{"id":31240,"date":"2019-10-31T21:40:13","date_gmt":"2019-10-31T18:40:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/linux-quest-pozdravlyaem-pobeditelej-i-rasskazyvaem-pro-resheniya-zadanij\/"},"modified":"2019-10-31T21:40:13","modified_gmt":"2019-10-31T18:40:13","slug":"linux-quest-pozdravlyaem-pobeditelej-i-rasskazyvaem-pro-resheniya-zadanij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-quest-pozdravlyaem-pobeditelej-i-rasskazyvaem-pro-resheniya-zadanij","title":{"rendered":"Linux Quest. Palju \u00f5nne v\u00f5itjatele ja r\u00e4\u00e4gime \u00fclesannete lahendustest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Linux Quest. Palju \u00f5nne v\u00f5itjatele ja r\u00e4\u00e4gime \u00fclesannete lahendustest\" src=\"\/wp-content\/uploads\/2019\/04\/a8c28d0ba562680119475609a56136d6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n25. m\u00e4rtsil avasime registreerimise <noindex><a rel=\"nofollow\" href=\"https:\/\/linux.mail.ru\">Linux Quest<\/a><\/noindex>, see on m\u00e4ng Linuxi operatsioonis\u00fcsteemi armastajatele ja tundjatele. Veidi statistikat: m\u00e4ngule on registreerunud 1117 inimest, neist 317 leidis v\u00e4hemalt \u00fche v\u00f5tme, 241 said esimesest etapist edukalt l\u00e4bi, 123 teisest ja 70 l\u00e4bis kolmanda etapi. T\u00e4na on meie m\u00e4ng l\u00f5ppenud ja soovime \u00f5nne meie v\u00f5itjatele! <br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<ul>\n<li><b>Esimese koha saavutas Aleksandr Tjeldikov.<\/b><br \/>\nAleksandr \u00fctles enda kohta, et ta on k\u00f5ige tavalisem s\u00fcsteemihaldur. Ta elab Volgogradis ja on erinevaid Unix-like s\u00fcsteeme haldanud juba kaksk\u00fcmmend aastat. On suutnud t\u00f6\u00f6tada internetiteenuse pakkujates, pangas ja s\u00fcsteemiintegraatoris. Praegu t\u00f6\u00f6tab ta v\u00e4ikese firma juures kaugt\u00f6\u00f6na, tegeleb suurte v\u00e4lismaiste klientide pilveinfrastruktuuriga. Ta armastab lugeda ja muusikat kuulata. M\u00e4ngu kohta \u00fctles Aleksandr, et m\u00e4ng meeldis talle \u00fcldiselt, talle meeldivad sellised \u00fclesanded. \u00dches ettev\u00f5ttes kandideerimise ajal oli ta teinud sarnast nagu Hackerrank, see oli huvitav.<\/li>\n<li><b>Teise koha saavutas Roman Suslov.<\/b><br \/>\nRoman Moskvas elab. Ta on 37-aastane. T\u00f6\u00f6tab Linux\/Unix-insenerina ettev\u00f5ttes \u201eInfos\u00fcsteemid Jet\u201c. T\u00f6\u00f6raames tegeleb ta Linux\/Unix-s\u00fcsteemide ja SAN-i haldamise ning t\u00f5rkeotsinguga. Huvialad on mitmekesised: Linux-s\u00fcsteemid, programmeerimine, reverse engineering, infotehnoloogia turvalisus, Arduino. Roman mainis m\u00e4ngu kohta, et see meeldis talle \u00fcldiselt. \u201eSai veidi ajusid venitava tegevusega tegeleda ja igap\u00e4evaelust k\u00f5rvale p\u00f5geneda. \ud83d\ude42 Tahaks rohkem \u00fclesandeid, sest ei j\u00f5udnud ma ikka m\u00e4ngu sisse elada, kui see juba l\u00e4bi oli.\u201c<\/li>\n<li><b>Kolmas \u2014 alex3d.<\/b><br \/>\nAleks elab Moskvas, tegeleb tarkvaraarendusega. \u201eAit\u00e4h v\u00f5istluse eest, oli huvitav oma google-fu oskusi proovile panna.