templates usually have old OS versions for example . debian 7.2 . while manual installs always use the net to update itself to latest version.
this way works assuming you didn't update your system and your host provider didn't update his templates ..
other than that I doubt there is a way to...
@Flapadar
I checked the c code of (vzctl enter) its using linux fork() function to fork a new pid with its own allocated memory.
I can assume its very safe to use it since the ssh session will die once that pid dies or exit. there is no way I'm aware of to exit that fork and back to node as...
Hi there,
I already stated that . but still I didn't find anyway to exploit it till now. the only issue I can think of is if vzctl itself have privilege escalation problem . and that is vendor problem not the mentioned idea problem.
@lbft very true . thanks
Highest Regards
Mohammed H
Hello,
this is just an idea not sure if its a secure method or not (it can be extended as long as you know bash) :
on Node :
useradd -d console-user
passwd console-user
create file /home/console-user/enter.sh with below content :
#!/bin/bash
exec sudo /usr/sbin/vzctl enter Container-ID
now...
Hello,
thanks for the info.
also for KVM nodes you can allow KVM guests access /dev/random or /dev/hwrng (if you have hardware RNG) using virtio rng as explained here
http://rhelblog.redhat.com/2015/03/09/red-hat-enterprise-linux-virtual-machines-access-to-random-numbers-made-easy/
and using...
@iWF-Jacob
yes some users reported same issue. its apparently a false-positive I already in contact with avast lab to discuss the reason of the block.
Highest Regards
Mohammed H
Hi there,
just wanted to let people who use this module that v1.1 has been released and has some bugfixes and new features :
Ability to limit traffic per package/per container.
Better way to remove container IPs.
kindly check the announcement for info and notices about upgrade.
Highest...
@KuJoe, @HalfEatenPie
you are correct. I updated the repo with new version that have sudo enabled. and I will update Installation docs on how configure it.
thanks for your suggestions I'm sure it will help the community.
if you guys have any further suggestions. I'm open for any of them :)...
Hello,
yes that's true for normal servers. but for OpenVZ nodes I prefer to lock it down using iptables and allow only sysadmin IP and server hosting WHMCS to access it.
Hi There,
this module was developed in 2013. I wanted to share it with you so we can all benefit from it. and may be extend it.
Description :
This is a server provisioning module made for WHMCS. it can help server administrators or VPS server providers to Create, Terminate, Suspend, Unsuspend...
well I will have to disagree with you. sticking with 3rd party apps is dangerous too since its source code is available (even if its encrypted, it can be decrypted). and when the source code is available 0days will be too. while in-house platforms with good programming habits is more secure (at...
Hello,
well I must say that your well written article just revived me from the desperation I see from all this 1$/mo VPS providers .
thank you so much for this valuable info.
Highest Regards
Mohammed H
Hello,
yeah your prices seems very competitive . however you might want tell your clients about your VIrtualization platform (KVM,OpenVZ,XEN,etc...) and also what is the panel they will get (SolusVM,OnApp,etc...)
Highest Regards
Mohammed H