Lord Imbrius the Despondent wrote:

> Question, all.  Had a Gentoo web server.  Was humming along great for 3
> months.  One morning, I went to ssh into it and it denied me access.
> Mind you, the website hosted by the server was still running.  So I
> walked over to the console and went to log in.  All logins were denied,
> even root.  So I rebooted and attempted to enter single-user mode by
> passing "1" to the kernel command line from GRUB.  And it loaded the
> kernel.  And then stopped with the error "/sbin/init: not found."
> 
> After I booted off the Gentoo livecd, I found that the contents of /bin,
> /sbin, and /lib were missing, and that key config files in /etc (like
> passwd, group, and shadow) had turned to total garbage (random
> characters).  So I extracted a new stage3 tarball in the root directory
> and re-created the config files.  It booted fine and ran for about 10
> minutes.  Then, after having ssh'd into it successfully twice, it again
> locked me out.  When I tried a console login, I got the error "udev:
> device node /hda3 not found" and it was locked hard.  Another reboot got
> me to the "/sbin/init: not found" error again.  Now I have completely
> repartitioned the drive and started over.  It SEEMS to be working.  The
> drive is brand new.  Running with recommended settings (UDMA 4).  I've
> never had any I/O errors, no access problems, etc.  It just randomly
> started deleting key files after a few minutes of activity.  Any clues?
> BTW, the drive tools provided by Western Digital find no errors with the
> drive.

Josh, better if you create a new thread instead of replying to Meino's
thread and 'hijacking' the topic.  Is there a chance that your server has
been compromised?

-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Reply via email to