linuxaudio.org compromised - 2018-01-29

Check this forum for important info regarding the site.

Moderators: MattKingUSA, khz

User avatar
raboof
Established Member
Posts: 1855
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL
Has thanked: 50 times
Been thanked: 74 times
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Post by raboof »

Awesome, hang in there! ;)
Schwob
Established Member
Posts: 8
Joined: Sun Jun 05, 2016 9:27 pm

Re: linuxaudio.org compromised - 2018-01-29

Post by Schwob »

Thank you for your great work!
User avatar
Linuxmusician01
Established Member
Posts: 1524
Joined: Mon Feb 23, 2015 2:38 pm
Location: Holland
Has thanked: 756 times
Been thanked: 137 times

Re: linuxaudio.org compromised - 2018-01-29

Post by Linuxmusician01 »

The KXStudio repositories are to up again too so we can install our favorite software like we used to. :)
scacinto
Established Member
Posts: 20
Joined: Thu Sep 04, 2014 1:18 pm

Re: linuxaudio.org compromised - 2018-01-29

Post by scacinto »

I have three lab machines that I was unfortunately trying to install KXstudio on (repos) while the servers went down. I now have three systems that *think* kxstudio-meta-all and dependencies are installed, but they are not. After the server came up, I ran an update and upgraded Ardour, the repos, etc. However, a lot of software is missing, specifically plugins like CALF. When I try to reconfigure / force install or reinstall the meta packages they do so without complaint, but don't really seem to install anything. Attempting to install the kxstudio-meta-audio-plugins-vst, for example, also fails with an error:

Code: Select all

omiadmin@OMI-XPS-3:~$ sudo apt install --reinstall kxstudio-meta-audio-plugins-vst 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 kxstudio-meta-audio-plugins-vst : Depends: foo-yc20-vst but it is not installable
                                   Depends: mda-vst but it is not installable
E: Unable to correct problems, you have held broken packages.
Am I hosed and have to reinstall everything from scratch? Are there still packages missing/not yet configured after the crash? All ideas appreciated.
scacinto
Established Member
Posts: 20
Joined: Thu Sep 04, 2014 1:18 pm

Re: linuxaudio.org compromised - 2018-01-29

Post by scacinto »

Thanks, Falk - I'll give this a shot tomorrow.
User avatar
autostatic
Established Member
Posts: 1994
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Has thanked: 32 times
Been thanked: 104 times
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Post by autostatic »

This is going to take some time as it is a huge amount of work. All Apache configs will have to be updated to 2.4 standards (we came from 2.2), PHP code that doesn't work with PHP7 has to be traced down and updated and all database users have to be set up again. The following sites are back online:
scacinto
Established Member
Posts: 20
Joined: Thu Sep 04, 2014 1:18 pm

Re: linuxaudio.org compromised - 2018-01-29

Post by scacinto »

falkTX wrote:run this:

Code: Select all

sudo apt-get purge kxstudio-repos kxstudio-repos-gcc5
sudo rm -f /etc/apt/sources.list.d/kxstudio*
and add the kxstudio repos again.
So I gave this a shot and still had problems. A little snooping showed that some folders have the wrong permissions for some reason. As an example, /usr/lib/lv2

Code: Select all

...
drwxr-xr-x   2 root    4096 Aug  1  2017 lp_solve
drwx------ 469 root   20480 Feb  9 15:15 lv2
drwxr-xr-x   2 root    4096 Feb  9 15:13 lxvst
...
On my working machine (imaged prior to the hack, this folder as read access for group and world. I started my installs again from scratch figuring that perhaps something borked when the repos were down and messed everything up. However, I can confirm that this problem persists. I cannot confirm what, if any, other folders/files have permissions issues.
User avatar
autostatic
Established Member
Posts: 1994
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Has thanked: 32 times
Been thanked: 104 times
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Post by autostatic »

@scacinto, please open a new thread for this in the appropriate forum section, thanks!
User avatar
autostatic
Established Member
Posts: 1994
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Has thanked: 32 times
Been thanked: 104 times
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Post by autostatic »

The mailing list archives are back online too. Most of the LAC pages work again. This weekend we'll get mail working too. Almost there!
User avatar
autostatic
Established Member
Posts: 1994
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Has thanked: 32 times
Been thanked: 104 times
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Post by autostatic »

For those interested, the setup is now as follows:
- GlusterFS server with 1TB storage, on a private VLAN, no public IP, 2vCPU, 4GB RAM
- Web server with GlusterFS mount with public IP 185.54.115.200 (web1.linuxaudio.cyso.net), 4vCPU, 8GB RAM
- Mail server with public IP 185.54.115.210 (mail1.linuxaudio.cyso.net), 2vCPU, 4GB RAM

All servers are OpenStack Debian 9 VM's hosted at https://fuga.cloud/ which is a part of https://cyso.com/, the company I work for.
folderol
Established Member
Posts: 2072
Joined: Mon Sep 28, 2015 8:06 pm
Location: Here, of course!
Has thanked: 224 times
Been thanked: 400 times
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Post by folderol »

Good news indeed. That's an incredible amount of work.
I think we all owe you quite a few beers :lol:
The Yoshimi guy {apparently now an 'elderly'}
jonetsu
Established Member
Posts: 2036
Joined: Sat Jun 11, 2016 12:05 am
Has thanked: 10 times
Been thanked: 22 times

Re: linuxaudio.org compromised - 2018-01-29

Post by jonetsu »

folderol wrote:Good news indeed. That's an incredible amount of work. I think we all owe you quite a few beers :lol:
As a musician, I can offer a few bars.
Lyberta
Established Member
Posts: 681
Joined: Sat Nov 01, 2014 8:15 pm
Location: The Internet
Been thanked: 1 time

Re: linuxaudio.org compromised - 2018-01-29

Post by Lyberta »

jonetsu wrote:As a musician, I can offer a few bars.
Zing.
BlackGuyver78
Established Member
Posts: 4
Joined: Tue Jan 30, 2018 10:36 pm

Re: linuxaudio.org compromised - 2018-01-29

Post by BlackGuyver78 »

Thanks for all the hardwork. Everyone should definitely pitch in to write an opera about these linux heroes.
jonetsu
Established Member
Posts: 2036
Joined: Sat Jun 11, 2016 12:05 am
Has thanked: 10 times
Been thanked: 22 times

Re: linuxaudio.org compromised - 2018-01-29

Post by jonetsu »

Hi,

Is there a need to subscribe again to the list ?

Cheers.
Post Reply