Incredible CPU Error Inside

[djsami]

My English is not very good so I apologize from the beginning

When I open console there is no problem.




when the console is closed

and task orka1 does not appear, it is very strange and gives an error.






do you have an idea? This is my first time witnessing something like this.


proxmox-ve: 7.2-1 (running kernel: 5.15.35-1-pve) pve-manager: 7.2-3 (running version: 7.2-3/c743d6c1) pve-kernel-5.15: 7.2-3 pve-kernel-helper: 7.2-3 pve-kernel-5.13: 7.1-9 pve-kernel-5.15.35-1-pve: 5.15.35-3 pve-kernel-5.13.19-6-pve: 5.13.19-15 pve-kernel-5.13.19-2-pve: 5.13.19-4 ceph-fuse: 15.2.15-pve1 corosync: 3.1.5-pve2 criu: 3.15-1+pve-1 glusterfs-client: 9.2-1 ifupdown2: 3.1.0-1+pmx3 ksm-control-daemon: 1.4-1 libjs-extjs: 7.0.0-1 libknet1: 1.22-pve2 libproxmox-acme-perl: 1.4.2 libproxmox-backup-qemu0: 1.2.0-1 libpve-access-control: 7.1-8 libpve-apiclient-perl: 3.2-1 libpve-common-perl: 7.1-6 libpve-guest-common-perl: 4.1-2 libpve-http-server-perl: 4.1-1 libpve-storage-perl: 7.2-2 libspice-server1: 0.14.3-2.1 lvm2: 2.03.11-2.1 lxc-pve: 4.0.12-1 lxcfs: 4.0.12-pve1 novnc-pve: 1.3.0-3 proxmox-backup-client: 2.1.8-1 proxmox-backup-file-restore: 2.1.8-1 proxmox-mini-journalreader: 1.3-1 proxmox-widget-toolkit: 3.4-10 pve-cluster: 7.2-1 pve-container: 4.2-1 pve-docs: 7.2-2 pve-edk2-firmware: 3.20210831-2 pve-firewall: 4.2-5 pve-firmware: 3.4-2 pve-ha-manager: 3.3-4 pve-i18n: 2.7-1 pve-qemu-kvm: 6.2.0-6 pve-xtermjs: 4.16.0-1 qemu-server: 7.2-2 smartmontools: 7.2-pve3 spiceterm: 3.2-2 swtpm: 0.7.1~bpo11+1 vncterm: 1.7-1 zfsutils-linux: 2.1.4-pve1

 

[djsami]

What is the solution for this please help.

no processes are running neither backup nor anything else

as if the main cluster does not exist

 

[djsami]

-- Journal begins at Mon 2022-05-16 18:26:01 +03, ends at Mon 2022-05-16 18:26:35 +03. -- May 16 18:26:01 orka1 CRON[3893684]: pam_unix(cron:session): session closed for user root May 16 18:26:05 orka1 pvescheduler[3893955]: could not update job state, skipping - no such task May 16 18:26:17 orka1 pvedaemon[3819230]: <root@pam> successful auth for user 'root@pam' May 16 18:26:30 orka1 sshd[3894304]: Invalid user blanca from 132.145.111.199 port 41044 May 16 18:26:30 orka1 sshd[3894304]: pam_unix(sshd:auth): check pass; user unknown May 16 18:26:30 orka1 sshd[3894304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.111.199 May 16 18:26:33 orka1 sshd[3894304]: Failed password for invalid user blanca from 132.145.111.199 port 41044 ssh2 May 16 18:26:35 orka1 sshd[3894304]: Received disconnect from 132.145.111.199 port 41044:11: Bye Bye [preauth] May 16 18:26:35 orka1 sshd[3894304]: Disconnected from invalid user blanca 132.145.111.199 port 41044 [preauth]

 

[djsami]

-- Journal begins at Mon 2022-05-16 18:26:01 +03, ends at Mon 2022-05-16 18:26:35 +03. --
May 16 18:26:01 orka1 CRON[3893684]: pam_unix(cron:session): session closed for user root
May 16 18:26:05 orka1 pvescheduler[3893955]: could not update job state, skipping - no such task
May 16 18:26:17 orka1 pvedaemon[3819230]: <root@pam> successful auth for user 'root@pam'
May 16 18:26:30 orka1 sshd[3894304]: Invalid user blanca from 132.145.111.199 port 41044
May 16 18:26:30 orka1 sshd[3894304]: pam_unix(sshd:auth): check pass; user unknown
May 16 18:26:30 orka1 sshd[3894304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.111.199
May 16 18:26:33 orka1 sshd[3894304]: Failed password for invalid user blanca from 132.145.111.199 port 41044 ssh2
May 16 18:26:35 orka1 sshd[3894304]: Received disconnect from 132.145.111.199 port 41044:11: Bye Bye [preauth]
May 16 18:26:35 orka1 sshd[3894304]: Disconnected from invalid user blanca 132.145.111.199 port 41044 [preauth]

