limetech

Version 6.3.0-rc9 Release Notes

Recommended Posts

unRAID OS version 6.3 is primarily a security, bug fix and package "catch up" release.  Instructions for installing a pre-release may be found here.

 

Plugin authors:

Starting with 6.3.0-rc9, we have made numerous changes to harden the unRAID OS webGui against XSS and CSRF vulnerabilities.  In addition we have introduced a server-generated variable called

csrf_token

which must now be included in all POST requests.

 

Please review your code to determine if any changes must be made.  If your plugin uses form posts or jQuery.post() method to initiate state changes in the server it may be necessary to include the

csrf_token

variable in the data sent to the server.  Note: if these requests, either form post or jQuery.post(), originate from a

.page

file there's nothing you need to do since the

csrf_token

is automatically added to the request by code in

DefaultPageLayout.php

.

 

How to know if you need to add code to include the

csrf_token

?  Two things might happen:

1) Your plugin won't work, and/or

2) You will see messages in the system log of the form:

 

error: <string>: uninitialized csrf_token
error: <string>: missing csrf_token
error: <string>: wrong csrf_token

 

The best way to see how to change your code is to

grep

for

csrf_token

in the stock webGui.

 

To further guard against XSS it is very important to sanitize all input transmitted in POST requests.  Examples:

 

/* Code execution -- use escapeshellarg() */

$port = $_POST['port'];
$cmd = strtolower($_POST['cmd']);

// Before
exec("ip link set $port $cmd");

// After
exec("ip link set ".escapeshellarg($port)." ".escapeshellarg($cmd));

 

/* XSS from HTML context -- use htmlspecialchars() */

<? $strSelectedTemplate = $_GET['template']; ?>

// Before
<input type="hidden" name="template[name]" value="<?=$strSelectedTemplate?>" />

// After
<input type="hidden" name="template[name]" value="<?=htmlspecialchars($strSelectedTemplate)?>" />

 

/* XSS from JS context -- use addslashes() */

// Before
$.get('/webGui/include/NotificationsArchive.php',{filter:'<?=$_GET['filter']?>'},function(data) {...});

// After
$.get('/webGui/include/NotificationsArchive.php',{filter:'<?=addslashes($_GET['filter'])?>'},function(data) {...});

 

All of these changes, including inclusion of

csrf_token

should be backward compatible with previous 6.x unRAID OS releases.

 

Other Notes

 

The 6.3 release also includes an interesting new feature:

 

Finally, please remove any custom "vfs fruit" variables you may have added under Settings/SMB Samba extra configuration section since those are already enabled by default since rc5.

 


unRAID Server OS Change Log
===========================

Version 6.3.0-rc9 2017-01-27
----------------------------

Base distro:

- add pv: version 1.6.0
- docker: version 1.12.6 (CVE-2016-9962)
- containerd: version 0.2.5
- glibc-zoneinfo: version 2016j
- gnutls: version 3.5.8 (CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337)
- libpng: version 1.6.27 (CVE-2016-10087)
- mozilla-firefox: version 51.0 (CVE-2017-5375, CVE-2017-5376, CVE-2017-5377, CVE-2017-5378, CVE-2017-5379, CVE-2017-5380, CVE-2017-5390, CVE-2017-5389, CVE-2017-5396, CVE-2017-5381, CVE-2017-5382, CVE-2017-5383, CVE-2017-5384, CVE-2017-5385, CVE-2017-5386, CVE-2017-5394, CVE-2017-5391, CVE-2017-5392, CVE-2017-5393, CVE-2017-5395, CVE-2017-5387, CVE-2017-5388, CVE-2017-5374, CVE-2017-5373)
- openssh: version 7.4p1 (CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012)
- php: version 7.0.15 (CVE-2016-10161, CVE-2016-10162, CVE-2017-5340, CVE-2016-7479, CVE-2016-10158, CVE-2016-10160, CVE-2016-10159)
- samba: version 4.5.3 (CVE-2016-2123, CVE-2016-2125, CVE-2016-2126)
- update hwdata/{pci.ids,usb.ids,oui.txt,manuf.txt}

