Libvirt Service failed to start.


Gaute

Recommended Posts

the libvirt image has some problems

Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): disk space caching is enabled
Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): has skinny extents
Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 7795346113052941553
Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 113003311045498874
Dec 30 17:02:26 Tintin kernel: BTRFS warning (device loop3): failed to read tree root
Dec 30 17:02:26 Tintin root: mount: /etc/libvirt: wrong fs type, bad option, bad superblock on /dev/loop3, missing codepage or helper program, or other error.
Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): open_ctree failed
Dec 30 17:02:26 Tintin root: mount error

Do you have a backup of it?

 

Also, does the following mean anything to you, since this all happened in quick succession?

Dec 30 17:05:31 Tintin sshd[2376]: Invalid user yamilet from 92.242.240.17 port 56708
Dec 30 17:05:31 Tintin sshd[2376]: Received disconnect from 92.242.240.17 port 56708:11: Bye Bye [preauth]
Dec 30 17:05:31 Tintin sshd[2376]: Disconnected from invalid user yamilet 92.242.240.17 port 56708 [preauth]
Dec 30 17:06:20 Tintin sshd[3862]: Received disconnect from 112.162.191.160 port 33264:11: Bye Bye [preauth]
Dec 30 17:06:20 Tintin sshd[3862]: Disconnected from authenticating user root 112.162.191.160 port 33264 [preauth]
Dec 30 17:06:43 Tintin sshd[4599]: Invalid user pascal from 164.132.57.16 port 40849
Dec 30 17:06:43 Tintin sshd[4599]: Received disconnect from 164.132.57.16 port 40849:11: Bye Bye [preauth]
Dec 30 17:06:43 Tintin sshd[4599]: Disconnected from invalid user pascal 164.132.57.16 port 40849 [preauth]
Dec 30 17:10:30 Tintin sshd[11798]: Received disconnect from 49.234.30.113 port 45073:11: Bye Bye [preauth]
Dec 30 17:10:30 Tintin sshd[11798]: Disconnected from authenticating user mail 49.234.30.113 port 45073 [preauth]
Dec 30 17:12:02 Tintin webGUI: Successful login user root from 192.168.88.109

 

Link to comment
11 minutes ago, Squid said:

Also, does the following mean anything to you, since this all happened in quick succession?


Dec 30 17:05:31 Tintin sshd[2376]: Invalid user yamilet from 92.242.240.17 port 56708
Dec 30 17:05:31 Tintin sshd[2376]: Received disconnect from 92.242.240.17 port 56708:11: Bye Bye [preauth]
Dec 30 17:05:31 Tintin sshd[2376]: Disconnected from invalid user yamilet 92.242.240.17 port 56708 [preauth]
Dec 30 17:06:20 Tintin sshd[3862]: Received disconnect from 112.162.191.160 port 33264:11: Bye Bye [preauth]
Dec 30 17:06:20 Tintin sshd[3862]: Disconnected from authenticating user root 112.162.191.160 port 33264 [preauth]
Dec 30 17:06:43 Tintin sshd[4599]: Invalid user pascal from 164.132.57.16 port 40849
Dec 30 17:06:43 Tintin sshd[4599]: Received disconnect from 164.132.57.16 port 40849:11: Bye Bye [preauth]
Dec 30 17:06:43 Tintin sshd[4599]: Disconnected from invalid user pascal 164.132.57.16 port 40849 [preauth]
Dec 30 17:10:30 Tintin sshd[11798]: Received disconnect from 49.234.30.113 port 45073:11: Bye Bye [preauth]
Dec 30 17:10:30 Tintin sshd[11798]: Disconnected from authenticating user mail 49.234.30.113 port 45073 [preauth]
Dec 30 17:12:02 Tintin webGUI: Successful login user root from 192.168.88.109

 

https://www.abuseipdb.com/check/92.242.240.17 Croatia

https://www.abuseipdb.com/check/112.162.191.160 Korea

https://www.abuseipdb.com/check/164.132.57.16 France

https://www.abuseipdb.com/check/49.234.30.113 China

 

Take your server off the internet NOW!!!

Link to comment
1 hour ago, Squid said:

the libvirt image has some problems


Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): disk space caching is enabled
Dec 30 17:02:26 Tintin kernel: BTRFS info (device loop3): has skinny extents
Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 7795346113052941553
Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): bad tree block start, want 30539776 have 113003311045498874
Dec 30 17:02:26 Tintin kernel: BTRFS warning (device loop3): failed to read tree root
Dec 30 17:02:26 Tintin root: mount: /etc/libvirt: wrong fs type, bad option, bad superblock on /dev/loop3, missing codepage or helper program, or other error.
Dec 30 17:02:26 Tintin kernel: BTRFS error (device loop3): open_ctree failed
Dec 30 17:02:26 Tintin root: mount error

Do you have a backup of it?

 

Also, does the following mean anything to you, since this all happened in quick succession?


Dec 30 17:05:31 Tintin sshd[2376]: Invalid user yamilet from 92.242.240.17 port 56708
Dec 30 17:05:31 Tintin sshd[2376]: Received disconnect from 92.242.240.17 port 56708:11: Bye Bye [preauth]
Dec 30 17:05:31 Tintin sshd[2376]: Disconnected from invalid user yamilet 92.242.240.17 port 56708 [preauth]
Dec 30 17:06:20 Tintin sshd[3862]: Received disconnect from 112.162.191.160 port 33264:11: Bye Bye [preauth]
Dec 30 17:06:20 Tintin sshd[3862]: Disconnected from authenticating user root 112.162.191.160 port 33264 [preauth]
Dec 30 17:06:43 Tintin sshd[4599]: Invalid user pascal from 164.132.57.16 port 40849
Dec 30 17:06:43 Tintin sshd[4599]: Received disconnect from 164.132.57.16 port 40849:11: Bye Bye [preauth]
Dec 30 17:06:43 Tintin sshd[4599]: Disconnected from invalid user pascal 164.132.57.16 port 40849 [preauth]
Dec 30 17:10:30 Tintin sshd[11798]: Received disconnect from 49.234.30.113 port 45073:11: Bye Bye [preauth]
Dec 30 17:10:30 Tintin sshd[11798]: Disconnected from authenticating user mail 49.234.30.113 port 45073 [preauth]
Dec 30 17:12:02 Tintin webGUI: Successful login user root from 192.168.88.109

 

I do not. But there is nothing to important there. How do I create a new image? Tried to move it to a new location and restart, without anything happens.

Link to comment
11 minutes ago, johnnie.black said:

On the VM settings stop the VM service, delete image, re-start service, a new image will be created, note all your VMs will disappear.

Ok, it works. Thanks!

Is there a way to import the vdisks from the old VMs or do I have to create them from scratch?

Link to comment
3 hours ago, Gaute said:

Nice!

Thanks!

Why are you ignoring this?

5 hours ago, trurl said:

Do you know what you have done to allow this? Do you know how to stop it?

Link to comment
On 12/30/2019 at 11:05 PM, trurl said:

Why are you ignoring this?

Do you know what you have done to allow this? Do you know how to stop it?

Not ignoring it. Just forgot to reply.

 

I took the server offline. SSH is secured with rsa keys, and have passwordlogin disabled. So it should be okey to expose it?

 

On 12/30/2019 at 9:04 PM, Squid said:

Personally, I'd be most worried about the guy from France ;) 

Frenchmen 🙄

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.