auf einem RASPI3B unter Buster läuft seit ca. 1 Jahr FHEM auf einer SSD.
Heute habe ich bei einem LaCrosse-Device die Batterien gewechselt, worauf der FHEM-Server beim speichern der config abschmierte.
Reboot des Systems führte dazu, dass FHEM nicht mehr startete.
Ich kopierte eine configfhem aus der Sicherung zurück.
Soweit gut; der FHEM-Server läuft prima.
Leider startet der MySQL-Server nicht mehr.
Code: Alles auswählen
dblog_THB
DBI connect('database=fhem;host=localhost;port=3306','fhemuser',...) failed: Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) at ./FHEM/93_DbLog.pm line 3253.
at
DbLog_reducelog 1 1:40
Next: 01:40:00
DbLog_reopen
Next: 01:30:00
THBDUMP 4:00
Next: 04:00:00
das Verzeichnis '/var/run/mysqld/ ist leer.
systemctl status mysql.service
Code: Alles auswählen
root@THB-PI3B1:~# systemctl status mysql.service
● mariadb.service - MariaDB 10.3.31 database server
Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor preset:
Active: failed (Result: exit-code) since Thu 2022-04-07 19:35:23 CEST; 3h 1mi
Docs: man:mysqld(8)
https://mariadb.com/kb/en/library/systemd/
Process: 514 ExecStartPre=/usr/bin/install -m 755 -o mysql -g root -d /var/run
Process: 522 ExecStartPre=/bin/sh -c systemctl unset-environment _WSREP_START_
Process: 542 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ] && VAR=
Process: 619 ExecStart=/usr/sbin/mysqld $MYSQLD_OPTS $_WSREP_NEW_CLUSTER $_WSR
Main PID: 619 (code=exited, status=1/FAILURE)
Status: "MariaDB server is down"
Apr 07 19:35:11 THB-PI3B1 systemd[1]: Starting MariaDB 10.3.31 database server..
Apr 07 19:35:14 THB-PI3B1 mysqld[619]: 2022-04-07 19:35:14 0 [Note] /usr/sbin/my
Apr 07 19:35:23 THB-PI3B1 systemd[1]: mariadb.service: Main process exited, code
Apr 07 19:35:23 THB-PI3B1 systemd[1]: mariadb.service: Failed with result 'exit-
Apr 07 19:35:23 THB-PI3B1 systemd[1]: Failed to start MariaDB 10.3.31 database s
lines 1-17/17 (END)...skipping...
● mariadb.service - MariaDB 10.3.31 database server
Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Thu 2022-04-07 19:35:23 CEST; 3h 1min ago
Docs: man:mysqld(8)
https://mariadb.com/kb/en/library/systemd/
Process: 514 ExecStartPre=/usr/bin/install -m 755 -o mysql -g root -d /var/run/mysqld (code=exited, status=0/SUCCESS)
Process: 522 ExecStartPre=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited, status=0/SUCCESS)
Process: 542 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ] && VAR= || VAR=`cd /usr/bin/..; /usr/bin/galera_recovery`; [ $? -eq 0 ] && systemctl set-environment _WSREP_START_POSITION=$VAR || exit 1 (code=exited, status=0/SUCCESS)
Process: 619 ExecStart=/usr/sbin/mysqld $MYSQLD_OPTS $_WSREP_NEW_CLUSTER $_WSREP_START_POSITION (code=exited, status=1/FAILURE)
Main PID: 619 (code=exited, status=1/FAILURE)
Status: "MariaDB server is down"
Apr 07 19:35:11 THB-PI3B1 systemd[1]: Starting MariaDB 10.3.31 database server...
Apr 07 19:35:14 THB-PI3B1 mysqld[619]: 2022-04-07 19:35:14 0 [Note] /usr/sbin/mysqld (mysqld 10.3.31-MariaDB-0+deb10u1) starting as process 619 ...
Apr 07 19:35:23 THB-PI3B1 systemd[1]: mariadb.service: Main process exited, code=exited, status=1/FAILURE
Apr 07 19:35:23 THB-PI3B1 systemd[1]: mariadb.service: Failed with result 'exit-code'.
Apr 07 19:35:23 THB-PI3B1 systemd[1]: Failed to start MariaDB 10.3.31 database server.
