Apache Cassandra
TMA-CASSANDRA-1.6
Ensure clocks are synchronized on all nodes
MediumLevel 1Automatedcassandra
Description
Enabling Network Time Protocol (NTP), or some equivalent way, to keep clocks on all nodes in sync is critical. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Uses timedatectl (systemd); passes when the kernel clock is reported as NTP-synchronised by chronyd, ntpd or systemd-timesyncd. Compare offsets across nodes as well.
How it is checked
Audit method: Shell command
shell
out=$(timedatectl show -p NTPSynchronized --value 2>/dev/null) || exit 1; printf '%s\n' "$out"- Expected output
yes
How it is fixed
Fix method: Guidance or infrastructure patch
Install and enable chrony (or ntpd) on every node, pointing all nodes at the same time sources: systemctl enable --now chronyd.
Properties
- Operating systems
- Any
- Tags
- cassandratime
- Reference
- CIS Apache Cassandra 5.0 Benchmark v1.1.0 - 1.6 Ensure clocks are synchronized on all nodes
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target cassandra