What exactly is a kernel and when will we need to ask the server management to update it? Read quite a few posts here indicating that kernel's were vulnerable to security issues. Still trying to learn all the to do's for hosting websites on a dedicated server.
View 5 Replies
i have buy a server todag and i need to now who icant
how kernel updating and ssh and anther software in the my new server
we have one box in hivelocity.net that has been down so many times this month that we were forced to remove links to siteuptime where we were once so proud of having a 99.7% uptime for 3 years in theplanet.
syslog shows that just before crashing, these entries were made:
kernel: kernel BUG at mm/rmap.c:479
kernel: invalid operand:0000 [#1]
dmesg also shows this:
...
Brought up 2 CPUs
zapping low mappings.
checking if image is initramfs... it is
Freeing initrd memory: 482k freed
NET: Registered protocol family 16
PCI: PCI BIOS revision 2.10 entry at 0xf9f20, last bus=1
PCI: Using configuration type 1
mtrr: v2.0 (20020519)
mtrr: your CPUs had inconsistent fixed MTRR settings
mtrr: probably your BIOS does not setup all CPUs.
mtrr: corrected configuration.
...
i've googled these messages and they point to ram problems.
hivelocity.net claims to have done diagnostics on the box and that there were no problems reported.
they said this is a result of a sys configuration problem made by us.
any ideas?
running centos/virtuozzo 2.6.18-028stab062.3
when i configure vmware it asks at one point for kernel header files. where would i find them to match the current kernel?
i asked at parallels forums but help there is very scarce. i checked openVZ repositories and they dont yet have headers for this version.
what are my options? i have one last windows machine left and want to run it in VMware.
Last year I ordered a new server with Centos 4.3 and it had the kernel kernel 2.6.9-34.0.2ELsmp installed. It runned fine and I didn't update any packages since then.
Today I started getting a problem where both mysqld and kswapd0 uses very high amounts of CPU, spiking up to 100% and my memory usage is at 99% all the time. The problem seems exactly the same as the one mentioned in this thread.
In that thread the exact same kernel is said to be insecure and to cause this problem. I also came across a centOS bug that reports this problem with high cpu, mem usage and mysql & kswapd0 consuming all resources.
In the linked thread the person solved the problem by upgrading to kernel 2.6.9-42 using rpms but others recommended a newer kernel or a custom compiled kernel for CentOS.
Apparently when they used yum it said 34.0.2 was the latest kernel.
What should I do to upgrade the kernel, which version should i upgrade to, and where do I get it from? I won't be able to compile a custom kernel and I've only installed basic rpm packages before.
I am trying to install the kernel source.
I have downloaded kernel-2.6.20-1.2948.fc6.src.rpm
I am using fedora 6 64bit.
here are my current kernels:
kernel-headers-2.6.20-1.2948.fc6
kernel-devel-2.6.20-1.2944.fc6
yum-kernel-module-1.0.3-1.fc6
kernel-2.6.20-1.2944.fc6
kernel-devel-2.6.20-1.2948.fc6
kernel-2.6.20-1.2948.fc6
here is what I seen when I installed kernel-2.6.20-1.2948.fc6.src.rpm
rpm -ivh kernel-2.6.20-1.2948.fc6.src.rpm
1:kernel warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
warning: user brewbuilder does not exist - using root
########################################### [100%]
warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
then when I ran:
rpmbuild -bp --target=$(uname -m) /usr/src/redhat/SPECS/kernel-2.6.spec
I seen this error:
+ Arch=x86_64
+ make ARCH=x86_64 nonint_oldconfig
In file included from /usr/include/sys/socket.h:35,
from /usr/include/netinet/in.h:24,
from /usr/include/arpa/inet.h:23,
from scripts/basic/fixdep.c:117:
/usr/include/bits/socket.h:310:24: error: asm/socket.h: No such file or directory
make[1]: *** [scripts/basic/fixdep] Error 1
make: *** [scripts_basic] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.93770 (%prep)
I need to have this installed to get a app installed etc...
suggestions or ideas?
thanks
I recently had Fantastico update issues, my fantistico was giving me errors such as "This feature is currently not availabel, please contact your host." lol
I tried lodging a CRON job to do the update ...but waited 72 hours and nothing ! lol
Later i found our that the Fantastico licensing server was down for a while lol
Any one had this issue lately ... ?
i just installed rpmforge repo and updated the my vps everything went fine now every thing is fine exept ftp i have tried both pure-ftp and pro-ftp both are not workingh the port 21 is used by xinetd i am not able to find out what to due the ftp installs successfully but after installations is done it give Failed on restarting stopping or starting
WHat can i do to remove this i used the status command to
/etc/init.d/pureftpd status
Pureftpd is dead
this is what i got
Pro-ftpd gives error unable to bind ip at port 21
I'm trying to figure out which security measures to apply to my new server. I last tweaked security on a web server four years ago, and it seems like these days cPanel does automatically much that I did manually before. CSF seems to help with a lot of the rest.
