LeakIX - Host 195.201.223.85

Host 195.201.223.85

Germany

Hetzner Online GmbH

CheckMK monitoring endpoint publicly available

An open CheckMK agent is publicly available.

This could leak sensitive information such as :

Process list ( maybe credentials )
Network interfaces
Running services
Firewall rules
Internal OS configuration

https://docs.checkmk.com/latest/en/wato_monitoringagents.html

IP: 195.201.223.85
Port: 6556

First seen 2022-06-17 22:52
Last seen 2024-12-22 00:58
Open for 918 days

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9127defd052

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7972,00:30:50/656-00:23:47,1) /sbin/init
(root,0,0,00:00:24/656-00:23:47,2) [kthreadd]
(root,0,0,00:00:00/656-00:23:47,4) [kworker/0:0H]
(root,0,0,00:00:00/656-00:23:47,6) [mm_percpu_wq]
(root,0,0,00:07:29/656-00:23:47,7) [ksoftirqd/0]
(root,0,0,20:33:23/656-00:23:47,8) [rcu_sched]
(root,0,0,00:00:00/656-00:23:47,9) [rcu_bh]
(root,0,0,00:00:20/656-00:23:47,10) [migration/0]
(root,0,0,00:03:38/656-00:23:47,11) [watchdog/0]
(root,0,0,00:00:00/656-00:23:47,12) [cpuhp/0]
(root,0,0,00:00:00/656-00:23:47,13) [cpuhp/1]
(root,0,0,00:03:22/656-00:23:47,14) [watchdog/1]
(root,0,0,00:00:19/656-00:23:47,15) [migration/1]
(root,0,0,00:04:07/656-00:23:47,16) [ksoftirqd/1]
(root,0,0,00:00:00/656-00:23:47,18) [kworker/1:0H]
(root,0,0,00:00:00/656-00:23:47,19) [cpuhp/2]
(root,0,0,00:03:35/656-00:23:47,20) [watchdog/2]
(root,0,0,00:00:18/656-00:23:47,21) [migration/2]
(root,0,0,00:03:02/656-00:23:47,22) [ksoftirqd/2]
(root,0,0,00:00:00/656-00:23:47,24) [kworker/2:0H]
(root,0,0,00:00:00/656-00:23:47,25) [cpuhp/3]
(root,0,0,00:03:17/656-00:23:47,26) [watchdog/3]
(root,0,0,00:00:17/656-00:23:47,27) [migration/3]
(root,0,0,00:02:26/656-00:23:47,28) [ksoftirqd/3]
(root,0,0,00:00:00/656-00:23:47,30) [kworker/3:0H]
(root,0,0,00:00:00/656-00:23:47,31) [cpuhp/4]
(root,0,0,00:03:32/656-00:23:47,32) [watchdog/4]
(root,0,0,00:00:14/656-00:23:47,33) [migration/4]
(root,0,0,00:07:34/656-00:23:47,34) [ksoftirqd/4]
(root,0,0,00:00:00/656-00:23:47,36) [kworker/4:0H]
(root,0,0,00:00:00/656-00:23:47,37) [cpuhp/5]
(root,0,0,00:03:29/656-00:23:47,38) [watchdog/5]
(root,0,0,00:00:16/656-00:23:47,39) [migration/5]
(root,0,0,00:04:43/656-00:23:47,40) [ksoftirqd/5]
(root,0,0,00:00:00/656-00:23:47,42) [kworker/5:0H]
(root,0,0,00:00:00/656-00:23:47,43) [cpuhp/6]
(root,0,0,00:03:19/656-00:23:47,44) [watchdog/6]
(root,0,0,00:00:28/656-00:23:47,45) [migration/6]
(root,0,0,00:02:35/656-00:23:47,46) [ksoftirqd/6]
(root,0,0,00:00:00/656-00:23:47,48) [kworker/6:0H]
(root,0,0,00:00:00/656-00:23:47,49) [cpuhp/7]
(root,0,0,00:03:11/656-00:23:47,50) [watchdog/7]
(root,0,0,00:00:23/656-00:23:47,51) [migration/7]
(root,0,0,00:02:19/656-00:23:47,52) [ksoftirqd/7]
(root,0,0,00:00:00/656-00:23:47,54) [kworker/7:0H]
(root,0,0,00:00:00/656-00:23:47,55) [kdevtmpfs]
(root,0,0,00:00:00/656-00:23:47,56) [netns]
(root,0,0,00:00:00/656-00:23:47,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/656-00:23:47,58) [kauditd]
(root,0,0,00:01:43/656-00:23:47,62) [khungtaskd]
(root,0,0,00:00:00/656-00:23:47,63) [oom_reaper]
(root,0,0,00:00:00/656-00:23:47,64) [writeback]
(root,0,0,00:00:02/656-00:23:47,65) [kcompactd0]
(root,0,0,00:00:00/656-00:23:47,66) [ksmd]
(root,0,0,00:08:55/656-00:23:47,67) [khugepaged]
(root,0,0,00:00:00/656-00:23:47,68) [crypto]
(root,0,0,00:00:00/656-00:23:47,69) [kintegrityd]
(root,0,0,00:00:00/656-00:23:47,70) [kblockd]
(root,0,0,00:00:00/656-00:23:47,71) [ata_sff]
(root,0,0,00:00:00/656-00:23:47,72) [md]
(root,0,0,00:00:00/656-00:23:47,73) [edac-poller]
(root,0,0,00:00:00/656-00:23:47,74) [devfreq_wq]
(root,0,0,00:00:00/656-00:23:47,75) [watchdogd]
(root,0,0,02:13:36/656-00:23:47,79) [kswapd0]
(root,0,0,00:00:00/656-00:23:47,80) [kworker/u17:0]
(root,0,0,00:00:00/656-00:23:47,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/656-00:23:47,123) [kthrotld]
(root,0,0,00:00:00/656-00:23:47,124) [acpi_thermal_pm]
(root,0,0,00:00:00/656-00:23:47,130) [scsi_eh_0]
(root,0,0,00:00:00/656-00:23:47,131) [scsi_tmf_0]
(root,0,0,00:00:00/656-00:23:47,132) [scsi_eh_1]
(root,0,0,00:00:00/656-00:23:47,133) [scsi_tmf_1]
(root,0,0,00:00:00/656-00:23:46,139) [ipv6_addrconf]
(root,0,0,00:00:00/656-00:23:46,148) [kstrp]
(root,0,0,00:00:00/656-00:23:46,166) [charger_manager]
(root,0,0,00:00:00/656-00:23:46,223) [scsi_eh_2]
(root,0,0,00:00:00/656-00:23:46,224) [scsi_tmf_2]
(root,0,0,00:03:45/656-00:23:45,267) [kworker/7:1H]
(root,0,0,00:29:55/656-00:23:41,268) [kworker/4:1H]
(root,0,0,00:01:02/656-00:23:41,275) [kworker/1:1H]
(root,0,0,00:00:44/656-00:23:40,335) [kworker/2:1H]
(root,0,0,00:00:00/656-00:23:39,342) [raid5wq]
(root,0,0,00:01:34/15-02:11:49,364) [kworker/7:2]
(root,0,0,01:12:55/656-00:23:39,392) [jbd2/sda1-8]
(root,0,0,00:00:00/656-00:23:39,393) [ext4-rsv-conver]
(root,0,0,00:00:38/656-00:23:39,395) [kworker/3:1H]
(root,0,0,00:03:17/656-00:23:39,398) [kworker/5:1H]
(root,0,0,00:04:28/656-00:23:39,431) [kworker/6:1H]
(root,0,0,00:02:06/656-00:23:39,464) [kworker/0:1H]
(root,122516,26156,01:20:11/656-00:23:38,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/656-00:23:38,476) [iscsi_eh]
(root,0,0,00:00:00/656-00:23:38,485) [ib-comp-wq]
(root,0,0,00:00:00/656-00:23:38,486) [ib_mcast]
(root,0,0,00:00:00/656-00:23:38,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/656-00:23:38,494) [rdma_cm]
(root,97708,1596,00:00:00/656-00:23:38,498) /sbin/lvmetad -f
(root,43436,3896,00:05:08/656-00:23:38,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2672,00:03:07/656-00:23:38,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/656-00:23:36,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(gitlab-psql,8307104,52168,00:00:00/15:46,990) postgres: gitlab gitlabhq_production [local] idle
(root,110516,3424,01:31:33/656-00:23:33,1244) /usr/sbin/irqbalance --foreground
(root,382952,2348,00:19:01/656-00:23:33,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:51/656-00:23:33,1251) /usr/sbin/rsyslogd -n
(clamav,306860,18660,00:11:12/656-00:23:33,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:04:56/656-00:23:33,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:47/656-00:23:33,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:55/656-00:23:33,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:42/656-00:23:33,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/656-00:23:33,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/656-00:23:33,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/656-00:23:33,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:34:51/656-00:23:33,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:38:51/656-00:23:33,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:17/656-00:23:33,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/656-00:23:33,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/656-00:23:33,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:09/656-00:23:33,1379) nginx: worker process
(www-data,143788,3960,00:00:09/656-00:23:33,1380) nginx: worker process
(www-data,143788,5000,00:00:44/656-00:23:33,1381) nginx: worker process
(www-data,143788,3964,00:00:01/656-00:23:33,1382) nginx: worker process
(www-data,143788,4056,00:00:00/656-00:23:33,1383) nginx: worker process
(www-data,143788,4184,00:00:00/656-00:23:33,1384) nginx: worker process
(www-data,143788,4056,00:00:00/656-00:23:33,1386) nginx: worker process
(www-data,143788,4184,00:00:00/656-00:23:33,1388) nginx: worker process
(root,14888,1756,00:00:00/656-00:23:33,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:58/656-00:23:33,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:48/656-00:23:32,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/656-00:23:32,1498) runsv redis-exporter
(root,4396,712,00:00:07/656-00:23:32,1500) runsv node-exporter
(root,4396,820,00:00:06/656-00:23:32,1501) runsv prometheus
(root,4396,824,00:00:06/656-00:23:32,1502) runsv sidekiq
(root,4396,720,00:00:06/656-00:23:32,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/656-00:23:32,1507) runsv alertmanager
(root,4396,856,00:00:06/656-00:23:32,1509) runsv postgresql
(root,4396,744,00:00:07/656-00:23:32,1510) runsv postgres-exporter
(root,4396,788,00:00:06/656-00:23:32,1511) runsv grafana
(root,4396,780,00:00:06/656-00:23:32,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:29/656-00:23:32,1513) runsv logrotate
(root,4396,856,00:00:05/656-00:23:32,1514) runsv puma
(root,4396,744,00:00:06/656-00:23:32,1515) runsv nginx
(root,4396,740,00:00:06/656-00:23:32,1516) runsv gitaly
(root,4396,860,00:00:06/656-00:23:32,1517) runsv redis
(root,4396,760,00:00:07/656-00:23:32,1519) runsv registry
(root,4540,864,00:00:06/656-00:23:32,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:11/656-00:23:32,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/656-00:23:32,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:59:16/656-00:23:32,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:15:42/656-00:23:32,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/656-00:23:32,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/656-00:23:32,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/656-00:23:32,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/656-00:23:32,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/656-00:23:32,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/656-00:23:32,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:25:30/656-00:23:32,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:47/656-00:23:32,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/656-00:23:32,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:52/656-00:23:32,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/656-00:23:32,1558) svlogd -tt /var/log/gitlab/postgresql
(gitlab-psql,8310424,54396,00:00:00/11:54,1672) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/19:40:42,1981) [kworker/4:0]
(gitlab-psql,8307000,48836,00:00:00/09:43,2030) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307284,48480,00:00:00/07:48,2333) postgres: gitlab gitlabhq_production [local] idle
(root,4628,872,00:00:00/07:04,2408) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,836,00:00:00/07:04,2412) sleep 600
(root,0,0,00:00:00/06:37,2515) [kworker/u16:1]
(root,0,0,00:00:26/2-00:55:47,2597) [kworker/6:1]
(gitlab-psql,8307284,48004,00:00:00/05:53,2640) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:19,3338) [kworker/u16:0]
(root,20180,3488,00:00:00/00:00,3623) /bin/bash /usr/bin/check_mk_agent
(root,36700,3156,00:00:00/00:00,3641) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1088,00:00:00/00:00,3642) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,4628,796,00:00:00/514-08:03:37,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,726200,8272,00:10:18/514-08:03:37,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87604,8784,00:46:14/514-08:03:37,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:37/514-08:03:37,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(systemd-resolve,70628,4840,00:00:00/09:13:03,8118) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/12:33:34,8346) [kworker/6:2]
(root,0,0,00:00:11/3-03:52:03,13662) [kworker/1:1]
(root,0,0,00:00:40/11-02:16:46,15454) [kworker/4:1]
(git,1627352,935860,00:00:27/04:58:43,16695) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1619160,962168,00:00:30/04:57:43,16871) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1626328,952444,00:00:28/04:56:43,17047) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1635544,965588,00:00:29/04:55:42,17219) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1626328,956180,00:00:28/04:54:43,17384) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1642712,979908,00:00:27/04:53:43,17557) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1634520,953136,00:00:28/04:52:43,17719) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1634520,966724,00:00:27/04:51:43,17886) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/1-00:40:19,18039) [kworker/7:1]
(root,0,0,00:00:38/10-07:05:58,20002) [kworker/2:2]
(gitlab-psql,8306672,53208,00:00:00/57:50,22646) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:22/2-21:15:03,22967) [kworker/0:2]
(root,0,0,00:00:00/04:02:16,25611) [kworker/5:1]
(root,0,0,00:00:00/51:40,27401) [kworker/0:0]
(root,0,0,00:00:00/51:35,27422) [kworker/1:0]
(root,0,0,00:00:00/51:27,27438) [kworker/2:1]
(root,0,0,00:00:22/5-06:48:53,27550) [kworker/5:0]
(gitlab-psql,8307076,49156,00:00:00/47:46,28034) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307284,49140,00:00:00/43:04,28724) postgres: gitlab gitlabhq_production [local] idle
(gitlab-prometheus,1795260,12324,09:18:36/260-00:15:02,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:35:50/260-00:15:02,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182280,129576,2-00:22:28/260-00:15:01,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45532,5-21:47:15/260-00:15:01,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,38108,1-09:15:13/260-00:15:01,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,50536,04:07:52/260-00:15:01,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/260-00:15:00,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24172,00:03:38/260-00:15:00,29018) nginx: worker process
(gitlab-www,65016,21768,00:00:36/260-00:15:00,29019) nginx: worker process
(gitlab-www,65828,22764,00:01:27/260-00:15:00,29020) nginx: worker process
(gitlab-www,69244,26008,00:01:59/260-00:15:00,29021) nginx: worker process
(gitlab-www,67708,25036,06:36:00/260-00:15:00,29022) nginx: worker process
(gitlab-www,66892,23532,00:00:58/260-00:15:00,29023) nginx: worker process
(gitlab-www,64660,21460,00:00:14/260-00:15:00,29024) nginx: worker process
(gitlab-www,65496,22052,00:00:25/260-00:15:00,29025) nginx: worker process
(gitlab-www,59784,3828,00:03:00/260-00:15:00,29026) nginx: cache manager process
(gitlab-prometheus,719468,14368,1-07:56:13/260-00:14:59,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,16060,1-09:20:59/260-00:14:59,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:20:40/260-00:14:58,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3221436,155808,2-23:22:43/260-00:14:58,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,302116,00:16:11/260-00:14:58,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:07:23/260-00:14:58,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:58/260-00:14:58,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:21:01/260-00:14:58,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:33:45/260-00:14:58,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:25/260-00:14:58,29064) postgres: logical replication launcher   
(git,1461948,919496,04:16:27/260-00:14:57,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16512,14-09:21:44/260-00:14:56,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,18036,10:28:53/260-00:14:56,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108792,22:04:05/260-00:14:56,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87476,21:53:27/260-00:14:56,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881456,15064,01:10:37/260-00:14:56,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:14:36/260-00:14:52,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4981160,1197092,40-01:24:25/260-00:14:52,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,96748,3-22:58:09/260-00:14:40,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-20:43:04/260-00:14:37,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:34:03/260-00:13:33,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/260-00:13:33,29560) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306500,47976,00:00:00/32:24,30737) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306772,50952,00:00:00/29:26,31213) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306492,47492,00:00:00/29:00,31313) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309692,59652,00:00:00/28:49,31332) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/1-08:53:32,31388) [kworker/3:0]
(root,0,0,00:00:37/10-06:07:35,31907) [kworker/3:2]
(root,0,0,00:00:00/21:34,32519) [kworker/u16:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-22 00:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9120f403a4b

