Monitoring Août 2019

monitoring@federez.net

6 participants
80 discussions

par monit＠quigon.federez.net

Exists Service nslcd Date: Mon, 19 Aug 2019 22:26:16 Action: alert Host: quigon.federez.net Description: process is running with pid 1389 Monit, unique employé de federez,

5 années, 8 mois

monit alert -- Execution failed amavis

par monit＠quigon.federez.net

Execution failed Service amavis Date: Mon, 19 Aug 2019 22:25:16 Action: alert Host: quigon.federez.net Description: failed to start (exit status 0) -- no output Monit, unique employé de federez,

5 années, 8 mois

monit alert -- Does not exist amavis

par monit＠quigon.federez.net

Does not exist Service amavis Date: Mon, 19 Aug 2019 22:24:45 Action: restart Host: quigon.federez.net Description: process is not running Monit, unique employé de federez,

5 années, 8 mois

monit alert -- Execution failed slapd

par monit＠quigon.federez.net

Execution failed Service slapd Date: Mon, 19 Aug 2019 22:24:45 Action: alert Host: quigon.federez.net Description: failed to start (exit status 5) -- '/usr/sbin/service slapd start': Failed to start slapd.service: Unit slapd.service not found. Monit, unique employé de federez,

5 années, 8 mois

monit alert -- Does not exist slapd

par monit＠quigon.federez.net

Does not exist Service slapd Date: Mon, 19 Aug 2019 22:23:57 Action: restart Host: quigon.federez.net Description: process is not running Monit, unique employé de federez,

5 années, 8 mois

2 Debian package update(s) for nonagon.federez.net

par club-federez＠crans.org

apticron report [Thu, 15 Aug 2019 13:49:10 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: linux-libc-dev 4.9.168-1+deb9u5 tzdata 2019b-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour linux (linux-libc-dev) --- linux (4.9.168-1+deb9u5) stretch-security; urgency=high * [amd64] Add mitigation for Spectre v1 swapgs (CVE-2019-1125): - cpufeatures: Sort feature word 7 - speculation: Prepare entry code for Spectre v1 swapgs mitigations - speculation: Enable Spectre v1 swapgs mitigations - entry: Use JMP instead of JMPQ - speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * [x86] xen/pciback: Don't disable PCI_COMMAND on PCI device reset. (CVE-2015-8553) - Add Breaks relation to incompatible qemu-system-x86 versions * ipv6: check sk sk_type and protocol early in ip_mroute_set/getsockopt * percpu: stop printing kernel addresses (CVE-2018-5995) * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) * block: blk_init_allocated_queue() set q->fq as NULL in the fail case (CVE-2018-20856) * vfio/type1: Limit DMA mappings per container (CVE-2019-3882) * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207) * siphash: add cryptographically secure PRF * inet: switch IP ID generator to siphash (CVE-2019-10638, CVE-2019-10639) * Input: gtco - bounds check collection indent level (CVE-2019-13631) * [ppc64el] tm: Fix oops on sigreturn on systems without TM (CVE-2019-13648) * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284) * floppy: fix out-of-bounds read in next_valid_format * floppy: fix invalid pointer dereference in drive_name * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283) * inet: Avoid ABI change for IP ID hash change * vhost: Fix possible infinite loop (CVE-2019-3900): - vhost-net: set packet weight of tx polling to 2 * vq size - vhost_net: use packet weight for rx handler, too - vhost_net: introduce vhost_exceeds_weight() - vhost: introduce vhost_exceeds_weight() - vhost_net: fix possible infinite loop - vhost: scsi: add weight support * vhost: Ignore ABI changes * netfilter: ctnetlink: don't use conntrack/expect object addresses as id * xen: let alloc_xenballooned_pages() fail if not enough memory free * tcp: Clear sk_send_head after purging the write queue -- Ben Hutchings <ben(a)decadent.org.uk> Sun, 11 Aug 2019 15:53:40 +0100 --- Modifications pour tzdata --- tzdata (2019b-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following past and future timestamps: - Brazil has canceled DST and will stay on standard time indefinitely. - Predictions for Morocco now go through 2087 instead of 2037. - Palestine's 2019 spring transition was 03-29 at 00:00, not 03-30 at 01:00. Guess future transitions to be March's last Friday at 00:00. - Many corrections to historical Hong Kong transitions from 1941 to 1947. -- Aurelien Jarno <aurel32(a)debian.org> Mon, 12 Aug 2019 11:45:17 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron

