TMA-YUGABYTEDB-1.7
Ensure clocks are synchronized on all nodes
MediumLevel 2Automatedyugabytedb
Description
Enabling Network Time Protocol (NTP), or some equivalent way, to keep clocks on all nodes in sync is critical. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Uses timedatectl (systemd); passes when the clock is reported as NTP-synchronised by chronyd, ntpd or systemd-timesyncd.
How it is checked
Audit method: Shell command
shell
out=$(timedatectl show -p NTPSynchronized --value 2>/dev/null) || exit 1; printf '%s\n' "$out"- Expected output
yes
How it is fixed
Fix method: Guidance or infrastructure patch
Install and enable chrony (or ntpd) on every node in the cluster, pointing all nodes at the same time sources: systemctl enable --now chronyd.
Properties
- Operating systems
- Any
- Tags
- yugabytedbtime
- Reference
- CIS YugabyteDB Benchmark v2.0.0 - 1.7 Ensure clocks are synchronized on all nodes
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target yugabytedb --level 2