search

omega8cc / boa

Barracuda Octopus Aegir 5.5.0-PRO
https://omega8.cc/compare
395 stars 75 forks source link

Did skynet do anything today, Oct 1 2024 at 14:00 UTC ? Our BOA server went down then and has been down since - 2h30 min. #1820

Closed EdNett closed 1 month ago

EdNett commented 1 month ago

Hello, Did skynet do anything today, Oct 1 2024 at 14:00 UTC ? Our BOA server went down then and has been down since - 2h30 min. Unreachable by SSH. I have asked teh server providor if there's a problem at their end. Best,

Ed

omega8cc commented 1 month ago

No.

Sent with GitHawk

EdNett commented 1 month ago

I noticed that the server was down and I couldn't ssh in I enabled rescue mode and logged-in, mounted the boa system and saw that the /etc/passwd, /etc/group and /etc/shadow files all had duplicate files with a "-" at their end with very slightly different sizes, and some octopus users had been added, which I deleted, so I had to enable a network firewall, which stopped the strange activity, and have replaced ssh key - now the server is running again - and I've noticed that more of the sites on the server all have failed ssl certs now whereas 2 days ago it was just 3 of them!