5 années, 8 mois

1 Debian package update(s) for nonagon.federez.net

par club-federez＠crans.org

apticron report [Wed, 14 Aug 2019 13:49:11 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: linux-libc-dev 4.9.168-1+deb9u5 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour linux (linux-libc-dev) --- linux (4.9.168-1+deb9u5) stretch-security; urgency=high * [amd64] Add mitigation for Spectre v1 swapgs (CVE-2019-1125): - cpufeatures: Sort feature word 7 - speculation: Prepare entry code for Spectre v1 swapgs mitigations - speculation: Enable Spectre v1 swapgs mitigations - entry: Use JMP instead of JMPQ - speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * [x86] xen/pciback: Don't disable PCI_COMMAND on PCI device reset. (CVE-2015-8553) - Add Breaks relation to incompatible qemu-system-x86 versions * ipv6: check sk sk_type and protocol early in ip_mroute_set/getsockopt * percpu: stop printing kernel addresses (CVE-2018-5995) * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) * block: blk_init_allocated_queue() set q->fq as NULL in the fail case (CVE-2018-20856) * vfio/type1: Limit DMA mappings per container (CVE-2019-3882) * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207) * siphash: add cryptographically secure PRF * inet: switch IP ID generator to siphash (CVE-2019-10638, CVE-2019-10639) * Input: gtco - bounds check collection indent level (CVE-2019-13631) * [ppc64el] tm: Fix oops on sigreturn on systems without TM (CVE-2019-13648) * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284) * floppy: fix out-of-bounds read in next_valid_format * floppy: fix invalid pointer dereference in drive_name * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283) * inet: Avoid ABI change for IP ID hash change * vhost: Fix possible infinite loop (CVE-2019-3900): - vhost-net: set packet weight of tx polling to 2 * vq size - vhost_net: use packet weight for rx handler, too - vhost_net: introduce vhost_exceeds_weight() - vhost: introduce vhost_exceeds_weight() - vhost_net: fix possible infinite loop - vhost: scsi: add weight support * vhost: Ignore ABI changes * netfilter: ctnetlink: don't use conntrack/expect object addresses as id * xen: let alloc_xenballooned_pages() fail if not enough memory free * tcp: Clear sk_send_head after purging the write queue -- Ben Hutchings <ben(a)decadent.org.uk> Sun, 11 Aug 2019 15:53:40 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron