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7972,00:30:45/653-23:49:56,1) /sbin/init
(root,0,0,00:00:24/653-23:49:56,2) [kthreadd]
(root,0,0,00:00:00/653-23:49:56,4) [kworker/0:0H]
(root,0,0,00:00:00/653-23:49:56,6) [mm_percpu_wq]
(root,0,0,00:07:28/653-23:49:56,7) [ksoftirqd/0]
(root,0,0,20:29:10/653-23:49:56,8) [rcu_sched]
(root,0,0,00:00:00/653-23:49:56,9) [rcu_bh]
(root,0,0,00:00:20/653-23:49:56,10) [migration/0]
(root,0,0,00:03:37/653-23:49:56,11) [watchdog/0]
(root,0,0,00:00:00/653-23:49:56,12) [cpuhp/0]
(root,0,0,00:00:00/653-23:49:56,13) [cpuhp/1]
(root,0,0,00:03:21/653-23:49:56,14) [watchdog/1]
(root,0,0,00:00:19/653-23:49:56,15) [migration/1]
(root,0,0,00:04:06/653-23:49:56,16) [ksoftirqd/1]
(root,0,0,00:00:00/653-23:49:56,18) [kworker/1:0H]
(root,0,0,00:00:00/653-23:49:56,19) [cpuhp/2]
(root,0,0,00:03:35/653-23:49:56,20) [watchdog/2]
(root,0,0,00:00:18/653-23:49:56,21) [migration/2]
(root,0,0,00:03:01/653-23:49:56,22) [ksoftirqd/2]
(root,0,0,00:00:00/653-23:49:56,24) [kworker/2:0H]
(root,0,0,00:00:00/653-23:49:56,25) [cpuhp/3]
(root,0,0,00:03:17/653-23:49:56,26) [watchdog/3]
(root,0,0,00:00:17/653-23:49:56,27) [migration/3]
(root,0,0,00:02:25/653-23:49:56,28) [ksoftirqd/3]
(root,0,0,00:00:00/653-23:49:56,30) [kworker/3:0H]
(root,0,0,00:00:00/653-23:49:56,31) [cpuhp/4]
(root,0,0,00:03:31/653-23:49:56,32) [watchdog/4]
(root,0,0,00:00:14/653-23:49:56,33) [migration/4]
(root,0,0,00:07:32/653-23:49:56,34) [ksoftirqd/4]
(root,0,0,00:00:00/653-23:49:56,36) [kworker/4:0H]
(root,0,0,00:00:00/653-23:49:56,37) [cpuhp/5]
(root,0,0,00:03:28/653-23:49:56,38) [watchdog/5]
(root,0,0,00:00:16/653-23:49:56,39) [migration/5]
(root,0,0,00:04:42/653-23:49:56,40) [ksoftirqd/5]
(root,0,0,00:00:00/653-23:49:56,42) [kworker/5:0H]
(root,0,0,00:00:00/653-23:49:56,43) [cpuhp/6]
(root,0,0,00:03:18/653-23:49:56,44) [watchdog/6]
(root,0,0,00:00:28/653-23:49:56,45) [migration/6]
(root,0,0,00:02:34/653-23:49:56,46) [ksoftirqd/6]
(root,0,0,00:00:00/653-23:49:56,48) [kworker/6:0H]
(root,0,0,00:00:00/653-23:49:56,49) [cpuhp/7]
(root,0,0,00:03:11/653-23:49:56,50) [watchdog/7]
(root,0,0,00:00:23/653-23:49:56,51) [migration/7]
(root,0,0,00:02:19/653-23:49:56,52) [ksoftirqd/7]
(root,0,0,00:00:00/653-23:49:56,54) [kworker/7:0H]
(root,0,0,00:00:00/653-23:49:56,55) [kdevtmpfs]
(root,0,0,00:00:00/653-23:49:56,56) [netns]
(root,0,0,00:00:00/653-23:49:56,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/653-23:49:56,58) [kauditd]
(root,0,0,00:01:43/653-23:49:56,62) [khungtaskd]
(root,0,0,00:00:00/653-23:49:56,63) [oom_reaper]
(root,0,0,00:00:00/653-23:49:56,64) [writeback]
(root,0,0,00:00:02/653-23:49:56,65) [kcompactd0]
(root,0,0,00:00:00/653-23:49:56,66) [ksmd]
(root,0,0,00:08:53/653-23:49:56,67) [khugepaged]
(root,0,0,00:00:00/653-23:49:56,68) [crypto]
(root,0,0,00:00:00/653-23:49:56,69) [kintegrityd]
(root,0,0,00:00:00/653-23:49:56,70) [kblockd]
(root,0,0,00:00:00/653-23:49:56,71) [ata_sff]
(root,0,0,00:00:00/653-23:49:56,72) [md]
(root,0,0,00:00:00/653-23:49:56,73) [edac-poller]
(root,0,0,00:00:00/653-23:49:56,74) [devfreq_wq]
(root,0,0,00:00:00/653-23:49:56,75) [watchdogd]
(root,0,0,02:13:22/653-23:49:56,79) [kswapd0]
(root,0,0,00:00:00/653-23:49:56,80) [kworker/u17:0]
(root,0,0,00:00:00/653-23:49:56,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/653-23:49:56,123) [kthrotld]
(root,0,0,00:00:00/653-23:49:56,124) [acpi_thermal_pm]
(root,0,0,00:00:00/653-23:49:56,130) [scsi_eh_0]
(root,0,0,00:00:00/653-23:49:56,131) [scsi_tmf_0]
(root,0,0,00:00:00/653-23:49:56,132) [scsi_eh_1]
(root,0,0,00:00:00/653-23:49:56,133) [scsi_tmf_1]
(root,0,0,00:00:00/653-23:49:55,139) [ipv6_addrconf]
(root,0,0,00:00:00/653-23:49:55,148) [kstrp]
(root,0,0,00:00:00/653-23:49:55,166) [charger_manager]
(root,0,0,00:00:00/653-23:49:55,223) [scsi_eh_2]
(root,0,0,00:00:00/653-23:49:55,224) [scsi_tmf_2]
(root,0,0,00:03:44/653-23:49:54,267) [kworker/7:1H]
(root,0,0,00:29:49/653-23:49:50,268) [kworker/4:1H]
(root,0,0,00:01:02/653-23:49:50,275) [kworker/1:1H]
(root,0,0,00:00:44/653-23:49:49,335) [kworker/2:1H]
(root,0,0,00:00:00/653-23:49:48,342) [raid5wq]
(root,0,0,00:01:21/13-01:37:58,364) [kworker/7:2]
(root,0,0,01:12:41/653-23:49:48,392) [jbd2/sda1-8]
(root,0,0,00:00:00/653-23:49:48,393) [ext4-rsv-conver]
(root,0,0,00:00:38/653-23:49:48,395) [kworker/3:1H]
(root,0,0,00:03:17/653-23:49:48,398) [kworker/5:1H]
(root,0,0,00:04:27/653-23:49:48,431) [kworker/6:1H]
(root,0,0,00:02:05/653-23:49:48,464) [kworker/0:1H]
(root,245284,93536,01:19:54/653-23:49:47,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/653-23:49:47,476) [iscsi_eh]
(root,0,0,00:00:00/653-23:49:47,485) [ib-comp-wq]
(root,0,0,00:00:00/653-23:49:47,486) [ib_mcast]
(root,0,0,00:00:00/653-23:49:47,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/653-23:49:47,494) [rdma_cm]
(root,97708,1596,00:00:00/653-23:49:47,498) /sbin/lvmetad -f
(root,43436,3896,00:05:07/653-23:49:47,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2672,00:03:06/653-23:49:47,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/653-23:49:45,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:31:16/653-23:49:42,1244) /usr/sbin/irqbalance --foreground
(root,382916,2312,00:18:58/653-23:49:42,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:46/653-23:49:42,1251) /usr/sbin/rsyslogd -n
(clamav,306860,18660,00:11:10/653-23:49:42,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:04:42/653-23:49:42,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:47/653-23:49:42,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:48/653-23:49:42,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:41/653-23:49:42,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/653-23:49:42,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/653-23:49:42,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/653-23:49:42,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:34:43/653-23:49:42,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:36:21/653-23:49:42,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:15/653-23:49:42,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/653-23:49:42,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/653-23:49:42,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:07/653-23:49:42,1379) nginx: worker process
(www-data,143788,3960,00:00:09/653-23:49:42,1380) nginx: worker process
(www-data,143788,5000,00:00:44/653-23:49:42,1381) nginx: worker process
(www-data,143788,3964,00:00:01/653-23:49:42,1382) nginx: worker process
(www-data,143788,4056,00:00:00/653-23:49:42,1383) nginx: worker process
(www-data,143788,4184,00:00:00/653-23:49:42,1384) nginx: worker process
(www-data,143788,4056,00:00:00/653-23:49:42,1386) nginx: worker process
(www-data,143788,4184,00:00:00/653-23:49:42,1388) nginx: worker process
(root,14888,1756,00:00:00/653-23:49:42,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:53/653-23:49:42,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:45/653-23:49:41,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/653-23:49:41,1498) runsv redis-exporter
(root,4396,712,00:00:07/653-23:49:41,1500) runsv node-exporter
(root,4396,820,00:00:06/653-23:49:41,1501) runsv prometheus
(root,4396,824,00:00:06/653-23:49:41,1502) runsv sidekiq
(root,4396,720,00:00:06/653-23:49:41,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/653-23:49:41,1507) runsv alertmanager
(root,4396,856,00:00:06/653-23:49:41,1509) runsv postgresql
(root,4396,744,00:00:07/653-23:49:41,1510) runsv postgres-exporter
(root,4396,788,00:00:06/653-23:49:41,1511) runsv grafana
(root,4396,780,00:00:06/653-23:49:41,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:29/653-23:49:41,1513) runsv logrotate
(root,4396,856,00:00:05/653-23:49:41,1514) runsv puma
(root,4396,744,00:00:06/653-23:49:41,1515) runsv nginx
(root,4396,740,00:00:06/653-23:49:41,1516) runsv gitaly
(root,4396,860,00:00:06/653-23:49:41,1517) runsv redis
(root,4396,760,00:00:07/653-23:49:41,1519) runsv registry
(root,4540,864,00:00:06/653-23:49:41,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:11/653-23:49:41,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/653-23:49:41,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:58:53/653-23:49:41,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:15:23/653-23:49:41,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/653-23:49:41,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/653-23:49:41,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/653-23:49:41,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/653-23:49:41,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/653-23:49:41,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/653-23:49:41,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:25:25/653-23:49:41,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:44/653-23:49:41,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/653-23:49:41,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:52/653-23:49:41,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/653-23:49:41,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/21:56,2597) [kworker/6:1]
(root,0,0,00:00:00/21:49,2685) [kworker/7:1]
(root,0,0,00:00:00/21:07,3426) [kworker/2:1]
(gitlab-psql,8306784,51596,00:00:00/18:59,4206) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/15:26,4732) [kworker/u16:2]
(gitlab-psql,8306492,47820,00:00:00/09:54,5629) postgres: gitlab gitlabhq_production [local] idle
(git,1775856,1009948,00:00:43/06:14:50,5840) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(gitlab-psql,8309144,53236,00:00:00/07:53,5953) postgres: gitlab gitlabhq_production [local] idle
(git,1729888,1017020,00:00:42/06:13:51,6028) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,4628,796,00:00:00/512-07:29:46,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,809116,25684,00:10:16/512-07:29:46,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87480,8660,00:45:52/512-07:29:46,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:36/512-07:29:46,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(git,1755888,1038272,00:00:45/06:12:51,6226) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1802480,1046108,00:00:52/06:11:51,6427) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1722608,1003924,00:00:44/06:10:51,6605) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8306636,47916,00:00:00/03:40,6641) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8304596,33960,00:00:00/02:46,6785) postgres: gitlab gitlabhq_production [local] idle
(git,1514200,918944,00:00:00/02:07,6908) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/02:03,6927) [kworker/u16:1]
(gitlab-psql,8307456,56080,00:00:00/01:12,7023) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306880,42404,00:00:00/00:10,7229) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3548,00:00:00/00:00,7278) /bin/bash /usr/bin/check_mk_agent
(root,36700,3156,00:00:00/00:00,7296) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1180,00:00:00/00:00,7297) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:02:45/13-06:42:15,10840) [kworker/6:2]
(root,0,0,00:00:00/05:39:25,12027) [kworker/4:2]
(root,0,0,00:00:00/05:39:23,12068) [kworker/3:0]
(root,0,0,00:00:04/1-03:18:12,13662) [kworker/1:1]
(root,107984,7132,00:00:00/02:03:28,14737) sshd: git [priv]
(git,76620,6780,00:00:00/02:03:26,14744) /lib/systemd/systemd --user
(git,259536,2716,00:00:00/02:03:26,14745) (sd-pam)
(git,107984,3420,00:00:00/02:03:25,14859) sshd: git
(git,1701616,984832,00:00:19/02:02:48,15073) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,107984,7148,00:00:00/02:02:10,15366) sshd: git [priv]
(git,107984,3376,00:00:00/02:02:08,15449) sshd: git
(root,0,0,00:00:32/9-01:42:55,15454) [kworker/4:1]
(root,0,0,00:00:00/05:04:50,17947) [kworker/5:1]
(git,1579224,965360,00:00:09/01:49:08,18194) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(systemd-resolve,70628,4864,00:00:00/01:47:05,18529) /lib/systemd/systemd-resolved
(root,0,0,00:00:31/8-06:32:07,20002) [kworker/2:2]
(root,0,0,00:00:06/20:41:12,22967) [kworker/0:2]
(gitlab-psql,8307860,49392,00:00:00/57:58,26280) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:13/3-06:15:02,27550) [kworker/5:0]
(root,0,0,00:00:00/07:08:25,28684) [kworker/1:2]
(gitlab-psql,8307164,54132,00:00:00/41:52,28863) postgres: gitlab gitlabhq_production [local] idle
(gitlab-prometheus,1795260,12172,09:14:08/257-23:41:11,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:35:04/257-23:41:11,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182280,134168,2-00:01:32/257-23:41:10,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45648,5-20:38:04/257-23:41:10,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,37156,1-09:00:40/257-23:41:10,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,44660,04:05:32/257-23:41:10,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/257-23:41:09,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24180,00:03:37/257-23:41:09,29018) nginx: worker process
(gitlab-www,65016,21768,00:00:36/257-23:41:09,29019) nginx: worker process
(gitlab-www,65828,22772,00:01:27/257-23:41:09,29020) nginx: worker process
(gitlab-www,69244,26016,00:01:59/257-23:41:09,29021) nginx: worker process
(gitlab-www,67708,25048,06:33:28/257-23:41:09,29022) nginx: worker process
(gitlab-www,66892,23532,00:00:58/257-23:41:09,29023) nginx: worker process
(gitlab-www,64660,21460,00:00:14/257-23:41:09,29024) nginx: worker process
(gitlab-www,65496,22052,00:00:25/257-23:41:09,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:59/257-23:41:09,29026) nginx: cache manager process
(gitlab-prometheus,719468,13188,1-07:40:55/257-23:41:08,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14968,1-09:04:37/257-23:41:08,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:20:30/257-23:41:07,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3190236,162528,2-22:47:50/257-23:41:07,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,302116,00:16:08/257-23:41:07,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:07:19/257-23:41:07,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:54/257-23:41:07,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:20:51/257-23:41:07,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:31:33/257-23:41:07,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:25/257-23:41:07,29064) postgres: logical replication launcher   
(git,1461948,919460,04:14:31/257-23:41:06,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16436,14-06:35:12/257-23:41:05,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,14576,10:23:51/257-23:41:05,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108684,21:53:53/257-23:41:05,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87476,21:43:51/257-23:41:05,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881456,17404,01:10:10/257-23:41:05,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:14:29/257-23:41:01,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4981160,1156372,39-17:44:47/257-23:41:01,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,96748,3-22:14:59/257-23:40:49,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-20:20:59/257-23:40:46,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:33:47/257-23:39:42,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/257-23:39:42,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/07:03:07,30111) [kworker/0:0]
(root,4628,920,00:00:00/33:18,30474) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307284,48272,00:00:00/31:56,30723) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306492,48424,00:00:00/31:23,30775) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307388,58164,00:00:00/29:42,31061) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:02/29:12,31113) [kworker/u16:0]
(gitlab-psql,8307284,48128,00:00:00/24:47,31831) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:29/8-05:33:44,31907) [kworker/3:2]
(root,4532,820,00:00:00/23:17,32094) sleep 3000

