Device type: Raspberry Pi (v1 / Zero / Zero W)
OS version: balenaOS 2.46.1+rev1
Supervisor version: 10.6.27
I was having a lot of difficulty establishing any communication with a device, even though it was marked as having VPN and could get a heartbeat. Reboot requests would time out. At one point I was finally able to connect and saw
bash-5.0# uptime
07:59:00 up 5:19, load average: 40.72, 39.90, 35.04
where normally it’s about 1.5
.
I then saw that the number of processes was double what it normally is and the result of ps was:
bash-5.0# ps
PID USER TIME COMMAND
1 root 25:16 {systemd} /sbin/init
2 root 0:00 [kthreadd]
6 root 0:00 [mm_percpu_wq]
7 root 1:46 [ksoftirqd/0]
8 root 0:00 [kdevtmpfs]
9 root 0:00 [netns]
11 root 0:00 [khungtaskd]
12 root 0:00 [oom_reaper]
13 root 0:00 [writeback]
14 root 0:00 [kcompactd0]
15 root 0:00 [crypto]
16 root 0:00 [kblockd]
17 root 0:00 [watchdogd]
18 root 0:00 [rpciod]
19 root 0:00 [kworker/u3:0-hc]
20 root 0:00 [xprtiod]
21 root 0:01 [kswapd0]
22 root 0:00 [nfsiod]
33 root 0:00 [kthrotld]
34 root 0:00 [iscsi_eh]
35 root 0:00 [dwc_otg]
36 root 0:00 [DWC Notificatio]
37 root 0:00 [vchiq-slot/0]
38 root 0:00 [vchiq-recy/0]
39 root 0:00 [vchiq-sync/0]
40 root 0:00 [vchiq-keep/0]
41 root 0:00 [ipv6_addrconf]
42 root 0:02 [irq/86-mmc1]
49 root 0:00 [mmc_complete]
325 root 0:00 sshd: root@pts/38
336 root 0:00 /bin/bash -l
404 root 0:00 [jbd2/mmcblk0p2-]
405 root 0:00 [ext4-rsv-conver]
421 root 0:00 [jbd2/mmcblk0p5-]
426 root 0:00 [ext4-rsv-conver]
500 root 1:55 /lib/systemd/systemd-journald
569 root 0:02 [jbd2/mmcblk0p6-]
570 root 0:00 [ext4-rsv-conver]
609 root 0:01 /lib/systemd/systemd-udevd
638 root 0:00 [spi0]
673 root 0:00 [cfg80211]
683 root 0:00 [brcmf_wq/mmc1:0]
684 root 0:00 [brcmf_wdog/mmc1]
716 root 0:07 /usr/sbin/rngd -f -r /dev/hwrng
734 root 0:10 /sbin/syslogd -n
735 root 3:22 /lib/systemd/systemd-logind
752 997 14:29 /usr/bin/dbus-daemon --system --address=systemd: --nofork
758 root 0:00 /bin/bash -l
765 root 0:00 /sbin/klogd -n
778 root 0:00 /usr/sbin/chronyd -s -d
795 root 0:00 /usr/bin/hciattach /dev/serial1 bcm43xx 3000000 flow - b8:
796 root 0:00 [kworker/u3:2-hc]
844 994 0:11 avahi-daemon: running [1e46499.local]
845 994 0:00 avahi-daemon: chroot helper
853 root 6:14 /usr/sbin/NetworkManager --no-daemon
858 996 2:02 /usr/sbin/openvpn --writepid /run/openvpn/openvpn.pid --cd
861 nobody 0:02 /usr/bin/dnsmasq -x /run/dnsmasq.pid -a 127.0.0.2,10.114.1
866 root 5:58 /usr/bin/balenad --experimental --log-driver=journald -s a
870 root 0:00 /proc/self/exe --healthcheck /usr/lib/balena/balena-health
889 root 0:33 /usr/sbin/wpa_supplicant -u
918 root 3:59 balena-engine-containerd --config /var/run/balena-engine/c
1078 root 0:00 sshd: root@pts/17
1108 root 0:00 /bin/bash -l
1185 root 1:55 balena-engine-containerd-shim -namespace moby -workdir /va
1232 root 0:01 /bin/bash -c . update.sh && . cmd.sh
1334 root 0:00 udevd --daemon
1443 root 0:21 python3 LED.py
1444 root 0:31 /bin/bash ./connectCheck.sh
1446 root 0:27 node main.js
1535 root 0:21 python3 LED.py
1595 root 0:00 {start-resin-sup} /bin/sh /usr/bin/start-resin-supervisor
1598 root 0:00 /proc/self/exe --healthcheck /usr/lib/resin-supervisor/res
1783 root 0:25 balena start --attach resin_supervisor
1798 root 2:20 balena-engine-containerd-shim -namespace moby -workdir /va
1814 root 1:31 node /usr/src/app/dist/app.js
1853 999 0:00 /usr/bin/dbus-daemon --system
1860 998 0:04 avahi-daemon: running [1e46499.local]
1861 998 0:00 avahi-daemon: chroot helper
1917 root 0:01 sshd: root@pts/12
2022 root 0:00 /bin/bash -l
2267 nobody 0:00 /usr/bin/dnsmasq --conf-file=/dev/null --no-hosts --keep-i
3068 root 0:02 [kworker/0:0-eve]
3996 root 0:00 sshd: root@pts/32
4041 root 0:00 /bin/bash -l
4548 root 0:00 sshd: root@pts/25
4767 root 0:00 /bin/bash -l
4945 root 0:00 sshd: root@pts/18
5127 root 0:00 /bin/bash -l
5197 root 0:00 [kworker/0:2H]
5260 root 0:00 sshd: root@pts/36
5369 root 0:00 /bin/bash -l
6403 root 0:00 sshd: root@pts/33
6545 root 0:00 /bin/bash -l
6588 root 0:00 sshd: root@pts/26
6715 root 0:00 [kworker/u2:3-ev]
6857 root 0:00 /bin/bash -l
