MyFault's questions -server

MyFault

Asked: 2016-09-02 23:50:14 +0800 CST

Proxmox system rebooting without any reason? ^@ logged to syslog

1

yesterday my proxmox-server rebooted hard without any reason that I could see.

The logs are showing

Sep  1 15:13:47 example kernel: [4514929.741761] Firewall: *UDP_IN Blocked* IN=vmbr0 OUT= MAC=ff:ff:ff:ff:ff:ff:0c:c4:7a:77:38:28:08:00 SRC=123.123.123.123 DST=255.255.255.255 LEN=173 TOS=0x00 PREC=0x00 TTL=64 ID=47121 DF PROTO=UDP SPT=17500 DPT=17500 LEN=153
^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^$
Sep  1 15:17:50 example systemd-modules-load[817]: Module 'fuse' is builtin
Sep  1 15:17:50 example systemd-modules-load[817]: Inserted module 'vhost_net'
Sep  1 15:17:50 example hdparm[856]: Setting parameters of disc: (none).
Sep  1 15:17:50 example systemd-fsck[1015]: /dev/sda3: Journal wird wiederhergestellt
Sep  1 15:17:50 example systemd-fsck[1015]: /dev/sda3: sauber, 314/62592 Dateien, 40617/250112 Blöcke

As I learned yesterday, the ^@ stands for a NULL byte. But why is it logged? Any explanations for that?

MyFault

Asked: 2016-06-26 09:26:35 +0800 CST

CentOS: After Kernel Update system does not boot (/dev/md2 does not exist)

2

after doing a kernel-update (only via yum update) my centOS 7 (64bit) does no longer boot.

I now booted into rescue-mode and tried to mount /dev/md2 - this worked fine:

Any ideas what I could do here?

MyFault

Asked: 2016-06-12 00:58:22 +0800 CST

SELinux on CentOS7-based LXC?

4

Is there any way to enable SELinux on LXC-based container using proxmox 4.2?

MyFault

Asked: 2016-05-02 00:49:43 +0800 CST

Proxmox: Add IPs from different subnets to LXC-container

1

I am using proxmox 4.1.

If I add IP-addresses to my CentOS-7-LXC I can only do that if this IP is from the same subnet. If I'm using another subnet with another gateway the container is not pingable anymore - I have to remove the IP from the other subnet and reboot the container after that.

The interfaces-configuration of the host node is:

auto lo

iface lo inet loopback


auto vmbr0

iface vmbr0 inet static
address 84.xxx.xxx.x4

netmask 255.255.255.240

gateway 84.xxx.xxx.x1

bridge_ports eth0

bridge_stp off

bridge_fd 0

A more detailed example:

84.xxx.xx1.x4 with gateway 84.xxx.xx1.x1 -> everything is fine

if I add

84.xxx.xx1.x6 with gateway 84.xxx.xx1.x1 -> everything is fine

if I add

84.xxx.xx2.x4 with gateway 84.xxx.xx2.x1 -> all IPs of the container are not responding to incoming PING. Outgoing PING does not work, too.

The problem is not CentOS-related. A debian-lxc-template has the same problems.

MyFault

Asked: 2016-04-30 11:19:55 +0800 CST

SMTP: Received from unknown [xxx.xxx.xxx.xxx] -> but IP does have a valid PTR/RDNS

1

I got the following problem. I got an smtp-relayserver that collects outgoing mails from other servers and checks them (spam assassin).

Now the headers are showing this:

Received: from customerdomain.com (unknown [xxx.xxx.xxx.xxx])
     (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
     (No client certificate requested)
     by relayserver.com (Postfix) with ESMTPS id 1D576101747
     for <[email protected]>; Fri, 29 Apr 2016 21:11:14 +0200 (CEST)
Received: from XYZ (some-isp.com [xx.xx.xx.xx])
     by outgoing-mailserver.com (Postfix) with ESMTPA id C684DAC4F2F
     for < [email protected] >; Fri, 29 Apr 2016 21:11:13 +0200 (CEST)

Okay, fine - my first thought: the IP xxx.xxx.xxx.xxx is missing a RDNS.

But

host xxx.xxx.xxx.xxx
results in
outgoing-mailserver.com

Why is it showing the unknown-tag?

MyFault

Asked: 2016-04-19 07:45:14 +0800 CST

Puppet/Foreman: Nodes are out of sync

2

I got a little problem: I installed puppet agent on some nodes. I'm managing the nodes with foreman.

Now some nodes are "out of sync" until I run puppet agent -t on the node manually.

The service is running on the nodes:

root@node1:/var/log# ps aux | grep puppet
root     10079  0.0  0.0   9240   880 pts/0    R+   17:43   0:00 grep puppet
root     31645  0.0  0.2 196188 36780 ?        Ssl  14:17   0:02 /usr/bin/ruby /usr/bin/puppet agent

root@node1:/var/log# service puppet status
[ ok ] agent is running.

What can I do here?

MyFault

Asked: 2016-04-16 01:21:26 +0800 CST

Can connect via SSH - but not via SFTP? Exit status 127

8

Unfortunately I can not connect via sftp to my VPS:

This is my sshd_config:

# Package generated configuration file
# See the sshd_config(5) manpage for details

# What ports, IPs and protocols we listen for
Port 22
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
#Privilege Separation is turned on for security
UsePrivilegeSeparation yes

# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768

# Logging
SyslogFacility AUTH
LogLevel INFO

# Authentication:
LoginGraceTime 120
PermitRootLogin no
StrictModes yes

RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile  %h/.ssh/authorized_keys

# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
#IgnoreUserKnownHosts yes

# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords no

# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no

# Change to no to disable tunnelled clear text passwords
PasswordAuthentication yes

# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes

# GSSAPI options
GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

X11Forwarding no
X11DisplayOffset 10
PrintMotd yes
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
UseDNS yes

#MaxStartups 10:30:60
Banner no

# Allow setting environment variables
AcceptEnv LANG LC_*

#Subsystem sftp /usr/lib/openssh/sftp-server
Subsystem sftp /usr/lib/openssh/sftp-server
UsePAM yes

