How to manage a security breach on your server

Modern servers frequently run a multitude of software applications. In our case, we use Docker on the server to run multiple services. One of these services, Gitlab, had a security issue (gitlab workhorse more specifically). Which led to a trojan infection. (In our case, the binaries were called “wate” in case this matters to someone…

Weiterlesen

Raspbian SSH Server fails after upgrade from Stretch to Buster (no SSH connection)

I used this excellent guide to update my Raspbian from Stretch to Buster: https://pimylifeup.com/upgrade-raspbian-stretch-to-raspbian-buster/ After rebooting my Pi, the SSH connection was gone. Logging into the Pi using the attached keyboard and monitor allowed me to debug the issue: service ssh status journalctl -u ssh -n 200 “Missing privilege separation directory /run/sshd” This directory needs…

Weiterlesen

Chromium exit code -5

While running Chromium with chromium-browser –display=:0 https://www.picockpit.com will allow you to start Chromium from an SSH connection (and it will output to the main display in the X Server), this will fail when you try to run it with subprocess.Popen in Python: “command”: [“chromium-browser”, “–display=:0”, “https://picockpit.com”] (this is part of the JSON format I have…

Weiterlesen