Host preparation and runtime baseline

Host baseline

Linux preparation should verify package compatibility, clock sync, user permissions, and file system paths before service install.

Preflight checklist

• Clock NTP and timezone policy are aligned with log correlation.
• Service account has minimum privileges and no shell requirements.
• Directory layout and log directories include rotation policy.

Stability recommendation

Prefer immutable host images and versioned configuration packages. Avoid manual edits during live operations unless flagged by change control.

Reference baseline checks

timedatectl status | grep "System clock synchronized"
ss -lunpt | grep :443
journalctl -u chronyd -n 40

• Clock sync and logging retention must be checked before service startup.
• Host directories for artifacts and state must use explicit owner and mode.