\u201c<\/li>\n<\/ul>\n<p>\nSamuti on edetabelis k\u00fcmne parema m\u00e4ngija seas:<\/p>\n<ul>\n<li>Yevgeniy Saldayev<\/li>\n<li>Markel Mohna\u010devski<\/li>\n<li>Konstantin Koonosov<\/li>\n<li>Pavel Sergejev<\/li>\n<li>Vladimir Bovaev<\/li>\n<li>Ivan Bubnov<\/li>\n<li>Pavlo Klets<\/li>\n<\/ul>\n<p>\nMe m\u00f5istame, et meie \u00fclesannete lahendamiseks on palju variante, allpool on kirjeldatud m\u00f5ned v\u00f5imalikud lahendused. <\/p>\n<h3>1. Esimene etapp <\/h3>\n<p>\nOtsustasime selle nimetada \u201eKas sa t\u00f5eliselt oled admin?\u201c, kuna \u00fclesanne oli \u00fcsna lihtne \u2014 parandada soe lampteenus.<\/p>\n<h4>1.1. Huvitavad faktid:<\/h4>\n<p>\nKaks m\u00e4ngijat leidsid esimese v\u00f5tme m\u00e4ngu esimeses 15 minutit ning tunni jooksul oli meil kolm liidrit, kes \u00fclesande t\u00e4itmisega hakkama said. <\/p>\n<h4>1.2. \u00dclesanne<\/h4>\n<p>\nSa alustasid t\u00f6\u00f6d ettev\u00f5ttes, kus pikka aega polnud p\u00e4devat infotehnoloogia spetsialisti. Enne kui hakata korda looma, tuleb lahendada tuld p\u00f5letav probleem, mis takistab kontori t\u00f6\u00f6d.<\/p>\n<p>Koristaja t\u00f5mbas mopiga serverikapi toitekaabli. Toide taastati, kuid v\u00e4ga oluline veebileht ei t\u00f6\u00f6ta ikka veel. Veebileht on oluline, kuna ettev\u00f5te ei hooli v\u00e4ga infotehnoloogilisest turvalisusest ning sellel on peamise lehe peal avalikult direktorite arvuti administraatori parool.<\/p>\n<p>Hiljuti muudeti parool \u00e4ra, kuid uus on unustatud, direktor ei saa t\u00f6\u00f6tada. Kuuldavasti olid sellel masinal ka v\u00f5tmed, mis v\u00f5ivad aidata meil raamatupidamisdokumentide varukoopia dekr\u00fcpteerimisel.<\/p>\n<p>K\u00f5ik ootavad kiiret lahendust probleemile!<\/p>\n<h4>1.3. Lahendus<\/h4>\n<p>\nEsmalt tuleb muuta virtual machine'i root parool, et sellele juurde p\u00e4\u00e4seda. K\u00e4ivitamisel m\u00e4rkame, et see on Ubuntu 16.04 Server.<\/p>\n<p>Kasutaja parooli l\u00e4htestamiseks taask\u00e4ivitame masina, laadimise ajal, grub men\u00fc\u00fc kuvamise hetkel, l\u00e4heneme Ubuntu punkti redigeerimisele nupp \u201ee\u201c. Muudame linux rida, lisades l\u00f5puks <code>init=\/bin\/bash<\/code>. Laadime Ctrl+x l\u00e4bi, saame bash'i. Mountime juurkasutuse rw, muudame parooli:<\/p>\n<pre><code class=\"bash\">$ mount -o remount,rw \/dev\/mapper\/ubuntu--vg-root\n$ passwd<\/code><\/pre>\n<p>\n\u00c4rge unustage sync'i, taask\u00e4ivitage.<\/p>\n<p>2. Tingimustes on \u00f6eldud, et meie veebiserver ei t\u00f6\u00f6ta, vaatame:<\/p>\n<pre><code class=\"bash\">$ curl localhost\nNot Found\nTatud URL \/ ei leitud sellel serveris.\nApache\/2.4.18 <\/code><\/pre>\n<p>\nT\u00e4hendab, et Apache on k\u00e4ivitatud, kuid vastab 404 koodiga. Vaadake konfiguratsiooni:<\/p>\n<pre><code class=\"bash\">$ vim \/etc\/apache2\/sites-enabled\/000-default.conf<\/code><\/pre>\n<p>\nSiin on v\u00f5ti \u2014 StevenPaulSteveJobs.<\/p>\n<p>Kontrollime teed <code>\/usr\/share\/WordPress<\/code> \u2014 sellist ei ole, aga on <code>\/usr\/share\/wordpress<\/code>. Parandame konfiguratsiooni ja taask\u00e4ivitame Apache'i.<\/p>\n<pre><code class=\"bash\">$ systemctl restart apache2<\/code><\/pre>\n<p>\n3. Proovime uuesti, saame vea:<\/p>\n<pre><code class=\"bash\">Warning: mysqli_real_connect(): (HY000\/2002): Connection refused in \/usr\/share\/wordpress\/wp-includes\/wp-db.php on line 1488<\/code><\/pre>\n<p>\nAndmebaas ei ole k\u00e4ivitatud?