AllowUsers [email protected] [email protected] [email protected]

Match User user
    PasswordAuthentication yes

The verbose output of my connection-attempt:

me:~ user$ sftp -v [email protected]
OpenSSH_6.9p1, LibreSSL 2.1.8
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug1: Connecting to example.org [xx.xxx.xx.xx] port 22.
debug1: Connection established.
debug1: identity file /Users/user/.ssh/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /Users/user/.ssh/id_rsa-cert type -1
debug1: identity file /Users/user/.ssh/id_dsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /Users/user/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Users/user/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Users/user/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Users/user/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Users/user/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1
debug1: match: OpenSSH_6.6.1 pat OpenSSH_6.6.1* compat 0x04000000
debug1: Authenticating to example.org:22 as 'user'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client [email protected] <implicit> none
debug1: kex: client->server [email protected] <implicit> none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ssh-rsa SHA256:/RUeBQCA1w0nHUWT2OgLDhy7/bNQy4nWH2IVZatMLw4
debug1: Host 'example.org' is known and matches the RSA host key.
debug1: Found key in /Users/user/.ssh/known_hosts:4
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /Users/user/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 279
debug1: Authentication succeeded (publickey).
Authenticated to example.org ([xx.xxx.xx.xx]:22).
debug1: channel 0: new [client-session]
debug1: Requesting [email protected]
debug1: Entering interactive session.
debug1: Sending environment.
debug1: Sending env LANG = de_DE.UTF-8
debug1: Sending subsystem: sftp
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: client_input_channel_req: channel 0 rtype [email protected] reply 0
debug1: channel 0: free: client-session, nchannels 1
debug1: fd 0 clearing O_NONBLOCK
Transferred: sent 3332, received 2796 bytes, in 0.2 seconds
Bytes per second: sent 18890.9, received 15852.0
debug1: Exit status 127
Connection closed

Any idea how to solve this problem?

MyFault

Asked: 2016-03-28 07:28:50 +0800 CST

Puppet: Error 400 on SERVER: Permission denied

1

I would like to use DOCSF-module (from github). If I try to use it I'm getting this result:

Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': Error 400 on SERVER: Permission denied - /etc/puppet/environments/production/modules/docsf/metadata.json
Error: /File[/var/lib/puppet/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet://puppetmaster.example.com/pluginfacts: Error 400 on SERVER: Permission denied - /etc/puppet/environments/production/modules/docsf/metadata.json
Info: Retrieving plugin
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': Error 400 on SERVER: Permission denied - /etc/puppet/environments/production/modules/docsf/metadata.json
Error: /File[/var/lib/puppet/lib]: Could not evaluate: Could not retrieve file metadata for puppet://puppetmaster.example.com/plugins: Error 400 on SERVER: Permission denied - /etc/puppet/environments/production/modules/docsf/metadata.json
Info: Loading facts
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Permission denied - /etc/puppet/environments/production/modules/docsf/metadata.json on node pp-testexample.com
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run

These are the file-permissions on the module:

-r--r--r--. 1 puppet root  734 24. Jun 2014  checksums.json
drwxrwxr-x. 3 puppet root   19 15. Sep 2015  lib
-r--r--r--. 1 puppet root  651 15. Sep 2015  LICENSE
drwxr-sr-x. 2 puppet root   71 15. Sep 2015  manifests
-r--r--r--. 1 puppet root  792 15. Sep 2015  metadata.json
-r--r--r--. 1 puppet root 2770 15. Sep 2015  README.md
drwxr-xr-x. 2 puppet root   27 15. Sep 2015  spec
drwxr-xr-x. 2 puppet root 4096 15. Sep 2015  templates
drwxr-xr-x. 2 puppet root   20 15. Sep 2015  tests

And this is the tree:

├── checksums.json
├── lib
│   └── facter
│       └── configserver_firewall.rb
├── LICENSE
├── manifests
│   ├── init.pp
│   ├── params.pp
│   ├── postinit.pp
│   └── preinit.pp
├── metadata.json
├── README.md
├── spec
│   └── spec_helper.rb
├── templates
│   ├── conf.maldet.erb
│   ├── csf.allow.erb
│   ├── csf.conf.erb
│   ├── csf.fignore.erb
│   ├── csf.ignore.erb
│   └── csf.pignore.erb
└── tests
    └── init.pp

Any ideas?

MyFault

Asked: 2016-01-14 03:43:56 +0800 CST

Apache: A lot of connections gracefully finishing?

4

at the moment I'm mentioning that a lot of connections are gracefully finishing if I visit my apache2 status-page.

What does that mean and why are they gracefully finishing? Some of them are in this state for 5-10min.

The server uses Apache 2.4 with event-worker and PHP-FPM as PHP-handler.

MyFault

Asked: 2016-01-10 05:14:57 +0800 CST

Debian-Server: Incoming SSH/PING/TELNET/... works - outgoing does not

2

I've mentioned a strange behavior of my linux-system:

After rebooting the system I can connect to it via SSH and the server responses to PING. But the server itself can not ping any other servers.

# ping google.de
^C
#

I also tried pinging 8.8.8.8

# ping 8.8.8.8
^C
#

I also checked IPTables-Firewall:

# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

This is the output of iptables-save:

# Generated by iptables-save v1.4.21 on Sat Jan  9 15:32:05 2016
*mangle
:PREROUTING ACCEPT [195612:29645179]
:INPUT ACCEPT [195139:29597314]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [191509:144973069]
:POSTROUTING ACCEPT [191487:144962209]
COMMIT
# Completed on Sat Jan  9 15:32:05 2016
# Generated by iptables-save v1.4.21 on Sat Jan  9 15:32:05 2016
*nat
:PREROUTING ACCEPT [16150:972249]
:INPUT ACCEPT [15873:943476]
:OUTPUT ACCEPT [2778:195347]
:POSTROUTING ACCEPT [2778:195347]
COMMIT
# Completed on Sat Jan  9 15:32:05 2016
# Generated by iptables-save v1.4.21 on Sat Jan  9 15:32:05 2016
*filter
:INPUT ACCEPT [82916:15824405]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [76735:21176202]
COMMIT
# Completed on Sat Jan  9 15:32:05 2016