Linux kernel:

- version 4.9.6
- added CONFIG_DRM_I915: Intel 8xx/9xx/G3x/G4x/HD Graphics (but blacklisted to prevent auto-load)

Management:

- libvirt: disable nested virtualizaton by default
- shfs: correct return value of system.LOCATION extended attribute to eliminate bash "warning: command substitution: ignored null byte in input"
- webGui: Add BTRFS file system checking notifications
- webGui: Avoid wget to cache plugin files and postpone plugin updates
- webGui: Capitalize method name in plugin operations.
- webGui: Natural sorting of user share names
- webGui: Save docker, VM and libvirt logs as .txt files in diagnostics
- webGui: Disable filesystem selection when data-rebuild is pending
- webGui: Add cache pool BTRFS info (if existing) to diagnostics
- webGui: added new Europe/Saratov timezone
- webGui: additional XSS and CSRF hardening

Version 6.3.0-rc6 2016-12-07
----------------------------

Base distro:

- inotify-tools: version 3.14
- mozilla-firefox: version 50.0.2 (CVE-2016-9078, CVE-2016-9079)
- ntfs-3g: version 2016.2.22
- rsyslog: version 8.23.0

Linux kernel:

- version 4.8.12 (CVE-2016-8650)

Management:

- network: must set forwarding delay before setting stp 'on'; need 1 sec delay between stop/start in restart
- samba: move OS X "vfs_fruit" optimization from 'global' to individual share settings
- shutdown: increase default shutdown delay from 60 to 90 sec; eliminate extraneous console messages
- update: hwdata/{pci.ids,usb.ids,oui.txt,manuf.txt} smartmontools/drivedb.h
- webGui: add Hibernate option to VM context menu

Version 6.3.0-rc5 2016-11-25
----------------------------

Base distro:

- bash: version 4.4.005
- grep: version 2.26 (rev2)
- kernel-firmware: version 20161118git
- libvirt: version 2.4.0
- mozilla-firefox: version 50.0
- ntp: version 4.2.8p9 (CVE-2016-9311, CVE-2016-9310, CVE-2016-7427, CVE-2016-7428, CVE-2016-9312, CVE-2016-7431, CVE-2016-7434, CVE-2016-7429, CVE-2016-7426, CVE-2016-7433)

Linux kernel:

- version 4.8.10 (CVE-2016-7039)

Management:

- add btrfs_check script to facilitate btrfs file system check
- bug fix: firefox correctly connects to emhttp port number
- samba: include OS X vfs_fruit optimizations by default
- shutdown: bug fix: overall shutdown timeout read from wrong cfg file
- shutdown: bug fix: saving shutdown timeout value
- shutdown: add config setting for overall VM shutdown timeout
- update: hwdata/{pci.ids,usb.ids,oui.txt,manuf.txt} smartmontools/drivedb.h
- webGui: add filesystem Check for btrfs volumes in Maintenance mode
- webGui: add vm shutdown time-out option
- webGui: generate VM xml with cpu topology as single-threaded when host cpu is AMD
- webGui: special text aside new disks to clear
- webGui: split out Europe/Istanbul as its own timezone

Other:

- make_bootable_linux: use readlink instead of realpath since it is more compatible

Version 6.3.0-rc4 2016-11-11
----------------------------

Base distro:

- curl: version 7.51.0 (CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625)
- docker: version 1.12.3 (CVE-2016-8867)
- glibc-zoneinfo: version 2016i
- grep: version 2.26
- kernel-firmware: version 20161001git
- libusb: version 1.0.21
- libX11: version 1.6.4 (CVE-2016-7942, CVE-2016-7943)
- libXfixes: version 5.0.3 (CVE-2016-7944)
- libXi: version 1.7.8 (CVE-2016-7945, CVE-2016-7946)
- libXrandr: version 1.5.1 (CVE-2016-7947, CVE-2016-7948)
- libXrender: version 0.9.10 (CVE-2016-7949, CVE-2016-7950)
- libXtst: version 1.2.3 (CVE-2016-7951, CVE-2016-7952)
- libXv: version 1.0.11 (CVE-2016-5407)
- lvm2: version 2.02.166
- mozilla-firefox: version 49.0.2
- mpfr: version 3.1.5
- nano: version 2.7.1
- php: version 7.0.13
- samba: version 4.5.1

