Ensure clocks are synchronized on all nodes

中级别 1自动化cassandra

说明

Enabling Network Time Protocol (NTP), or some equivalent way, to keep clocks on all nodes in sync is critical. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Uses timedatectl (systemd); passes when the kernel clock is reported as NTP-synchronised by chronyd, ntpd or systemd-timesyncd. Compare offsets across nodes as well.

检查方式

审计方法: Shell 命令

shell

out=$(timedatectl show -p NTPSynchronized --value 2>/dev/null) || exit 1; printf '%s\n' "$out"

预期输出: yes

修复方式

修复方法: 操作指南或基础设施补丁

Install and enable chrony (or ntpd) on every node, pointing all nodes at the same time sources: systemctl enable --now chronyd.

属性

操作系统: 任意
标签: cassandratime
参考: CIS Apache Cassandra 5.0 Benchmark v1.1.0 - 1.6 Ensure clocks are synchronized on all nodes

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target cassandra