This is the traceroute to 8.8.8.8

traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  * * *
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  *^C

And the routing itself:

Kernel-IP-Routentabelle
Ziel            Router          Genmask         Flags Metric Ref    Use Iface
0.0.0.0         85.xx.1.1       0.0.0.0         UG    0      0        0 eth0
85.xx.1.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.3.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.6.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.7.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.12.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.14.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.16.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.17.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.18.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.19.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.21.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.22.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.23.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.24.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.25.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.26.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.27.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.28.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.29.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.30.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
85.xx.31.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.4.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.7.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.9.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.10.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.12.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.13.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.14.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.15.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.16.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.19.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.21.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.23.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.24.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.26.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.27.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.28.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.29.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.30.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.31.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.32.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.33.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.34.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.35.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.36.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.37.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.38.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.39.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.40.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.41.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.43.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.44.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.45.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.46.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.48.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.49.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
89.xxx.50.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
1xx.24.208.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
1xx.24.209.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
1xx.24.210.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0

This is the result of ip addr show

ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 0c:c4:7a:31:49:f8 brd ff:ff:ff:ff:ff:ff
    inet 85.xx.x.246/24 brd 85.xx.x.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet 85.xx.xx.80/24 brd 85.xx.xx.255 scope global eth0:1
       valid_lft forever preferred_lft forever
    inet 193.xx.xxx.203/24 brd 193.xx.xxx.255 scope global eth0:2
       valid_lft forever preferred_lft forever
and so on

The interfaces are UP and running - what could possibly cause this problem?

I monitored the connections via tcpdump: This is the result:

# tcpdump dst 8.8.8.8 -w /tmp/tcpdump
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
^C70 packets captured
70 packets received by filter
0 packets dropped by kernel


listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
15:21:57.484886 IP server.example.com.36115 > 8.8.8.8.domain: 47207+ A? collector.newrelic.com. (40)
15:21:57.484895 IP server.example.com.36115 > 8.8.8.8.domain: 6559+ AAAA? collector.newrelic.com. (40)
15:21:57.873854 IP server.example.com.59617 > 8.8.8.8.domain: 29097+ PTR? 231.201.203.64.in-addr.arpa. (45)
15:21:57.874880 IP server.example.com > 8.8.8.8: ICMP echo request, id 23608, seq 99, length 64
15:21:58.119951 IP server.example.com.56377 > 8.8.8.8.domain: 16236+ PTR? 8.8.8.8.in-addr.arpa. (38)
15:21:58.396881 IP server.example.com.47984 > 8.8.8.8.domain: 58900+ PTR? 52.39.140.95.in-addr.arpa. (43)
15:21:58.882882 IP server.example.com > 8.8.8.8: ICMP echo request, id 23608, seq 100, length 64
15:21:59.794301 IP server.example.com.33657 > 8.8.8.8.domain: 49356+ PTR? 194.94.45.70.in-addr.arpa. (43)
15:21:59.964218 IP server.example.com.44113 > 8.8.8.8.domain: 51976+ PTR? 178.186.148.66.in-addr.arpa. (45)
15:22:00.033621 IP server.example.com.51669 > 8.8.8.8.domain: 46383+ A? 110.208.16.216.ix.dnsbl.manitu.net. (52)
15:22:01.096586 IP server.example.com > 8.8.8.8: ICMP echo request, id 1155, seq 1, length 64
15:22:01.272051 IP server.example.com.50628 > 8.8.8.8.domain: 33444+ A? 221.170.189.113.sbl-xbl.spamhaus.org. (54)
15:22:01.639669 IP server.example.com.48543 > 8.8.8.8.domain: 694+ PTR? 242.40.10.176.in-addr.arpa. (44)
15:22:01.918993 IP server.example.com.60321 > 8.8.8.8.domain: 45439+ A? 11.179.189.5.ix.dnsbl.manitu.net. (50)
15:22:02.098337 IP server.example.com > 8.8.8.8: ICMP echo request, id 1155, seq 2, length 64
15:22:02.546164 IP server.example.com.48905 > 8.8.8.8.domain: 4436+ PTR? 231.218.240.187.in-addr.arpa. (46)
15:22:02.878905 IP server.example.com.59617 > 8.8.8.8.domain: 29097+ PTR? 231.201.203.64.in-addr.arpa. (45)
15:22:03.106976 IP server.example.com > 8.8.8.8: ICMP echo request, id 1155, seq 3, length 64
15:22:03.125014 IP server.example.com.56377 > 8.8.8.8.domain: 16236+ PTR? 8.8.8.8.in-addr.arpa. (38)
15:22:03.444852 IP server.example.com.39858 > 8.8.8.8.domain: 30888+ A? 52.39.140.95.ix.dnsbl.manitu.net. (50)
15:22:04.114892 IP server.example.com > 8.8.8.8: ICMP echo request, id 1155, seq 4, length 64
15:22:04.799409 IP server.example.com.33657 > 8.8.8.8.domain: 49356+ PTR? 194.94.45.70.in-addr.arpa. (43)
15:22:04.969287 IP server.example.com.44113 > 8.8.8.8.domain: 51976+ PTR? 178.186.148.66.in-addr.arpa. (45)
15:22:05.038655 IP server.example.com.51669 > 8.8.8.8.domain: 46383+ A? 110.208.16.216.ix.dnsbl.manitu.net. (52)
15:22:08.146971 IP server.example.com > 8.8.8.8: ICMP echo request, id 1155, seq 8, length 64
15:22:08.449933 IP server.example.com.39858 > 8.8.8.8.domain: 30888+ A? 52.39.140.95.ix.dnsbl.manitu.net. (50)
15:22:09.154943 IP server.example.com > 8.8.8.8: ICMP echo request, id 1155, seq 9, length 64
15:22:09.714225 IP server.example.com.55765 > 8.8.8.8.domain: 3955+ A? 231.201.203.64.ix.dnsbl.manitu.net. (52)
15:22:10.043790 IP server.example.com.59926 > 8.8.8.8.domain: 7570+ A? 110.208.16.216.sbl-xbl.spamhaus.org. (53)

MyFault

Asked: 2016-01-06 05:58:21 +0800 CST

Puppet: Node "default"-content is not pushed to all nodes

2

maybe I do not understand it correctly:

I would like to define some tasks via puppet that are applied on all connected hosts.