Linux kernel:

- version 4.8.7 (CVE-2016-7042, CVE-2016-8630, CVE-2016-8633)
- md/unraid version: 2.7.1
  - make the 'check' command "correct"/"nocorrect" argument case insensitive
  - mark superblock 'clean' upon initialization

Management:

- emhttp: add API command cmdStopMover and API status variable shareMoverActive (yes/no)
- emhttp: ensure disk shares have proper permissions set even if not being exported
- emhttp: fix detecton of unclean shutdown to trigger automatic parity check upon Start if necessary
- emhttp: fix mac address not set in avahi afp share advertisement (regression introduced in -rc2)
- emhttp: unmount docker/libvirt loopback if docker/libvirt fail to start properly
- mover: add start/stop/status subcommands (experimental)
- mover: dereference files on user shares to get st_dev/st_ino instead of from shfs stat structure
- shfs: eliminate 'use_ino' option dependency (fixes NFS issue on buggy clients)
- update: hwdata/{pci.ids,usb.ids,oui.txt,manuf.txt} smartmontools/drivedb.h
- webGui: combine PCI Devices and IOMMU Groups on Sysdev page; Sort IOMMU and USB Devices properly
- webGui: correct button positions on confirmation dialogs
- webGui: correct handling of unclean shutdown detection
- webGui: fixed device passthrough for Docker
- webGui: fixed Docker/VMs tab stay visible when array is stopped
- webGui: fixed some help text typos
- webGui: update to font-awesome 4.7.0

Version 6.3.0-rc3 2016-10-22
----------------------------

Linux kernel:

- version 4.8.4 (CVE-2016-5195)

Management:

- shutdown: additional logging in event of cmdStop timeout

Version 6.3.0-rc2 2016-10-19
----------------------------

Base distro:

- docker: version 1.12.2
- containerd: version 0.2.4
- runc: version 1.0.0_rc2
- libseccomp: version 2.3.1
- libvirt-php: 0.5.2 (+ latest from git)
- php: version 7.0.12
- usbredir: version 0.7.1
- spice: version 0.12.8
- spice-protocol: version 0.12.12
- imlib2: version 1.4.9
- gd: version 2.2.3
- rsyslog: version 8.22.0
- libfastjson: version 0.99.4
- reverted OVMF firmware back to the version in 6.2 due to user reported issues

Linux kernel:

- version 4.8.2
- r750: version 1.2.10-16_10_13
- md/unraid: kernel 4.8 API changes; support FUA and SYNC write operation flags

Management:

- bug fix: Samba listening on the wrong interface in a VLAN-enable config
- emhttp: added starting/stopping docker/libvirt events
- emhttp: removed 'reboot', 'shutdown', 'changeNetwork' API calls; eliminated emhttp-managed network vars
- shutdown: save diagnostics in event of cmdStop timeout
- vm manager: add 'virtio-win-0.1.126-2' and 'virtio-win-0.1.126-1' to VirtIO-ISOs list
- webGui: Added "Join" notification agent
- webGui: Add support for "Notify My Android" notifications
- webGui: Fixed: Windows unable to extract diagnostics zip file
- webGui: Increased password length to 128 characters
- webGui: Interactive Reboot and Shutdown directly invokes '/sbin/reboot' and '/sbin/poweroff'

Version 6.3.0-rc1 2016-10-05
----------------------------

Base distro (primary packages):

- btrfs-progs: version v4.7.2
- netatalk: version 3.1.10
- openssl: version 1.0.2j
- php: version 5.6.26
- qemu: version 2.7.0
- samba: version 4.5.0

Base distro (secondary packages):