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-20 00:24

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9124aad669f

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7972,00:30:38/652-01:00:11,1) /sbin/init
(root,0,0,00:00:24/652-01:00:11,2) [kthreadd]
(root,0,0,00:00:00/652-01:00:11,4) [kworker/0:0H]
(root,0,0,00:00:00/652-01:00:11,6) [mm_percpu_wq]
(root,0,0,00:07:26/652-01:00:11,7) [ksoftirqd/0]
(root,0,0,20:25:09/652-01:00:11,8) [rcu_sched]
(root,0,0,00:00:00/652-01:00:11,9) [rcu_bh]
(root,0,0,00:00:20/652-01:00:11,10) [migration/0]
(root,0,0,00:03:36/652-01:00:11,11) [watchdog/0]
(root,0,0,00:00:00/652-01:00:11,12) [cpuhp/0]
(root,0,0,00:00:00/652-01:00:11,13) [cpuhp/1]
(root,0,0,00:03:21/652-01:00:11,14) [watchdog/1]
(root,0,0,00:00:19/652-01:00:11,15) [migration/1]
(root,0,0,00:04:05/652-01:00:11,16) [ksoftirqd/1]
(root,0,0,00:00:00/652-01:00:11,18) [kworker/1:0H]
(root,0,0,00:00:00/652-01:00:11,19) [cpuhp/2]
(root,0,0,00:03:34/652-01:00:11,20) [watchdog/2]
(root,0,0,00:00:18/652-01:00:11,21) [migration/2]
(root,0,0,00:03:01/652-01:00:11,22) [ksoftirqd/2]
(root,0,0,00:00:00/652-01:00:11,24) [kworker/2:0H]
(root,0,0,00:00:00/652-01:00:11,25) [cpuhp/3]
(root,0,0,00:03:16/652-01:00:11,26) [watchdog/3]
(root,0,0,00:00:17/652-01:00:11,27) [migration/3]
(root,0,0,00:02:25/652-01:00:11,28) [ksoftirqd/3]
(root,0,0,00:00:00/652-01:00:11,30) [kworker/3:0H]
(root,0,0,00:00:00/652-01:00:11,31) [cpuhp/4]
(root,0,0,00:03:30/652-01:00:11,32) [watchdog/4]
(root,0,0,00:00:14/652-01:00:11,33) [migration/4]
(root,0,0,00:07:30/652-01:00:11,34) [ksoftirqd/4]
(root,0,0,00:00:00/652-01:00:11,36) [kworker/4:0H]
(root,0,0,00:00:00/652-01:00:11,37) [cpuhp/5]
(root,0,0,00:03:27/652-01:00:11,38) [watchdog/5]
(root,0,0,00:00:16/652-01:00:11,39) [migration/5]
(root,0,0,00:04:41/652-01:00:11,40) [ksoftirqd/5]
(root,0,0,00:00:00/652-01:00:11,42) [kworker/5:0H]
(root,0,0,00:00:00/652-01:00:11,43) [cpuhp/6]
(root,0,0,00:03:18/652-01:00:11,44) [watchdog/6]
(root,0,0,00:00:28/652-01:00:11,45) [migration/6]
(root,0,0,00:02:34/652-01:00:11,46) [ksoftirqd/6]
(root,0,0,00:00:00/652-01:00:11,48) [kworker/6:0H]
(root,0,0,00:00:00/652-01:00:11,49) [cpuhp/7]
(root,0,0,00:03:10/652-01:00:11,50) [watchdog/7]
(root,0,0,00:00:23/652-01:00:11,51) [migration/7]
(root,0,0,00:02:18/652-01:00:11,52) [ksoftirqd/7]
(root,0,0,00:00:00/652-01:00:11,54) [kworker/7:0H]
(root,0,0,00:00:00/652-01:00:11,55) [kdevtmpfs]
(root,0,0,00:00:00/652-01:00:11,56) [netns]
(root,0,0,00:00:00/652-01:00:11,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/652-01:00:11,58) [kauditd]
(root,0,0,00:01:43/652-01:00:11,62) [khungtaskd]
(root,0,0,00:00:00/652-01:00:11,63) [oom_reaper]
(root,0,0,00:00:00/652-01:00:11,64) [writeback]
(root,0,0,00:00:02/652-01:00:11,65) [kcompactd0]
(root,0,0,00:00:00/652-01:00:11,66) [ksmd]
(root,0,0,00:08:51/652-01:00:11,67) [khugepaged]
(root,0,0,00:00:00/652-01:00:11,68) [crypto]
(root,0,0,00:00:00/652-01:00:11,69) [kintegrityd]
(root,0,0,00:00:00/652-01:00:11,70) [kblockd]
(root,0,0,00:00:00/652-01:00:11,71) [ata_sff]
(root,0,0,00:00:00/652-01:00:11,72) [md]
(root,0,0,00:00:00/652-01:00:11,73) [edac-poller]
(root,0,0,00:00:00/652-01:00:11,74) [devfreq_wq]
(root,0,0,00:00:00/652-01:00:11,75) [watchdogd]
(root,0,0,02:12:52/652-01:00:11,79) [kswapd0]
(root,0,0,00:00:00/652-01:00:11,80) [kworker/u17:0]
(root,0,0,00:00:00/652-01:00:11,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/652-01:00:11,123) [kthrotld]
(root,0,0,00:00:00/652-01:00:11,124) [acpi_thermal_pm]
(root,0,0,00:00:00/652-01:00:11,130) [scsi_eh_0]
(root,0,0,00:00:00/652-01:00:11,131) [scsi_tmf_0]
(root,0,0,00:00:00/652-01:00:11,132) [scsi_eh_1]
(root,0,0,00:00:00/652-01:00:11,133) [scsi_tmf_1]
(root,0,0,00:00:00/652-01:00:10,139) [ipv6_addrconf]
(root,0,0,00:00:00/652-01:00:10,148) [kstrp]
(root,0,0,00:00:00/652-01:00:10,166) [charger_manager]
(root,0,0,00:00:00/652-01:00:10,223) [scsi_eh_2]
(root,0,0,00:00:00/652-01:00:10,224) [scsi_tmf_2]
(root,0,0,00:03:44/652-01:00:09,267) [kworker/7:1H]
(root,0,0,00:29:43/652-01:00:05,268) [kworker/4:1H]
(root,0,0,00:01:02/652-01:00:05,275) [kworker/1:1H]
(root,0,0,00:00:44/652-01:00:04,335) [kworker/2:1H]
(root,0,0,00:00:00/652-01:00:03,342) [raid5wq]
(root,0,0,00:01:09/11-02:48:13,364) [kworker/7:2]
(gitlab-psql,8309728,60224,00:00:00/56:01,384) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,01:12:28/652-01:00:03,392) [jbd2/sda1-8]
(root,0,0,00:00:00/652-01:00:03,393) [ext4-rsv-conver]
(root,0,0,00:00:37/652-01:00:03,395) [kworker/3:1H]
(root,0,0,00:03:16/652-01:00:03,398) [kworker/5:1H]
(root,0,0,00:04:26/652-01:00:03,431) [kworker/6:1H]
(root,0,0,00:02:05/652-01:00:03,464) [kworker/0:1H]
(root,212516,90852,01:19:38/652-01:00:02,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/652-01:00:02,476) [iscsi_eh]
(root,0,0,00:00:00/652-01:00:02,485) [ib-comp-wq]
(root,0,0,00:00:00/652-01:00:02,486) [ib_mcast]
(root,0,0,00:00:00/652-01:00:02,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/652-01:00:02,494) [rdma_cm]
(root,97708,1596,00:00:00/652-01:00:02,498) /sbin/lvmetad -f
(root,43436,3896,00:05:06/652-01:00:02,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2672,00:03:06/652-01:00:02,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/652-01:00:00,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:00/06:18:44,1129) [kworker/0:0]
(git,1751796,1015192,00:00:37/03:22:44,1228) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,110516,3424,01:30:59/652-00:59:57,1244) /usr/sbin/irqbalance --foreground
(root,383056,2452,00:18:54/652-00:59:57,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:41/652-00:59:57,1251) /usr/sbin/rsyslogd -n
(clamav,306860,18660,00:11:07/652-00:59:57,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:04:29/652-00:59:57,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:46/652-00:59:57,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:40/652-00:59:57,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:40/652-00:59:57,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/652-00:59:57,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/652-00:59:57,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/652-00:59:57,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:34:37/652-00:59:57,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:33:55/652-00:59:57,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:14/652-00:59:57,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/652-00:59:57,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/652-00:59:57,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:07/652-00:59:57,1379) nginx: worker process
(www-data,143788,3960,00:00:09/652-00:59:57,1380) nginx: worker process
(www-data,143788,5000,00:00:44/652-00:59:57,1381) nginx: worker process
(www-data,143788,3964,00:00:01/652-00:59:57,1382) nginx: worker process
(www-data,143788,4056,00:00:00/652-00:59:57,1383) nginx: worker process
(www-data,143788,4184,00:00:00/652-00:59:57,1384) nginx: worker process
(www-data,143788,4056,00:00:00/652-00:59:57,1386) nginx: worker process
(www-data,143788,4184,00:00:00/652-00:59:57,1388) nginx: worker process
(root,14888,1756,00:00:00/652-00:59:57,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:49/652-00:59:57,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:42/652-00:59:56,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/652-00:59:56,1498) runsv redis-exporter
(root,4396,712,00:00:07/652-00:59:56,1500) runsv node-exporter
(root,4396,820,00:00:06/652-00:59:56,1501) runsv prometheus
(root,4396,824,00:00:06/652-00:59:56,1502) runsv sidekiq
(root,4396,720,00:00:06/652-00:59:56,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/652-00:59:56,1507) runsv alertmanager
(root,4396,856,00:00:06/652-00:59:56,1509) runsv postgresql
(root,4396,744,00:00:07/652-00:59:56,1510) runsv postgres-exporter
(root,4396,788,00:00:06/652-00:59:56,1511) runsv grafana
(root,4396,780,00:00:06/652-00:59:56,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/652-00:59:56,1513) runsv logrotate
(root,4396,856,00:00:05/652-00:59:56,1514) runsv puma
(root,4396,744,00:00:06/652-00:59:56,1515) runsv nginx
(root,4396,740,00:00:06/652-00:59:56,1516) runsv gitaly
(root,4396,860,00:00:06/652-00:59:56,1517) runsv redis
(root,4396,760,00:00:07/652-00:59:56,1519) runsv registry
(root,4540,864,00:00:06/652-00:59:56,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:11/652-00:59:56,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/652-00:59:56,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:58:30/652-00:59:56,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:15:05/652-00:59:56,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/652-00:59:56,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/652-00:59:56,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/652-00:59:56,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/652-00:59:56,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/652-00:59:56,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/652-00:59:56,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:25:20/652-00:59:56,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:40/652-00:59:56,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/652-00:59:56,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:52/652-00:59:56,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/652-00:59:56,1558) svlogd -tt /var/log/gitlab/postgresql
(git,1780068,1052412,00:01:06/06:17:05,1602) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1740640,1019744,00:00:36/03:19:04,2088) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,4628,916,00:00:00/43:35,2435) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307376,55600,00:00:00/43:03,2546) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307284,48024,00:00:00/40:10,3005) postgres: gitlab gitlabhq_production [local] idle
(git,1540312,938156,00:00:03/38:23,3289) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8307288,55496,00:00:00/37:06,3483) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306644,51528,00:00:00/34:16,3934) postgres: gitlab gitlabhq_production [local] idle
(root,4532,812,00:00:00/33:35,4001) sleep 3000
(gitlab-psql,8307284,48608,00:00:00/32:59,4127) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307088,47816,00:00:00/22:16,5840) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306500,48088,00:00:00/22:15,5841) postgres: gitlab gitlabhq_production [local] idle
(root,4628,796,00:00:00/510-08:40:01,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,776344,20936,00:10:13/510-08:40:01,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87480,8660,00:45:29/510-08:40:01,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:35/510-08:40:01,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(gitlab-psql,8307192,50268,00:00:00/17:54,6504) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,4912,00:00:00/08:31:39,6602) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/14:18,7107) [kworker/u16:2]
(git,1713396,1008104,00:00:33/02:51:03,7202) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(gitlab-psql,8306916,49280,00:00:00/10:55,7630) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/09:06,7930) [kworker/u16:0]
(root,0,0,00:00:00/02:46:51,8340) [kworker/4:0]
(root,0,0,00:00:00/03:09,8855) [kworker/u16:1]
(root,20180,3624,00:00:00/00:00,9356) /bin/bash /usr/bin/check_mk_agent
(root,36700,3040,00:00:00/00:00,9374) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1084,00:00:00/00:00,9375) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:02:21/11-07:52:30,10840) [kworker/6:2]
(root,0,0,00:02:01/15-06:37:10,11837) [kworker/0:1]
(root,0,0,00:00:25/7-02:53:10,15454) [kworker/4:1]
(git,1704176,1018376,00:00:20/02:06:03,15769) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,0,0,00:00:23/6-07:42:22,20002) [kworker/2:2]
(root,0,0,00:00:01/07:18:45,21423) [kworker/1:2]
(root,0,0,00:00:00/01:32:18,24726) [kworker/7:1]
(root,0,0,00:00:00/01:32:17,24731) [kworker/1:1]
(root,0,0,00:00:00/01:32:17,24738) [kworker/3:0]
(root,0,0,00:00:00/01:32:16,24754) [kworker/6:1]
(git,1656048,979932,00:00:11/01:27:23,27013) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:05/1-07:25:17,27550) [kworker/5:0]
(gitlab-prometheus,1795260,13932,09:09:50/256-00:51:26,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:34:20/256-00:51:26,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182280,136060,1-23:37:49/256-00:51:25,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45564,5-19:30:24/256-00:51:25,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39340,1-08:46:11/256-00:51:25,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,49608,04:03:21/256-00:51:25,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/256-00:51:24,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24204,00:03:37/256-00:51:24,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/256-00:51:24,29019) nginx: worker process
(gitlab-www,65828,22796,00:01:27/256-00:51:24,29020) nginx: worker process
(gitlab-www,69244,26040,00:01:59/256-00:51:24,29021) nginx: worker process
(gitlab-www,67708,25072,06:31:00/256-00:51:24,29022) nginx: worker process
(gitlab-www,66892,23556,00:00:58/256-00:51:24,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/256-00:51:24,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/256-00:51:24,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:58/256-00:51:24,29026) nginx: cache manager process
(gitlab-prometheus,719468,13856,1-07:26:09/256-00:51:23,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15060,1-08:48:56/256-00:51:23,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:20:21/256-00:51:22,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3211116,159972,2-22:14:20/256-00:51:22,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,300204,00:16:01/256-00:51:22,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:07:16/256-00:51:22,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:50/256-00:51:22,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:20:42/256-00:51:22,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:29:26/256-00:51:22,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:25/256-00:51:22,29064) postgres: logical replication launcher   
(git,1461948,919476,04:12:31/256-00:51:21,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,17164,14-03:54:08/256-00:51:20,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16492,10:19:00/256-00:51:20,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108804,21:44:05/256-00:51:20,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,21:34:38/256-00:51:20,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881456,17180,01:09:45/256-00:51:20,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:14:22/256-00:51:16,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4981160,1172960,39-10:15:21/256-00:51:16,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,96748,3-21:31:57/256-00:51:04,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-19:59:41/256-00:51:01,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:33:32/256-00:49:57,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/256-00:49:57,29560) postgres: gitlab gitlabhq_production [local] idle
(git,1791732,1046200,00:00:43/03:35:44,29703) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/01:10:04,30386) [kworker/2:1]
(root,0,0,00:00:00/01:08:54,30667) [kworker/5:1]
(root,0,0,00:00:22/6-06:43:59,31907) [kworker/3:2]
(gitlab-psql,8309760,55428,00:00:00/01:00:07,32184) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-18 01:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912ef380d35