This is my site.pp:

node default {

## Add default user ##
        user {  'test':
                ensure          =>      present,
                managehome      =>      true,
                password        =>      '$6$XYZ',
        }

## Create sudoers ##
class   { 'sudo': }

sudo::conf      {
                'test':
                        priority        =>      60,
                        content         =>      "test ALL=(ALL) ALL"
}

## Install bareos client ##
        class   {
                'bareos':
                        manage_client   =>      'true',
        }
}
## Create test-file ##
node 'pp-test' {
        file {  '/tmp/puppet-test':
                ensure          =>      present,
                mode            =>      0644,
                content         =>      "Only test-servers get this file.\n",
        }

        include base-software

        class   {
                'ssh':
                        server_options  =>      {
                                        'Port'                          =>      '2211',
                                        'Protocol'                      =>      '2',
                                        'HostKey'                       =>      '/etc/ssh/ssh_host_rsa_key',
                                        'HostKey'                       =>      '/etc/ssh/ssh_host_dsa_key',
                                        'HostKey'                       =>      '/etc/ssh/ssh_host_ecdsa_key',
                                        'UsePrivilegeSeparation'        =>      'yes',
                                        'KeyRegenerationInterval'       =>      '3600',
                                        'ServerKeyBits'                 =>      '1024',
                                        'SyslogFacility'                =>      'AUTH',
                                        'LogLevel'                      =>      'INFO',
                                        'LoginGraceTime'                =>      '120',
                                        'PermitRootLogin'               =>      'no',
                                        'StrictModes'                   =>      'yes',
                                        'RSAAuthentication'             =>      'yes',
                                        'PubkeyAuthentication'          =>      'yes',
                                        'IgnoreRhosts'                  =>      'yes',
                                        'RhostsRSAAuthentication'       =>      'no',
                                        'HostbasedAuthentication'       =>      'no',
                                        'PermitEmptyPasswords'          =>      'no',
                                        'ChallengeResponseAuthentication'=>     'no',
                                        'PasswordAuthentication'        =>      'yes',
                                        'AllowUsers'                    =>      'test',
                        }
        }
}

Unfortunately the user "test" is not being set up on the test-node pp-test

After reading your comments I created another layout:

profile/
`-- manifests
    |-- backup
    |   |-- client.pp
    |   `-- server.pp
    |-- backup.pp
    `-- base.pp
role/
`-- manifests
    |-- backup.pp
    `-- init.pp

profile/manifests/base.pp contains:

class profile::base {

    ## Add MOTD ##
    class {
        'motd':
            template => '/etc/puppet/modules/motd/templates/motd.erb',
    }

    ## Add default user ##
    user {  'test':
        ensure      =>  'present',
        managehome  =>  'true',
        password    =>  '$6$XYZ',
    }

    ## Create sudoers ##
    class   { 'sudo': }

    sudo::conf  {
        'test':
            priority    =>  '60',
            content     =>  "test ALL=(ALL) ALL"
    }

    ## Install base-software
    include base-software

    ## Configuration of OpenSSH-Server ##
    class   {
        'ssh':
            server_options  =>  {
                    'Port'              =>  '2211',
                    'Protocol'          =>  '2',
                                        'HostKey'               =>      '/etc/ssh/ssh_host_rsa_key',
                                        'HostKey'               =>      '/etc/ssh/ssh_host_dsa_key',
                    'HostKey'           =>  '/etc/ssh/ssh_host_ecdsa_key',
                    'UsePrivilegeSeparation'    =>  'yes', 
                    'KeyRegenerationInterval'   =>  '3600',
                    'ServerKeyBits'         =>  '1024',
                    'SyslogFacility'        =>  'AUTH',
                    'LogLevel'          =>  'INFO',
                    'LoginGraceTime'        =>  '120',
                    'PermitRootLogin'       =>  'no',
                    'StrictModes'           =>  'yes',
                    'RSAAuthentication'     =>  'yes',
                    'PubkeyAuthentication'      =>  'yes',
                    'IgnoreRhosts'          =>  'yes',
                    'RhostsRSAAuthentication'   =>  'no',
                    'HostbasedAuthentication'   =>  'no',
                    'PermitEmptyPasswords'      =>  'no',
                    'ChallengeResponseAuthentication'=> 'no',
                    'PasswordAuthentication'    =>  'yes',
                    'AllowUsers'            =>  'test',
            }
    }
}

Now I created my site.pp as follows:

node default {
        include role::backup::client ##add bacula to all servers
}

node 'pp-test' {
        file {  '/etc/test.txt':
                ensure          =>      present,
                mode            =>      0644,
                content         =>      "Test\n",
        }
  }

node 'backupserver' {
        include role::backup::server
}

Well, the problem persists: As soon as I define pp-test default packages are not installed.

MyFault

Asked: 2015-12-30 09:24:12 +0800 CST

Proxmox/KVM: Can not clone VM

2

I would like to create a clone of a KVM machine - yesterday I was able to create a clone of the same machine within some minutes. Now it takes hours and is still stuck an "0%":

create full clone of drive ide0 (local:100/vm-100-disk-1.raw)
Formatting '/var/lib/vz/images/111/vm-111-disk-1.raw', fmt=raw size=536870912000
transferred: 0 bytes remaining: 536870912000 bytes total: 536870912000 bytes progression: 0.00 %

I wonder why this is the case. The task is running (i restarted it some minutes ago) - http://d.pr/tJn4

Any ideas what is going wrong again?

Edit: Disk I/O is low as the task is not writing any data to hdd (http://d.pr/1furj).