- apcupsd: version 3.14.14
- bash: version 4.4.0
- curl: version 7.50.3
- diffutils: version 3.5
- e2fsprogs: version 1.43.3
- etc: version 14.2
- file: version 5.28
- fuse: version 2.9.7
- gawk: version 4.1.4
- gdbm: version 1.12
- glib2: version 2.46.2
- glibc: version 2.24
- glibc: version zoneinfo
- glibc-solibs: version 2.24
- gnutls: version 3.4.15
- jemalloc: version 4.2.1
- kmod: version 23
- libtasn1: version 4.9
- libxml2: version 2.9.4
- lvm2: version 2.02.161
- nano: version 2.7.0
- network-scripts: version 14.2
- nfs-utils: version 1.3.4
- openssl-solibs version: 1.0.2j
- pkgtools-14.2-noarch: version 13
- reiserfsprogs: version 3.6.25
- util-linux: version 2.28.2

Base distro (desktop GUI packages):

- freetype: version 2.6.5
- harfbuzz: version 1.3.0
- libXfont: version 1.5.2
- mesa: version 12.0.2
- mozilla-firefox: version 49.0.1
- xkeyboard-config: version 2.18
- xorg-server: version 1.18.4

Linux kernel:

- version 4.7.6
- aacraid: version 1.2.1-52011
- intel 10Gbit ethernet: revert to in-tree drivers
- r750: version 1.2.9-16_09_27
- md/unraid: Fix bug where case of no data disks improperly detected.

Management:

- bug fix: For file system type "auto", only attempt btrfs,xfs,reiserfs mounts.
- bug fix: For docker.img and libvirt.img, if path on /mnt/ check for mountpoint on any subdir component
- bug fix: During shutdown force continue if array stop taking too long.
- bug fix: Handle case in 'mover' where rsync may move a file but also return error status.
- webGui: Add "Shutdown time-out" control on Disk Settings page.
- webGui: bug fix: Cannot manually specify virtIO iso in VM settings
- webGui: other changes: refer to github commit log

Share this post


Link to post
Share on other sites

Upgrade went fine, the speedtest plug-in didn't break :D

 

There are several plugins that need updating that break on this version.  Be sure to update all plugins.  Anything that does not seem to work properly should be reported to the plugin author.  You will see csrf errors in the log when things don't seem to work properly.

 

UD has been updated to handle the changes in this version, but there may be some additional areas that I did not catch.

Share this post


Link to post
Share on other sites

Upgrade went fine, the speedtest plug-in didn't break :D

 

There are several plugins that need updating that break on this version.  Be sure to update all plugins.  Anything that does not seem to work properly should be reported to the plugin author.  You will see csrf errors in the log when things don't seem to work properly.

 

UD has been updated to handle the changes in this version, but there may be some additional areas that I did not catch.

To expand upon this, if clicking something within a plugin takes you to a completely blank screen, then check the log and post in the plugin's support thread

 

All of my plugins should work fine.  CA required a minor update for one particular feature to operate. 

 

But, as dlandon stated there may be things that I missed on my plugins during RC7/RC8 testing but any issues would be minor and would get fixed promptly.

 

Share this post


Link to post
Share on other sites

Dynamix plugins should be working fine too.

 

To concur dlandon and squid, if anything missed in the Dynamix plugins, please report and I correct asap.

 

Share this post


Link to post
Share on other sites

bonienlSquid, and dlandon ----

 

Am I correct in assuming that you have already incorporated the necessary updates prior to release of ver 6.3.0 rc9?

Share this post


Link to post
Share on other sites

bonienlSquid, and dlandon ----

 

Am I correct in assuming that you have already incorporated the necessary updates prior to release of ver 6.3.0 rc9?

 

Some have, some haven't.  That's the purpose of this pre-release: to sort out what should get modified before the 'stable' version is released.

Share this post


Link to post
Share on other sites

bonienlSquid, and dlandon ----

 

Am I correct in assuming that you have already incorporated the necessary updates prior to release of ver 6.3.0 rc9?

 

Yes for my plugins as far as I know.  Updates have been released.