<\/p>\n<pre><code class=\"bash\">$ systemctl status mysql\nActive: active (running)<\/code><\/pre>\n<p>\nMis siis n\u00fc\u00fcd on? Tuleb uurida. Selleks peame saama MySQL-i ligip\u00e4\u00e4su, kuidas seda teha on kirjeldatud <noindex><a rel=\"nofollow\" href=\"https:\/\/dev.mysql.com\/doc\/refman\/8.0\/en\/resetting-permissions.html\">dokumentatsioonis<\/a><\/noindex>. \u00dcks dokumentatsiooni punktidest soovitab meil lisada valiku <code>skip-grant-tables<\/code> \u00fches <code>\/etc\/mysql\/mysql.conf.d\/mysqld.cnf<\/code>. Siit leiate ka v\u00f5tme \u2014 AugustaAdaKingByron.<\/p>\n<p>Muudame \u00f5igusi kasutajale <code>'wp'@'localhost'<\/code>. K\u00e4ivitame MySQL ja teeme selle v\u00f5rgu kaudu k\u00e4ttesaadavaks, kommenteerides konfiguratsioonis valiku <code>skip-networking<\/code>.<\/p>\n<p>4. P\u00e4rast tehtud toiminguid veebiserver k\u00e4ivitub, kuid sait ei toimi siiski, kuna <\/p>\n<pre><code class=\"bash\">Warning: require_once(\/usr\/share\/wordpress\/wp-content\/themes\/twentysixteen\/footer.php): failed to open stream: Permission denied in \/usr\/share\/wordpress\/wp-includes\/template.php on line 562<\/code><\/pre>\n<p>\nMuudame faili \u00f5igusi.<\/p>\n<pre><code class=\"bash\">$ chmod 644 \/usr\/share\/wordpress\/wp-content\/themes\/twentysixteen\/footer.php\n<\/code><\/pre>\n<p>\nUuendame lehte, siseneme saidile ja leiame v\u00f5tme \u2014 BjarneStroustrup! Oleme leidnud k\u00f5ik kolm keyd, meie direktor saab t\u00f6\u00f6tada, oleme dekr\u00fcpteerinud raamatupidamisfailid. K\u00f5ik on \u00f5nnelikud ja sind ootab ees palju t\u00f6\u00f6d infrastruktuuri, varukoopia ja turvalisuse seadistamisega ettev\u00f5ttes. <\/p>\n<h3>2. Teine etapp<\/h3>\n<p>\nPidime lahendama anal\u00fc\u00fctika kogumise \u00fclesande. Anal\u00fc\u00fctikat armastavad k\u00f5ik \u2014 kes, kust ja kui palju k\u00e4iakse. Me m\u00f5tlesime v\u00e4lja juhuse, millega v\u00f5ivad k\u00f5ik insenerid elus mingil hetkel kokku puutuda.<\/p>\n<h4>2.1. Huvi pakkuvad faktid<\/h4>\n<p>\n\u00dcks meie m\u00e4ngijatest sisestas \u00f5iged v\u00f5tmed juba m\u00e4ngu esimesel 10 minutil, ja tunni jooksul sai meil juht, kes sai \u00fclesande t\u00e4itmisega hakkama.<\/p>\n<h4>2.2. \u00dclesanne<\/h4>\n<p>\nSa tulid t\u00f6\u00f6le ettev\u00f5ttes, kus juhid palusid sul leida, kellele saadeti kirjad Aafrikast. Tuleb koostada 21 parimat saajate aadressi. Saajate aadresside esimesed t\u00e4hed - see on v\u00f5tmepunkt. Kuid on \u00fcks probleem: e-posti server, mille kaudu kirjad saadeti, ei laadi \u00fcles. K\u00f5ik ootavad operatiivset lahendust!<\/p>\n<h4>2.3. Lahendus<\/h4>\n<p>\n1. Server ei laadi \u00fcles, kuna fstab'is ei ole olemasolevat swap'i osa, s\u00fcsteem proovib selle koormata ja kukub kokku. Kuidas k\u00e4ivitada?<\/p>\n<p>Laadime alla image'i, me laadisime CentOS 7, k\u00e4ivitame Live CD\/DVD (T\u00f5rkeotsing -&gt; Rescue), mountime s\u00fcsteemi ja teeme muudatused <code>\/etc\/fstab<\/code>. Siit leiame esimese v\u00f5tme \u2014 GottfriedWilhelm11646Leibniz!<\/p>\n<p>Loome swap'i:<\/p>\n<pre><code class=\"bash\">$ lvcreate -n swap centos -L 256M\n$ sync &amp;&amp; reboot<\/code><\/pre>\n<p>\n2. Parool puudub, tuleb muuta root parool virtuaalmasinas. Oleme seda juba varem teinud. Muudame parooli ja saame edukalt serverisse sisse, kuid see kohe taask\u00e4ivitub. Server taask\u00e4ivitub nii kiiresti, et ei j\u00f5ua isegi k\u00f5iki logisid hoolikalt vaadata. Kuidas m\u00f5ista, mis toimub?