If I trace the process ID which is given in the overview, I'm getting this result:

select(24, [16 19], NULL, NULL, {0, 553078}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

select(24, [16 19], NULL, NULL, {1, 0}) = 0 (Timeout)

If I trace the process 233113 (which is actually working) I'm getting this result:

lseek(7, 49650073600, SEEK_DATA)        = 49650073600

lseek(7, 49650073600, SEEK_HOLE)        = 49650077696

lseek(7, 49650077696, SEEK_DATA)        = 51797557248

lseek(7, 51797557248, SEEK_DATA)        = 51797557248

lseek(7, 51797557248, SEEK_HOLE)        = 51797565440

lseek(7, 51797565440, SEEK_DATA)        = 51797622784

lseek(7, 51797622784, SEEK_DATA)        = 51797622784

lseek(7, 51797622784, SEEK_HOLE)        = 51797630976

lseek(7, 51797630976, SEEK_DATA)        = 51797688320

lseek(7, 51797688320, SEEK_DATA)        = 51797688320

lseek(7, 51797688320, SEEK_HOLE)        = 51801108480

lseek(7, 51801108480, SEEK_DATA)        = 51831242752

lseek(7, 51831242752, SEEK_DATA)        = 51831242752

lseek(7, 51831242752, SEEK_HOLE)        = 51833991168

lseek(7, 51833991168, SEEK_DATA)        = 51931774976

lseek(7, 51931774976, SEEK_DATA)        = 51931774976

lseek(7, 51931774976, SEEK_HOLE)        = 51962368000

lseek(7, 51962368000, SEEK_DATA)        = 51962380288

lseek(7, 51962380288, SEEK_DATA)        = 51962380288

lseek(7, 51962380288, SEEK_HOLE)        = 51963707392

lseek(7, 51963707392, SEEK_DATA)        = 51963756544

lseek(7, 51963756544, SEEK_DATA)        = 51963756544

lseek(7, 51963756544, SEEK_HOLE)        = 51963973632

lseek(7, 51963973632, SEEK_DATA)        = 53945040896

lseek(7, 53945040896, SEEK_DATA)        = 53945040896

lseek(7, 53945040896, SEEK_HOLE)        = 53945049088

lseek(7, 53945049088, SEEK_DATA)        = 53945106432

lseek(7, 53945106432, SEEK_DATA)        = 53945106432

lseek(7, 53945106432, SEEK_HOLE)        = 53945110528

lseek(7, 53945110528, SEEK_DATA)        = 53945171968

lseek(7, 53945171968, SEEK_DATA)        = 53945171968

lseek(7, 53945171968, SEEK_HOLE)        = 53947260928

lseek(7, 53947260928, SEEK_DATA)        = 53978726400

lseek(7, 53978726400, SEEK_DATA)        = 53978726400

lseek(7, 53978726400, SEEK_HOLE)        = 53981294592

lseek(7, 53981294592, SEEK_DATA)        = 54079258624

lseek(7, 54079258624, SEEK_DATA)        = 54079258624

lseek(7, 54079258624, SEEK_HOLE)        = 54096543744

lseek(7, 54096543744, SEEK_DATA)        = 54096560128

lseek(7, 54096560128, SEEK_DATA)        = 54096560128

lseek(7, 54096560128, SEEK_HOLE)        = 54096625664

lseek(7, 54096625664, SEEK_DATA)        = 56092524544

lseek(7, 56092524544, SEEK_DATA)        = 56092524544

lseek(7, 56092524544, SEEK_HOLE)        = 56092532736

lseek(7, 56092532736, SEEK_DATA)        = 56092590080

lseek(7, 56092590080, SEEK_DATA)        = 56092590080

lseek(7, 56092590080, SEEK_HOLE)        = 56092594176

lseek(7, 56092594176, SEEK_DATA)        = 56092655616

lseek(7, 56092655616, SEEK_DATA)        = 56092655616

lseek(7, 56092655616, SEEK_HOLE)        = 56094593024

lseek(7, 56094593024, SEEK_DATA)        = 56126210048

lseek(7, 56126210048, SEEK_DATA)        = 56126210048

lseek(7, 56126210048, SEEK_HOLE)        = 56128737280

lseek(7, 56128737280, SEEK_DATA)        = 56226742272

lseek(7, 56226742272, SEEK_DATA)        = 56226742272

lseek(7, 56226742272, SEEK_HOLE)        = 56250884096

lseek(7, 56250884096, SEEK_DATA)        = 58240008192

lseek(7, 58240008192, SEEK_DATA)        = 58240008192

lseek(7, 58240008192, SEEK_HOLE)        = 58240016384

lseek(7, 58240016384, SEEK_DATA)        = 58240073728

lseek(7, 58240073728, SEEK_DATA)        = 58240073728

lseek(7, 58240073728, SEEK_HOLE)        = 58240077824

lseek(7, 58240077824, SEEK_DATA)        = 58240139264

lseek(7, 58240139264, SEEK_DATA)        = 58240139264

lseek(7, 58240139264, SEEK_HOLE)        = 58241294336

The VM's size is 500GB and there is enough space on the machine:

udev             10M       0   10M    0% /dev
tmpfs            26G    319M   25G    2% /run
/dev/sda4       3,6T    878G  2,6T   26% /
tmpfs            63G     43M   63G    1% /dev/shm
tmpfs           5,0M       0  5,0M    0% /run/lock
tmpfs            63G       0   63G    0% /sys/fs/cgroup
/dev/sda3       946M    188M  694M   22% /boot
cgmfs           100K       0  100K    0% /run/cgmanager/fs
/dev/fuse        30M     28K   30M    1% /etc/pve
tmpfs           100K       0  100K    0% /run/lxcfs/controllers
tmpfs            13G       0   13G    0% /run/user/1000

It's a single proxmox-installation without clustering.