5 années, 8 mois

Cron <root@nonagon> /opt/phabricator/phabricator/bin/phd start >/dev/null

par club-federez＠crans.org

[2019-08-14 11:36:33] PHLOG: 'Retrying database connection to "pentagon.federez.net" after connection failure (attempt 1; "AphrontConnectionQueryException"; error #2002): Attempt to connect to phabricator(a)pentagon.federez.net failed with error #2002: No route to host.' at [/opt/phabricator/libphutil/src/aphront/storage/connection/mysql/AphrontBaseMySQLDatabaseConnection.php:126] [2019-08-14 11:36:39] PHLOG: 'Retrying database connection to "pentagon.federez.net" after connection failure (attempt 2; "AphrontConnectionQueryException"; error #2002): Attempt to connect to phabricator(a)pentagon.federez.net failed with error #2002: No route to host.' at [/opt/phabricator/libphutil/src/aphront/storage/connection/mysql/AphrontBaseMySQLDatabaseConnection.php:126] [2019-08-14 11:36:43] EXCEPTION: (PhabricatorClusterStrandedException) Unable to establish a connection to any database host (while trying "phabricator_config"). All masters and replicas are completely unreachable. AphrontConnectionQueryException: Attempt to connect to phabricator(a)pentagon.federez.net failed with error #2002: No route to host. at [<phabricator>/src/infrastructure/storage/lisk/PhabricatorLiskDAO.php:177] arcanist(head=master, ref.master=d92fa96366c0), phabricator(head=master, ref.master=0a3c26998fc9), phutil(head=master, ref.master=b416093386a2) #0 PhabricatorLiskDAO::raiseUnreachable(string, AphrontConnectionQueryException) called at [<phabricator>/src/infrastructure/storage/lisk/PhabricatorLiskDAO.php:134] #1 PhabricatorLiskDAO::newClusterConnection(string, string, string) called at [<phabricator>/src/infrastructure/storage/lisk/PhabricatorLiskDAO.php:70] #2 PhabricatorLiskDAO::establishLiveConnection(string) called at [<phabricator>/src/infrastructure/storage/lisk/LiskDAO.php:841] #3 LiskDAO::establishConnection(string) called at [<phabricator>/src/infrastructure/storage/lisk/LiskDAO.php:518] #4 LiskDAO::loadRawDataWhere(string, string) called at [<phabricator>/src/infrastructure/storage/lisk/LiskDAO.php:478] #5 LiskDAO::loadAllWhere(string, string) called at [<phabricator>/src/infrastructure/env/PhabricatorConfigDatabaseSource.php:18] #6 PhabricatorConfigDatabaseSource::loadConfig(string) called at [<phabricator>/src/infrastructure/env/PhabricatorConfigDatabaseSource.php:7] #7 PhabricatorConfigDatabaseSource::__construct(string) called at [<phabricator>/src/infrastructure/env/PhabricatorEnv.php:253] #8 PhabricatorEnv::buildConfigurationSourceStack(boolean) called at [<phabricator>/src/infrastructure/env/PhabricatorEnv.php:95] #9 PhabricatorEnv::initializeCommonEnvironment(boolean) called at [<phabricator>/src/infrastructure/env/PhabricatorEnv.php:75] #10 PhabricatorEnv::initializeScriptEnvironment(boolean) called at [<phabricator>/scripts/init/lib.php:22] #11 init_phabricator_script(array) called at [<phabricator>/scripts/init/init-script.php:9] #12 require_once(string) called at [<phabricator>/scripts/__init_script__.php:3] #13 require_once(string) called at [<phabricator>/scripts/daemon/manage_daemons.php:5]

5 années, 8 mois

Cron <root@nonagon> /root/scripts/renew_letsencrypt_certificates.sh 1>/dev/null

par club-federez＠crans.org

An unexpected error occurred: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 138, in _new_conn (self.host, self.port), self.timeout, **extra_kw) File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 98, in create_connection raise err File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 88, in create_connection sock.connect(sa) OSError: [Errno 101] Network is unreachable During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 594, in urlopen chunked=chunked) File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 350, in _make_request self._validate_conn(conn) File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 837, in _validate_conn conn.connect() File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 281, in connect conn = self._new_conn() File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 147, in _new_conn self, "Failed to establish a new connection: %s" % e) requests.packages.urllib3.exceptions.NewConnectionError: <requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7f52b6977c88>: Failed to establish a new connection: [Errno 101] Network is unreachable During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/requests/adapters.py", line 423, in send timeout=timeout File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 643, in urlopen _stacktrace=sys.exc_info()[2]) File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 363, in increment raise MaxRetryError(_pool, url, error or ResponseError(cause)) requests.packages.urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7f52b6977c88>: Failed to establish a new connection: [Errno 101] Network is unreachable',)) During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/acme/client.py", line 1046, in _send_request response = self.session.request(method, url, *args, **kwargs) File "/usr/lib/python3/dist-packages/requests/sessions.py", line 488, in request resp = self.send(prep, **send_kwargs) File "/usr/lib/python3/dist-packages/requests/sessions.py", line 609, in send r = adapter.send(request, **kwargs) File "/usr/lib/python3/dist-packages/requests/adapters.py", line 487, in send raise ConnectionError(e, request=request) requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7f52b6977c88>: Failed to establish a new connection: [Errno 101] Network is unreachable',)) During handling of the above exception, another exception occurred: ValueError: Requesting acme-v02.api.letsencrypt.org/directory: Network is unreachable Please see the logfiles in /var/log/letsencrypt for more details.

5 années, 8 mois

Cron <root@nonagon> test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )

par club-federez＠crans.org

/etc/cron.daily/logrotate: error: phabricator_backup_and_update:9 unknown group 'sudoldap' error: found error in /var/log/phabricator_backup.log /var/log/phabricator_update.log , skipping

5 années, 8 mois

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Août 2019