TMAegisBeta
更多 cockroachdb 规则

CockroachDB

TMA-COCKROACHDB-2.5

Disable Linux Memory Swapping to Prevent Performance and Stability Issues

中级别 1自动化cockroachdb

说明

For production CockroachDB deployments on Linux VMs or bare-metal, it is a critical requirement to disable Linux memory swapping or ensure the system has adequate RAM to prevent swap usage. Swapping database memory pages to slow disk I/O introduces severe and unpredictable latency, compromising the database's performance and stability. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Passes when /proc/swaps lists no active swap device. Also confirm at least 4 GiB RAM per vCPU and that --cache plus 2x --max-sql-memory stays below 80% of RAM.

检查方式

审计方法: Shell 命令

shell
[ -r /proc/swaps ] || exit 1; awk 'NR > 1 {n++} END {print n+0}' /proc/swaps
预期输出
0

修复方式

修复方法: 操作指南或基础设施补丁

swapoff -a, remove swap entries from /etc/fstab (and set vm.swappiness=0), and size RAM to at least 4 GiB per vCPU.

属性

操作系统
任意
标签
cockroachdbos
参考
CIS CockroachDB v25.x Benchmark v1.0.0 - 2.5 Disable Linux Memory Swapping to Prevent Performance and Stability Issues

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell
tmaegis scan --target cockroachdb