I'm running the following proxmox-system:

proxmox-ve: 4.1-28 (running kernel: 4.2.6-1-pve)

pve-manager: 4.1-2 (running version: 4.1-2/78c5f4a2)

pve-kernel-4.2.6-1-pve: 4.2.6-28

pve-kernel-2.6.32-43-pve: 2.6.32-166

pve-kernel-4.2.2-1-pve: 4.2.2-16

pve-kernel-2.6.32-26-pve: 2.6.32-114

pve-kernel-4.2.3-2-pve: 4.2.3-22

lvm2: 2.02.116-pve2

corosync-pve: 2.3.5-2

libqb0: 0.17.2-1

pve-cluster: 4.0-29

qemu-server: 4.0-42

pve-firmware: 1.1-7

libpve-common-perl: 4.0-42

libpve-access-control: 4.0-10

libpve-storage-perl: 4.0-38

pve-libspice-server1: 0.12.5-2

vncterm: 1.2-1

pve-qemu-kvm: 2.4-18

pve-container: 1.0-35

pve-firewall: 2.0-14

pve-ha-manager: 1.0-16

ksm-control-daemon: 1.2-1

glusterfs-client: 3.5.2-2+deb8u1

lxc-pve: 1.1.5-5

lxcfs: 0.13-pve2

cgmanager: 0.39-pve1

criu: 1.6.0-1

The syslog shows:

Dec 29 19:03:49 hostname pvedaemon[26539]: <root@pam> starting task UPID:hostname:0000681B:0329CBE4:5682CB05:qmclone:100:root@pam:
Dec 29 19:04:59 hostname pveproxy[19936]: worker exit
Dec 29 19:04:59 hostname pveproxy[24482]: worker 19936 finished
Dec 29 19:04:59 hostname pveproxy[24482]: starting 1 worker(s)
Dec 29 19:04:59 hostname pveproxy[24482]: worker 27331 started
Dec 29 19:05:02 hostname lxcfs[18709]: select: No such file or directory
Dec 29 19:05:12 hostname pvedaemon[26539]: <root@pam> successful auth for user 'root@pam'
Dec 29 19:06:51 hostname lxcfs[18709]: select: Success
Dec 29 19:07:55 hostname kernel: [530914.403182] audit: type=1400 audit(1451412475.136:1387): apparmor="DENIED" operation="ptrace" profile="lxc-container-default" pid=1994 comm="sw-collectd" requested_mask="trace" denied_mask="trace" peer="unconfined"
Dec 29 19:07:55 hostname kernel: [530914.403204] audit: type=1400 audit(1451412475.136:1388): apparmor="DENIED" operation="ptrace" profile="lxc-container-default" pid=1994 comm="sw-collectd" requested_mask="read" denied_mask="read" peer="unconfined"
Dec 29 19:09:25 hostname pvedaemon[26539]: <root@pam> successful auth for user 'root@pam'
Dec 29 19:09:42 hostname pveproxy[24482]: worker 27331 finished
Dec 29 19:09:42 hostname pveproxy[24482]: starting 1 worker(s)
Dec 29 19:09:42 hostname pveproxy[24482]: worker 29677 started
Dec 29 19:09:44 hostname pveproxy[29676]: got inotify poll request in wrong process - disabling inotify
Dec 29 19:09:46 hostname pveproxy[29676]: worker exit
Dec 29 19:10:02 hostname lxcfs[18709]: select: Success
Dec 29 19:10:32 hostname pvedaemon[25727]: worker exit
Dec 29 19:10:32 hostname pvedaemon[1160]: worker 25727 finished
Dec 29 19:10:32 hostname pvedaemon[1160]: starting 1 worker(s)
Dec 29 19:10:32 hostname pvedaemon[1160]: worker 30242 started
Dec 29 19:11:45 hostname lxcfs[18709]: select: Success
Dec 29 19:11:48 hostname pvedaemon[30242]: <root@pam> successful auth for user 'root@pam'
Dec 29 19:13:48 hostname pvedaemon[26539]: worker exit
Dec 29 19:13:48 hostname pvedaemon[1160]: worker 26539 finished
Dec 29 19:13:48 hostname pvedaemon[1160]: starting 1 worker(s)
Dec 29 19:13:48 hostname pvedaemon[1160]: worker 31618 started
Dec 29 19:13:55 hostname pveproxy[29677]: worker exit
Dec 29 19:13:55 hostname pveproxy[24482]: worker 29677 finished
Dec 29 19:13:55 hostname pveproxy[24482]: starting 1 worker(s)
Dec 29 19:13:55 hostname pveproxy[24482]: worker 31677 started
Dec 29 19:14:28 hostname pveproxy[24482]: worker 26350 finished
Dec 29 19:14:28 hostname pveproxy[24482]: starting 1 worker(s)
Dec 29 19:14:28 hostname pveproxy[24482]: worker 31867 started
Dec 29 19:14:31 hostname pveproxy[31866]: worker exit
Dec 29 19:15:02 hostname lxcfs[18709]: select: Success
Dec 29 19:15:40 hostname pvedaemon[23612]: worker exit
Dec 29 19:15:40 hostname pvedaemon[1160]: worker 23612 finished
Dec 29 19:15:40 hostname pvedaemon[1160]: starting 1 worker(s)
Dec 29 19:15:40 hostname pvedaemon[1160]: worker 32588 started

MyFault

Asked: 2015-12-20 06:32:51 +0800 CST

Apache 2.4: Block access to xmlrpc.php of all domains

3

I would like to block the access to xmlrpc.php

I created a file in

/etc/apache2/conf.d/block.conf

and added the following content:

<FilesMatch "(^\.|wp-config\.php|xmlrpc\.php|(?<!robots)\.txt|(liesmich|readme)\.*)"> 
Require all denied
</FilesMatch>

If I try any domain on the server I'm still getting access: example.com/xmlrpc.php

I would have expected an "Forbidden"-error.

MyFault

Asked: 2015-12-17 02:30:31 +0800 CST

IOTOP on LXC -> Netlink error

4

unfortunately I can not use iotop on proxmox-lxc-container and debian 8 template.