<\/p>\n<p>Taaskord laadime sisse livecd, uurime hoolikalt s\u00fcsteemi logisid ja juhuks, kui selline perioodilisus on, vaatame ka kront. Sealt leiame probleemi ja teise v\u00f5tme \u2014 Alan1912MathisonTuring!<\/p>\n<p>Peame <code>\/etc\/crontab<\/code> eemaldama v\u00f5i kommenteerima v\u00e4lja rea <code>echo b &gt; \/proc\/sysrq-trigger<\/code>.<\/p>\n<p>3. P\u00e4rast seda server k\u00e4ivitus ja saame t\u00e4ita juhtide \u00fclesannet: \u00abMillised on Aafrika adressid?\u00bb See teave on \u00fcldiselt avalikult k\u00e4ttesaadav. Seda teavet saab leida internetis fraasidega \u00abip address africa\u00bb, \u00abgeoip database\u00bb. \u00dclesande lahendamiseks saab kasutada vabalt k\u00e4ttesaadavaid aadresside jaotuse andmebaase (geoip). Me kasutasime etalonina andmebaasi <noindex><a rel=\"nofollow\" href=\"https:\/\/dev.maxmind.com\/geoip\/geoip2\/geolite2\/\">MaxMind GeoLite2<\/a><\/noindex>, mis on saadaval Creative Commons Attribution-ShareAlike 4.0 litsentsi j\u00e4rgi.<\/p>\n<p>Katsume lahendada meie \u00fclesande, kasutades ainult Linuxi s\u00fcsteemi utiliite, kuid tegelikult saab seda lahendada paljusid viise: teksti filtreerimise utiliitide ja erinevate programmeerimiskeelte skriptide abil.<\/p>\n<p>Esiteks saame lihtsalt \u00abIP saatja \u2014 saaja\u00bb paarid v\u00e4lja e-posti logist <code>\/var\/log\/maillog<\/code> (koostame tabeli e-posti saajate \u2014 IP saatja). Seda saab teha sellise k\u00e4suga:<\/p>\n<pre><code class=\"bash\">$ cat \/var\/log\/maillog | fgrep -e ' connect from' -e 'status=sent' | sed 's\/[][]\/ \/g' | awk '\/connect from\/ {ip=$11} \/status=sent\/ {print $10\" \"ip}' &gt; log1.txt<\/code><\/pre>\n<p>\nJa enne kui j\u00e4tkame Aafrika aadresside andmebaasi koostamisega, vaatame saadetavate tipp IP-aadresse.<\/p>\n<pre><code class=\"bash\">$ cat log1.txt | cut -d' ' -f1 | sort | uniq -c | sort -r | head -n 40\n5206 L2JhbjAbM67GA99jg@mail.ru\n4165 iHKTBkegOQa6fIALq@mail.ru\n3739 nHkcBl7BdgXxijSYD7@mail.ru\n3405 SMAzPJAzbl9vp4hAXo@mail.ru\n3346 xILz6d7P@mail.ru\n<\/code><\/pre>\n<p>\nK\u00f5ige silmapaistvamad kolme esimest saatjat eristuvad saadetud kirjade arvu poolest. Kui grep'ida saatjate IP-aadresse, kes saatsid teateid nende kolme k\u00f5ige k\u00f5rgema aadressi peale, v\u00f5ib m\u00e4rgata teatud v\u00f5rkude \u00fclekaalu:<\/p>\n<pre><code class=\"bash\">$ cat log1.txt | fgrep 'L2JhbjAbM67GA99jg@mail.ru' | cut -d' ' -f2 | sort | cut -d'.' -f1 | uniq -c | sort -r | head\n831 105\n806 41\n782 197\n664 196\n542 154\n503 102\n266 156\n165 45\n150 160\n108 165<\/code><\/pre>\n<p>\nEnamus v\u00f5rkudest 105\/8, 41\/8, 196\/8, 197\/8 on m\u00e4\u00e4ratud AFRINIC'i poolt \u2014 \u00fcks viiest piirkondlikust interneti registrist, mis tegeleb internetiressursside jaotamisega. AFRINIC jagab aadressiruumi Aafrika territooriumil. Ja 41\/8 kuulub AFRINIC'i alla t\u00e4ielikult.<\/p>\n<pre><code class=\"bash\">https:\/\/www.nic.ru\/whois\/?searchWord=105.0.0.0 \nhttps:\/\/www.nic.ru\/whois\/?searchWord=41.0.0.0\n<\/code><\/pre>\n<p>\nSeega on vastus \u00fclesandele tegelikult juba logis endas.