Code: Alles auswählen
root@THB-PI3B1:~# journalctl -xe
Apr 07 22:36:42 THB-PI3B1 sshd[2653]: Disconnected from invalid user azure 61.161.108.170 port 40672 [preauth]
Apr 07 22:36:43 THB-PI3B1 sshd[2655]: Failed password for invalid user cardman from 183.94.36.8 port 27513 ssh2
Apr 07 22:36:45 THB-PI3B1 sshd[2655]: Received disconnect from 183.94.36.8 port 27513:11: Bye Bye [preauth]
Apr 07 22:36:45 THB-PI3B1 sshd[2655]: Disconnected from invalid user cardman 183.94.36.8 port 27513 [preauth]
Apr 07 22:36:46 THB-PI3B1 sshd[2659]: Invalid user bmjereza from 194.150.88.241 port 40210
Apr 07 22:36:46 THB-PI3B1 sshd[2659]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:36:46 THB-PI3B1 sshd[2659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.150.88.241
Apr 07 22:36:48 THB-PI3B1 sshd[2659]: Failed password for invalid user bmjereza from 194.150.88.241 port 40210 ssh2
Apr 07 22:36:48 THB-PI3B1 sshd[2659]: Received disconnect from 194.150.88.241 port 40210:11: Bye Bye [preauth]
Apr 07 22:36:48 THB-PI3B1 sshd[2659]: Disconnected from invalid user bmjereza 194.150.88.241 port 40210 [preauth]
Apr 07 22:37:05 THB-PI3B1 sshd[2665]: Invalid user kksena from 72.167.32.166 port 58116
Apr 07 22:37:05 THB-PI3B1 sshd[2665]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:37:05 THB-PI3B1 sshd[2665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.167.32.166
Apr 07 22:37:07 THB-PI3B1 sshd[2665]: Failed password for invalid user kksena from 72.167.32.166 port 58116 ssh2
Apr 07 22:37:08 THB-PI3B1 sshd[2665]: Received disconnect from 72.167.32.166 port 58116:11: Bye Bye [preauth]
Apr 07 22:37:08 THB-PI3B1 sshd[2665]: Disconnected from invalid user kksena 72.167.32.166 port 58116 [preauth]
Apr 07 22:37:29 THB-PI3B1 kernel: w1_master_driver w1_bus_master1: Attaching one wire slave 00.9e0000000000 crc 0e
Apr 07 22:37:29 THB-PI3B1 kernel: w1_master_driver w1_bus_master1: Family 0 for 00.9e0000000000.0e is not registered.
Apr 07 22:37:42 THB-PI3B1 sshd[2673]: Invalid user renato from 27.71.238.208 port 59118
Apr 07 22:37:42 THB-PI3B1 sshd[2673]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:37:42 THB-PI3B1 sshd[2673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.71.238.208
Apr 07 22:37:44 THB-PI3B1 sshd[2673]: Failed password for invalid user renato from 27.71.238.208 port 59118 ssh2
Apr 07 22:37:47 THB-PI3B1 sshd[2673]: Received disconnect from 27.71.238.208 port 59118:11: Bye Bye [preauth]
Apr 07 22:37:47 THB-PI3B1 sshd[2673]: Disconnected from invalid user renato 27.71.238.208 port 59118 [preauth]
Apr 07 22:38:07 THB-PI3B1 kernel: w1_master_driver w1_bus_master1: Attaching one wire slave 00.5e0000000000 crc c4
Apr 07 22:38:07 THB-PI3B1 kernel: w1_master_driver w1_bus_master1: Family 0 for 00.5e0000000000.c4 is not registered.
Apr 07 22:38:10 THB-PI3B1 sshd[2679]: Invalid user adminc from 107.170.76.170 port 56551
Apr 07 22:38:10 THB-PI3B1 sshd[2679]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:38:10 THB-PI3B1 sshd[2679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.76.170
Apr 07 22:38:12 THB-PI3B1 sshd[2679]: Failed password for invalid user adminc from 107.170.76.170 port 56551 ssh2
Apr 07 22:38:12 THB-PI3B1 sshd[2679]: Received disconnect from 107.170.76.170 port 56551:11: Bye Bye [preauth]
Apr 07 22:38:12 THB-PI3B1 sshd[2679]: Disconnected from invalid user adminc 107.170.76.170 port 56551 [preauth]
Apr 07 22:38:19 THB-PI3B1 sshd[2685]: Invalid user hcf from 161.35.123.168 port 45790
Apr 07 22:38:19 THB-PI3B1 sshd[2685]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:38:19 THB-PI3B1 sshd[2685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.123.168
Apr 07 22:38:21 THB-PI3B1 sshd[2685]: Failed password for invalid user hcf from 161.35.123.168 port 45790 ssh2