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7976,00:30:30/649-22:34:10,1) /sbin/init
(root,0,0,00:00:24/649-22:34:10,2) [kthreadd]
(root,0,0,00:00:00/649-22:34:10,4) [kworker/0:0H]
(root,0,0,00:00:00/649-22:34:10,6) [mm_percpu_wq]
(root,0,0,00:07:24/649-22:34:10,7) [ksoftirqd/0]
(root,0,0,20:20:49/649-22:34:10,8) [rcu_sched]
(root,0,0,00:00:00/649-22:34:10,9) [rcu_bh]
(root,0,0,00:00:20/649-22:34:10,10) [migration/0]
(root,0,0,00:03:36/649-22:34:10,11) [watchdog/0]
(root,0,0,00:00:00/649-22:34:10,12) [cpuhp/0]
(root,0,0,00:00:00/649-22:34:10,13) [cpuhp/1]
(root,0,0,00:03:20/649-22:34:10,14) [watchdog/1]
(root,0,0,00:00:19/649-22:34:10,15) [migration/1]
(root,0,0,00:04:04/649-22:34:10,16) [ksoftirqd/1]
(root,0,0,00:00:00/649-22:34:10,18) [kworker/1:0H]
(root,0,0,00:00:00/649-22:34:10,19) [cpuhp/2]
(root,0,0,00:03:33/649-22:34:10,20) [watchdog/2]
(root,0,0,00:00:18/649-22:34:10,21) [migration/2]
(root,0,0,00:03:00/649-22:34:10,22) [ksoftirqd/2]
(root,0,0,00:00:00/649-22:34:10,24) [kworker/2:0H]
(root,0,0,00:00:00/649-22:34:10,25) [cpuhp/3]
(root,0,0,00:03:16/649-22:34:10,26) [watchdog/3]
(root,0,0,00:00:17/649-22:34:10,27) [migration/3]
(root,0,0,00:02:24/649-22:34:10,28) [ksoftirqd/3]
(root,0,0,00:00:00/649-22:34:10,30) [kworker/3:0H]
(root,0,0,00:00:00/649-22:34:10,31) [cpuhp/4]
(root,0,0,00:03:30/649-22:34:10,32) [watchdog/4]
(root,0,0,00:00:14/649-22:34:10,33) [migration/4]
(root,0,0,00:07:28/649-22:34:10,34) [ksoftirqd/4]
(root,0,0,00:00:00/649-22:34:10,36) [kworker/4:0H]
(root,0,0,00:00:00/649-22:34:10,37) [cpuhp/5]
(root,0,0,00:03:27/649-22:34:10,38) [watchdog/5]
(root,0,0,00:00:16/649-22:34:10,39) [migration/5]
(root,0,0,00:04:40/649-22:34:10,40) [ksoftirqd/5]
(root,0,0,00:00:00/649-22:34:10,42) [kworker/5:0H]
(root,0,0,00:00:00/649-22:34:10,43) [cpuhp/6]
(root,0,0,00:03:17/649-22:34:10,44) [watchdog/6]
(root,0,0,00:00:28/649-22:34:10,45) [migration/6]
(root,0,0,00:02:33/649-22:34:10,46) [ksoftirqd/6]
(root,0,0,00:00:00/649-22:34:10,48) [kworker/6:0H]
(root,0,0,00:00:00/649-22:34:10,49) [cpuhp/7]
(root,0,0,00:03:09/649-22:34:10,50) [watchdog/7]
(root,0,0,00:00:23/649-22:34:10,51) [migration/7]
(root,0,0,00:02:18/649-22:34:10,52) [ksoftirqd/7]
(root,0,0,00:00:00/649-22:34:10,54) [kworker/7:0H]
(root,0,0,00:00:00/649-22:34:10,55) [kdevtmpfs]
(root,0,0,00:00:00/649-22:34:10,56) [netns]
(root,0,0,00:00:00/649-22:34:10,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/649-22:34:10,58) [kauditd]
(root,0,0,00:01:42/649-22:34:10,62) [khungtaskd]
(root,0,0,00:00:00/649-22:34:10,63) [oom_reaper]
(root,0,0,00:00:00/649-22:34:10,64) [writeback]
(root,0,0,00:00:02/649-22:34:10,65) [kcompactd0]
(root,0,0,00:00:00/649-22:34:10,66) [ksmd]
(root,0,0,00:08:49/649-22:34:10,67) [khugepaged]
(root,0,0,00:00:00/649-22:34:10,68) [crypto]
(root,0,0,00:00:00/649-22:34:10,69) [kintegrityd]
(root,0,0,00:00:00/649-22:34:10,70) [kblockd]
(root,0,0,00:00:00/649-22:34:10,71) [ata_sff]
(root,0,0,00:00:00/649-22:34:10,72) [md]
(root,0,0,00:00:00/649-22:34:10,73) [edac-poller]
(root,0,0,00:00:00/649-22:34:10,74) [devfreq_wq]
(root,0,0,00:00:00/649-22:34:10,75) [watchdogd]
(root,0,0,02:12:08/649-22:34:10,79) [kswapd0]
(root,0,0,00:00:00/649-22:34:10,80) [kworker/u17:0]
(root,0,0,00:00:00/649-22:34:10,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/649-22:34:10,123) [kthrotld]
(root,0,0,00:00:00/649-22:34:10,124) [acpi_thermal_pm]
(root,0,0,00:00:00/649-22:34:10,130) [scsi_eh_0]
(root,0,0,00:00:00/649-22:34:10,131) [scsi_tmf_0]
(root,0,0,00:00:00/649-22:34:10,132) [scsi_eh_1]
(root,0,0,00:00:00/649-22:34:10,133) [scsi_tmf_1]
(root,0,0,00:00:00/649-22:34:09,139) [ipv6_addrconf]
(root,0,0,00:00:00/649-22:34:09,148) [kstrp]
(root,0,0,00:00:00/649-22:34:09,166) [charger_manager]
(root,0,0,00:00:00/649-22:34:09,223) [scsi_eh_2]
(root,0,0,00:00:00/649-22:34:09,224) [scsi_tmf_2]
(root,0,0,00:03:43/649-22:34:08,267) [kworker/7:1H]
(root,0,0,00:29:37/649-22:34:04,268) [kworker/4:1H]
(root,0,0,00:01:01/649-22:34:04,275) [kworker/1:1H]
(root,0,0,00:00:44/649-22:34:03,335) [kworker/2:1H]
(root,0,0,00:00:00/649-22:34:02,342) [raid5wq]
(root,0,0,00:00:56/9-00:22:12,364) [kworker/7:2]
(root,0,0,01:12:12/649-22:34:02,392) [jbd2/sda1-8]
(root,0,0,00:00:00/649-22:34:02,393) [ext4-rsv-conver]
(root,0,0,00:00:37/649-22:34:02,395) [kworker/3:1H]
(root,0,0,00:03:16/649-22:34:02,398) [kworker/5:1H]
(root,0,0,00:04:25/649-22:34:02,431) [kworker/6:1H]
(root,0,0,00:02:05/649-22:34:02,464) [kworker/0:1H]
(root,147060,48968,01:19:14/649-22:34:01,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/649-22:34:01,476) [iscsi_eh]
(root,0,0,00:00:00/649-22:34:01,485) [ib-comp-wq]
(root,0,0,00:00:00/649-22:34:01,486) [ib_mcast]
(root,0,0,00:00:00/649-22:34:01,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/649-22:34:01,494) [rdma_cm]
(root,97708,1596,00:00:00/649-22:34:01,498) /sbin/lvmetad -f
(root,43436,3896,00:05:06/649-22:34:01,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2672,00:03:05/649-22:34:01,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/649-22:33:59,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:00/05:50:59,1203) [kworker/7:1]
(root,110516,3424,01:30:42/649-22:33:56,1244) /usr/sbin/irqbalance --foreground
(root,383268,2292,00:18:51/649-22:33:56,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:33/649-22:33:56,1251) /usr/sbin/rsyslogd -n
(clamav,306860,18660,00:11:05/649-22:33:56,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:04:09/649-22:33:56,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:45/649-22:33:56,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:31/649-22:33:56,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:39/649-22:33:56,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/649-22:33:56,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/649-22:33:56,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/649-22:33:56,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:34:26/649-22:33:56,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:31:21/649-22:33:56,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:12/649-22:33:56,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/649-22:33:56,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/649-22:33:56,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:06/649-22:33:56,1379) nginx: worker process
(www-data,143788,3960,00:00:09/649-22:33:56,1380) nginx: worker process
(www-data,143788,5000,00:00:44/649-22:33:56,1381) nginx: worker process
(www-data,143788,3964,00:00:01/649-22:33:56,1382) nginx: worker process
(www-data,143788,4056,00:00:00/649-22:33:56,1383) nginx: worker process
(www-data,143788,4184,00:00:00/649-22:33:56,1384) nginx: worker process
(www-data,143788,4056,00:00:00/649-22:33:56,1386) nginx: worker process
(www-data,143788,4184,00:00:00/649-22:33:56,1388) nginx: worker process
(root,14888,1756,00:00:00/649-22:33:56,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:42/649-22:33:56,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:39/649-22:33:55,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/649-22:33:55,1498) runsv redis-exporter
(root,4396,712,00:00:07/649-22:33:55,1500) runsv node-exporter
(root,4396,820,00:00:06/649-22:33:55,1501) runsv prometheus
(root,4396,824,00:00:06/649-22:33:55,1502) runsv sidekiq
(root,4396,720,00:00:06/649-22:33:55,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/649-22:33:55,1507) runsv alertmanager
(root,4396,856,00:00:06/649-22:33:55,1509) runsv postgresql
(root,4396,744,00:00:07/649-22:33:55,1510) runsv postgres-exporter
(root,4396,788,00:00:06/649-22:33:55,1511) runsv grafana
(root,4396,780,00:00:06/649-22:33:55,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/649-22:33:55,1513) runsv logrotate
(root,4396,856,00:00:05/649-22:33:55,1514) runsv puma
(root,4396,744,00:00:06/649-22:33:55,1515) runsv nginx
(root,4396,740,00:00:06/649-22:33:55,1516) runsv gitaly
(root,4396,860,00:00:06/649-22:33:55,1517) runsv redis
(root,4396,760,00:00:07/649-22:33:55,1519) runsv registry
(root,4540,864,00:00:06/649-22:33:55,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:11/649-22:33:55,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/649-22:33:55,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:58:05/649-22:33:55,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:14:46/649-22:33:55,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/649-22:33:55,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/649-22:33:55,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/649-22:33:55,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/649-22:33:55,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/649-22:33:55,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/649-22:33:55,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:25:15/649-22:33:55,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:36/649-22:33:55,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/649-22:33:55,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:51/649-22:33:55,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/649-22:33:55,1558) svlogd -tt /var/log/gitlab/postgresql
(git,1650904,1010448,00:00:50/08:48:03,4532) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1642712,1005556,00:00:46/08:47:03,4713) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1732960,1011620,00:00:49/08:46:03,4887) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,107984,7172,00:00:00/02:11:03,4952) sshd: git [priv]
(git,107984,3604,00:00:00/02:11:00,5040) sshd: git
(git,1650904,1017696,00:00:53/08:45:02,5066) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/21:52:46,5185) [kworker/3:1]
(git,1642712,1010380,00:00:47/08:44:03,5241) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1650904,1022652,00:00:53/08:43:03,5408) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1642712,1018860,00:00:48/08:42:03,5578) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1642712,993708,00:00:46/08:41:03,5751) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,4628,796,00:00:00/508-06:14:00,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,743548,16544,00:10:10/508-06:14:00,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87480,8660,00:45:01/508-06:14:00,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:34/508-06:14:00,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,107984,7196,00:00:00/01:51:03,8340) sshd: git [priv]
(git,107984,3608,00:00:00/01:51:01,8426) sshd: git
(root,0,0,00:01:55/9-05:26:29,10840) [kworker/6:2]
(root,0,0,00:00:00/04:50:59,11252) [kworker/5:1]
(root,107984,7108,00:00:00/01:31:03,11551) sshd: git [priv]
(git,107984,3408,00:00:00/01:31:00,11639) sshd: git
(root,0,0,00:01:45/13-04:11:09,11837) [kworker/0:1]
(root,0,0,00:01:16/20-21:50:56,12007) [kworker/1:1]
(root,0,0,00:00:00/01:18:41,13527) [kworker/6:1]
(root,0,0,00:00:00/04:30:59,14551) [kworker/0:0]
(root,107984,7056,00:00:00/01:11:03,14741) sshd: git [priv]
(git,107984,3400,00:00:00/01:11:01,14847) sshd: git
(root,0,0,00:00:18/5-00:27:09,15454) [kworker/4:1]
(gitlab-psql,8307140,49460,00:00:00/57:28,17097) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310108,64972,00:00:00/54:54,17557) postgres: gitlab gitlabhq_production [local] idle
(git,76624,7264,00:00:00/04:11:01,17701) /lib/systemd/systemd --user
(git,259536,2716,00:00:00/04:11:01,17702) (sd-pam)
(root,107984,7028,00:00:00/51:03,18170) sshd: git [priv]
(git,107984,3400,00:00:00/51:01,18257) sshd: git
(gitlab-psql,8307324,54124,00:00:00/40:03,19974) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:15/4-05:16:21,20002) [kworker/2:2]
(gitlab-psql,8307132,48148,00:00:00/35:57,20609) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310420,54868,00:00:00/32:23,21186) postgres: gitlab gitlabhq_production [local] idle
(root,107984,7188,00:00:00/31:03,21371) sshd: git [priv]
(git,107984,3536,00:00:00/31:01,21459) sshd: git
(systemd-resolve,70628,5240,00:00:00/29:49,21647) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/29:49,21653) [kworker/1:2]
(root,0,0,00:00:00/22:44,22797) [kworker/u16:1]
(root,0,0,00:00:00/20:39,23142) [kworker/4:0]
(root,0,0,00:00:00/20:37,23176) [kworker/2:0]
(gitlab-psql,8306924,50032,00:00:00/20:08,23288) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48452,00:00:00/19:46,23327) postgres: gitlab gitlabhq_production [local] idle
(root,4628,772,00:00:00/17:38,23654) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307132,48412,00:00:00/16:31,23835) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48080,00:00:00/15:29,23989) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306364,43056,00:00:00/08:07,25174) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306672,43068,00:00:00/08:07,25176) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306200,46508,00:00:00/08:06,25177) postgres: gitlab gitlabhq_production [local] idle
(root,4532,764,00:00:00/07:38,25230) sleep 3000
(root,0,0,00:00:00/06:34,25394) [kworker/u16:2]
(root,0,0,00:00:00/00:45,26331) [kworker/u16:0]
(root,20180,3584,00:00:00/00:00,26561) /bin/bash /usr/bin/check_mk_agent
(root,36700,3052,00:00:00/00:00,26579) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1180,00:00:00/00:00,26580) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(gitlab-prometheus,1795260,12216,09:05:13/253-22:25:25,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:33:32/253-22:25:25,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182280,131672,1-23:10:25/253-22:25:24,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45688,5-18:17:34/253-22:25:24,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,38284,1-08:31:12/253-22:25:24,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,49972,04:01:01/253-22:25:24,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/253-22:25:23,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24204,00:03:37/253-22:25:23,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/253-22:25:23,29019) nginx: worker process
(gitlab-www,65828,22796,00:01:27/253-22:25:23,29020) nginx: worker process
(gitlab-www,69244,26040,00:01:58/253-22:25:23,29021) nginx: worker process
(gitlab-www,67708,25072,06:28:22/253-22:25:23,29022) nginx: worker process
(gitlab-www,66892,23556,00:00:58/253-22:25:23,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/253-22:25:23,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/253-22:25:23,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:56/253-22:25:23,29026) nginx: cache manager process
(gitlab-prometheus,719468,13976,1-07:10:22/253-22:25:22,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15228,1-08:32:14/253-22:25:22,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:20:11/253-22:25:21,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3219732,162888,2-21:38:33/253-22:25:21,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,300204,00:15:53/253-22:25:21,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:07:13/253-22:25:21,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:45/253-22:25:21,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:20:31/253-22:25:21,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:27:11/253-22:25:21,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:25/253-22:25:21,29064) postgres: logical replication launcher   
(git,1461948,919548,04:10:24/253-22:25:20,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16820,14-01:01:05/253-22:25:19,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16980,10:13:47/253-22:25:19,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108804,21:33:36/253-22:25:19,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,21:24:47/253-22:25:19,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881456,18356,01:09:17/253-22:25:19,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:14:15/253-22:25:15,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4981160,1259576,39-02:12:33/253-22:25:15,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,95856,3-20:45:19/253-22:25:03,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-19:36:39/253-22:25:00,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:33:15/253-22:23:56,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/253-22:23:56,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:15/4-04:17:58,31907) [kworker/3:2]
(root,0,0,00:00:10/2-05:54:53,32372) [kworker/5:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-15 23:08