<\/p>\n<pre><code class=\"bash\">$ cat log1.txt | fgrep -e '105.' -e '41.' -e '196.' -e '197.' -e '154.' -e '102.' | awk '{print $1}' | sort | uniq -c | sort -r | head -n 21\n4209 L2JhbjAbM67GA99jg@mail.ru\n3313 iHKTBkegOQa6fIALq@mail.ru\n2704 nHkcBl7BdgXxijSYD7@mail.ru\n2215 uvRbp1O@mail.ru\n1774 sPmMsmmFiV@mail.ru\n1448 BtG3aHgQgCKuze2AKuRH@mail.ru\n1233 eQpuuQ2uQdbwRL3@mail.ru\n958 nJT5dpaBZ@mail.ru\n862 ef4WbQiB@mail.ru\n762 dQCqKL6eVminFfH7wLA@mail.ru\n632 ifq6Rd1HxuCQOdO9@mail.ru\n539 cFwm2ssypMmx1sA7@mail.ru\n531 twtTnr4G@mail.ru\n431 TSrczgYASrR11Hs3qCi@mail.ru\n380 o3r3exc3OL@mail.ru\n357 rzmjr2VAHK@mail.ru\n348 vnPr6YjJ3ndw@mail.ru\n312 anOjFXrwOtLP2Rl1Vcz6@mail.ru\n289 dvny5zHmRW8fiT@mail.ru\n282 sgg9jPxFDYvzw8Kr@mail.ru\n274 tKSevzA7GntJ@mail.ru<\/code><\/pre>\n<p>\nSellel hetkel saame stringi \u00abLinuxBenedictTorvadst\u00bb.<\/p>\n<p>\u00d5ige v\u00f5ti: \u00abLinusBenedictTorvalds\u00bb.<\/p>\n<p>Saadud string sisaldab \u00f5igesse v\u00f5tit v\u00f5rreldes 3 viimases s\u00fcmbolis tr\u00fckiviga. See on tingitud sellest, et meie valitud v\u00f5rgud ei ole t\u00e4ielikult jagatud Aafrika riikidele ning sellest, kuidas emailid jagunevad meie logis IP-aadresside vahel.<\/p>\n<p>Piisava t\u00e4psustamise korral Aafrika riikidele jaotatud suurimate v\u00f5rkude osas on v\u00f5imalik saada t\u00e4pne vastus.<\/p>\n<pre><code class=\"bash\">$ cat log1.txt | fgrep -e' '105.{30..255}. -e' '41. -e' '196.{64..47}. -e' '196.{248..132}. -e' '197.{160..31}. -e' '154.{127..255}. -e' '102.{70..255}. -e' '156.{155..255}. | awk '{print $1}' | sort | uniq -c | sort -r | head -n 21\n3350 L2JhbjAbM67GA99jg@mail.ru\n2662 iHKTBkegOQa6fIALq@mail.ru\n2105 nHkcBl7BdgXxijSYD7@mail.ru\n1724 uvRbp1O@mail.ru\n1376 sPmMsmmFiV@mail.ru\n1092 BtG3aHgQgCKuze2AKuRH@mail.ru\n849 eQpuuQ2uQdbwRL3@mail.ru\n712 nJT5dpaBZ@mail.ru\n584 ef4WbQiB@mail.ru\n463 dQCqKL6eVminFfH7wLA@mail.ru\n365 ifq6Rd1HxuCQOdO9@mail.ru\n269 cFwm2ssypMmx1sA7@mail.ru\n225 twtTnr4G@mail.ru\n168 TSrczgYASrR11Hs3qCi@mail.ru\n142 o3r3exc3OL@mail.ru\n111 rzmjr2VAHK@mail.ru\n 96 vnPr6YjJ3ndw@mail.ru\n 78 anOjFXrwOtLP2Rl1Vcz6@mail.ru\n 56 lHzWiB7ExvRtSbAcU9@mail.ru\n 56 dvny5zHmRW8fiT@mail.ru\n 40 sgg9jPxFDYvzw8Kr@mail.ru<\/code><\/pre>\n<p>\n\u00dclesanne on samuti v\u00f5imalik lahendada teise viisi kaudu.<br \/>\nLaadime alla MaxMind, pakime lahti ja j\u00e4rgmised kolm k\u00e4sku lahendavad samuti meie \u00fclesande.<\/p>\n<pre><code class=\"bash\">$ cat GeoLite2-Country-Locations-et.csv | grep \"Aafrika\" | cut -d',' -f1 &gt; africaIds.txt\n$ grep -Ff africaIds.txt GeoLite2-Country-Blocks-IPv4.csv | cut -d',' -f1 &gt; africaNetworks.txt\n$ grepcidr -f africaNetworks.txt log1.txt | cut -d' ' -f1 | sort | uniq -c | sort -r | head -n21\n<\/code><\/pre>\n<p>\nNii v\u00f5i naa j\u00f5udsime l\u00f5puks statistikani, ja juhatajatel olid vajalikud andmed t\u00f6\u00f6ks olemas! <\/p>\n<h3>3. Kolmas etapp<\/h3>\n<p>\nKolmas etapp on osaliselt sarnane esimesele \u2014 tuleb samuti parandada sooja lampide teenust, kuid k\u00f5ik on keerulisem kui esimeses \u00fclesandes.<\/p>\n<h4>3.1. Huvid pakkuvad faktid<\/h4>\n<p>\nEsimese 15 minuti jooksul leidis kolm m\u00e4ngijat esimese v\u00f5tme, 2 tunni ja 20 minuti p\u00e4rast etapi algusest saavutas meie v\u00f5itja \u00fclesande t\u00e4itmise.