 

[djsami]

root@orka1:~# systemctl status pve-cluster.service
● pve-cluster.service - The Proxmox VE cluster filesystem
     Loaded: loaded (/lib/systemd/system/pve-cluster.service; enabled; vendor preset>
     Active: active (running) since Sun 2022-05-15 00:16:28 +03; 1 day 18h ago
    Process: 2035 ExecStart=/usr/bin/pmxcfs (code=exited, status=0/SUCCESS)
   Main PID: 2049 (pmxcfs)
      Tasks: 9 (limit: 629145)
     Memory: 87.5M
        CPU: 7min 51.190s
     CGroup: /system.slice/pve-cluster.service
             └─2049 /usr/bin/pmxcfs
root@orka1:~# systemctl status corosync.service
● corosync.service - Corosync Cluster Engine
     Loaded: loaded (/lib/systemd/system/corosync.service; enabled; vendor preset: e>
     Active: active (running) since Sun 2022-05-15 00:16:28 +03; 1 day 18h ago
       Docs: man:corosync
             man:corosync.conf
             man:corosync_overview
   Main PID: 2151 (corosync)
      Tasks: 9 (limit: 629145)
     Memory: 133.1M
        CPU: 39min 17.427s
     CGroup: /system.slice/corosync.service
             └─2151 /usr/sbin/corosync -f

 

[spirit]

can you share screenshot in english ? because it's difficult to understand the log for us.

 

[djsami]

can you share screenshot in english ? because it's difficult to understand the log for us.

The problem is very confused, we have been struggling with these problems for weeks, it happened after 7.2.3 update these problems



When the shell is turned off, the CPU is 100% stable.

The server named orka 1 does not work no matter what I do.






backup does not work automatically.


I reset many times, I couldn't solve it. After 7.2 update, this problem appeared.


please guide me.


syslog.

May 16 18:54:05 orka1 pvescheduler[3931414]: could not update job state, skipping - no such task
May 16 18:54:09 orka1 sshd[3931438]: Invalid user zf from 122.168.194.41 port 54798
May 16 18:54:09 orka1 sshd[3931438]: pam_unix(sshd:auth): check pass; user unknown
May 16 18:54:09 orka1 sshd[3931438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.168.194.41
May 16 18:54:11 orka1 sshd[3931438]: Failed password for invalid user zf from 122.168.194.41 port 54798 ssh2
May 16 18:54:11 orka1 sshd[3931438]: Received disconnect from 122.168.194.41 port 54798:11: Bye Bye [preauth]
May 16 18:54:11 orka1 sshd[3931438]: Disconnected from invalid user zf 122.168.194.41 port 54798 [preauth]
May 16 18:54:12 orka1 sshd[3931571]: Invalid user doudou from 198.23.148.137 port 56510
May 16 18:54:12 orka1 sshd[3931571]: pam_unix(sshd:auth): check pass; user unknown
May 16 18:54:12 orka1 sshd[3931571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.23.148.137
May 16 18:54:13 orka1 sshd[3931571]: Failed password for invalid user doudou from 198.23.148.137 port 56510 ssh2
May 16 18:54:15 orka1 sshd[3931571]: Received disconnect from 198.23.148.137 port 56510:11: Bye Bye [preauth]
May 16 18:54:15 orka1 sshd[3931571]: Disconnected from invalid user doudou 198.23.148.137 port 56510 [preauth]

 

[djsami]

yam --daemonized ?? what

 

[Neobin]

yam --daemonized ?? what

View attachment 36973

Googling for: linux process yam, it could be a cryptocurrency miner. E.g.: [1]

[1] https://www.turnkeylinux.org/forum/...am-got-my-wordpress-tkl-appliance-aws-howd-it

 

[Gilberto Ferreira]

Googling for: linux process yam, it could be a cryptocurrency miner. E.g.: [1]

[1] https://www.turnkeylinux.org/forum/...am-got-my-wordpress-tkl-appliance-aws-howd-it

Miner? Well that's explain a lot.