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912fdd39e42

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8124,00:30:23/647-22:41:37,1) /sbin/init
(root,0,0,00:00:24/647-22:41:37,2) [kthreadd]
(root,0,0,00:00:00/647-22:41:37,4) [kworker/0:0H]
(root,0,0,00:00:00/647-22:41:37,6) [mm_percpu_wq]
(root,0,0,00:07:23/647-22:41:37,7) [ksoftirqd/0]
(root,0,0,20:16:38/647-22:41:37,8) [rcu_sched]
(root,0,0,00:00:00/647-22:41:37,9) [rcu_bh]
(root,0,0,00:00:20/647-22:41:37,10) [migration/0]
(root,0,0,00:03:35/647-22:41:37,11) [watchdog/0]
(root,0,0,00:00:00/647-22:41:37,12) [cpuhp/0]
(root,0,0,00:00:00/647-22:41:37,13) [cpuhp/1]
(root,0,0,00:03:19/647-22:41:37,14) [watchdog/1]
(root,0,0,00:00:19/647-22:41:37,15) [migration/1]
(root,0,0,00:04:04/647-22:41:37,16) [ksoftirqd/1]
(root,0,0,00:00:00/647-22:41:37,18) [kworker/1:0H]
(root,0,0,00:00:00/647-22:41:37,19) [cpuhp/2]
(root,0,0,00:03:32/647-22:41:37,20) [watchdog/2]
(root,0,0,00:00:18/647-22:41:37,21) [migration/2]
(root,0,0,00:02:59/647-22:41:37,22) [ksoftirqd/2]
(root,0,0,00:00:00/647-22:41:37,24) [kworker/2:0H]
(root,0,0,00:00:00/647-22:41:37,25) [cpuhp/3]
(root,0,0,00:03:15/647-22:41:37,26) [watchdog/3]
(root,0,0,00:00:17/647-22:41:37,27) [migration/3]
(root,0,0,00:02:24/647-22:41:37,28) [ksoftirqd/3]
(root,0,0,00:00:00/647-22:41:37,30) [kworker/3:0H]
(root,0,0,00:00:00/647-22:41:37,31) [cpuhp/4]
(root,0,0,00:03:29/647-22:41:37,32) [watchdog/4]
(root,0,0,00:00:14/647-22:41:37,33) [migration/4]
(root,0,0,00:07:26/647-22:41:37,34) [ksoftirqd/4]
(root,0,0,00:00:00/647-22:41:37,36) [kworker/4:0H]
(root,0,0,00:00:00/647-22:41:37,37) [cpuhp/5]
(root,0,0,00:03:26/647-22:41:37,38) [watchdog/5]
(root,0,0,00:00:16/647-22:41:37,39) [migration/5]
(root,0,0,00:04:38/647-22:41:37,40) [ksoftirqd/5]
(root,0,0,00:00:00/647-22:41:37,42) [kworker/5:0H]
(root,0,0,00:00:00/647-22:41:37,43) [cpuhp/6]
(root,0,0,00:03:16/647-22:41:37,44) [watchdog/6]
(root,0,0,00:00:27/647-22:41:37,45) [migration/6]
(root,0,0,00:02:32/647-22:41:37,46) [ksoftirqd/6]
(root,0,0,00:00:00/647-22:41:37,48) [kworker/6:0H]
(root,0,0,00:00:00/647-22:41:37,49) [cpuhp/7]
(root,0,0,00:03:09/647-22:41:37,50) [watchdog/7]
(root,0,0,00:00:23/647-22:41:37,51) [migration/7]
(root,0,0,00:02:17/647-22:41:37,52) [ksoftirqd/7]
(root,0,0,00:00:00/647-22:41:37,54) [kworker/7:0H]
(root,0,0,00:00:00/647-22:41:37,55) [kdevtmpfs]
(root,0,0,00:00:00/647-22:41:37,56) [netns]
(root,0,0,00:00:00/647-22:41:37,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/647-22:41:37,58) [kauditd]
(root,0,0,00:01:42/647-22:41:37,62) [khungtaskd]
(root,0,0,00:00:00/647-22:41:37,63) [oom_reaper]
(root,0,0,00:00:00/647-22:41:37,64) [writeback]
(root,0,0,00:00:02/647-22:41:37,65) [kcompactd0]
(root,0,0,00:00:00/647-22:41:37,66) [ksmd]
(root,0,0,00:08:48/647-22:41:37,67) [khugepaged]
(root,0,0,00:00:00/647-22:41:37,68) [crypto]
(root,0,0,00:00:00/647-22:41:37,69) [kintegrityd]
(root,0,0,00:00:00/647-22:41:37,70) [kblockd]
(root,0,0,00:00:00/647-22:41:37,71) [ata_sff]
(root,0,0,00:00:00/647-22:41:37,72) [md]
(root,0,0,00:00:00/647-22:41:37,73) [edac-poller]
(root,0,0,00:00:00/647-22:41:37,74) [devfreq_wq]
(root,0,0,00:00:00/647-22:41:37,75) [watchdogd]
(root,0,0,02:11:39/647-22:41:37,79) [kswapd0]
(root,0,0,00:00:00/647-22:41:37,80) [kworker/u17:0]
(root,0,0,00:00:00/647-22:41:37,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/647-22:41:37,123) [kthrotld]
(root,0,0,00:00:00/647-22:41:37,124) [acpi_thermal_pm]
(root,0,0,00:00:00/647-22:41:37,130) [scsi_eh_0]
(root,0,0,00:00:00/647-22:41:37,131) [scsi_tmf_0]
(root,0,0,00:00:00/647-22:41:37,132) [scsi_eh_1]
(root,0,0,00:00:00/647-22:41:37,133) [scsi_tmf_1]
(root,0,0,00:00:00/647-22:41:36,139) [ipv6_addrconf]
(root,0,0,00:00:00/647-22:41:36,148) [kstrp]
(root,0,0,00:00:00/647-22:41:36,166) [charger_manager]
(root,0,0,00:00:00/647-22:41:36,223) [scsi_eh_2]
(root,0,0,00:00:00/647-22:41:36,224) [scsi_tmf_2]
(root,0,0,00:03:42/647-22:41:35,267) [kworker/7:1H]
(root,0,0,00:29:30/647-22:41:31,268) [kworker/4:1H]
(root,0,0,00:01:01/647-22:41:31,275) [kworker/1:1H]
(root,0,0,00:00:44/647-22:41:30,335) [kworker/2:1H]
(root,0,0,00:00:00/647-22:41:29,342) [raid5wq]
(root,0,0,00:00:43/7-00:29:39,364) [kworker/7:2]
(root,0,0,01:11:59/647-22:41:29,392) [jbd2/sda1-8]
(root,0,0,00:00:00/647-22:41:29,393) [ext4-rsv-conver]
(root,0,0,00:00:37/647-22:41:29,395) [kworker/3:1H]
(root,0,0,00:03:15/647-22:41:29,398) [kworker/5:1H]
(root,0,0,00:04:24/647-22:41:29,431) [kworker/6:1H]
(root,0,0,00:02:04/647-22:41:29,464) [kworker/0:1H]
(root,253356,123436,01:18:55/647-22:41:28,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/647-22:41:28,476) [iscsi_eh]
(root,0,0,00:00:00/647-22:41:28,485) [ib-comp-wq]
(root,0,0,00:00:00/647-22:41:28,486) [ib_mcast]
(root,0,0,00:00:00/647-22:41:28,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/647-22:41:28,494) [rdma_cm]
(root,97708,1596,00:00:00/647-22:41:28,498) /sbin/lvmetad -f
(root,43436,3896,00:05:05/647-22:41:28,508) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/05:59:11,615) [kworker/3:1]
(systemd-timesync,141928,2684,00:03:05/647-22:41:28,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/647-22:41:26,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:30:25/647-22:41:23,1244) /usr/sbin/irqbalance --foreground
(root,383268,2416,00:18:47/647-22:41:23,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:27/647-22:41:23,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:11:03/647-22:41:23,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:03:52/647-22:41:23,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:45/647-22:41:23,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:23/647-22:41:23,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:38/647-22:41:23,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/647-22:41:23,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/647-22:41:23,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/647-22:41:23,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:34:18/647-22:41:23,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:28:53/647-22:41:23,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:10/647-22:41:23,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/647-22:41:23,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/647-22:41:23,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:05/647-22:41:23,1379) nginx: worker process
(www-data,143788,3960,00:00:09/647-22:41:23,1380) nginx: worker process
(www-data,143788,5000,00:00:44/647-22:41:23,1381) nginx: worker process
(www-data,143788,3964,00:00:01/647-22:41:23,1382) nginx: worker process
(www-data,143788,4056,00:00:00/647-22:41:23,1383) nginx: worker process
(www-data,143788,4184,00:00:00/647-22:41:23,1384) nginx: worker process
(www-data,143788,4056,00:00:00/647-22:41:23,1386) nginx: worker process
(www-data,143788,4184,00:00:00/647-22:41:23,1388) nginx: worker process
(root,14888,1756,00:00:00/647-22:41:23,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:36/647-22:41:23,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:36/647-22:41:22,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/647-22:41:22,1498) runsv redis-exporter
(root,4396,712,00:00:07/647-22:41:22,1500) runsv node-exporter
(root,4396,820,00:00:06/647-22:41:22,1501) runsv prometheus
(root,4396,824,00:00:06/647-22:41:22,1502) runsv sidekiq
(root,4396,720,00:00:06/647-22:41:22,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/647-22:41:22,1507) runsv alertmanager
(root,4396,856,00:00:06/647-22:41:22,1509) runsv postgresql
(root,4396,744,00:00:07/647-22:41:22,1510) runsv postgres-exporter
(root,4396,788,00:00:06/647-22:41:22,1511) runsv grafana
(root,4396,780,00:00:06/647-22:41:22,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/647-22:41:22,1513) runsv logrotate
(root,4396,856,00:00:05/647-22:41:22,1514) runsv puma
(root,4396,744,00:00:06/647-22:41:22,1515) runsv nginx
(root,4396,740,00:00:06/647-22:41:22,1516) runsv gitaly
(root,4396,860,00:00:06/647-22:41:22,1517) runsv redis
(root,4396,760,00:00:07/647-22:41:22,1519) runsv registry
(root,4540,864,00:00:06/647-22:41:22,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:11/647-22:41:22,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/647-22:41:22,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:57:43/647-22:41:22,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:14:28/647-22:41:22,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/647-22:41:22,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/647-22:41:22,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/647-22:41:22,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/647-22:41:22,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/647-22:41:22,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/647-22:41:22,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:25:10/647-22:41:22,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:32/647-22:41:22,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/647-22:41:22,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:51/647-22:41:22,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/647-22:41:22,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/05:42:20,3563) [kworker/4:0]
(git,1644760,986316,00:00:32/05:36:13,4535) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,4628,796,00:00:00/506-06:21:27,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,825496,31684,00:10:07/506-06:21:27,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87480,8660,00:44:36/506-06:21:27,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:33/506-06:21:27,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/05:22:20,6885) [kworker/6:0]
(root,0,0,00:00:00/05:02:20,10139) [kworker/5:1]
(root,0,0,00:01:29/7-05:33:56,10840) [kworker/6:2]
(root,0,0,00:01:29/11-04:18:36,11837) [kworker/0:1]
(root,0,0,00:01:09/18-21:58:23,12007) [kworker/1:1]
(git,1704176,959776,00:00:36/04:43:33,13089) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/04:39:59,13942) [kworker/1:2]
(root,0,0,00:00:00/04:37:06,14554) [kworker/7:0]
(root,0,0,00:00:10/3-00:34:36,15454) [kworker/4:1]
(git,1845488,1049612,00:01:36/10:46:29,16391) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/04:22:20,17034) [kworker/0:2]
(gitlab-psql,8307024,48512,00:00:00/57:47,17894) postgres: gitlab gitlabhq_production [local] idle
(git,1557720,952552,00:00:05/48:11,19373) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8307296,55524,00:00:00/48:03,19396) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:08/2-05:23:48,20002) [kworker/2:2]
(gitlab-psql,8307292,54124,00:00:00/43:45,20104) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307072,48128,00:00:00/42:39,20279) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310420,54852,00:00:00/38:00,20973) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306648,51772,00:00:00/33:29,21726) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/06:54:53,22042) [kworker/2:0]
(gitlab-psql,8307132,48324,00:00:00/25:24,23010) postgres: gitlab gitlabhq_production [local] idle
(root,4628,804,00:00:00/25:08,23035) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8306952,50256,00:00:00/20:28,23790) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,48240,00:00:00/18:54,24005) postgres: gitlab gitlabhq_production [local] idle
(root,4532,768,00:00:00/15:08,24614) sleep 3000
(gitlab-psql,8306664,46612,00:00:00/13:29,24890) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/11:52,25165) [kworker/u16:0]
(git,1747300,1040136,00:00:54/06:37:32,25350) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(gitlab-psql,8307132,48076,00:00:00/10:34,25367) postgres: gitlab gitlabhq_production [local] idle
(git,1627352,993192,00:00:20/03:28:12,25585) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8306816,47560,00:00:00/06:59,25912) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306792,47144,00:00:00/06:25,26026) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/06:03,26061) [kworker/u16:2]
(git,1723748,1018248,00:00:50/06:33:34,26453) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/00:46,26947) [kworker/u16:1]
(root,20180,3536,00:00:00/00:00,27047) /bin/bash /usr/bin/check_mk_agent
(root,36700,3176,00:00:00/00:00,27065) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1132,00:00:00/00:00,27066) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(gitlab-prometheus,1795260,13392,09:00:48/251-22:32:52,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:32:46/251-22:32:52,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182280,136652,1-22:49:51/251-22:32:51,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,46416,5-17:08:03/251-22:32:51,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39172,1-08:17:23/251-22:32:51,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,52780,03:58:45/251-22:32:51,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/251-22:32:50,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24212,00:03:36/251-22:32:50,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/251-22:32:50,29019) nginx: worker process
(gitlab-www,65828,22796,00:01:27/251-22:32:50,29020) nginx: worker process
(gitlab-www,69244,26048,00:01:58/251-22:32:50,29021) nginx: worker process
(gitlab-www,67708,25080,06:25:59/251-22:32:50,29022) nginx: worker process
(gitlab-www,66892,23556,00:00:58/251-22:32:50,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/251-22:32:50,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/251-22:32:50,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:55/251-22:32:50,29026) nginx: cache manager process
(gitlab-prometheus,719468,16196,1-06:55:14/251-22:32:49,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15228,1-08:16:13/251-22:32:49,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:20:01/251-22:32:48,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3188560,168516,2-21:04:11/251-22:32:48,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,298624,00:15:49/251-22:32:48,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:07:09/251-22:32:48,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:41/251-22:32:48,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:20:21/251-22:32:48,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:25:03/251-22:32:48,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:25/251-22:32:48,29064) postgres: logical replication launcher   
(git,1461948,919528,04:08:26/251-22:32:47,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,17052,13-22:15:50/251-22:32:46,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,15236,10:08:47/251-22:32:46,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108804,21:23:30/251-22:32:46,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,21:15:17/251-22:32:46,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881456,20560,01:08:51/251-22:32:46,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:14:08/251-22:32:42,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4981160,1226912,38-18:35:03/251-22:32:42,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,95856,3-20:01:06/251-22:32:30,29266) postgres: gitlab gitlabhq_production [local] SELECT
(gitlab-psql,8333160,76820,1-19:14:29/251-22:32:27,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:32:59/251-22:31:23,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/251-22:31:23,29560) postgres: gitlab gitlabhq_production [local] idle
(git,1712368,991528,00:00:43/06:12:33,30613) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(systemd-resolve,70628,5008,00:00:00/02:58:09,30753) /lib/systemd/systemd-resolved
(root,0,0,00:00:07/2-04:25:25,31907) [kworker/3:2]
(root,0,0,00:00:01/06:02:20,32372) [kworker/5:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-13 23:15

