chrony or ntpd on every Lattice host and the database. TZ=UTC.
- DHCP: alert if offset > 500ms
- AD GSS-TSIG: fails opaquely beyond ~5 minutes vs DCs
Symptoms of drift: mass expiry, NOTAUTH on GSS, Patroni flap.
chronyc trackingon dhcpd, worker, writer.- Fix NTP before rewriting leases.
- Do not raise
LATTICE_QUARANTINE_TTLto hide clock bugs.
A host that jumped forward will expire offered/leased rows; that is correct.