6990 root 0:01 sshd: root@pts/13
7114 root 0:00 /bin/bash -l
7149 root 0:01 sshd: root@pts/1
7241 root 0:00 /bin/bash -l
7598 root 0:00 sshd: root@pts/39
7727 root 0:00 sh -c X=/usr/bin/;ENG=rce;[ -x $X$ENG ]||ENG=docker;[ -x $
8096 root 0:01 [kworker/0:1-eve]
8107 root 0:00 balena exec -it 2a8eaac6d85947661ff82d74fe64c65eacac524f0a
8155 root 0:00 /bin/bash
8711 root 0:01 sshd: root@pts/14
8789 root 0:00 sshd: root@pts/27
8802 root 0:00 /bin/bash -l
8826 root 0:01 sshd: root@pts/0
8913 root 0:00 /bin/bash -l
8993 root 0:00 /bin/bash -l
10423 root 0:01 sshd: root@pts/15
10464 root 0:00 /bin/bash -l
10844 root 0:01 sshd: root@pts/2
10922 root 0:00 /bin/bash -l
11251 root 0:00 sshd: root@pts/28
11328 root 0:00 sshd: root@pts/19
11419 root 0:00 /bin/bash -l
11467 root 0:00 /bin/bash -l
11554 root 0:00 [kworker/0:2-eve]
11644 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11645 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11646 root 0:00 /usr/sbin/sshd -i -f /etc/ssh/sshd_config_readonly
11647 root 0:00 /usr/sbin/sshd -i -f /etc/ssh/sshd_config_readonly
11648 root 0:00 /usr/sbin/sshd -i -f /etc/ssh/sshd_config_readonly
11649 root 0:00 /usr/sbin/sshd -i -f /etc/ssh/sshd_config_readonly
11650 root 0:00 /usr/sbin/sshd -i -f /etc/ssh/sshd_config_readonly
11651 root 0:00 /usr/sbin/sshd -i -f /etc/ssh/sshd_config_readonly
11652 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11653 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11654 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11655 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11656 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11657 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11658 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11659 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11660 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11661 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11662 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11663 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11664 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11665 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11666 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11667 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11668 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11669 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11670 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11671 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11672 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11673 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11674 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11675 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11676 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11677 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11678 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11680 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11681 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11682 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11683 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11684 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11685 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11686 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11687 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11689 root 0:00 ps
11690 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11691 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11692 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11693 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11695 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11696 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11697 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11699 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11700 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11702 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11703 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11704 