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9128347d866

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8224,00:30:17/645-21:02:57,1) /sbin/init
(root,0,0,00:00:24/645-21:02:57,2) [kthreadd]
(root,0,0,00:00:00/645-21:02:57,4) [kworker/0:0H]
(root,0,0,00:00:00/645-21:02:57,6) [mm_percpu_wq]
(root,0,0,00:07:21/645-21:02:57,7) [ksoftirqd/0]
(root,0,0,20:12:17/645-21:02:57,8) [rcu_sched]
(root,0,0,00:00:00/645-21:02:57,9) [rcu_bh]
(root,0,0,00:00:20/645-21:02:57,10) [migration/0]
(root,0,0,00:03:34/645-21:02:57,11) [watchdog/0]
(root,0,0,00:00:00/645-21:02:57,12) [cpuhp/0]
(root,0,0,00:00:00/645-21:02:57,13) [cpuhp/1]
(root,0,0,00:03:18/645-21:02:57,14) [watchdog/1]
(root,0,0,00:00:19/645-21:02:57,15) [migration/1]
(root,0,0,00:04:03/645-21:02:57,16) [ksoftirqd/1]
(root,0,0,00:00:00/645-21:02:57,18) [kworker/1:0H]
(root,0,0,00:00:00/645-21:02:57,19) [cpuhp/2]
(root,0,0,00:03:32/645-21:02:57,20) [watchdog/2]
(root,0,0,00:00:18/645-21:02:57,21) [migration/2]
(root,0,0,00:02:59/645-21:02:57,22) [ksoftirqd/2]
(root,0,0,00:00:00/645-21:02:57,24) [kworker/2:0H]
(root,0,0,00:00:00/645-21:02:57,25) [cpuhp/3]
(root,0,0,00:03:14/645-21:02:57,26) [watchdog/3]
(root,0,0,00:00:16/645-21:02:57,27) [migration/3]
(root,0,0,00:02:23/645-21:02:57,28) [ksoftirqd/3]
(root,0,0,00:00:00/645-21:02:57,30) [kworker/3:0H]
(root,0,0,00:00:00/645-21:02:57,31) [cpuhp/4]
(root,0,0,00:03:28/645-21:02:57,32) [watchdog/4]
(root,0,0,00:00:14/645-21:02:57,33) [migration/4]
(root,0,0,00:07:24/645-21:02:57,34) [ksoftirqd/4]
(root,0,0,00:00:00/645-21:02:57,36) [kworker/4:0H]
(root,0,0,00:00:00/645-21:02:57,37) [cpuhp/5]
(root,0,0,00:03:25/645-21:02:57,38) [watchdog/5]
(root,0,0,00:00:16/645-21:02:57,39) [migration/5]
(root,0,0,00:04:37/645-21:02:57,40) [ksoftirqd/5]
(root,0,0,00:00:00/645-21:02:57,42) [kworker/5:0H]
(root,0,0,00:00:00/645-21:02:57,43) [cpuhp/6]
(root,0,0,00:03:16/645-21:02:57,44) [watchdog/6]
(root,0,0,00:00:27/645-21:02:57,45) [migration/6]
(root,0,0,00:02:31/645-21:02:57,46) [ksoftirqd/6]
(root,0,0,00:00:00/645-21:02:57,48) [kworker/6:0H]
(root,0,0,00:00:00/645-21:02:57,49) [cpuhp/7]
(root,0,0,00:03:08/645-21:02:57,50) [watchdog/7]
(root,0,0,00:00:23/645-21:02:57,51) [migration/7]
(root,0,0,00:02:17/645-21:02:57,52) [ksoftirqd/7]
(root,0,0,00:00:00/645-21:02:57,54) [kworker/7:0H]
(root,0,0,00:00:00/645-21:02:57,55) [kdevtmpfs]
(root,0,0,00:00:00/645-21:02:57,56) [netns]
(root,0,0,00:00:00/645-21:02:57,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/645-21:02:57,58) [kauditd]
(root,0,0,00:01:42/645-21:02:57,62) [khungtaskd]
(root,0,0,00:00:00/645-21:02:57,63) [oom_reaper]
(root,0,0,00:00:00/645-21:02:57,64) [writeback]
(root,0,0,00:00:02/645-21:02:57,65) [kcompactd0]
(root,0,0,00:00:00/645-21:02:57,66) [ksmd]
(root,0,0,00:08:46/645-21:02:57,67) [khugepaged]
(root,0,0,00:00:00/645-21:02:57,68) [crypto]
(root,0,0,00:00:00/645-21:02:57,69) [kintegrityd]
(root,0,0,00:00:00/645-21:02:57,70) [kblockd]
(root,0,0,00:00:00/645-21:02:57,71) [ata_sff]
(root,0,0,00:00:00/645-21:02:57,72) [md]
(root,0,0,00:00:00/645-21:02:57,73) [edac-poller]
(root,0,0,00:00:00/645-21:02:57,74) [devfreq_wq]
(root,0,0,00:00:00/645-21:02:57,75) [watchdogd]
(root,0,0,02:11:10/645-21:02:57,79) [kswapd0]
(root,0,0,00:00:00/645-21:02:57,80) [kworker/u17:0]
(root,0,0,00:00:00/645-21:02:57,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/645-21:02:57,123) [kthrotld]
(root,0,0,00:00:00/645-21:02:57,124) [acpi_thermal_pm]
(root,0,0,00:00:00/645-21:02:57,130) [scsi_eh_0]
(root,0,0,00:00:00/645-21:02:57,131) [scsi_tmf_0]
(root,0,0,00:00:00/645-21:02:57,132) [scsi_eh_1]
(root,0,0,00:00:00/645-21:02:57,133) [scsi_tmf_1]
(root,0,0,00:00:00/645-21:02:56,139) [ipv6_addrconf]
(root,0,0,00:00:00/645-21:02:56,148) [kstrp]
(root,0,0,00:00:00/645-21:02:56,166) [charger_manager]
(root,0,0,00:00:00/645-21:02:56,223) [scsi_eh_2]
(root,0,0,00:00:00/645-21:02:56,224) [scsi_tmf_2]
(root,0,0,00:03:41/645-21:02:55,267) [kworker/7:1H]
(root,0,0,00:29:24/645-21:02:51,268) [kworker/4:1H]
(root,0,0,00:01:01/645-21:02:51,275) [kworker/1:1H]
(root,0,0,00:00:44/645-21:02:50,335) [kworker/2:1H]
(root,0,0,00:00:00/645-21:02:49,342) [raid5wq]
(root,0,0,00:00:30/4-22:50:59,364) [kworker/7:2]
(root,0,0,01:11:44/645-21:02:49,392) [jbd2/sda1-8]
(root,0,0,00:00:00/645-21:02:49,393) [ext4-rsv-conver]
(root,0,0,00:00:37/645-21:02:49,395) [kworker/3:1H]
(root,0,0,00:03:14/645-21:02:49,398) [kworker/5:1H]
(root,0,0,00:04:23/645-21:02:49,431) [kworker/6:1H]
(root,0,0,00:02:04/645-21:02:49,464) [kworker/0:1H]
(root,220588,101296,01:18:37/645-21:02:48,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/645-21:02:48,476) [iscsi_eh]
(root,0,0,00:00:00/645-21:02:48,485) [ib-comp-wq]
(root,0,0,00:00:00/645-21:02:48,486) [ib_mcast]
(root,0,0,00:00:00/645-21:02:48,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/645-21:02:48,494) [rdma_cm]
(root,97708,1596,00:00:00/645-21:02:48,498) /sbin/lvmetad -f
(root,43436,3896,00:05:04/645-21:02:48,508) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/13:32,675) [kworker/1:2]
(systemd-timesync,141928,2684,00:03:05/645-21:02:48,713) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/12:58,971) [kworker/0:0]
(root,25992,3444,00:00:03/645-21:02:46,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(git,1577176,963020,00:00:05/12:32,1066) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8312064,69596,00:00:00/12:32,1078) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311192,67760,00:00:00/12:31,1079) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310660,66052,00:00:01/12:25,1156) postgres: gitlab gitlabhq_production [local] idle
(root,110516,3424,01:30:08/645-21:02:43,1244) /usr/sbin/irqbalance --foreground
(root,383268,2384,00:18:44/645-21:02:43,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:22/645-21:02:43,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:11:01/645-21:02:43,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:03:37/645-21:02:43,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:44/645-21:02:43,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:15/645-21:02:43,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:37/645-21:02:43,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/645-21:02:43,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/645-21:02:43,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/645-21:02:43,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:34:10/645-21:02:43,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:26:23/645-21:02:43,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:09/645-21:02:43,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/645-21:02:43,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/645-21:02:43,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:05/645-21:02:43,1379) nginx: worker process
(www-data,143788,3960,00:00:09/645-21:02:43,1380) nginx: worker process
(www-data,143788,5000,00:00:44/645-21:02:43,1381) nginx: worker process
(www-data,143788,3964,00:00:01/645-21:02:43,1382) nginx: worker process
(www-data,143788,4056,00:00:00/645-21:02:43,1383) nginx: worker process
(www-data,143788,4184,00:00:00/645-21:02:43,1384) nginx: worker process
(www-data,143788,4056,00:00:00/645-21:02:43,1386) nginx: worker process
(www-data,143788,4184,00:00:00/645-21:02:43,1388) nginx: worker process
(root,14888,1756,00:00:00/645-21:02:43,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:31/645-21:02:43,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:33/645-21:02:42,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/645-21:02:42,1498) runsv redis-exporter
(root,4396,712,00:00:07/645-21:02:42,1500) runsv node-exporter
(root,4396,820,00:00:06/645-21:02:42,1501) runsv prometheus
(root,4396,824,00:00:06/645-21:02:42,1502) runsv sidekiq
(root,4396,720,00:00:06/645-21:02:42,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/645-21:02:42,1507) runsv alertmanager
(root,4396,856,00:00:06/645-21:02:42,1509) runsv postgresql
(root,4396,744,00:00:07/645-21:02:42,1510) runsv postgres-exporter
(root,4396,788,00:00:06/645-21:02:42,1511) runsv grafana
(root,4396,780,00:00:06/645-21:02:42,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/645-21:02:42,1513) runsv logrotate
(root,4396,856,00:00:05/645-21:02:42,1514) runsv puma
(root,4396,744,00:00:06/645-21:02:42,1515) runsv nginx
(root,4396,740,00:00:06/645-21:02:42,1516) runsv gitaly
(root,4396,860,00:00:06/645-21:02:42,1517) runsv redis
(root,4396,760,00:00:07/645-21:02:42,1519) runsv registry
(root,4540,864,00:00:06/645-21:02:42,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:11/645-21:02:42,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/645-21:02:42,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:57:19/645-21:02:42,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:14:09/645-21:02:42,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/645-21:02:42,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/645-21:02:42,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/645-21:02:42,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/645-21:02:42,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/645-21:02:42,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/645-21:02:42,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:25:05/645-21:02:42,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:28/645-21:02:42,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/645-21:02:42,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:51/645-21:02:42,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/645-21:02:42,1558) svlogd -tt /var/log/gitlab/postgresql
(gitlab-psql,8306908,52288,00:00:00/05:03,2489) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/00:17,3188) [kworker/u16:2]
(root,20180,3580,00:00:00/00:00,3287) /bin/bash /usr/bin/check_mk_agent
(root,36700,3132,00:00:00/00:00,3305) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1072,00:00:00/00:00,3306) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,4628,796,00:00:00/504-04:42:47,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,775924,16336,00:10:04/504-04:42:47,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87480,8660,00:44:17/504-04:42:47,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:32/504-04:42:47,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:01:04/5-03:55:16,10840) [kworker/6:2]
(root,0,0,00:01:12/9-02:39:56,11837) [kworker/0:1]
(root,0,0,00:01:01/16-20:19:43,12007) [kworker/1:1]
(git,1819376,1027236,00:00:43/01:42:33,14141) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,0,0,00:00:03/22:55:56,15454) [kworker/4:1]
(git,1831668,1044336,00:00:44/01:23:13,18742) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/03:45:08,20002) [kworker/2:2]
(systemd-resolve,70628,5284,00:00:00/06:20:44,21727) /lib/systemd/systemd-resolved
(root,0,0,00:00:10/2-10:07:16,23358) [kworker/5:2]
(git,1727728,1003120,00:00:27/56:13,23393) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(gitlab-psql,8319464,87312,00:00:04/56:06,23427) postgres: gitlab gitlabhq_production [local] idle
(git,1744624,996956,00:00:29/55:11,23922) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8314524,86928,00:00:04/55:05,23950) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/49:34,24879) [kworker/u16:0]
(root,4628,800,00:00:00/46:32,25355) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:00/44:01,25789) [kworker/u16:1]
(gitlab-psql,8314164,81332,00:00:02/40:46,26404) postgres: gitlab gitlabhq_production [local] idle
(git,1692912,1005452,00:00:15/39:32,26940) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(gitlab-psql,8313772,82876,00:00:02/39:31,26956) postgres: gitlab gitlabhq_production [local] idle
(root,4532,832,00:00:00/36:32,27539) sleep 3000
(root,0,0,00:00:00/36:17,27674) [kworker/3:1]
(root,0,0,00:00:00/32:02,28558) [kworker/7:1]
(gitlab-prometheus,1795260,14884,08:56:17/249-20:54:12,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:31:59/249-20:54:12,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182280,140228,1-22:26:23/249-20:54:11,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45520,5-15:55:55/249-20:54:11,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,42488,1-08:02:26/249-20:54:11,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,52248,03:56:26/249-20:54:11,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/249-20:54:10,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24212,00:03:36/249-20:54:10,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/249-20:54:10,29019) nginx: worker process
(gitlab-www,65828,22796,00:01:27/249-20:54:10,29020) nginx: worker process
(gitlab-www,69244,26048,00:01:58/249-20:54:10,29021) nginx: worker process
(gitlab-www,67708,25080,06:23:23/249-20:54:10,29022) nginx: worker process
(gitlab-www,66892,23556,00:00:58/249-20:54:10,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/249-20:54:10,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/249-20:54:10,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:53/249-20:54:10,29026) nginx: cache manager process
(gitlab-prometheus,719468,16632,1-06:39:46/249-20:54:09,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15384,1-07:59:44/249-20:54:09,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:19:51/249-20:54:08,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3199092,169168,2-20:28:50/249-20:54:08,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,298624,00:15:43/249-20:54:08,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:07:06/249-20:54:08,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:37/249-20:54:08,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:20:11/249-20:54:08,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:22:50/249-20:54:08,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:25/249-20:54:08,29064) postgres: logical replication launcher   
(git,1461948,919436,04:06:20/249-20:54:07,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,17576,13-19:25:18/249-20:54:06,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,15788,10:03:42/249-20:54:06,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108804,21:13:07/249-20:54:06,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,21:05:35/249-20:54:06,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,19256,01:08:23/249-20:54:06,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:14:01/249-20:54:02,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4981160,1233720,38-10:35:11/249-20:54:02,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,95856,3-19:13:37/249-20:53:50,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-18:51:16/249-20:53:47,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(root,0,0,00:00:00/29:39,29314) [kworker/5:1]
(gitlab-psql,8306184,34736,00:32:43/249-20:52:43,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/249-20:52:43,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/29:27,29588) [kworker/6:0]
(root,0,0,00:00:00/29:27,29589) [kworker/2:1]
(git,1682672,992172,00:00:12/28:31,29804) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(gitlab-psql,8314172,84108,00:00:02/28:24,29863) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314996,86924,00:00:00/28:03,30040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311156,69124,00:00:00/25:04,30614) postgres: gitlab gitlabhq_production [local] idle
(git,1662192,985848,00:00:08/22:12,31066) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-psql,8310900,75412,00:00:01/21:10,31369) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/02:46:45,31907) [kworker/3:2]
(gitlab-psql,8310856,66908,00:00:00/17:21,32224) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/16:17,32497) [kworker/4:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-11 21:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912d0578c6e

