systems other than linux and Windows 10+ with linux subsystem, the docker machine (the host) is actually a virtual machine. When the docker host is not the same machine as the one you're running the `docker` commands on, you may see time skew, and things like mounting volumes won't work as you might expect. This also happens when you set up a remote docker machine, e.g. on DigitalOcean. – Codebling Jan 02 '19 at 22:05

22 Answers22

123

The source for this answer is the comment to the answer at: Will docker container auto sync time with the host machine?

After looking at the answer, I realized that there is no way a clock drift will occur on the docker container. Docker uses the same clock as the host and the docker cannot change it. It means that doing an ntpdate inside the docker does not work.

The correct thing to do is to update the host time using ntpdate

As far as syncing timezones is concerned, -v /etc/localtime:/etc/localtime:ro works.

Ranjith Ramachandra
  • 10,399
  • 14
  • 59
  • 96
  • 6
    Tell me how that can be? If the docket uses the same clock as the system. how can the docker clock differ from the host. If a clock drift occurs, it will happen on the docker's host machine which is where clock drift needs fixing. I will be interested to know if I am wrong. – Ranjith Ramachandra Nov 04 '14 at 07:37
  • 11
    When using Docker on a Mac with boot2docker, the boot2docker VM may lose time. Docker remains in-sync with its host, but its host provides the wrong time. Rebooting the VM is the simplest fix for this. – Nathaniel Waisbrot Nov 18 '14 at 02:29
  • 60
    That is a totally different issue where the VM looses its time. Technically, docker is still in sync with its host which is the VM. – Ranjith Ramachandra Nov 18 '14 at 04:42
  • @Nathaniel Can you please tell me how you reboot the VM? I'm experiencing a timezone problem - I'm using a Mac and Oracle's VM Virtualbox Manager. At the moment I have InfluxDB in a docker and the timezone is not UTC, so all my data in the db is of yesterday although collected today -_- – ISJ Dec 03 '14 at 16:20
  • 3
    @ISJ: `boot2docker restart` Or if you run your own VM you can `ntpdate` there. – Nathaniel Waisbrot Dec 04 '14 at 18:51
  • 1
    see https://github.com/boot2docker/boot2docker/pull/661 for a purported fix/mitigation – Max Gasner Jan 30 '15 at 21:22
  • 1
    I'm sill having this issue without boot2docker VM (Docker for Mac 1.12), even after restarting the container and Docker itself. – Ricardo Stuven Aug 24 '16 at 17:53
  • 7
    I'm on Windows. Host machine time is 15:06, container time is 18:41... wtf – willem Dec 18 '18 at 13:06
  • 1
    For those still confused (@willem), this answer assumes that the docker host is the same machine that the docker command is running on, which is often not the case. See [my comment](https://stackoverflow.com/questions/24551592/how-to-make-sure-dockers-time-syncs-with-that-of-the-host#comment94864612_24551592) for more info. – Codebling Jan 02 '19 at 22:08
67

You can add your local files (/etc/timezone and /etc/localtime) as volume in your Docker container.

Update your docker-compose.yml with the following lines.

volumes:
    - "/etc/timezone:/etc/timezone:ro"
    - "/etc/localtime:/etc/localtime:ro"

Now the container time is the same as on your host.

Pang
  • 9,564
  • 146
  • 81
  • 122
Y4roc
  • 1,066
  • 8
  • 12
49

This will reset the time in the docker server:

docker run --rm --privileged alpine hwclock -s

Next time you create a container the clock should be correct.

Source: https://github.com/docker/for-mac/issues/2076#issuecomment-353749995

cahen
  • 15,807
  • 13
  • 47
  • 78
40

If you are using boot2docker and ntp doesn't work inside the docker VM (you are behind a proxy which does not forward ntp packets) but your host is time-synced, you can run the following from your host:

docker-machine ssh default "sudo date -u $(date -u +%m%d%H%M%Y)"

This way you are sending your machine's current time (in UTC timezone) as a string to set the docker VM time using date (again in UTC timezone).