Apr 07 22:38:21 THB-PI3B1 sshd[2685]: Received disconnect from 161.35.123.168 port 45790:11: Bye Bye [preauth]
Apr 07 22:38:21 THB-PI3B1 sshd[2685]: Disconnected from invalid user hcf 161.35.123.168 port 45790 [preauth]
Apr 07 22:38:27 THB-PI3B1 sshd[2689]: Invalid user amosunsunday from 72.167.32.166 port 50230
Apr 07 22:38:27 THB-PI3B1 sshd[2689]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:38:27 THB-PI3B1 sshd[2689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.167.32.166
Apr 07 22:38:29 THB-PI3B1 sshd[2689]: Failed password for invalid user amosunsunday from 72.167.32.166 port 50230 ssh2
Apr 07 22:38:31 THB-PI3B1 sshd[2689]: Received disconnect from 72.167.32.166 port 50230:11: Bye Bye [preauth]
Apr 07 22:38:31 THB-PI3B1 sshd[2689]: Disconnected from invalid user amosunsunday 72.167.32.166 port 50230 [preauth]
Apr 07 22:38:34 THB-PI3B1 kernel: rpi_firmware_get_throttled: 7 callbacks suppressed
Apr 07 22:38:34 THB-PI3B1 kernel: Under-voltage detected! (0x00050005)
Apr 07 22:38:38 THB-PI3B1 kernel: rpi_firmware_get_throttled: 7 callbacks suppressed
Apr 07 22:38:38 THB-PI3B1 kernel: Voltage normalised (0x00000000)
Apr 07 22:38:49 THB-PI3B1 kernel: Under-voltage detected! (0x00050000)
Apr 07 22:38:51 THB-PI3B1 kernel: Voltage normalised (0x00000000)
Apr 07 22:38:57 THB-PI3B1 sshd[2696]: Invalid user lhlee from 61.161.108.170 port 36120
Apr 07 22:38:57 THB-PI3B1 sshd[2696]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:38:57 THB-PI3B1 sshd[2696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.161.108.170
Apr 07 22:38:57 THB-PI3B1 kernel: w1_master_driver w1_bus_master1: Attaching one wire slave 00.de0000000000 crc 48
Apr 07 22:38:57 THB-PI3B1 kernel: w1_master_driver w1_bus_master1: Family 0 for 00.de0000000000.48 is not registered.
Apr 07 22:38:59 THB-PI3B1 sshd[2696]: Failed password for invalid user lhlee from 61.161.108.170 port 36120 ssh2
Apr 07 22:38:59 THB-PI3B1 sshd[2696]: Received disconnect from 61.161.108.170 port 36120:11: Bye Bye [preauth]
Apr 07 22:38:59 THB-PI3B1 sshd[2696]: Disconnected from invalid user lhlee 61.161.108.170 port 36120 [preauth]
Apr 07 22:39:01 THB-PI3B1 CRON[2700]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 07 22:39:01 THB-PI3B1 CRON[2701]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Apr 07 22:39:01 THB-PI3B1 CRON[2700]: pam_unix(cron:session): session closed for user root
Apr 07 22:39:07 THB-PI3B1 kernel: Under-voltage detected! (0x00050000)
Apr 07 22:39:08 THB-PI3B1 sshd[2702]: Invalid user inituser from 183.94.36.8 port 35996
Apr 07 22:39:08 THB-PI3B1 sshd[2702]: pam_unix(sshd:auth): check pass; user unknown
Apr 07 22:39:08 THB-PI3B1 sshd[2702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.94.36.8
Apr 07 22:39:09 THB-PI3B1 kernel: Voltage normalised (0x00000000)
Apr 07 22:39:10 THB-PI3B1 sshd[2702]: Failed password for invalid user inituser from 183.94.36.8 port 35996 ssh2
Apr 07 22:39:13 THB-PI3B1 sshd[2702]: Received disconnect from 183.94.36.8 port 35996:11: Bye Bye [preauth]
Apr 07 22:39:13 THB-PI3B1 sshd[2702]: Disconnected from invalid user inituser 183.94.36.8 port 35996 [preauth]
Apr 07 22:39:13 THB-PI3B1 systemd[1]: Starting Clean php session files...
Die invalid users kenne ich auch alle nicht. Wurde mein System etwa gehackt?
Leider habe ich keinen Dump vorliegen, da ich das System neu mit Bullseye auf einem PI4 aufsetzen wollte und ich das immer wieder verschoben habe, da mir 250€ schlicht zu teuer war.
So habe ich nur aktuelle Sicherungen pes SSH vom Verzeichnis
sftp://192.168.x.17x/opt/fhem
Wie kann ich
a) das bestehende System noch retten?
b) die Sicherung von sftp://192.168.x.17x/opt/fhem auf ein frisches System übertragen?
Ich bitte um eure Hilfe.
Herzliche Grüße
Thomas