Share this post


Link to post
Share on other sites

bonienlSquid, and dlandon ----

 

Am I correct in assuming that you have already incorporated the necessary updates prior to release of ver 6.3.0 rc9?

Mine should work no problems.  Is it possible that I missed something?  Sure, but I don't believe so...

Share this post


Link to post
Share on other sites

Great to see everyone cooperating!  This remains an amazing platform.. Am updating now :-)

Share this post


Link to post
Share on other sites

A little disappointed that NVMe temperature still doesn't work, I reported it on rc5 and since it worked on v6.2 should be an easy fix, no?

Share this post


Link to post
Share on other sites

Management:

 

- libvirt: disable nested virtualizaton by default

 

Didn't this used to be enabled in previous versions? I would guess you disabled it because of problems with antivirus programs running in VM's. How can we enable it if we wish to use it?

 

Thanks,

 

Gary

Share this post


Link to post
Share on other sites

Management:

 

- libvirt: disable nested virtualizaton by default

 

Didn't this used to be enabled in previous versions? I would guess you disabled it because of problems with antivirus programs running in VM's. How can we enable it if we wish to use it?

 

It was enabled by default in previous versions but it did cause problems with some antivirus programs running in VMs.  We'll have a VM settings interface option at some point to re-enable but for now you can add these two lines to the top of your /boot/config/go script:

 

echo "options kvm-intel nested=1" > /etc/modprobe.d/kvm-intel.conf
echo "options kvm-amd nested=1" > /etc/modprobe.d/kvm-amd.conf

Share this post


Link to post
Share on other sites

Management:

 

- libvirt: disable nested virtualizaton by default

 

Didn't this used to be enabled in previous versions? I would guess you disabled it because of problems with antivirus programs running in VM's. How can we enable it if we wish to use it?

 

It was enabled by default in previous versions but it did cause problems with some antivirus programs running in VMs.  We'll have a VM settings interface option at some point to re-enable but for now you can add these two lines to the top of your /boot/config/go script:

 

echo "options kvm-intel nested=1" > /etc/modprobe.d/kvm-intel.conf
echo "options kvm-amd nested=1" > /etc/modprobe.d/kvm-amd.conf

 

 

Perfect! Thanks

Share this post


Link to post
Share on other sites

A little disappointed that NVMe temperature still doesn't work, I reported it on rc5 and since it worked on v6.2 should be an easy fix, no?

 

We're looking in to this.  Could you please post the SMART data output from your Samsung 950 Pro and Toshiba/OCZ RD400 NVMe drives for us to take a look at? (e.g. smartctl -A /dev/nvme0n1)

Share this post


Link to post
Share on other sites

We're looking in to this.  Could you please post the SMART data output from your Samsung 950 Pro and Toshiba/OCZ RD400 NVMe drives for us to take a look at? (e.g. smartctl -A /dev/nvme0n1)

 

The Samsung is on my desktop at the moment, but I can boot with unRAID and get a SMART report if it's really needed and someone else doesn't post it before.

 

This is for the Toshiba/OCZ RD 400:

 

smartctl -A /dev/nvme0n1
smartctl 6.5 2016-05-07 r4318 [x86_64-linux-4.9.6-unRAID] (local build)
Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF SMART DATA SECTION ===
Read NVMe SMART/Health Information failed: NVMe Status 0x4002

 

I can get some info using -a but no temp:

smartctl -a /dev/nvme0n1
smartctl 6.5 2016-05-07 r4318 [x86_64-linux-4.9.6-unRAID] (local build)
Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Number:                       TOSHIBA-RD400
Serial Number:                      664S107XTPGV
Firmware Version:                   57CZ4102
PCI Vendor/Subsystem ID:            0x1b85
IEEE OUI Identifier:                0xe83a97
Controller ID:                      0
Number of Namespaces:               1
Namespace 1 Size/Capacity:          512,110,190,592 [512 GB]
Namespace 1 Formatted LBA Size:     512
Local Time is:                      Sat Jan 28 19:02:07 2017 GMT
Firmware Updates (0x02):            1 Slot
Optional Admin Commands (0x0007):   Security Format Frmw_DL
Optional NVM Commands (0x000e):     Wr_Unc DS_Mngmt Wr_Zero
Warning  Comp. Temp. Threshold:     78 Celsius
Critical Comp. Temp. Threshold:     82 Celsius

