Stupifier Posted September 22, 2018 Share Posted September 22, 2018 Been running on UnRAID 6.5.3 for about 60 days straight.....then all the sudden my CPU utilization spiked to near 100% permanently. htop shows the following process hogging practically everything. /var/tmp/sustes -c /var/tmp/wc.conf I reboot server only to see this process show itself within 5-10 minutes of bootup. I decide to kill the process. CPU utilization normalizes. It has been about 15 minutes and I have not seen it since. Any ideas? Quote Link to comment
Stupifier Posted September 23, 2018 Author Share Posted September 23, 2018 I discovered the culprit was the NodeRed-OfficialDocker container..........it became infected with a crypto miner! More info about it here.....I had to inspect each of my Docker Containers one-by-one until I found out where it was hiding. I have no idea how I got this or if this is something pushed in from DockerHub or CA.......https://www.digitalocean.com/community/questions/what-is-this-sustes-in-my-process-in-my-cpu-stats Quote Link to comment
dockerPolice Posted September 23, 2018 Share Posted September 23, 2018 14 hours ago, Stupifier said: I discovered the culprit was the NodeRed-OfficialDocker container..........it became infected with a crypto miner! More info about it here.....I had to inspect each of my Docker Containers one-by-one until I found out where it was hiding. I have no idea how I got this or if this is something pushed in from DockerHub or CA.......https://www.digitalocean.com/community/questions/what-is-this-sustes-in-my-process-in-my-cpu-stats It certainly isn't CA. Not that I really have any clue about NodeRed, but I'd suggest that if that process actually is a crypto miner, then it got added to the container via some project or something that you created with NodeRed. If not, the proper place to report something like this is on NodeRed's project page / forum. For the time being unless this is definitely determined to be from the container itself (which it doesn't appear to be on my system on a quick install) and not by something which you added / did, NodeRed (official) will remain in CA. Quote Link to comment
Stupifier Posted September 23, 2018 Author Share Posted September 23, 2018 It is very likely to be something I did on NodeRed. Just reporting. I also posted up in the Node Red docker support thread on this forum. Just making people aware. Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.