User Tools

Site Tools


proxmox

This is an old revision of the document!


Limpar backdoor

unset LD_PRELOAD
export LD_PRELOAD=""

chattr -ia /etc/ld.so.preload
echo "" > /etc/ld.so.preload
rm -f /etc/ld.so.preload

pkill -9 -f PVE-1
pkill -f PVE-1-maintain
pkill -f PVE-1-update
pkill -f ld-svc

# 1. Remove os bloqueios de escrita e deleção dos serviços e scripts maliciosos
chattr -ia /etc/systemd/system/ld-svc.service
chattr -ia /lib/systemd/system/ld-svc.service
chattr -ia /etc/systemd/system/PVE-1-update.*
chattr -ia /lib/systemd/system/PVE-1-update.*
chattr -ia /usr/libexec/PVE-1-maintain
chattr -ia /usr/libexec/PVE-1-update
chattr -ia /var/lib/systemd/ld-svc
chattr -ia /var/lib/systemd/PVE-1

rm -f /etc/systemd/system/ld-svc.service /lib/systemd/system/ld-svc.service
rm -f /etc/systemd/system/PVE-1-update.* /lib/systemd/system/PVE-1-update.*
rm -f /usr/libexec/PVE-1-maintain /usr/libexec/PVE-1-update
rm -f /var/lib/systemd/ld-svc
rm -rf /var/lib/systemd/PVE-1
rm -rf /var/lib/systemd/.cache
rm -f /etc/cron.d/ld-svc* /etc/cron.hourly/ld-svc* /etc/cron.daily/ld-svc*

mount proxmox virtual disk

mount -t vfat -o loop,offset=$((8192 * 512 ))  imgfile.img /mnt/disk1

Add user from CLI

pveum useradd manuel@pam


pveum acl modify / --roles PVEAdmin --users manuel@pam

dd through ssh

ssh host "dd if=/dev/mapper/pve-vm--106--disk--0" | dd of=/dev/mapper/pve-vm--106--disk--0 status=progress

or

dd if=/dev/mapper/pve-vm--106--disk--0 bs=4MiB conv=sync status=progress | ssh host ' dd of=/dev/mapper/pve-vm--106--disk--0 bs=4MiB'

disable portmap port 111

systemctl stop rpcbind

systemctl stop rpcbind.socket

systemctl disable rpcbind

systemctl disable rpcbind.socket

repositories

old <8

/etc/apt/sources.list.d/pve-enterprise.list

deb http://download.proxmox.com/debian/pve buster pve-no-subscription

new 8

/etc/apt/sources.list.d/pve-enterprise.list

deb http://download.proxmox.com/debian/pve bookworm pve-no-subscription

/etc/apt/sources.list.d/ceph.list

deb http://download.proxmox.com/debian/ceph-quincy bookworm no-subscription

remove nag screen

sed -Ezi.bak "s/(function\(orig_cmd\) \{)/\1\n\torig_cmd\(\);\n\treturn;/g" /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js && systemctl restart pveproxy.service
proxmox.1788202405.txt.gz · Last modified: by protocol