Supported Power States
St Op     Max   Active     Idle   RL RT WL WT  Ent_Lat  Ex_Lat
0 +     6.00W       -        -    0  0  0  0        0       0
1 +     2.40W       -        -    1  1  1  1        0       0
2 +     1.90W       -        -    2  2  2  2        0       0
3 -   0.1600W       -        -    3  3  3  3     1000    1000
4 -   0.0120W       -        -    4  4  4  4     5000   35000
5 -   0.0060W       -        -    5  5  5  5   100000  110000

Supported LBA Sizes (NSID 0x1)
Id Fmt  Data  Metadt  Rel_Perf
0 +     512       0         2
1 -    4096       0         1

=== START OF SMART DATA SECTION ===
Read NVMe SMART/Health Information failed: NVMe Status 0x4002

Share this post


Link to post
Share on other sites

Small bug, I've done everything but wipe my setting and start again.

 

It's reproducible for me:

 

Go to http://tower/Shares

Click "Compute All"

...

Page refreshes

...

Hasn't computed all (not in the foreground anyway)

 

If you then click "Compute..." on a specific share, it'll show you the size just fine.

 

tl;dr - Compute All share sizes doesn't work correctly.

 

Diagnostics attached (if they're at all useful in this case?)

raptor-diagnostics-20170128-1944.zip

Share this post


Link to post
Share on other sites

Bug--- found this:

Jan 28 08:17:42 Rose cache_dirs: cache_dirs process ID 8071 started
Jan 28 08:17:42 Rose root: Fix Common Problems Version 2017.01.24
Jan 28 08:17:45 Rose emhttp: Starting services...
Jan 28 08:17:45 Rose emhttp: nothing to sync
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:49:42 Rose kernel: mdcmd (41): spindown 0
Jan 28 08:49:42 Rose kernel: mdcmd (42): spindown 2
Jan 28 08:49:43 Rose kernel: mdcmd (43): spindown 29
Jan 28 08:49:47 Rose kernel: mdcmd (44): spindown 1
Jan 28 08:49:48 Rose kernel: mdcmd (45): spindown 3
Jan 28 09:08:31 Rose sSMTP[27232]: Creating SSL connection to host
Jan 28 09:08:31 Rose sSMTP[27232]: SSL connection using ECDHE-RSA-AES128-GCM-SHA256
Jan 28 09:08:33 Rose sSMTP[27232]: Sent mail for frmalaney@gmail.com (221 2.0.0 closing connection c19sm6799946qtc.29 - gsmtp) uid=0 username=root outbytes=626
Jan 28 09:22:11 Rose kernel: kvm: already loaded the other module
Jan 28 09:58:27 Rose kernel: mdcmd (46): spindown 1
Jan 28 10:00:03 Rose kernel: mdcmd (47): spindown 2

 

Attached diagnostics file also.

rose-diagnostics-20170128-1512.zip

Share this post


Link to post
Share on other sites

Bug--- found this:

Jan 28 08:17:42 Rose cache_dirs: cache_dirs process ID 8071 started
Jan 28 08:17:42 Rose root: Fix Common Problems Version 2017.01.24
Jan 28 08:17:45 Rose emhttp: Starting services...
Jan 28 08:17:45 Rose emhttp: nothing to sync
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:49:42 Rose kernel: mdcmd (41): spindown 0
Jan 28 08:49:42 Rose kernel: mdcmd (42): spindown 2
Jan 28 08:49:43 Rose kernel: mdcmd (43): spindown 29
Jan 28 08:49:47 Rose kernel: mdcmd (44): spindown 1
Jan 28 08:49:48 Rose kernel: mdcmd (45): spindown 3
Jan 28 09:08:31 Rose sSMTP[27232]: Creating SSL connection to host
Jan 28 09:08:31 Rose sSMTP[27232]: SSL connection using ECDHE-RSA-AES128-GCM-SHA256
Jan 28 09:08:33 Rose sSMTP[27232]: Sent mail for frmalaney@gmail.com (221 2.0.0 closing connection c19sm6799946qtc.29 - gsmtp) uid=0 username=root outbytes=626
Jan 28 09:22:11 Rose kernel: kvm: already loaded the other module
Jan 28 09:58:27 Rose kernel: mdcmd (46): spindown 1
Jan 28 10:00:03 Rose kernel: mdcmd (47): spindown 2

