December 30, 20196 yr Hi. After a reboot my libvirt is not starting. I'm also unable to edit the VM settings in the settings menu as long as the array is running. Anyone run into similar problems? Attachedis latest diagnostics file. tintin-diagnostics-20191230-1712.zip
December 30, 20196 yr the libvirt image has some problems Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): disk space caching is enabled Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): has skinny extents Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 7795346113052941553 Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 113003311045498874 Dec 30 17:02:26 Tintin kernel: BTRFS warning (device loop3): failed to read tree root Dec 30 17:02:26 Tintin root: mount: /etc/libvirt: wrong fs type, bad option, bad superblock on /dev/loop3, missing codepage or helper program, or other error. Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): open_ctree failed Dec 30 17:02:26 Tintin root: mount error Do you have a backup of it? Also, does the following mean anything to you, since this all happened in quick succession? Dec 30 17:05:31 Tintin sshd[2376]: Invalid user yamilet from 92.242.240.17 port 56708 Dec 30 17:05:31 Tintin sshd[2376]: Received disconnect from 92.242.240.17 port 56708:11: Bye Bye [preauth] Dec 30 17:05:31 Tintin sshd[2376]: Disconnected from invalid user yamilet 92.242.240.17 port 56708 [preauth] Dec 30 17:06:20 Tintin sshd[3862]: Received disconnect from 112.162.191.160 port 33264:11: Bye Bye [preauth] Dec 30 17:06:20 Tintin sshd[3862]: Disconnected from authenticating user root 112.162.191.160 port 33264 [preauth] Dec 30 17:06:43 Tintin sshd[4599]: Invalid user pascal from 164.132.57.16 port 40849 Dec 30 17:06:43 Tintin sshd[4599]: Received disconnect from 164.132.57.16 port 40849:11: Bye Bye [preauth] Dec 30 17:06:43 Tintin sshd[4599]: Disconnected from invalid user pascal 164.132.57.16 port 40849 [preauth] Dec 30 17:10:30 Tintin sshd[11798]: Received disconnect from 49.234.30.113 port 45073:11: Bye Bye [preauth] Dec 30 17:10:30 Tintin sshd[11798]: Disconnected from authenticating user mail 49.234.30.113 port 45073 [preauth] Dec 30 17:12:02 Tintin webGUI: Successful login user root from 192.168.88.109
December 30, 20196 yr Community Expert 10 minutes ago, Gaute said: I'm also unable to edit the VM settings in the settings menu as long as the array is running. Anyone run into similar problems? That's a known issue, fixed for next release. Your libvirt.img is corrupt, restore from backup if availbale.
December 30, 20196 yr Community Expert 11 minutes ago, Squid said: Also, does the following mean anything to you, since this all happened in quick succession? Dec 30 17:05:31 Tintin sshd[2376]: Invalid user yamilet from 92.242.240.17 port 56708 Dec 30 17:05:31 Tintin sshd[2376]: Received disconnect from 92.242.240.17 port 56708:11: Bye Bye [preauth] Dec 30 17:05:31 Tintin sshd[2376]: Disconnected from invalid user yamilet 92.242.240.17 port 56708 [preauth] Dec 30 17:06:20 Tintin sshd[3862]: Received disconnect from 112.162.191.160 port 33264:11: Bye Bye [preauth] Dec 30 17:06:20 Tintin sshd[3862]: Disconnected from authenticating user root 112.162.191.160 port 33264 [preauth] Dec 30 17:06:43 Tintin sshd[4599]: Invalid user pascal from 164.132.57.16 port 40849 Dec 30 17:06:43 Tintin sshd[4599]: Received disconnect from 164.132.57.16 port 40849:11: Bye Bye [preauth] Dec 30 17:06:43 Tintin sshd[4599]: Disconnected from invalid user pascal 164.132.57.16 port 40849 [preauth] Dec 30 17:10:30 Tintin sshd[11798]: Received disconnect from 49.234.30.113 port 45073:11: Bye Bye [preauth] Dec 30 17:10:30 Tintin sshd[11798]: Disconnected from authenticating user mail 49.234.30.113 port 45073 [preauth] Dec 30 17:12:02 Tintin webGUI: Successful login user root from 192.168.88.109 https://www.abuseipdb.com/check/92.242.240.17 Croatia https://www.abuseipdb.com/check/112.162.191.160 Korea https://www.abuseipdb.com/check/164.132.57.16 France https://www.abuseipdb.com/check/49.234.30.113 China Take your server off the internet NOW!!!