This is the output:

Traceback (most recent call last):
File "/usr/sbin/iotop", line 17, in <module>
main()
File "/usr/lib/python2.7/dist-packages/iotop/ui.py", line 620, in main
main_loop()
File "/usr/lib/python2.7/dist-packages/iotop/ui.py", line 610, in <lambda>
main_loop = lambda: run_iotop(options)
File "/usr/lib/python2.7/dist-packages/iotop/ui.py", line 506, in run_iotop
return run_iotop_window(None, options)
File "/usr/lib/python2.7/dist-packages/iotop/ui.py", line 498, in run_iotop_window
taskstats_connection = TaskStatsNetlink(options)
File "/usr/lib/python2.7/dist-packages/iotop/data.py", line 137, in __init__
self.family_id = controller.get_family_id('TASKSTATS')
File "/usr/lib/python2.7/dist-packages/iotop/genetlink.py", line 69, in get_family_id
m = GeNlMessage.recv(self.conn)
File "/usr/lib/python2.7/dist-packages/iotop/genetlink.py", line 51, in recv
msg = conn.recv()
File "/usr/lib/python2.7/dist-packages/iotop/netlink.py", line 229, in recv
raise err
OSError: Netlink error: No such file or directory (2)

Does anybody know how to fix that?

MyFault

Asked: 2015-12-07 11:24:10 +0800 CST

Postfix SSL-Intermediate-CA

5

I got a thawte Wildcard SSL-Cert for for *.my.example.com.

Now I would like to use it for my mailserver (hostname: test.my.example.com).

I edited the /etc/postfix/postfix_default.pem and included key, cert and ca in this file.

Unfortunately SSL-checks are failing with error

Unknown Authority

or

Cert NOT VALIDATED: unable to get local issuer certificate

What do I have to change in my config?

MyFault

Asked: 2015-11-24 00:54:01 +0800 CST

service apache2 restart leads to "Error: No space left on device"

3

If I do

me@server:/home/me# service apache2 restart

on my LXC-VPS (node-server is not under heavy load) I'm getting

Error: No space left on device

df -h tells me that there is plenty enough space

/dev/loop1      394G     72G  303G   20% /
none            100K       0  100K    0% /dev
cgroup           12K       0   12K    0% /sys/fs/cgroup
tmpfs            63G       0   63G    0% /sys/fs/cgroup/cgmanager
tmpfs            63G       0   63G    0% /dev/shm
tmpfs            63G    903M   63G    2% /run
tmpfs           5,0M       0  5,0M    0% /run/lock
tmpfs            63G    9,0M   63G    1% /tmp
none             63G       0   63G    0% /run/shm

df -i tells me

Dateisystem      Inodes IBenutzt    IFrei IUse% Eingehängt auf
/dev/loop1     26214400  1947464 24266936    8% /
none           16488053       22 16488031    1% /dev
cgroup         16488053       16 16488037    1% /sys/fs/cgroup
tmpfs          16488053       17 16488036    1% /sys/fs/cgroup/cgmanager
tmpfs          16488053        1 16488052    1% /dev/shm
tmpfs          16488053      269 16487784    1% /run
tmpfs          16488053     1069 16486984    1% /run/lock
tmpfs          16488053      192 16487861    1% /tmp
none           16488053        1 16488052    1% /run/shm

This is the output of ipcs

------ Message Queues --------
key        msqid      owner      perms      used-bytes   messages    

------ Shared Memory Segments --------
key        shmid      owner      perms      bytes      nattch     status      
0x4f3f00ec 9928704    root       600        1000       3                       
0x640109b7 9961473    root       600        1200712    3                       
0x0004e7b0 9437186    root       666        20564      0                       

------ Semaphore Arrays --------
key        semid      owner      perms      nsems     
0x002fa327 0          root       666        2         
0x00000000 9535489    www-data   600        1         
0x00000000 9568258    www-data   600        1         
0x7f9640a9 4096003    ftp_ase    644        3         
0x3780350e 4456452    ftp_sur    644        3

Any idea how to avoid this error?

MyFault

Asked: 2015-07-27 06:16:25 +0800 CST

ATOP: vmcom / vmlim -> SWP is red

4

in ATOP I'm getting a red alert like this: vmcom 76.3G | vmlim 49.8G

This is a value that is attached to the "SWP" (so "SWAP" is meant?)-line.

What does this mean and what can I do against it?

MyFault

Asked: 2015-06-16 06:49:21 +0800 CST

Icinga2: Send E-Mail on Host/Service Down

3

I installed and configured Icinga2 with icingaweb2.

I added a test-host with a test-service: Let's call it "example.com".

This is the test-host:

/etc/icinga2/conf.d/hosts/example-com:

object Host "example-com" {
        //Importiert die generische Host-Vorlage aus der template.conf
        import "generic-host"
        //IPv4 Adresse
        address = "2xx.2xx.2xx.2xx"

        //Angabe des Betriebssystemtyps
        vars.os = "Linux OS"
        vars.sla = "24x7"
}

Okay, then we have the service-configuration:

/etc/icinga2/conf.d/hosts/example-com/http.conf

object Service "http" {
    import "generic-service"
    host_name = "example-com"
    check_command = "http"
    vars.sla = "24x7"
}

Of course I added a new user group to /etc/icinga2/conf.d/users.conf

/**
 * The example user 'icingaadmin' and the example
 * group 'icingaadmins'.
 */

object User "icingaadmin" {
  import "generic-user"

  display_name = "Icinga 2 Admin"
  groups = [ "icingaadmins", "linux-admins" ]

  email = "[email protected]"
}

object UserGroup "icingaadmins" {
  display_name = "Icinga 2 Admin Group"
}

object UserGroup "linux-admins" {
  display_name = "Linux-Administrators"
}

Now I think I have to add the contact_groups to the host. But if I do that the config-check fails :-(

Thanks for your help :-)

MyFault

Asked: 2015-04-18 05:07:42 +0800 CST

Spamassassin RDNS_NONE matches, but there is a RDNS

4

I got a a little problem - spam assassin's RDNS_NONE-rule matches on my outgoing mails but there is a RDNS set for all hosts, that are in the delivery-chain.