I know chrooted BIND was all the rage, for example, four years ago, but now I can hardly find mention of it. Is it still worth it?
also, thoughts on changing the SSH port? Is that really worth it? I presume that means users would manually have to specify the SSH port every time they wished to connect...
I have just got the new server adn I tried to check bandwidth usage via 'Bandmin' but it seems like not updating because its all 0,
Last updated Fri Feb 2 21:00:04 2007
Ip Possible Domain(s) Transfer in gig Transfer in meg Transfer in kbit/s Transfer in kb/s Transfer in mbit/s
Total in 0.000000 0 0.000000 0.000000 0.000000
root@server [/scripts]# ./runweblogs username
Log checker loaded ok..
==> WARNING: The configured processor count does not match the
==> actual processor count (4)! Running log analysis programs
==> on this system may cause excessive load! You should set "extracpus"
==> to "0" in /var/cpanel/cpanel.config if this is not ok.
==> cPanel Log Daemon version 22.2
==> Shared RRDTOOL support enabled
==> Starting cpbandwd (bandwidth monitoring for IMAP/POP)
cpbandwd is already running.
Processing eldred...
Run Logs domain: domain.com BW Limit: 262144000000 Domains: [save.domain.com save.info store.domain.com]
Stats are not updating for this account. I ran this twice, keeps getting stuck at this line forever..
Run Logs domain: domain.com BW Limit: 262144000000 Domains: [save.domain.com save.info store.domain.com]
My Awstats is updating every other day and I would like it to up date daily.
I am in my third month of hosting and in about first 2 months, Awstats would update every day.
I have searched and read where it is possible to get Awstats to update manualy but it seems that my scenario isn't the same as everyone else's.
I am accessing my Awstats through CPanel and there is no way that I see to modify when Awstats updates.
How can I update mod_security rules in Cpanel/WHM server from gotroot.com?
View 3 Replies View Relatedim trying to update my php version to 5.2+ so i can run phpmyadmin on my server. Ive tried two different methods both produced same results. First method was to download libxml2-2.7.3 and then do ./configure, make,etc then i download php, ./configure, make install, etc. At first i had to yum install make, then a c complier cause make and ./configure didnt work before that. After everything seemed to work fine until the end when it said you may have found a bug on php would you like to submit it? So obviously the php version didnt update at all.
Next i tried adding a repo that already contained php-5.2.5 and then yum install php since centos only seems to support regular yum install up to php version 5.1.6. i did rpm and installed php and thought sweet ive updated php. Ran php -v and i am still running php version 5.1.6.
We have dedicated server (Cpanel installed) in that I would like to install the mod_evasive for disabling the DOS attack. So that I have followed the below url
[url]
In that httpd-devel asked to update.
# up2date install httpd-devel*
When I update the httpd-devel I got message like
The following Packages were marked to be skipped by your configuration:
Name Version Rel Reason
-------------------------------------------------------------------------------
httpd-devel 2.0.52 38.ent.2Pkg name/pattern
The following wildcards did not match any packages:
httpd-devel*
So that I have removed the pkg-skip list from up2date command
# vi /etc/sysconfig/rhn/up2date
and tryied to update
# up2date install httpd-devel*
Later I am getting the following message.
Fetching Obsoletes list for channel: rhel-i386-es-4...
Fetching Obsoletes list for channel: rhel-i386-es-4-extras...
Fetching rpm headers...
########################################
Name Version Rel
----------------------------------------------------------
httpd-devel 2.0.52 38.ent.2 i386
An error has occurred:
xmlrpclib.Fault
I was developing a website on my friend's server.
Due to some DNS problems we couldn't figure out how to resolve, I decided to just go commercial and bought a Dreamhost package.
I updated the nameservers and the DNS has since propagated. At work today, starting with the fresh, new root, I installed vbulletin and started configuring my website checking my progress live.
However, I get home and I go to my URL and it's still the same as it was when my website was hosted on my friend's server. With a DNS and WHOIS check, the nameservers definately propagated correctly. The FTP contents are the way they were at work. I've cleared all my cache and private data. However I STILL see the old "revert" of what my website USED to contain.
I called up a friend to go to my website and he says it's displaying what it should and verified that it's just on my side. How can I resolve this?
I've reset my router and modem and computer and cleared every temp and cache I know about.
I have searched the whole forum for help on this but couldnt find anything.
I have postfix running on a backup mx server for a plesk box. The backup mx does a very good job of reducing spam and virus to my plesk box thanks to mailscanner.
The problem i have now is i have to manually update postfix transport and relay_recipients file everytime a new domain is created in plesk. Do any one know how i can create a custom script that will pull domain information from my plesk box and will update postfix on the backup mx server. Maybe a website with information that can help.
i can always set a cron to run the postmap command to update the tables but i will need to update the respective files (transport, relay_recipients) first.
