linuxaudio.org compromised - 2018-01-29

Check this forum for important info regarding the site.

Moderators: khz, MattKingUSA

User avatar
raboof
Established Member
Posts: 1635
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby raboof » Thu Feb 08, 2018 12:20 am

Awesome, hang in there! ;)

Schwob
Established Member
Posts: 8
Joined: Sun Jun 05, 2016 9:27 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby Schwob » Thu Feb 08, 2018 11:00 am

Thank you for your great work!

User avatar
Linuxmusician01
Established Member
Posts: 630
Joined: Mon Feb 23, 2015 2:38 pm
Location: Holland

Re: linuxaudio.org compromised - 2018-01-29

Postby Linuxmusician01 » Thu Feb 08, 2018 1:28 pm

The KXStudio repositories are to up again too so we can install our favorite software like we used to. :)

scacinto
Established Member
Posts: 20
Joined: Thu Sep 04, 2014 1:18 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby scacinto » Thu Feb 08, 2018 6:26 pm

I have three lab machines that I was unfortunately trying to install KXstudio on (repos) while the servers went down. I now have three systems that *think* kxstudio-meta-all and dependencies are installed, but they are not. After the server came up, I ran an update and upgraded Ardour, the repos, etc. However, a lot of software is missing, specifically plugins like CALF. When I try to reconfigure / force install or reinstall the meta packages they do so without complaint, but don't really seem to install anything. Attempting to install the kxstudio-meta-audio-plugins-vst, for example, also fails with an error:

Code: Select all

omiadmin@OMI-XPS-3:~$ sudo apt install --reinstall kxstudio-meta-audio-plugins-vst
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 kxstudio-meta-audio-plugins-vst : Depends: foo-yc20-vst but it is not installable
                                   Depends: mda-vst but it is not installable
E: Unable to correct problems, you have held broken packages.


Am I hosed and have to reinstall everything from scratch? Are there still packages missing/not yet configured after the crash? All ideas appreciated.

scacinto
Established Member
Posts: 20
Joined: Thu Sep 04, 2014 1:18 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby scacinto » Fri Feb 09, 2018 1:17 am

Thanks, Falk - I'll give this a shot tomorrow.

User avatar
autostatic
Established Member
Posts: 1728
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby autostatic » Fri Feb 09, 2018 2:31 pm

This is going to take some time as it is a huge amount of work. All Apache configs will have to be updated to 2.4 standards (we came from 2.2), PHP code that doesn't work with PHP7 has to be traced down and updated and all database users have to be set up again. The following sites are back online:
  • https://kxstudio.linuxaudio.org/
  • https://wiki.linuxaudio.org/
  • https://lac.linuxaudio.org/ (some loose ends, WIP)
  • https://linuxaudio.org/
  • https://kokkinizita.linuxaudio.org/
  • https://download.linuxaudio.org/

scacinto
Established Member
Posts: 20
Joined: Thu Sep 04, 2014 1:18 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby scacinto » Fri Feb 09, 2018 8:43 pm

falkTX wrote:run this:

Code: Select all

sudo apt-get purge kxstudio-repos kxstudio-repos-gcc5
sudo rm -f /etc/apt/sources.list.d/kxstudio*


and add the kxstudio repos again.


So I gave this a shot and still had problems. A little snooping showed that some folders have the wrong permissions for some reason. As an example, /usr/lib/lv2

Code: Select all

...
drwxr-xr-x   2 root    4096 Aug  1  2017 lp_solve
drwx------ 469 root   20480 Feb  9 15:15 lv2
drwxr-xr-x   2 root    4096 Feb  9 15:13 lxvst
...


On my working machine (imaged prior to the hack, this folder as read access for group and world. I started my installs again from scratch figuring that perhaps something borked when the repos were down and messed everything up. However, I can confirm that this problem persists. I cannot confirm what, if any, other folders/files have permissions issues.

User avatar
autostatic
Established Member
Posts: 1728
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby autostatic » Fri Feb 09, 2018 9:29 pm

@scacinto, please open a new thread for this in the appropriate forum section, thanks!

User avatar
autostatic
Established Member
Posts: 1728
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby autostatic » Fri Feb 09, 2018 10:37 pm

The mailing list archives are back online too. Most of the LAC pages work again. This weekend we'll get mail working too. Almost there!

User avatar
autostatic
Established Member
Posts: 1728
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby autostatic » Fri Feb 09, 2018 10:52 pm

For those interested, the setup is now as follows:
- GlusterFS server with 1TB storage, on a private VLAN, no public IP, 2vCPU, 4GB RAM
- Web server with GlusterFS mount with public IP 185.54.115.200 (web1.linuxaudio.cyso.net), 4vCPU, 8GB RAM
- Mail server with public IP 185.54.115.210 (mail1.linuxaudio.cyso.net), 2vCPU, 4GB RAM

All servers are OpenStack Debian 9 VM's hosted at https://fuga.cloud/ which is a part of https://cyso.com/, the company I work for.

folderol
Established Member
Posts: 921
Joined: Mon Sep 28, 2015 8:06 pm
Location: Here, of course!
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby folderol » Sat Feb 10, 2018 1:55 am

Good news indeed. That's an incredible amount of work.
I think we all owe you quite a few beers :lol:

jonetsu
Established Member
Posts: 1429
Joined: Sat Jun 11, 2016 12:05 am

Re: linuxaudio.org compromised - 2018-01-29

Postby jonetsu » Sun Feb 11, 2018 4:24 pm

folderol wrote:Good news indeed. That's an incredible amount of work. I think we all owe you quite a few beers :lol:


As a musician, I can offer a few bars.

Lyberta
Established Member
Posts: 681
Joined: Sat Nov 01, 2014 8:15 pm
Location: The Internet

Re: linuxaudio.org compromised - 2018-01-29

Postby Lyberta » Mon Feb 12, 2018 8:18 pm

jonetsu wrote:As a musician, I can offer a few bars.


Zing.

BlackGuyver78
Established Member
Posts: 4
Joined: Tue Jan 30, 2018 10:36 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby BlackGuyver78 » Tue Feb 13, 2018 9:41 pm

Thanks for all the hardwork. Everyone should definitely pitch in to write an opera about these linux heroes.

jonetsu
Established Member
Posts: 1429
Joined: Sat Jun 11, 2016 12:05 am

Re: linuxaudio.org compromised - 2018-01-29

Postby jonetsu » Wed Feb 14, 2018 3:53 pm

Hi,

Is there a need to subscribe again to the list ?

Cheers.


Return to “Announcements”

Who is online

Users browsing this forum: No registered users and 1 guest