If I send an Email to "[email protected]" which gets redirected to another account, I get the following header:

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from localhost (localhost [127.0.0.1])
    by mailserver.example.com (Postfix) with ESMTP id 3CD4D1D237A1
    for <[email protected]>; Fri, 17 Apr 2015 14:53:03 +0200 (CEST)
X-Virus-Scanned: amavisd-new at example.com
Received: from mailserver.example.com ([127.0.0.1])
    by localhost (mailserver.example.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id oUIr35qsq6dA for <[email protected]>;
    Fri, 17 Apr 2015 14:53:03 +0200 (CEST)
Received: from closed-relay.outgoing-mailserver.com (closed-relay.outgoing-mailserver.com [123.123.123.123])
    by mailserver.example.com (Postfix) with ESMTP id DEC0B1D23794
    for <[email protected]>; Fri, 17 Apr 2015 14:53:02 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
    by closed-relay.outgoing-mailserver.com (Postfix) with ESMTP id 52E3844379B
    for <[email protected]>; Fri, 17 Apr 2015 14:52:53 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at closed-relay.outgoing-mailserver.com
Received: from closed-relay.outgoing-mailserver.com ([127.0.0.1])
    by localhost (closed-relay.outgoing-mailserver.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id MFFwpRFp8aZy for <[email protected]>;
    Fri, 17 Apr 2015 14:52:51 +0200 (CEST)
Received: from outgoingantispam.outgoing-mailserver.com (outgoingantispam.outgoing-mailserver.com [1.1.1.1])
    by closed-relay.outgoing-mailserver.com (Postfix) with ESMTPSA id 3DB4E443794
    for <[email protected]>; Fri, 17 Apr 2015 14:52:51 +0200 (CEST)
Received: from my.webhosting-server.com (unknown [2.2.2.2])
    (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
    (No client certificate requested)
    by outgoingantispam.outgoing-mailserver.com (Postfix) with ESMTPS id A7DB3182E6E
    for <[email protected]>; Fri, 17 Apr 2015 14:52:48 +0200 (CEST)
Received: by my.webhosting-server.com (Postfix, from userid 30)
    id 6D9E128223E; Fri, 17 Apr 2015 14:52:48 +0200 (CEST)
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from mailserver.example.com (mailserver.example.com [80.147.42.111])
 by my.webhosting-server.com (Postfix) with ESMTPS id 355FE281888
 for <[email protected]>; Fri, 17 Apr 2015 14:52:48 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
 by mailserver.example.com (Postfix) with ESMTP id A2E7E1D23786
 for <[email protected]>; Fri, 17 Apr 2015 14:52:47 +0200 (CEST)
X-Virus-Scanned: amavisd-new at example.com
Received: from mailserver.example.com ([127.0.0.1])
 by localhost (mailserver.example.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id xwhW2ZM2tq8D for <[email protected]>;
 Fri, 17 Apr 2015 14:52:47 +0200 (CEST)
Received: from [10.18.163.218] (ersc145.goemobile.de [134.76.38.145])
 by mailserver.example.com (Postfix) with ESMTPSA id DF8D01D23770
 for <[email protected]>; Fri, 17 Apr 2015 14:52:46 +0200 (CEST)
From: Test <[email protected]>
Content-Type: multipart/alternative;
 boundary="Apple-Mail=_4A11EFC1-C1A0-443C-A838-95B3BBBD3921"
Subject: Test
Message-Id: <[email protected]>
Date: Fri, 17 Apr 2015 14:52:53 +0200
To: Test <[email protected]>
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\))
X-Mailer: Apple Mail (2.2098)
X-PPP-Message-ID: <[email protected]>
X-PPP-Vhost: provider.com
X-Provider-MailScanner-EFA-Information: Please contact [email protected] for more information
X-Provider-MailScanner-EFA-ID: A7DB3182E6E.ABCF8
X-Provider-MailScanner-EFA: Found to be clean
X-Provider-MailScanner-EFA-From: [email protected]
X-Provider-MailScanner-EFA-Watermark: 1429879971.81756@AJtdCMx5yR0wKblR1j2VGA

MyFault

Asked: 2015-04-04 13:24:34 +0800 CST

Linux Malware Detection Monitoring: Clean files after hit

3

I'm using LMD ("Maldet") for scanning a web server with different projects. For this purpose I'm using the inotify-monitoring. Well, the inotify-log shows, that the modified files are noticed, but I guess the filtering fails, because bad scripts are detected after running maldet -b -a /var/www/

How can I check changed files "on the fly"? I got a script in /etc/cron.daily/maldet but I do never get a daily update :-(

Thanks in advance for all your replies :-)

Proxmox system rebooting without any reason? ^@ logged to syslog

CentOS: After Kernel Update system does not boot (/dev/md2 does not exist)

SELinux on CentOS7-based LXC?

Proxmox: Add IPs from different subnets to LXC-container

SMTP: Received from unknown [xxx.xxx.xxx.xxx] -> but IP does have a valid PTR/RDNS

Puppet/Foreman: Nodes are out of sync

Can connect via SSH - but not via SFTP? Exit status 127

Puppet: Error 400 on SERVER: Permission denied

Apache: A lot of connections gracefully finishing?

Debian-Server: Incoming SSH/PING/TELNET/... works - outgoing does not

Puppet: Node "default"-content is not pushed to all nodes

Proxmox/KVM: Can not clone VM

Apache 2.4: Block access to xmlrpc.php of all domains

IOTOP on LXC -> Netlink error

Postfix SSL-Intermediate-CA

service apache2 restart leads to "Error: No space left on device"

ATOP: vmcom / vmlim -> SWP is red

Icinga2: Send E-Mail on Host/Service Down

Spamassassin RDNS_NONE matches, but there is a RDNS

Linux Malware Detection Monitoring: Clean files after hit

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

Ping a Specific Port

Check if port is open or closed on a Linux server?

How to automate SSH login with password?

How do I tell Git for Windows where to find my private RSA key?

What's the default superuser username/password for postgres after a new install?

What port does SFTP use?

Command line to list users in a Windows Active Directory group?

What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats?

How to determine if a bash variable is empty?