SpuddyUK

Members
 View Profile  See their activity

  • Posts

    42

  • Joined

  • Last visited

 Content Type 

Posts posted by SpuddyUK

    Docker container causes unraid to have a meltdown.

    in General Support

    Posted

    I wasn't quite sure where to post this support request, here or in the support group for the docker container I believe is causing the issue.

     

    Every month or so, binhex-qbittorrentvpn causes problems and completely freezes my unraid web ui. Meaning I can no longer get into the unraid web ui at all. I can get into the CLI via SSH, but there are even some really strange things happening there too (htop wont load being one, diagnostics not being able to be collected being another).

     

    As soon as I send a command "docker stop binhex-qbittorrentvpn" the unraid webui will load. However, now binhex-qbittorrentvpn container continues to show running (docker stats, and unraid ui) but I cannot access the UI for the qbit application. If I try to kill the container in any way (unraid UI, cli, PID, pkill etc), it throws an error. The only way to return to a fully functioning server, with working qbittorrentvpn container for another ~month, is to hard reboot the server (server will not gracefully shutdown as it believes binhex-qbittorrentvpn is running, and it cannot end it).

     

    I even have a script to restart the qbit container every night at 12PM which I thought may help.

     

    Any ideas, diags attached.

     

    Thanks!

    buzz-diagnostics-20231127-1117.zip

    Mover no longer moving. Trying to copy to full disks rather than disks with available space.

    in General Support

    Posted · Edited by SpuddyUK

    @JorgeB

    This seems to have resolved it! I don't remember ever manually selecting all the disks and wasn't aware that unselecting all the tickboxes would mean they'd all be apart of the share (if that makes sense? UI could be better in that regard). I realise this a corner case but would be great if a fix could creep into the next release.

    • Like 1

    unRaid throwing HDD errors, smart fine.

    in General Support

    Posted

    I have a 16disk array (inc 2x parity). One of my disks (disk 7, sdi) has been showing errors for about a week. I did the short smart test which came back fine and took the disk out, connected to PC and ran Seagate diagnostics which came back fine.

     

    I think it's probably on it's way out but any way I be a bit more confident? Could it be something else like the connection from HBA to Backplane or similar?

     

    Thanks,

    buzz-diagnostics-20231006-1347.zip

    SHFS High CPU Load. GUI/Apps become unresponsive.

    in General Support

    Posted · Edited by SpuddyUK

    Hi,

    I'm struggling with high CPU load and server becoming unresponsive occasionally. Any ideas?

     

    I do have Sab do direct unpack (unpacking whilst download etc), might I need to CPU pin certain applications to prevent them making the system sluggish? Nothing writes to the array directly (Mover runs daily at 11AM), everything writes to 4TB NVME.

     

     

     

    buzz-diagnostics-20230724-1625.zip

    Screenshot 2023-07-24 162012.png

    replacing usb - JSON error

    in Connect Plugin Support

    Posted

    My USB key was failing. I replaced it (followed official guide) and got the same "SyntaxError: Unexpected number in JSON at position 1" error when trying to replace the key. 

     

    I have logged a support case. My NAS is unusable for an indeterminate amount of time. Poor process that needs improving.

    Dynamix - V6 Plugins

    in Plugin Support

    Posted

    2 hours ago, Tigger30926 said:

    Hi everyone,
    I tried to install the update (2021.05.20) today and I only get this error.

     

    plugin: updating: dynamix.system.temp.plg
    plugin: run failed: /bin/bash retval: 1

     

    Can someone tell me how to solve this error?

    Thanks a lot

     


     

    Same issue here. @bonienl

    Hacked with drives now empty - Please help!

    in General Support

    Posted

    3 minutes ago, GaryBellars said:

    Hi SpuddyUK, not port forwarding anything to my knowledge. I believe my password was just the default one

    I'm going to say you probably are forwarding http/https to the unraid host and that you didn't have a root password. I.E anyone on the internet could access your unraid box. 

    My Servers Early Access Plugin

    in Announcements

    Posted

    11 minutes ago, limetech said:

     

    We limit logins processed by nginx in this manner:

      

    
#
# limit the amount of failed auth requests per IP address
#
limit_req_zone \$binary_remote_addr zone=authlimit:1m rate=30r/m;

:

location /login {
        allow all;
        limit_req zone=authlimit burst=20 nodelay;
        try_files /login.php =404;
        include fastcgi_params;
}

     

     

    Absolutely not.  This feature has been in development for a long time and a lot of the delay in release, even for beta, has been around security concerns.

     

     

     

    We very much appreciate your feedback.

    Thanks for the considered response and for being open about it. Happy to take anything offline where helpful.

     

    Rate-limiting a great tool to employ as part of a wider security hardening toolkit. Unfortunately, with botnets the above will do little to prevent a brute-force of root on a specific server. All those hundreds of thousands if not millions of IoT devices that have been compromised will do their business for them from individual IP addresses. Fail2Ban suffers similarly. This is why layers are so important.

     

    Let me be clear, I am a paid customer and enthusiast of unraid. I even quite like the features this offers in principle. However, my fear is that savvy users whom require remote access have already arranged it with something like VPN, WireGuard the like. We might be sweeping the rest along here into remote access with root and "rootpassword".

     

    Additionally, I would suggest some security auditing of the code/api if you haven't already done so. Better to pay someone to find potential routes to compromise than being held over a barrel. Bug bounty could be beneficial, free license/$500/xyz for each vulnerability rated x or above.

     

    I will keep an eye on this to see how it develops. 

     

    Thanks for engaging.

    • Like 1

    My Servers Early Access Plugin

    in Announcements

    Posted

    2 minutes ago, limetech said:

     

    That is correct.  If you enable Remote Access this requires a port-forward in your router.  You must use a strong wegGUI password (or what @SpuddyUK calls a complex password) and consider using a non-standard external port.

     

     

    Perhaps you can shed some light on what would be sufficiently complex?

    Opinions differ but consensus is generally at least 12 characters to include all of the four categories of lower-case, upper-case, number(s) and symbol(s).

     

    Of course you can lead a horse to water but not make them drink, so there is a risk of Password01!!, so any logic around preventing those type of passwords would probably be helpful too. There are countless lists online of the 100 most used passwords that you might be able to reference and prevent being used/saved.

    My Servers Early Access Plugin

    in Announcements

    Posted

    3 minutes ago, repomanz said:

     


    Agree - it's a great step in the right direction. For future updates I'm hoping to see some further hardening.   Can someone explain the technical authentication details of how the remote access works? Is it my login, pass, 2fa token plus a unique generated ssh key? If those credentials fail what occurs? Block, Reject or hold the session open for a period of minutes?

    As I see it, 2FA is not required if you directly access https://yourhash.unraid.net, only if you login via the forum.

    My Servers Early Access Plugin

    in Announcements

    Posted · Edited by SpuddyUK

    12 minutes ago, jonathanm said:

    People have been opening up their Unraid servers and getting hacked for years. 

    only this time it's being actively endorsed by limetech. Maybe in addition to the 2fa for gui login and fail2ban for x failed login attempts, there might be a requisite for a complex root password to even enable "my servers".

     

    p.s I am a cyber security researcher.

     

    Hello lovely treasure trove of unraid servers to have a go at. This list is only going to increase as people enable the feature and search engines crawl.

    https://www.shodan.io/search?query=unraid.net