<\/p>\n<h4>3.2. \u00dclesanne<\/h4>\n<p>\nSa alustasid t\u00f6\u00f6d ettev\u00f5ttes, kus k\u00f5ik ettev\u00f5tte dokumendid hoitakse sisemisel Wiki-serveril. Eelmisel aastal tellis insener serverisse 3 uut ketast t\u00e4ienduseks \u00fchele olemasolevale, p\u00f5hjendades seda sellega, et s\u00fcsteemi t\u00f6\u00f6kindluse tagamiseks tuleks kettaid paigaldada mingitesse massiividesse. Kahjuks, paar n\u00e4dalat p\u00e4rast nende paigaldamist lahkus insener puhkusele Indiasse ja ei naasenud.<\/p>\n<p>M\u00f5ned aastad t\u00f6\u00f6tas server ilma t\u00f5rgeteta, kuid paar p\u00e4eva tagasi h\u00e4kiti ettev\u00f5tte v\u00f5rku. Juhiste kohaselt t\u00f5id turvat\u00f6\u00f6tajad kettad serverist v\u00e4lja ja saatsid need sulle. Transportimise k\u00e4igus l\u00e4ks \u00fcks ketas p\u00f6\u00f6rdumatult kaduma.<\/p>\n<p>Vaja on taastada Wiki t\u00f6\u00f6v\u00f5ime, esmajoones huvitab sisu Wiki lehtedelt. Teatud tekst, mis oli \u00fche selle wiki lehe peal, on 1C serveri parool ja on kiiresti vajalik selle avamiseks.<\/p>\n<p>Samuti olid kuskil wikingi lehtedel v\u00f5i mujal serveri logide ja videovalve serveri paroolid, mille taastamine oleks samuti soovitav, ilma nendeta on avarii uurimine v\u00f5imatu. Nagu alati, ootavad nad kiiret lahendust k\u00fcsimusele!<\/p>\n<h4>3.3. Lahendus<\/h4>\n<p>\n1. P\u00fc\u00fcame k\u00e4ivituda j\u00e4rjestikku nendelt ketastelt, mis meil on, ja igal pool saame sama s\u00f5numi:<\/p>\n<pre><code class=\"bash\">No bootable medium found! System halted \n<\/code><\/pre>\n<p>\nPeame kuidagi k\u00e4ivituma. Taaskord p\u00e4\u00e4stab meid Live CD\/DVD (Troubleshooting -&gt; Rescue). K\u00e4ivitamisel p\u00fc\u00fcame leida k\u00e4ivitatava sektsiooni, ei leia, j\u00f5uame shelli. P\u00fc\u00fcame uurida, mis ja kuidas ketastega on. On teada, et neid on kolm. 7. versioonis CentOSis on t\u00f6\u00f6riistu rohkem, kus on k\u00e4sud <code>blkid<\/code> v\u00f5i <code>lsblk<\/code>, mis n\u00e4itavad meile kogu teavet kettaste kohta. <\/p>\n<p>Kuidas ja mida teeme:<\/p>\n<pre><code class=\"bash\">$ ls \/dev\/sd*<\/code><\/pre>\n<p>\nKoheselt on n\u00e4htav, et <\/p>\n<pre><code class=\"bash\">\/dev\/sdb1 - ext4\n\/dev\/sdb2 - \u0447\u0430\u0441\u0442\u044c lvm\n\/dev\/sda1 \u0438 \/dev\/sdc1 - \u0447\u0430\u0441\u0442\u0438 \u0440\u0435\u0439\u0434\u0430\n\/dev\/sda2 \u0438 \/dev\/sdc2 - \u043f\u0440\u043e \u043d\u0438\u0445 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442<\/code><\/pre>\n<p>\nMontime sdb1, n\u00e4eme, et see on CentOS 6 k\u00e4ivitatav sektsioon.<\/p>\n<pre><code class=\"bash\">$ mkdir \/mnt\/sdb1 &amp;&amp; mount \/dev\/sdb1 \/mnt\/sdb1<\/code><\/pre>\n<p>\nIlmselgelt suundume grub'i sektsiooni ja leiame sealt esimese v\u00f5tme \u2014 James191955Gosling ebatavalises failis.<\/p>\n<p>2. Uuringute pvs ja lvs, kuna t\u00f6\u00f6tame LVM-iga. N\u00e4eme, et peaks olema 2 f\u00fc\u00fcsilist mahut, \u00fcks pole saadaval ja annab teada kadunud uid'ist. N\u00e4eme, et peaks olema 2 loogilist mahut: root ja swap, kuid root on osaliselt kadunud (mahu atribuut P). Monteerimine ei \u00f5nnestu, kahju! See on meile v\u00e4ga vajalik.