NOTE: in Windows, inside a bash shell (from the msys git), use:

docker-machine.exe ssh default "sudo date -u $(date -u +%m%d%H%M%Y)"
gvlx
  • 688
  • 5
  • 8
  • Perfect! That was exactly my problem and it fixes it instantly without needing to reboot docker-machine. – qwertzguy Jun 23 '16 at 00:18
  • 1
    Is it possible to set the seconds? I tried adding %S but I get invalid time – Sakib Aug 16 '16 at 20:45
  • @Sakib, the `date` command is only accepts the format `MMDDhhmm[[CC]YY][.ss]` to set the date, so to add seconds, you need to put them at the end of the string like this: `+%m%d%H%M%Y.%S`. – gvlx Oct 11 '16 at 15:36
31

This is what worked for me with a Fedora 20 host. I ran a container using:

docker run -v /etc/localtime:/etc/localtime:ro -i -t mattdm/fedora /bin/bash

Initially /etc/localtime was a soft link to /usr/share/zoneinfo/Asia/Kolkata which Indian Standard Time. Executing date inside the container showed me same time as that on the host. I exited from the shell and stopped the container using docker stop <container-id>.

Next, I removed this file and made it link to /usr/share/zoneinfo/Singapore for testing purpose. Host time was set to Singapore time zone. And then did docker start <container-id>. Then accessed its shell again using nsenter and found that time was now set to Singapore time zone.

docker start <container-id>
docker inspect -f {{.State.Pid}} <container-id>
nsenter -m -u -i -n -p -t <PID> /bin/bash

So the key here is to use -v /etc/localtime:/etc/localtime:ro when you run the container first time. I found it on this link.

Hope it helps.

Dharmit
  • 5,498
  • 2
  • 27
  • 30
16

This easy solution fixed our time sync issue for the docker kernel in WSL2.

Open up PowerShell in Windows and run this command to resync the clock.

wsl -d docker-desktop -e /sbin/hwclock -s

You can then test it using

docker run -it alpine date

Reference: https://github.com/docker/for-win/issues/10347#issuecomment-776580765

12

I have the following in the compose file

volumes:
  - "/etc/timezone:/etc/timezone:ro"
  - "/etc/localtime:/etc/localtime:ro"

Then all good in Gerrit docker with its replication_log set with correct timestamp.

Pang
  • 9,564
  • 146
  • 81
  • 122
j3ffyang
  • 1,049
  • 12
  • 12
11

If you're using docker-machine, the virtual machines can drift. To update the clock on the virtual machine without restarting run:

docker-machine ssh <machine-name|default>
sudo ntpclient -s -h pool.ntp.org

This will update the clock on the virtual machine using NTP and then all the containers launched will have the correct date.

lukecampbell
  • 14,728
  • 4
  • 34
  • 32
  • The command worked and it updated the time. However, the time started drifting again and I had to run the command again. How to make it sync automatically inside the docker host? – chitti Jan 01 '17 at 07:10
  • for me, I needed to restart docker-machine - `docker-machine restart` then `eval "$(docker-machine env default)"` and that fixed the time difference. – Silas Palmer Apr 28 '22 at 01:29
10

I was facing a time offset of -1hour and 4min

Restarting Docker itself fixed the issue for me.

To set the timezone in general:

  1. ssh into your container: docker exec -it my_website_name bash

  2. run dpkg-reconfigure tzdata

  3. run date
Stefan
  • 8,456
  • 3
  • 29
  • 38
  • This worked for me from the console on macOS High Sierra 10.13.6 (17G65) using [docker-compose](https://github.com/docker/compose): ```docker-compose exec bundle exec dpkg-reconfigure tzdata``` – Zack Morris Nov 30 '18 at 00:18
10

docker-compose usage:

Add /etc/localtime:/etc/localtime:ro to the volumes attribute:

version: '3'

services:
  a-service:
      image: service-name
      container_name: container-name
      volumes:
        - /etc/localtime:/etc/localtime:ro
Benyamin Jafari
  • 27,880
  • 26
  • 135
  • 150
9

It appears there can by time drift if you're using Docker Machine, as this response suggests: https://stackoverflow.com/a/26454059/105562 , due to VirtualBox.