December 30, 20196 yr Author 1 hour ago, Squid said: the libvirt image has some problems Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): disk space caching is enabled Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): has skinny extents Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 7795346113052941553 Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 113003311045498874 Dec 30 17:02:26 Tintin kernel: BTRFS warning (device loop3): failed to read tree root Dec 30 17:02:26 Tintin root: mount: /etc/libvirt: wrong fs type, bad option, bad superblock on /dev/loop3, missing codepage or helper program, or other error. Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): open_ctree failed Dec 30 17:02:26 Tintin root: mount error Do you have a backup of it? Also, does the following mean anything to you, since this all happened in quick succession? Dec 30 17:05:31 Tintin sshd[2376]: Invalid user yamilet from 92.242.240.17 port 56708 Dec 30 17:05:31 Tintin sshd[2376]: Received disconnect from 92.242.240.17 port 56708:11: Bye Bye [preauth] Dec 30 17:05:31 Tintin sshd[2376]: Disconnected from invalid user yamilet 92.242.240.17 port 56708 [preauth] Dec 30 17:06:20 Tintin sshd[3862]: Received disconnect from 112.162.191.160 port 33264:11: Bye Bye [preauth] Dec 30 17:06:20 Tintin sshd[3862]: Disconnected from authenticating user root 112.162.191.160 port 33264 [preauth] Dec 30 17:06:43 Tintin sshd[4599]: Invalid user pascal from 164.132.57.16 port 40849 Dec 30 17:06:43 Tintin sshd[4599]: Received disconnect from 164.132.57.16 port 40849:11: Bye Bye [preauth] Dec 30 17:06:43 Tintin sshd[4599]: Disconnected from invalid user pascal 164.132.57.16 port 40849 [preauth] Dec 30 17:10:30 Tintin sshd[11798]: Received disconnect from 49.234.30.113 port 45073:11: Bye Bye [preauth] Dec 30 17:10:30 Tintin sshd[11798]: Disconnected from authenticating user mail 49.234.30.113 port 45073 [preauth] Dec 30 17:12:02 Tintin webGUI: Successful login user root from 192.168.88.109 I do not. But there is nothing to important there. How do I create a new image? Tried to move it to a new location and restart, without anything happens.
December 30, 20196 yr Community Expert 2 minutes ago, Gaute said: How do I create a new image? On the VM settings stop the VM service, delete image, re-start service, a new image will be created, note all your VMs will disappear.
December 30, 20196 yr Author 11 minutes ago, johnnie.black said: On the VM settings stop the VM service, delete image, re-start service, a new image will be created, note all your VMs will disappear. Ok, it works. Thanks! Is there a way to import the vdisks from the old VMs or do I have to create them from scratch?
December 30, 20196 yr Community Expert 12 minutes ago, Gaute said: or do I have to create them from scratch? You'll need to recreate the VMs, but can use the old vdisks if the XML is identical/similar, at least with most of them, also for the future it's good practice to keep a backup of libvirt.img.
December 30, 20196 yr 3 hours ago, trurl said: https://www.abuseipdb.com/check/92.242.240.17 Croatia https://www.abuseipdb.com/check/112.162.191.160 Korea https://www.abuseipdb.com/check/164.132.57.16 France https://www.abuseipdb.com/check/49.234.30.113 China Take your server off the internet NOW!!! Personally, I'd be most worried about the guy from France
December 30, 20196 yr Community Expert 3 hours ago, Gaute said: Nice! Thanks! Why are you ignoring this? 5 hours ago, trurl said: https://www.abuseipdb.com/check/92.242.240.17 Croatia https://www.abuseipdb.com/check/112.162.191.160 Korea https://www.abuseipdb.com/check/164.132.57.16 France https://www.abuseipdb.com/check/49.234.30.113 China Take your server off the internet NOW!!! Do you know what you have done to allow this? Do you know how to stop it?
January 3, 20206 yr Author On 12/30/2019 at 11:05 PM, trurl said: Why are you ignoring this? Do you know what you have done to allow this? Do you know how to stop it? Not ignoring it. Just forgot to reply. I took the server offline. SSH is secured with rsa keys, and have passwordlogin disabled. So it should be okey to expose it? On 12/30/2019 at 9:04 PM, Squid said: Personally, I'd be most worried about the guy from France Frenchmen 🙄
Archived
This topic is now archived and is closed to further replies.