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8284,00:30:07/643-22:32:08,1) /sbin/init
(root,0,0,00:00:24/643-22:32:08,2) [kthreadd]
(root,0,0,00:00:00/643-22:32:08,4) [kworker/0:0H]
(root,0,0,00:00:00/643-22:32:08,6) [mm_percpu_wq]
(root,0,0,00:07:20/643-22:32:08,7) [ksoftirqd/0]
(root,0,0,20:08:10/643-22:32:08,8) [rcu_sched]
(root,0,0,00:00:00/643-22:32:08,9) [rcu_bh]
(root,0,0,00:00:20/643-22:32:08,10) [migration/0]
(root,0,0,00:03:33/643-22:32:08,11) [watchdog/0]
(root,0,0,00:00:00/643-22:32:08,12) [cpuhp/0]
(root,0,0,00:00:00/643-22:32:08,13) [cpuhp/1]
(root,0,0,00:03:18/643-22:32:08,14) [watchdog/1]
(root,0,0,00:00:19/643-22:32:08,15) [migration/1]
(root,0,0,00:04:02/643-22:32:08,16) [ksoftirqd/1]
(root,0,0,00:00:00/643-22:32:08,18) [kworker/1:0H]
(root,0,0,00:00:00/643-22:32:08,19) [cpuhp/2]
(root,0,0,00:03:31/643-22:32:08,20) [watchdog/2]
(root,0,0,00:00:18/643-22:32:08,21) [migration/2]
(root,0,0,00:02:58/643-22:32:08,22) [ksoftirqd/2]
(root,0,0,00:00:00/643-22:32:08,24) [kworker/2:0H]
(root,0,0,00:00:00/643-22:32:08,25) [cpuhp/3]
(root,0,0,00:03:14/643-22:32:08,26) [watchdog/3]
(root,0,0,00:00:16/643-22:32:08,27) [migration/3]
(root,0,0,00:02:22/643-22:32:08,28) [ksoftirqd/3]
(root,0,0,00:00:00/643-22:32:08,30) [kworker/3:0H]
(root,0,0,00:00:00/643-22:32:08,31) [cpuhp/4]
(root,0,0,00:03:28/643-22:32:08,32) [watchdog/4]
(root,0,0,00:00:14/643-22:32:08,33) [migration/4]
(root,0,0,00:07:22/643-22:32:08,34) [ksoftirqd/4]
(root,0,0,00:00:00/643-22:32:08,36) [kworker/4:0H]
(root,0,0,00:00:00/643-22:32:08,37) [cpuhp/5]
(root,0,0,00:03:25/643-22:32:08,38) [watchdog/5]
(root,0,0,00:00:16/643-22:32:08,39) [migration/5]
(root,0,0,00:04:36/643-22:32:08,40) [ksoftirqd/5]
(root,0,0,00:00:00/643-22:32:08,42) [kworker/5:0H]
(root,0,0,00:00:00/643-22:32:08,43) [cpuhp/6]
(root,0,0,00:03:15/643-22:32:08,44) [watchdog/6]
(root,0,0,00:00:27/643-22:32:08,45) [migration/6]
(root,0,0,00:02:31/643-22:32:08,46) [ksoftirqd/6]
(root,0,0,00:00:00/643-22:32:08,48) [kworker/6:0H]
(root,0,0,00:00:00/643-22:32:08,49) [cpuhp/7]
(root,0,0,00:03:08/643-22:32:08,50) [watchdog/7]
(root,0,0,00:00:23/643-22:32:08,51) [migration/7]
(root,0,0,00:02:16/643-22:32:08,52) [ksoftirqd/7]
(root,0,0,00:00:00/643-22:32:08,54) [kworker/7:0H]
(root,0,0,00:00:00/643-22:32:08,55) [kdevtmpfs]
(root,0,0,00:00:00/643-22:32:08,56) [netns]
(root,0,0,00:00:00/643-22:32:08,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/643-22:32:08,58) [kauditd]
(root,0,0,00:01:41/643-22:32:08,62) [khungtaskd]
(root,0,0,00:00:00/643-22:32:08,63) [oom_reaper]
(root,0,0,00:00:00/643-22:32:08,64) [writeback]
(root,0,0,00:00:02/643-22:32:08,65) [kcompactd0]
(root,0,0,00:00:00/643-22:32:08,66) [ksmd]
(root,0,0,00:08:44/643-22:32:08,67) [khugepaged]
(root,0,0,00:00:00/643-22:32:08,68) [crypto]
(root,0,0,00:00:00/643-22:32:08,69) [kintegrityd]
(root,0,0,00:00:00/643-22:32:08,70) [kblockd]
(root,0,0,00:00:00/643-22:32:08,71) [ata_sff]
(root,0,0,00:00:00/643-22:32:08,72) [md]
(root,0,0,00:00:00/643-22:32:08,73) [edac-poller]
(root,0,0,00:00:00/643-22:32:08,74) [devfreq_wq]
(root,0,0,00:00:00/643-22:32:08,75) [watchdogd]
(root,0,0,02:10:40/643-22:32:08,79) [kswapd0]
(root,0,0,00:00:00/643-22:32:08,80) [kworker/u17:0]
(root,0,0,00:00:00/643-22:32:08,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/643-22:32:08,123) [kthrotld]
(root,0,0,00:00:00/643-22:32:08,124) [acpi_thermal_pm]
(root,0,0,00:00:00/643-22:32:08,130) [scsi_eh_0]
(root,0,0,00:00:00/643-22:32:08,131) [scsi_tmf_0]
(root,0,0,00:00:00/643-22:32:08,132) [scsi_eh_1]
(root,0,0,00:00:00/643-22:32:08,133) [scsi_tmf_1]
(root,0,0,00:00:00/643-22:32:07,139) [ipv6_addrconf]
(root,0,0,00:00:00/643-22:32:07,148) [kstrp]
(root,0,0,00:00:00/643-22:32:07,166) [charger_manager]
(root,0,0,00:00:00/643-22:32:07,223) [scsi_eh_2]
(root,0,0,00:00:00/643-22:32:07,224) [scsi_tmf_2]
(root,0,0,00:03:41/643-22:32:06,267) [kworker/7:1H]
(root,0,0,00:29:18/643-22:32:02,268) [kworker/4:1H]
(root,0,0,00:01:01/643-22:32:02,275) [kworker/1:1H]
(root,0,0,00:00:44/643-22:32:01,335) [kworker/2:1H]
(root,0,0,00:00:00/643-22:32:00,342) [raid5wq]
(root,0,0,00:00:18/3-00:20:10,364) [kworker/7:2]
(root,0,0,01:11:30/643-22:32:00,392) [jbd2/sda1-8]
(root,0,0,00:00:00/643-22:32:00,393) [ext4-rsv-conver]
(root,0,0,00:00:37/643-22:32:00,395) [kworker/3:1H]
(root,0,0,00:03:14/643-22:32:00,398) [kworker/5:1H]
(root,0,0,00:04:22/643-22:32:00,431) [kworker/6:1H]
(root,0,0,00:02:03/643-22:32:00,464) [kworker/0:1H]
(root,155280,52172,01:18:17/643-22:31:59,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/643-22:31:59,476) [iscsi_eh]
(root,0,0,00:00:00/643-22:31:59,485) [ib-comp-wq]
(root,0,0,00:00:00/643-22:31:59,486) [ib_mcast]
(root,0,0,00:00:00/643-22:31:59,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/643-22:31:59,494) [rdma_cm]
(root,97708,1596,00:00:00/643-22:31:59,498) /sbin/lvmetad -f
(root,43436,3896,00:05:03/643-22:31:59,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:04/643-22:31:59,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/643-22:31:57,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:00/01:20:09,1094) [kworker/0:2]
(root,110516,3424,01:29:53/643-22:31:54,1244) /usr/sbin/irqbalance --foreground
(root,383268,2340,00:18:40/643-22:31:54,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:15/643-22:31:54,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:10:59/643-22:31:54,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:03:19/643-22:31:54,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:43/643-22:31:54,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:07/643-22:31:54,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:35/643-22:31:54,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/643-22:31:54,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/643-22:31:54,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/643-22:31:54,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:34:01/643-22:31:54,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:24:05/643-22:31:54,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:07/643-22:31:54,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/643-22:31:54,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/643-22:31:54,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:04/643-22:31:54,1379) nginx: worker process
(www-data,143788,3960,00:00:09/643-22:31:54,1380) nginx: worker process
(www-data,143788,5000,00:00:44/643-22:31:54,1381) nginx: worker process
(www-data,143788,3964,00:00:01/643-22:31:54,1382) nginx: worker process
(www-data,143788,4056,00:00:00/643-22:31:54,1383) nginx: worker process
(www-data,143788,4184,00:00:00/643-22:31:54,1384) nginx: worker process
(www-data,143788,4056,00:00:00/643-22:31:54,1386) nginx: worker process
(www-data,143788,4184,00:00:00/643-22:31:54,1388) nginx: worker process
(root,14888,1756,00:00:00/643-22:31:54,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:26/643-22:31:54,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:30/643-22:31:53,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/643-22:31:53,1498) runsv redis-exporter
(root,4396,712,00:00:07/643-22:31:53,1500) runsv node-exporter
(root,4396,820,00:00:06/643-22:31:53,1501) runsv prometheus
(root,4396,824,00:00:06/643-22:31:53,1502) runsv sidekiq
(root,4396,720,00:00:06/643-22:31:53,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/643-22:31:53,1507) runsv alertmanager
(root,4396,856,00:00:05/643-22:31:53,1509) runsv postgresql
(root,4396,744,00:00:07/643-22:31:53,1510) runsv postgres-exporter
(root,4396,788,00:00:06/643-22:31:53,1511) runsv grafana
(root,4396,780,00:00:06/643-22:31:53,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/643-22:31:53,1513) runsv logrotate
(root,4396,856,00:00:05/643-22:31:53,1514) runsv puma
(root,4396,744,00:00:06/643-22:31:53,1515) runsv nginx
(root,4396,740,00:00:06/643-22:31:53,1516) runsv gitaly
(root,4396,860,00:00:06/643-22:31:53,1517) runsv redis
(root,4396,760,00:00:07/643-22:31:53,1519) runsv registry
(root,4540,864,00:00:06/643-22:31:53,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/643-22:31:53,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/643-22:31:53,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:56:56/643-22:31:53,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:13:51/643-22:31:53,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/643-22:31:53,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/643-22:31:53,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/643-22:31:53,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/643-22:31:53,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/643-22:31:53,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/643-22:31:53,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:25:01/643-22:31:53,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:24/643-22:31:53,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/643-22:31:53,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:50/643-22:31:53,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/643-22:31:53,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:01:05/18-05:17:36,3144) [kworker/4:0]
(root,4628,796,00:00:00/502-06:11:58,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,751676,26172,00:09:59/502-06:11:58,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87356,8412,00:43:53/502-06:11:58,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:31/502-06:11:58,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/51:28,6856) [kworker/3:1]
(gitlab-psql,8310216,58312,00:00:00/47:12,7525) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311928,57872,00:00:01/43:22,8131) postgres: gitlab gitlabhq_production [local] idle
(git,1643760,971164,00:00:05/43:04,8215) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(gitlab-psql,8314192,75264,00:00:00/42:45,8267) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310628,64844,00:00:00/41:04,8540) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310548,59996,00:00:00/36:43,9203) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8315004,80900,00:00:00/34:13,9563) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:36:32,9804) [kworker/4:2]
(gitlab-psql,8311216,65272,00:00:00/30:19,10288) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:40/3-05:24:27,10840) [kworker/6:2]
(root,0,0,00:00:00/24:58,11246) [kworker/u16:0]
(root,0,0,00:00:57/7-04:09:07,11837) [kworker/0:1]
(root,0,0,00:00:00/21:40,11989) [kworker/2:2]
(root,0,0,00:00:54/14-21:48:54,12007) [kworker/1:1]
(gitlab-psql,8311572,66896,00:00:00/21:33,12060) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310260,62244,00:00:00/21:33,12062) postgres: gitlab gitlabhq_production [local] idle
(git,1528536,927932,00:00:01/18:23,12759) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(gitlab-psql,8307304,55464,00:00:00/16:01,13170) postgres: gitlab gitlabhq_production [local] idle
(root,4628,876,00:00:00/15:47,13195) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:00/03:16:34,13308) [kworker/6:0]
(root,0,0,00:00:00/11:28,13988) [kworker/1:0]
(root,0,0,00:00:00/11:28,13989) [kworker/5:0]
(gitlab-psql,8307132,48060,00:00:00/08:02,14564) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306692,44216,00:00:00/06:01,14880) postgres: gitlab gitlabhq_production [local] idle
(root,4532,776,00:00:00/05:47,14908) sleep 3000
(root,0,0,00:00:00/05:45,14917) [kworker/u16:1]
(root,72296,5664,00:00:00/01:20,15586) sshd: [accepted]
(root,0,0,00:00:00/00:37,15710) [kworker/u16:2]
(root,20180,3420,00:00:00/00:01,15918) /bin/bash /usr/bin/check_mk_agent
(root,36700,3172,00:00:00/00:00,15936) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1100,00:00:00/00:00,15937) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/02:56:32,16613) [kworker/3:0]
(systemd-resolve,70628,5168,00:00:00/02:51:10,17449) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/02:31:28,20673) [kworker/7:0]
(root,0,0,00:00:01/11:36:27,23358) [kworker/5:2]
(git,1823072,1072012,00:00:38/01:55:43,26310) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1766132,1004060,00:00:26/01:54:43,26477) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1725168,1028028,00:00:21/01:53:43,26643) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1712368,996088,00:00:19/01:51:43,26974) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1714528,978544,00:00:25/01:50:43,27142) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1722096,1012036,00:00:22/01:49:43,27306) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(gitlab-prometheus,1795260,13584,08:52:04/247-22:23:23,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:31:16/247-22:23:23,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,139712,1-21:58:45/247-22:23:22,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45520,5-14:48:44/247-22:23:22,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,37340,1-07:48:30/247-22:23:22,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,53576,03:54:17/247-22:23:22,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/247-22:23:21,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:35/247-22:23:21,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/247-22:23:21,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/247-22:23:21,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/247-22:23:21,29021) nginx: worker process
(gitlab-www,67708,25088,06:20:53/247-22:23:21,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/247-22:23:21,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/247-22:23:21,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/247-22:23:21,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:52/247-22:23:21,29026) nginx: cache manager process
(gitlab-prometheus,719468,15928,1-06:25:21/247-22:23:20,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15384,1-07:44:31/247-22:23:20,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:19:42/247-22:23:19,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3217260,158452,2-19:56:01/247-22:23:19,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,296392,00:15:33/247-22:23:19,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:07:02/247-22:23:19,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:32/247-22:23:19,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:20:02/247-22:23:19,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:20:45/247-22:23:19,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:24/247-22:23:19,29064) postgres: logical replication launcher   
(git,1461948,919432,04:04:19/247-22:23:18,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16936,13-16:47:27/247-22:23:17,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,14732,09:59:02/247-22:23:17,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108804,21:03:25/247-22:23:17,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,20:56:34/247-22:23:17,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,18616,01:07:58/247-22:23:17,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:55/247-22:23:13,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4919808,1223344,38-03:09:16/247-22:23:13,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,95856,3-18:29:25/247-22:23:01,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-18:29:54/247-22:22:58,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:32:28/247-22:21:54,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/247-22:21:54,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:56/14-23:04:10,31304) [kworker/2:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-09 23:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912c8454239