I have the following setup in cron for my MRTG stats:
0,10,20,30,40,50 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/bandwidth.cfg
0,11,21,31,41,51 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/cpu.cfg
0,12,22,32,42,52 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/cpu-temp.cfg
0,13,23,33,43,53 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/ping.cfg
0,15,25,35,45,55 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/memory.cfg
0,16,26,36,46,56 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/newconns.cfg
0,17,27,37,47,57 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/estabcons.cfg
0,18,28,38,48,58 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/ping2.cfg
But I'm not sure how much power it actually takes to generate theses MRTG stats... The server is a Celeron D 2.8Ghz, 512Mb ATA soft raid system. Do you think that I should update the stats less frequently to decrease the server usage?
I have the following setup in cron for my MRTG stats:
0,10,20,30,40,50 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/bandwidth.cfg
0,11,21,31,41,51 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/cpu.cfg
0,12,22,32,42,52 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/cpu-temp.cfg
0,13,23,33,43,53 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/ping.cfg
0,15,25,35,45,55 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/memory.cfg
0,16,26,36,46,56 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/newconns.cfg
0,17,27,37,47,57 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/estabcons.cfg
0,18,28,38,48,58 * * * * env LANG=C ../../mrtg-2/bin/mrtg ../...stats/ping2.cfg
But I'm not sure how much power it actually takes to generate theses MRTG stats... The server is a Celeron D 2.8Ghz, 512Mb ATA soft raid system. Do you think that I should update the stats less frequently to decrease the server usage?
I designed one of my web services so that 'nobody' has to put commands to cron. Unfortunately this thing stops to work from time to time because "someone" is putting 'nobody' back to cron.deny file.
How to stop that?
On a cPanel server, running RHEL 4 I got the following error (from cpanel logs) while associating an user with a DB from the cPanel admin:
Fri Apr 11 17:02:47 2008 info [Cpanel::Mysql]: Not updating privileges for user (reseller login and no password specified in ~/.my.cnf) at /usr/local/cpanel/Cpanel/Mysql.pm line 268
Cpanel::Mysql::updateprivs('Cpanel::Mysql=HASH(0xa4a8768)') called at /usr/local/cpanel/bin/mysqladmin line 88
Fri Apr 11 17:02:47 2008 info [Cpanel::Mysql]: Not updating privileges for user (reseller login and no password specified in ~/.my.cnf) at /usr/local/cpanel/Cpanel/Mysql.pm line 268
In fact, from cPanel interface all privileges are added OK, but the MySQL itself is not connecting at all due to this error.
I already tried:
/scripts/mysqlup --force
/scripts/upcp --force
/usr/bin/mysql_fix_privilege_tables -u root --password=PASSWORD
I can't seem to solve, perhaps you could give me some pointers or tips on how to fix this.
All the cPanel stats programs (Awstats etc..) haven't been updated since the 17th June but when I login to WHM it says the stats have been updated (within the past 24 hours).
On the 17th June I moved my hosting operations from the USA to the UK onto a new webserver.
How can I make sure these statistic programs are updated and shown from cPanel, even though I can tell it to update via SSH (completes) and claims in WHM with no problems (updated with in 24 hours), the new stats still fail to appear.
I am on a softlayer server with centos 4.x installed. I have a custom php 4.4.6 installed along with eaccelerator 0.95. This is what I need:
PHP 5 with:
zlib
jpeg
mysql
freetype
gd
my current configure string is:
'./configure'
'--with-apxs2=/usr/sbin/apxs'
'--with-mysql'
'--enable-wddx'
'--with-ldap=shared'
'--with-mysql--enable-memory-limit'
'--enable-shmop'
'--enable-calendar'
'--enable-dbx'
'--enable-dio'
'--enable-mbstring'
'--with-zlib'
'--enable-exif'
'--with-gd=/usr/local'
I want to update to PHP5, but I want to make sure I have all the extras I need. I'm also worried that if I install PHP5 that eaccelerator will break. Will that need to be reinstalled?
Could someone walk me through this procedure? I can ask SoftLayer to upgrade PHP5, but I doubt they will touch eaccelerator.
I renewed an SSL cert for one of my servers. After several hours, then days I noticed that the date had not updated to show the new expiration date.
When I do an ssl check through [URL] it shows the following when scanning https://webhost1.teksavvy.com:8443:
Valid from: 2014-Apr-11 00:00:00 GMT
Valid to: 2015-Apr-11 23:59:59 GMT
When scanning https://webhost1.teksavvy.com it shows:
[Code]....
We have change IP from NS server in Plesk.Why can we force refresh named.conf (for all domains) ? Informations stay with old IP.We can force one domain when we change an information in the DNS and we validate. But Hown can we change all domains?
Example:
Old
> NS server1.com (x.x.x.1)
New
> NS server1.com (x.x.x.2)
[code]....