 

Attached diagnostics file also.

Just to clarify (since Fix Common Problems is listed right at the beginning), FCP is not responsible for the csrf error.  Looks like this is at the start of array, and the tests that FCP performs at array start do not trigger the error (just tried it)

Share this post


Link to post
Share on other sites

Bug--- found this:

Jan 28 08:17:42 Rose cache_dirs: cache_dirs process ID 8071 started
Jan 28 08:17:42 Rose root: Fix Common Problems Version 2017.01.24
Jan 28 08:17:45 Rose emhttp: Starting services...
Jan 28 08:17:45 Rose emhttp: nothing to sync
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:49:42 Rose kernel: mdcmd (41): spindown 0
Jan 28 08:49:42 Rose kernel: mdcmd (42): spindown 2
Jan 28 08:49:43 Rose kernel: mdcmd (43): spindown 29
Jan 28 08:49:47 Rose kernel: mdcmd (44): spindown 1
Jan 28 08:49:48 Rose kernel: mdcmd (45): spindown 3
Jan 28 09:08:31 Rose sSMTP[27232]: Creating SSL connection to host
Jan 28 09:08:31 Rose sSMTP[27232]: SSL connection using ECDHE-RSA-AES128-GCM-SHA256
Jan 28 09:08:33 Rose sSMTP[27232]: Sent mail for frmalaney@gmail.com (221 2.0.0 closing connection c19sm6799946qtc.29 - gsmtp) uid=0 username=root outbytes=626
Jan 28 09:22:11 Rose kernel: kvm: already loaded the other module
Jan 28 09:58:27 Rose kernel: mdcmd (46): spindown 1
Jan 28 10:00:03 Rose kernel: mdcmd (47): spindown 2

 

Attached diagnostics file also.

 

It appears to be from a plugin that has an event at the 'starting_services' event.  I'm going to take a wild guess that it is the nerd pack.  Look in the /usr/local/emhttp/plugins/NerdPack/events and see if there is a starting_services event?

 

All of your other plugins appear to be the "usual suspects" that I use and have no issues with.

 

You also need to remove the /flash/config/plugin/dynamix.plg.  That is no longer needed.

Share this post


Link to post
Share on other sites

Bug--- found this:

Jan 28 08:17:42 Rose cache_dirs: cache_dirs process ID 8071 started
Jan 28 08:17:42 Rose root: Fix Common Problems Version 2017.01.24
Jan 28 08:17:45 Rose emhttp: Starting services...
Jan 28 08:17:45 Rose emhttp: nothing to sync
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:49:42 Rose kernel: mdcmd (41): spindown 0
Jan 28 08:49:42 Rose kernel: mdcmd (42): spindown 2
Jan 28 08:49:43 Rose kernel: mdcmd (43): spindown 29
Jan 28 08:49:47 Rose kernel: mdcmd (44): spindown 1
Jan 28 08:49:48 Rose kernel: mdcmd (45): spindown 3
Jan 28 09:08:31 Rose sSMTP[27232]: Creating SSL connection to host
Jan 28 09:08:31 Rose sSMTP[27232]: SSL connection using ECDHE-RSA-AES128-GCM-SHA256
Jan 28 09:08:33 Rose sSMTP[27232]: Sent mail for frmalaney@gmail.com (221 2.0.0 closing connection c19sm6799946qtc.29 - gsmtp) uid=0 username=root outbytes=626
Jan 28 09:22:11 Rose kernel: kvm: already loaded the other module
Jan 28 09:58:27 Rose kernel: mdcmd (46): spindown 1
Jan 28 10:00:03 Rose kernel: mdcmd (47): spindown 2

 

Attached diagnostics file also.