Quick and easy fix is to just restart your VM:

docker-machine restart default
Community
  • 1
  • 1
Travis Reeder
  • 38,611
  • 12
  • 87
  • 87
  • 1
    in docker windows was no default machine, i restarted the daemon over the reset tab in the docker config program shipped with docker windows, after that the time was ok – wutzebaer Sep 13 '16 at 20:14
7

Windows users:

The solution is very simple. Simply open a powershell prompt and enter:

docker run --privileged --rm alpine date -s "$(Get-Date ([datetime]::UtcNow) -UFormat "+%Y-%m-%d %H:%M:%S")"

To check that it works, run the command:

docker run --rm -it alpine date


My solution is inspired by something I found in docker forum thread. Anyways, it was the only solution that worked for me on docker desktop, except for restarting my machine (which also works). Here's a link to the original thread: https://forums.docker.com/t/syncing-clock-with-host/10432/23

The difference between the thread answer and mine is that mine converts the time to UTC time, which is necessary for e.g. AWS. Otherwise, the original answer from the forum looks like this:

docker run --privileged --rm alpine date -s "$(date -u "+%Y-%m-%d %H:%M:%S")"

Andreas Forslöw
  • 2,220
  • 23
  • 32
  • 1
    It might be worth noting that `alpine` can be substituted with the image you are having trouble with, and also, for my situation, I had to add `--user=root` to my command to make it work. This solved it for me though. So thanks! – dgo Aug 25 '22 at 03:05
6

For docker on macOS, you can use docker-time-sync-agent. It works for me.

cranehuang
  • 465
  • 1
  • 5
  • 11
5

With docker for windows I had to tick

MobyLinuxVM > Settings > Integration Services > Time synchronization 

in Hyper-V manager and it worked

zx485
  • 28,498
  • 28
  • 50
  • 59
C12Z
  • 148
  • 1
  • 7
3

Although this is not a general solution for every host, someone may find it useful. If you know where you are based (UK for me) then look at tianon's answer here.

FROM alpine:3.6
RUN apk add --no-cache tzdata
ENV TZ Europe/London

This is what I added to my Dockerfile ^ and the timezone problem was fixed.

batristio
  • 150
  • 3
  • 6
2

Docker Usage

Here's a complete example which builds a docker image for a go app in a multistage build. It shows how to include the timezone in your image.

FROM golang:latest as builder

WORKDIR /app

ENV GO111MODULE=on \
    CGO_ENABLED=0 \
    GOOS=linux \
    GOARCH=amd64

COPY go.mod .
COPY go.sum .

RUN go mod download

COPY . .

RUN go build -a -installsuffix cgo -ldflags '-extldflags "-static"' -o main

### Certs
FROM alpine:latest as locals

RUN apk --update --no-cache add ca-certificates

RUN apk add --no-cache tzdata

### App
FROM scratch 

WORKDIR /root/

COPY --from=locals /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt

COPY --from=builder app/main .

COPY --from=builder app/templates ./templates

COPY --from=locals /usr/share/zoneinfo /usr/share/zoneinfo

ENV TZ=Asia/Singapore

EXPOSE 8000

CMD ["./main"]
markhorrocks
  • 1,199
  • 19
  • 82
  • 151
2

For me, restarting Docker Desktop did not help. Shutting down Win10 and start it again, it did help.

Csongor Halmai
  • 3,239
  • 29
  • 30
2

I saw this on windows, launching Prometheus from docker-compose. I had a 15 hour time drift.

If you are running Docker Desktop on WSL, you can try running wsl --shutdown from a powershell prompt. Docker Desktop should restart, and you can try running your docker container again.

Worked for me, and I didn't have to restart.

mgarde
  • 693
  • 1
  • 5
  • 5
  • this was the right answer to my problem. my machine was already perfectly synced with worldclocks but my docker container had about 50 seconds difference. the `wsl --shutdown` helped to force docker to pickup the right time. – SeriousM May 27 '21 at 18:33
1

I've discovered that if your computer goes to sleep then the docker container goes out of sync.

https://forums.docker.com/t/time-in-container-is-out-of-sync/16566

I have made a post about it here Certificate always expires 5 days ago in Docker

Archmede
  • 1,592
  • 2
  • 20
  • 37
0

Enabling Hyper-V in Windows Features solved the problem: Windows Features

0

For whatever reason none of these answers solved my problem.

It had nothing to do with the docker date/time for the images I was creating. It had to do with my local WSL date time.

Once I ran sudo ntpdate-debian everything worked.

If you don't have ntp just install it and run the command. If you aren't using debian then you probably won't have the shell script ntpdate-debian, but you can use ntpd -gq as well. Basically just update the date for your main WSL distro.

Goddard
  • 2,863
  • 31
  • 37
0

This code worked for me

docker run -e TZ="$(cat /etc/timezone)" myimage
Luvias
  • 563
  • 1
  • 7
  • 19