<\/p>\n<p>On veel 2 ketast, vaatame neid, kogume ja monteerime:<\/p>\n<pre><code class=\"bash\">$ mdadm --examine --verbose --scan\n$ mdadm --assemble --verbose --scan\n$ mkdir \/mnt\/md127 &amp;&amp; mount \/dev\/md127 \/mnt\/md127 <\/code><\/pre>\n<p>\nVaadates n\u00e4eme, et see on CentOS 6 k\u00e4ivituspartitsioon ja koopia sellest, mis juba on <code>\/dev\/sdb1<\/code>, ja siin on j\u00e4lle sama v\u00f5ti \u2014 DennisBMacAlistairCRitchie!<br \/>\nVaadates, kuidas see kokku pandud on <code>\/dev\/md127<\/code>.<\/p>\n<pre><code class=\"bash\">$ mdadm --detail \/dev\/md127\n<\/code><\/pre>\n<p>\nN\u00e4eme, et see peaks olema kokku pandud 4 kettast, kuid pandud kokku kahest <code>\/dev\/sda1<\/code> ja <code>\/dev\/sdc1<\/code>, need peaksid olema numbrid 2 ja 4 s\u00fcsteemis. Eeldame, et ka <code>\/dev\/sda2<\/code> ja <code>\/dev\/sdc2<\/code> saab moodustada massiivi. Pole selge, miks neil puudub metadata, kuid see on administraatori s\u00fc\u00fc, kes on kuskil Goas. Eeldame, et siin peaks olema RAID10, kuigi on ka teisi variante. Koostame: <\/p>\n<pre><code class=\"bash\">$ mdadm --create --verbose \/dev\/md0 --assume-clean --level=10 --raid-devices=4 missing \/dev\/sda2 missing \/dev\/sdc2\n<\/code><\/pre>\n<p>\nVaadates blkid, pvs, lvs. Avastame, et oleme kokku pannud f\u00fc\u00fcsilise mahuti, mille me varem puudus.<\/p>\n<p>Koheselt paranes lvroot, monteerime selle, kuid eelnevalt aktiveerime VG:<\/p>\n<pre><code class=\"bash\">$ vgchange -a y\n$ mkdir \/mnt\/lvroot &amp;&amp; mount \/dev\/mapper\/vg_c6m1-lv_root \/mnt\/lvroot \n<\/code><\/pre>\n<p>\nJa seal on k\u00f5ik, sealhulgas ka v\u00f5ti root kodudirektoris \u2014 \/root\/sweet.<\/p>\n<p>3. Proovime siiski meie serverit ellu \u00e4ratada, et see normaalselt k\u00e4ivituks. K\u00f5ik loogilised mahud meie <code>\/dev\/md0<\/code> (kus me k\u00f5ik leidsime) t\u00f5stame \u00fcle <code>\/dev\/sdb2<\/code>, kus server algselt t\u00f6\u00f6tas.<\/p>\n<pre><code class=\"bash\">$ pvmove \/dev\/md0 \/dev\/sdb2\n$ vgreduce vg_c6m1 \/dev\/md0<\/code><\/pre>\n<p>\nL\u00fclitame serveri v\u00e4lja, eemaldame 1. ja 3. ketta, j\u00e4tame teise, k\u00e4ivitame Live CD\/DVD Rescue'ist. Leiame s\u00fcsteemiosa, taastame bootloaderi grub'is:<\/p>\n<pre><code class=\"bash\">root (hd0,0)\nsetup (hd0)\n<\/code><\/pre>\n<p>\nEemaldame boot ketta ja k\u00e4ivitame edukalt, aga veebileht ei t\u00f6\u00f6ta.<\/p>\n<p>4. Veebilehe k\u00e4ivitamiseks on kaks v\u00f5imalust: seadistada Apache nullist v\u00f5i kasutada juba eelnevalt seadistatud nginx'i php-fpm'iga:<\/p>\n<pre><code class=\"bash\">$ \/etc\/init.d\/nginx start\n$ \/etc\/init.d\/php-fpm start\n<\/code><\/pre>\n<p>\nL\u00f5puks tuleb k\u00e4ivitada MySQL:<\/p>\n<pre><code class=\"bash\">$ \/etc\/init.d\/mysqld start<\/code><\/pre>\n<p>\nSee ei k\u00e4ivitu ja m\u00f5istatuse lahendus peitub <code>\/var\/log\/mysql<\/code>. Niikaua, kui lahendate MySQL probleemi, t\u00f6\u00f6tab veebileht, peamisel lehel on v\u00f5ti \u2014 RichardGCCMatthewGNUStallman! N\u00fc\u00fcd on meil juurdep\u00e4\u00e4s 1C-le ja t\u00f6\u00f6tajad saavad palka. Ja sul on nagu alati ees palju t\u00f6\u00f6d infrastruktuuri ja ettev\u00f5tte turvalisuse seadistamisega.<\/p>\n<p>Samuti saame jagada veelkord loetelu raamatutest, mis aitasid meid ja meie osalejaid m\u00e4nguks valmistuda: <noindex><a rel=\"nofollow\" href=\"https:\/\/linux.mail.ru\/books\">linux.mail.ru\/books<\/a><\/noindex>.