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11705 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11707 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11708 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11709 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11710 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11711 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11714 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11715 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11719 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11720 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11721 root 0:00 cat /home/root/.ssh/authorized_keys
11722 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11723 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11724 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11725 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11726 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11727 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11728 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11729 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11730 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11731 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11732 root 0:00 {ssh_keys_merger} /bin/sh /usr/sbin/ssh_keys_merger
11733 root 0:00 /bin/bash ./connectCheck.sh
11734 root 0:00 nmcli c show comms-wifi
11735 root 0:00 grep 802-11-wireless.ssid
13416 root 0:00 sshd: root@pts/20
13604 root 0:00 /bin/bash -l
14112 root 0:00 sshd: root@pts/34
14249 root 0:01 sshd: root@pts/4
14324 root 0:00 /bin/bash -l
14387 root 0:00 /bin/bash -l
15516 root 0:00 sshd: root@pts/29
15521 root 0:00 sshd: root@pts/21
15693 root 0:00 /bin/bash -l
15739 root 0:00 /bin/bash -l
16223 root 0:00 [kworker/0:0H-kb]
16697 root 0:01 sshd: root@pts/5
16778 root 0:00 /bin/bash -l
17243 root 0:01 sshd: root@pts/16
17493 root 0:00 /bin/bash -l
17981 root 0:01 sshd: root@pts/6
18011 root 0:00 /bin/bash -l
19358 root 0:01 sshd: root@pts/7
19376 root 0:00 /bin/bash -l
19585 root 0:00 sshd: root@pts/22
19776 root 0:00 /bin/bash -l
21058 root 0:00 sshd: root@pts/3
21130 root 0:00 /bin/bash -l
21968 root 0:01 sshd: root@pts/8
22033 root 0:00 /bin/bash -l
23801 root 0:00 sshd: root@pts/23
24160 root 0:00 /bin/bash -l
24314 root 0:00 sshd: root@pts/30
24545 root 0:00 /bin/bash -l
24600 root 0:00 sshd: root@pts/37
24779 root 0:01 sshd: root@pts/9
24781 root 0:00 /bin/bash -l
25016 root 0:00 /bin/bash -l
26285 root 0:01 sshd: root@pts/10
26388 root 0:00 /bin/bash -l
27896 root 0:00 [kworker/u2:1-ev]
30696 root 0:04 [kworker/0:3-cgr]
31355 root 0:00 sshd: root@pts/31
31646 root 0:00 /bin/bash -l
32122 root 0:00 sshd: root@pts/35
32476 root 0:01 sshd: root@pts/11
32530 root 0:00 /bin/bash -l
32580 root 0:00 /bin/bash -l
32678 root 0:00 sshd: root@pts/24
A ridiculous number of bash shells and sshd processes
. We had previously seen that on this system, it had trouble connecting to ntp servers. Result of chronyc sources
:
root@1e46499:~# chronyc sources
210 Number of sources = 4
MS Name/IP address Stratum Poll Reach LastRx Last sample
===============================================================================
^? time.cloudflare.com 0 14 0 - +0ns[ +0ns] +/- 0ns
^? saturno.unad.edu.co 0 14 0 - +0ns[ +0ns] +/- 0ns
^? 2803:eb80:8000:e::2 0 14 0 - +0ns[ +0ns] +/- 0ns
^? host63.181.119.30.baehos> 0 14 0 - +0ns[ +0ns] +/- 0ns
And
root@1e46499:~# journalctl -f -u chronyd.service
-- Logs begin at Fri 2020-04-10 03:30:48 UTC. --
Apr 10 07:14:11 1e46499 chronyd[778]: 2020-04-10T07:14:11Z Source 200.25.3.17 replaced with 2803:eb80:8000:e::2
-- Reboot --
Apr 10 07:14:14 1e46499 chronyd[768]: 2020-04-10T07:14:14Z Source 186.118.171.88 replaced with 94.16.122.254
Apr 10 16:26:00 1e46499 chronyd[768]: 2020-04-10T16:26:00Z Source 162.159.200.1 replaced with 2803:eb80:8000:e::2
At that point I lost connectivity again. I suspect part of the reason we have so much trouble connecting is difficulty getting correct time. But also the ridiculous number of sshd
processes can’t be good.