Just to clarify (since Fix Common Problems is listed right at the beginning), FCP is not responsible for the csrf error.  Looks like this is at the start of array, and the tests that FCP performs at array start do not trigger the error (just tried it)

 

One other thing that I just noticed.  Under 'Main' >>  'Boot Device', there is no listing for the boot device. It is just blank...

 

I will be following up on dlandon suggestions but I am excepting company in the next few minutes. 

Share this post


Link to post
Share on other sites

Bug--- found this:

Jan 28 08:17:42 Rose cache_dirs: cache_dirs process ID 8071 started
Jan 28 08:17:42 Rose root: Fix Common Problems Version 2017.01.24
Jan 28 08:17:45 Rose emhttp: Starting services...
Jan 28 08:17:45 Rose emhttp: nothing to sync
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:17:45 Rose root: error: webGui/include/ProcessStatus.php: missing csrf_token
Jan 28 08:49:42 Rose kernel: mdcmd (41): spindown 0
Jan 28 08:49:42 Rose kernel: mdcmd (42): spindown 2
Jan 28 08:49:43 Rose kernel: mdcmd (43): spindown 29
Jan 28 08:49:47 Rose kernel: mdcmd (44): spindown 1
Jan 28 08:49:48 Rose kernel: mdcmd (45): spindown 3
Jan 28 09:08:31 Rose sSMTP[27232]: Creating SSL connection to host
Jan 28 09:08:31 Rose sSMTP[27232]: SSL connection using ECDHE-RSA-AES128-GCM-SHA256
Jan 28 09:08:33 Rose sSMTP[27232]: Sent mail for frmalaney@gmail.com (221 2.0.0 closing connection c19sm6799946qtc.29 - gsmtp) uid=0 username=root outbytes=626
Jan 28 09:22:11 Rose kernel: kvm: already loaded the other module
Jan 28 09:58:27 Rose kernel: mdcmd (46): spindown 1
Jan 28 10:00:03 Rose kernel: mdcmd (47): spindown 2

 

Attached diagnostics file also.

Just to clarify (since Fix Common Problems is listed right at the beginning), FCP is not responsible for the csrf error.  Looks like this is at the start of array, and the tests that FCP performs at array start do not trigger the error (just tried it)

 

One other thing that I just noticed.  Under 'Main' >>  'Boot Device', there is no listing for the boot device. It is just blank...

 

I will be following up on dlandon suggestions but I am excepting company in the next few minutes.

 

I just installed the Nerd Pack and couldn't make it happen.  As for the boot device, I don't understand that.  You might also try the safe mode and see if it happens.  If it does, that's an unRAID issue.  If not, it's a plugin.

Share this post


Link to post
Share on other sites

My vote is Tips & Tweaks.  One of the tweaks is triggering a call to emhttp

 

Boot Device:  Can't explain either. 

 

There has always been one thing that I want to test but is a pita for me to do so since my desktop is a vm.

 

Open up two tabs to unRaid.  Reboot unRaid on one of them and don't touch the other until the system is back up and running.  Navigate around the second.  Do you get a ton of wrong_csrf errors?

Share this post


Link to post
Share on other sites

<<< snip >>>

 

It appears to be from a plugin that has an event at the 'starting_services' event.  I'm going to take a wild guess that it is the nerd pack.  Look in the /usr/local/emhttp/plugins/NerdPack/events and see if there is a starting_services event?

 

Nothing listed there.

 

You also need to remove the /flash/config/plugin/dynamix.plg.  That is no longer needed.

 

Done, but I need to reboot and can't do that now.  Will do it tomorrow...

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Copyright © 2005-2017 Lime Technology, Inc. unRAID® is a registered trademark of Lime Technology, Inc.