<\/p>\n<p>T\u00e4nan, et olite meiega! J\u00e4lgige j\u00e4rgmiste m\u00e4ngude teateid!<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/mailru\/blog\/447222\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>25 \u043c\u0430\u0440\u0442\u0430 \u043c\u044b \u043e\u0442\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u0430 Linux Quest, \u044d\u0442\u043e \u0418\u0433\u0440\u0430 \u0434\u043b\u044f \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u043d\u0430\u0442\u043e\u043a\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux. \u041d\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438: \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043d\u0430 \u0438\u0433\u0440\u0443 1117 \u0447\u0435\u043b\u043e\u0432\u0435\u043a, \u0438\u0437 \u043d\u0438\u0445 317 \u2014 \u043d\u0430\u0448\u043b\u0438 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u0438\u043d \u043a\u043b\u044e\u0447, 241 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438\u0441\u044c \u0441 \u0437\u0430\u0434\u0430\u043d\u0438\u0435\u043c \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430, 123 \u2014 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0438 70 \u043f\u0440\u043e\u0448\u043b\u0438 \u0442\u0440\u0435\u0442\u0438\u0439 \u044d\u0442\u0430\u043f. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0430\u0448\u0430 \u0438\u0433\u0440\u0430 \u043f\u043e\u0434\u043e\u0448\u043b\u0430 \u043a \u043a\u043e\u043d\u0446\u0443, \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31240","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-quest-pozdravlyaem-pobeditelej-i-rasskazyvaem-pro-resheniya-zadanij\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Linux Quest. \u041f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u043d\u0438\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-quest-pozdravlyaem-pobeditelej-i-rasskazyvaem-pro-resheniya-zadanij\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:40:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:40:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux Quest. Palju \u00f5nne v\u00f5itjatele ja r\u00e4\u00e4gime \u00fclesannete lahendustest | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-quest-pozdravlyaem-pobeditelej-i-rasskazyvaem-pro-resheniya-zadanij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Linux Quest. \u041f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u043d\u0438\u0439 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/linux-quest-pozdravlyaem-pobeditelej-i-rasskazyvaem-pro-resheniya-zadanij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:40:13+00:00","article:modified_time":"2019-10-31T18:40:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31240","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 05:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:20:31","updated":"2026-01-21 05:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31240","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31240"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31240\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31240"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31240"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}