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7988,00:30:02/642-00:02:43,1) /sbin/init
(root,0,0,00:00:24/642-00:02:43,2) [kthreadd]
(root,0,0,00:00:00/642-00:02:43,4) [kworker/0:0H]
(root,0,0,00:00:00/642-00:02:43,6) [mm_percpu_wq]
(root,0,0,00:07:18/642-00:02:43,7) [ksoftirqd/0]
(root,0,0,20:04:14/642-00:02:43,8) [rcu_sched]
(root,0,0,00:00:00/642-00:02:43,9) [rcu_bh]
(root,0,0,00:00:20/642-00:02:43,10) [migration/0]
(root,0,0,00:03:33/642-00:02:43,11) [watchdog/0]
(root,0,0,00:00:00/642-00:02:43,12) [cpuhp/0]
(root,0,0,00:00:00/642-00:02:43,13) [cpuhp/1]
(root,0,0,00:03:17/642-00:02:43,14) [watchdog/1]
(root,0,0,00:00:19/642-00:02:43,15) [migration/1]
(root,0,0,00:04:01/642-00:02:43,16) [ksoftirqd/1]
(root,0,0,00:00:00/642-00:02:43,18) [kworker/1:0H]
(root,0,0,00:00:00/642-00:02:43,19) [cpuhp/2]
(root,0,0,00:03:30/642-00:02:43,20) [watchdog/2]
(root,0,0,00:00:18/642-00:02:43,21) [migration/2]
(root,0,0,00:02:57/642-00:02:43,22) [ksoftirqd/2]
(root,0,0,00:00:00/642-00:02:43,24) [kworker/2:0H]
(root,0,0,00:00:00/642-00:02:43,25) [cpuhp/3]
(root,0,0,00:03:13/642-00:02:43,26) [watchdog/3]
(root,0,0,00:00:16/642-00:02:43,27) [migration/3]
(root,0,0,00:02:22/642-00:02:43,28) [ksoftirqd/3]
(root,0,0,00:00:00/642-00:02:43,30) [kworker/3:0H]
(root,0,0,00:00:00/642-00:02:43,31) [cpuhp/4]
(root,0,0,00:03:27/642-00:02:43,32) [watchdog/4]
(root,0,0,00:00:14/642-00:02:43,33) [migration/4]
(root,0,0,00:07:21/642-00:02:43,34) [ksoftirqd/4]
(root,0,0,00:00:00/642-00:02:43,36) [kworker/4:0H]
(root,0,0,00:00:00/642-00:02:43,37) [cpuhp/5]
(root,0,0,00:03:24/642-00:02:43,38) [watchdog/5]
(root,0,0,00:00:16/642-00:02:43,39) [migration/5]
(root,0,0,00:04:35/642-00:02:43,40) [ksoftirqd/5]
(root,0,0,00:00:00/642-00:02:43,42) [kworker/5:0H]
(root,0,0,00:00:00/642-00:02:43,43) [cpuhp/6]
(root,0,0,00:03:14/642-00:02:43,44) [watchdog/6]
(root,0,0,00:00:27/642-00:02:43,45) [migration/6]
(root,0,0,00:02:30/642-00:02:43,46) [ksoftirqd/6]
(root,0,0,00:00:00/642-00:02:43,48) [kworker/6:0H]
(root,0,0,00:00:00/642-00:02:43,49) [cpuhp/7]
(root,0,0,00:03:07/642-00:02:43,50) [watchdog/7]
(root,0,0,00:00:23/642-00:02:43,51) [migration/7]
(root,0,0,00:02:16/642-00:02:43,52) [ksoftirqd/7]
(root,0,0,00:00:00/642-00:02:43,54) [kworker/7:0H]
(root,0,0,00:00:00/642-00:02:43,55) [kdevtmpfs]
(root,0,0,00:00:00/642-00:02:43,56) [netns]
(root,0,0,00:00:00/642-00:02:43,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/642-00:02:43,58) [kauditd]
(root,0,0,00:01:41/642-00:02:43,62) [khungtaskd]
(root,0,0,00:00:00/642-00:02:43,63) [oom_reaper]
(root,0,0,00:00:00/642-00:02:43,64) [writeback]
(root,0,0,00:00:02/642-00:02:43,65) [kcompactd0]
(root,0,0,00:00:00/642-00:02:43,66) [ksmd]
(root,0,0,00:08:43/642-00:02:43,67) [khugepaged]
(root,0,0,00:00:00/642-00:02:43,68) [crypto]
(root,0,0,00:00:00/642-00:02:43,69) [kintegrityd]
(root,0,0,00:00:00/642-00:02:43,70) [kblockd]
(root,0,0,00:00:00/642-00:02:43,71) [ata_sff]
(root,0,0,00:00:00/642-00:02:43,72) [md]
(root,0,0,00:00:00/642-00:02:43,73) [edac-poller]
(root,0,0,00:00:00/642-00:02:43,74) [devfreq_wq]
(root,0,0,00:00:00/642-00:02:43,75) [watchdogd]
(root,0,0,02:10:25/642-00:02:43,79) [kswapd0]
(root,0,0,00:00:00/642-00:02:43,80) [kworker/u17:0]
(root,0,0,00:00:00/642-00:02:43,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/642-00:02:43,123) [kthrotld]
(root,0,0,00:00:00/642-00:02:43,124) [acpi_thermal_pm]
(root,0,0,00:00:00/642-00:02:43,130) [scsi_eh_0]
(root,0,0,00:00:00/642-00:02:43,131) [scsi_tmf_0]
(root,0,0,00:00:00/642-00:02:43,132) [scsi_eh_1]
(root,0,0,00:00:00/642-00:02:43,133) [scsi_tmf_1]
(root,0,0,00:00:00/642-00:02:42,139) [ipv6_addrconf]
(root,0,0,00:00:00/642-00:02:42,148) [kstrp]
(root,0,0,00:00:00/642-00:02:42,166) [charger_manager]
(root,0,0,00:00:00/642-00:02:42,223) [scsi_eh_2]
(root,0,0,00:00:00/642-00:02:42,224) [scsi_tmf_2]
(root,0,0,00:03:40/642-00:02:41,267) [kworker/7:1H]
(root,0,0,00:29:13/642-00:02:37,268) [kworker/4:1H]
(root,0,0,00:01:00/642-00:02:37,275) [kworker/1:1H]
(root,0,0,00:00:43/642-00:02:36,335) [kworker/2:1H]
(root,0,0,00:00:00/642-00:02:35,342) [raid5wq]
(root,0,0,00:00:06/1-01:50:45,364) [kworker/7:2]
(root,0,0,01:11:17/642-00:02:35,392) [jbd2/sda1-8]
(root,0,0,00:00:00/642-00:02:35,393) [ext4-rsv-conver]
(root,0,0,00:00:37/642-00:02:35,395) [kworker/3:1H]
(root,0,0,00:03:13/642-00:02:35,398) [kworker/5:1H]
(root,0,0,00:04:22/642-00:02:35,431) [kworker/6:1H]
(gitlab-psql,8306968,51744,00:00:00/24:50,458) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:02:03/642-00:02:35,464) [kworker/0:1H]
(root,122516,28208,01:18:02/642-00:02:34,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/642-00:02:34,476) [iscsi_eh]
(root,0,0,00:00:00/642-00:02:34,485) [ib-comp-wq]
(root,0,0,00:00:00/642-00:02:34,486) [ib_mcast]
(root,0,0,00:00:00/642-00:02:34,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/642-00:02:34,494) [rdma_cm]
(root,97708,1596,00:00:00/642-00:02:34,498) /sbin/lvmetad -f
(root,43436,3896,00:05:03/642-00:02:34,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:04/642-00:02:34,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/642-00:02:32,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(gitlab-psql,8307292,52184,00:00:00/20:34,1192) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47888,00:00:00/20:29,1198) postgres: gitlab gitlabhq_production [local] idle
(root,110516,3424,01:29:37/642-00:02:29,1244) /usr/sbin/irqbalance --foreground
(root,383012,2408,00:18:37/642-00:02:29,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:10/642-00:02:29,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:10:56/642-00:02:29,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:03:05/642-00:02:29,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:43/642-00:02:29,1289) /usr/sbin/cron -f
(root,286252,6272,00:36:00/642-00:02:29,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:34/642-00:02:29,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/642-00:02:29,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/642-00:02:29,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/642-00:02:29,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:54/642-00:02:29,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:21:45/642-00:02:29,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:06/642-00:02:29,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/642-00:02:29,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/642-00:02:29,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:03/642-00:02:29,1379) nginx: worker process
(www-data,143788,3960,00:00:09/642-00:02:29,1380) nginx: worker process
(www-data,143788,5000,00:00:44/642-00:02:29,1381) nginx: worker process
(www-data,143788,3964,00:00:01/642-00:02:29,1382) nginx: worker process
(www-data,143788,4056,00:00:00/642-00:02:29,1383) nginx: worker process
(www-data,143788,4184,00:00:00/642-00:02:29,1384) nginx: worker process
(www-data,143788,4056,00:00:00/642-00:02:29,1386) nginx: worker process
(www-data,143788,4184,00:00:00/642-00:02:29,1388) nginx: worker process
(root,14888,1756,00:00:00/642-00:02:29,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:21/642-00:02:29,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:27/642-00:02:28,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/642-00:02:28,1498) runsv redis-exporter
(root,4396,712,00:00:07/642-00:02:28,1500) runsv node-exporter
(root,4396,820,00:00:06/642-00:02:28,1501) runsv prometheus
(root,4396,824,00:00:06/642-00:02:28,1502) runsv sidekiq
(root,4396,720,00:00:06/642-00:02:28,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/642-00:02:28,1507) runsv alertmanager
(root,4396,856,00:00:05/642-00:02:28,1509) runsv postgresql
(root,4396,744,00:00:07/642-00:02:28,1510) runsv postgres-exporter
(root,4396,788,00:00:06/642-00:02:28,1511) runsv grafana
(root,4396,780,00:00:06/642-00:02:28,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/642-00:02:28,1513) runsv logrotate
(root,4396,856,00:00:05/642-00:02:28,1514) runsv puma
(root,4396,744,00:00:06/642-00:02:28,1515) runsv nginx
(root,4396,740,00:00:06/642-00:02:28,1516) runsv gitaly
(root,4396,860,00:00:06/642-00:02:28,1517) runsv redis
(root,4396,760,00:00:07/642-00:02:28,1519) runsv registry
(root,4540,864,00:00:06/642-00:02:28,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/642-00:02:28,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/642-00:02:28,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:56:34/642-00:02:28,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:13:34/642-00:02:28,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/642-00:02:28,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/642-00:02:28,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/642-00:02:28,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/642-00:02:28,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/642-00:02:28,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/642-00:02:28,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:56/642-00:02:28,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:21/642-00:02:28,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/642-00:02:28,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:50/642-00:02:28,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/642-00:02:28,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/16:17,1947) [kworker/u16:0]
(gitlab-psql,8307024,47536,00:00:00/10:22,2876) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/10:08,2898) [kworker/u16:1]
(gitlab-psql,8307132,47668,00:00:00/09:28,3020) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:58/16-06:48:11,3144) [kworker/4:0]
(gitlab-psql,8307072,47724,00:00:00/08:22,3188) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/04:49,3714) [kworker/u16:2]
(root,105684,6752,00:00:00/00:48,4357) sshd: root [priv]
(sshd,72296,2968,00:00:00/00:48,4358) sshd: root [net]
(root,20180,3464,00:00:00/00:00,4606) /bin/bash /usr/bin/check_mk_agent
(root,36700,3212,00:00:00/00:00,4624) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1076,00:00:00/00:00,4625) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,4628,796,00:00:00/500-07:42:33,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,743576,8132,00:09:57/500-07:42:33,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87356,8412,00:43:35/500-07:42:33,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:30/500-07:42:33,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:16/1-06:55:02,10840) [kworker/6:2]
(root,0,0,00:00:41/5-05:39:42,11837) [kworker/0:1]
(root,0,0,00:00:00/05:33:12,11965) [kworker/3:1]
(root,0,0,00:00:47/12-23:19:29,12007) [kworker/1:1]
(root,0,0,00:00:00/12:06:02,13802) [kworker/0:0]
(git,1644760,965296,00:00:31/05:20:17,14043) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1642712,953944,00:00:32/05:19:17,14214) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1634520,960656,00:00:33/05:18:17,14385) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1634520,961376,00:00:33/05:17:17,14544) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1635544,963440,00:00:30/05:16:17,14712) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1635544,958564,00:00:33/05:15:17,14884) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1714528,966468,00:00:32/05:14:17,15055) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1634520,951108,00:00:31/05:13:17,15221) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:00:12/3-07:52:27,18395) [kworker/3:2]
(systemd-resolve,70628,4756,00:00:00/08:12:55,18493) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/14:45:41,19224) [kworker/4:1]
(root,0,0,00:00:38/9-08:20:55,22932) [kworker/5:1]
(root,0,0,00:00:00/20:57:42,23858) [kworker/5:2]
(gitlab-psql,8307492,57380,00:00:00/54:51,23992) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/1-00:12:30,24309) [kworker/7:0]
(gitlab-psql,8307112,48964,00:00:00/50:37,24681) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307268,55252,00:00:00/49:37,24868) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312212,65300,00:00:00/47:21,25212) postgres: gitlab gitlabhq_production [local] idle
(root,4628,804,00:00:00/46:25,25358) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,736,00:00:00/36:24,27000) sleep 3000
(gitlab-prometheus,1795260,13076,08:47:49/245-23:53:58,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:30:32/245-23:53:58,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,133016,1-21:39:00/245-23:53:57,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45640,5-13:40:38/245-23:53:57,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,37724,1-07:35:00/245-23:53:57,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,49064,03:52:07/245-23:53:57,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/245-23:53:56,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:34/245-23:53:56,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/245-23:53:56,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/245-23:53:56,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/245-23:53:56,29021) nginx: worker process
(gitlab-www,67708,25088,06:18:34/245-23:53:56,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/245-23:53:56,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/245-23:53:56,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/245-23:53:56,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:51/245-23:53:56,29026) nginx: cache manager process
(gitlab-prometheus,719468,14596,1-06:10:45/245-23:53:55,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15476,1-07:29:00/245-23:53:55,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:19:33/245-23:53:54,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3187092,155860,2-19:22:46/245-23:53:54,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,296392,00:15:28/245-23:53:54,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:59/245-23:53:54,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:28/245-23:53:54,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:19:52/245-23:53:54,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:18:41/245-23:53:54,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:24/245-23:53:54,29064) postgres: logical replication launcher   
(git,1461948,919416,04:02:22/245-23:53:53,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,17080,13-14:05:33/245-23:53:52,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16672,09:54:15/245-23:53:52,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108840,20:53:38/245-23:53:52,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,20:47:29/245-23:53:52,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,14440,01:07:33/245-23:53:52,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:48/245-23:53:48,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1143376,37-19:40:33/245-23:53:48,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,95856,3-17:45:18/245-23:53:36,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-18:08:22/245-23:53:33,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:32:13/245-23:52:29,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/245-23:52:29,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/34:35,30327) [kworker/2:2]
(root,0,0,00:00:00/34:34,30346) [kworker/6:0]
(root,0,0,00:00:49/13-00:34:45,31304) [kworker/2:1]
(gitlab-psql,8306552,51484,00:00:00/30:39,32014) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/28:16,32375) [kworker/1:2]
(gitlab-psql,8309716,59452,00:00:00/27:29,32515) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-08 00:36

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9123e1dc006

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8128,00:29:56/640-00:20:33,1) /sbin/init
(root,0,0,00:00:24/640-00:20:33,2) [kthreadd]
(root,0,0,00:00:00/640-00:20:33,4) [kworker/0:0H]
(root,0,0,00:00:00/640-00:20:33,6) [mm_percpu_wq]
(root,0,0,00:07:17/640-00:20:33,7) [ksoftirqd/0]
(root,0,0,20:00:07/640-00:20:33,8) [rcu_sched]
(root,0,0,00:00:00/640-00:20:33,9) [rcu_bh]
(root,0,0,00:00:20/640-00:20:33,10) [migration/0]
(root,0,0,00:03:32/640-00:20:33,11) [watchdog/0]
(root,0,0,00:00:00/640-00:20:33,12) [cpuhp/0]
(root,0,0,00:00:00/640-00:20:33,13) [cpuhp/1]
(root,0,0,00:03:16/640-00:20:33,14) [watchdog/1]
(root,0,0,00:00:19/640-00:20:33,15) [migration/1]
(root,0,0,00:04:00/640-00:20:33,16) [ksoftirqd/1]
(root,0,0,00:00:00/640-00:20:33,18) [kworker/1:0H]
(root,0,0,00:00:00/640-00:20:33,19) [cpuhp/2]
(root,0,0,00:03:30/640-00:20:33,20) [watchdog/2]
(root,0,0,00:00:18/640-00:20:33,21) [migration/2]
(root,0,0,00:02:57/640-00:20:33,22) [ksoftirqd/2]
(root,0,0,00:00:00/640-00:20:33,24) [kworker/2:0H]
(root,0,0,00:00:00/640-00:20:33,25) [cpuhp/3]
(root,0,0,00:03:12/640-00:20:33,26) [watchdog/3]
(root,0,0,00:00:16/640-00:20:33,27) [migration/3]
(root,0,0,00:02:21/640-00:20:33,28) [ksoftirqd/3]
(root,0,0,00:00:00/640-00:20:33,30) [kworker/3:0H]
(root,0,0,00:00:00/640-00:20:33,31) [cpuhp/4]
(root,0,0,00:03:26/640-00:20:33,32) [watchdog/4]
(root,0,0,00:00:14/640-00:20:33,33) [migration/4]
(root,0,0,00:07:19/640-00:20:33,34) [ksoftirqd/4]
(root,0,0,00:00:00/640-00:20:33,36) [kworker/4:0H]
(root,0,0,00:00:00/640-00:20:33,37) [cpuhp/5]
(root,0,0,00:03:23/640-00:20:33,38) [watchdog/5]
(root,0,0,00:00:16/640-00:20:33,39) [migration/5]
(root,0,0,00:04:34/640-00:20:33,40) [ksoftirqd/5]
(root,0,0,00:00:00/640-00:20:33,42) [kworker/5:0H]
(root,0,0,00:00:00/640-00:20:33,43) [cpuhp/6]
(root,0,0,00:03:14/640-00:20:33,44) [watchdog/6]
(root,0,0,00:00:27/640-00:20:33,45) [migration/6]
(root,0,0,00:02:29/640-00:20:33,46) [ksoftirqd/6]
(root,0,0,00:00:00/640-00:20:33,48) [kworker/6:0H]
(root,0,0,00:00:00/640-00:20:33,49) [cpuhp/7]
(root,0,0,00:03:06/640-00:20:33,50) [watchdog/7]
(root,0,0,00:00:23/640-00:20:33,51) [migration/7]
(root,0,0,00:02:15/640-00:20:33,52) [ksoftirqd/7]
(root,0,0,00:00:00/640-00:20:33,54) [kworker/7:0H]
(root,0,0,00:00:00/640-00:20:33,55) [kdevtmpfs]
(root,0,0,00:00:00/640-00:20:33,56) [netns]
(root,0,0,00:00:00/640-00:20:33,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/640-00:20:33,58) [kauditd]
(root,0,0,00:01:41/640-00:20:33,62) [khungtaskd]
(root,0,0,00:00:00/640-00:20:33,63) [oom_reaper]
(root,0,0,00:00:00/640-00:20:33,64) [writeback]
(root,0,0,00:00:02/640-00:20:33,65) [kcompactd0]
(root,0,0,00:00:00/640-00:20:33,66) [ksmd]
(root,0,0,00:08:41/640-00:20:33,67) [khugepaged]
(root,0,0,00:00:00/640-00:20:33,68) [crypto]
(root,0,0,00:00:00/640-00:20:33,69) [kintegrityd]
(root,0,0,00:00:00/640-00:20:33,70) [kblockd]
(root,0,0,00:00:00/640-00:20:33,71) [ata_sff]
(root,0,0,00:00:00/640-00:20:33,72) [md]
(root,0,0,00:00:00/640-00:20:33,73) [edac-poller]
(root,0,0,00:00:00/640-00:20:33,74) [devfreq_wq]
(root,0,0,00:00:00/640-00:20:33,75) [watchdogd]
(root,0,0,02:09:56/640-00:20:33,79) [kswapd0]
(root,0,0,00:00:00/640-00:20:33,80) [kworker/u17:0]
(root,0,0,00:00:00/640-00:20:33,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/640-00:20:33,123) [kthrotld]
(root,0,0,00:00:00/640-00:20:33,124) [acpi_thermal_pm]
(root,0,0,00:00:00/640-00:20:33,130) [scsi_eh_0]
(root,0,0,00:00:00/640-00:20:33,131) [scsi_tmf_0]
(root,0,0,00:00:00/640-00:20:33,132) [scsi_eh_1]
(root,0,0,00:00:00/640-00:20:33,133) [scsi_tmf_1]
(root,0,0,00:00:00/640-00:20:32,139) [ipv6_addrconf]
(root,0,0,00:00:00/640-00:20:32,148) [kstrp]
(root,0,0,00:00:00/640-00:20:32,166) [charger_manager]
(root,0,0,00:00:00/640-00:20:32,223) [scsi_eh_2]
(root,0,0,00:00:00/640-00:20:32,224) [scsi_tmf_2]
(root,0,0,00:03:39/640-00:20:31,267) [kworker/7:1H]
(root,0,0,00:29:07/640-00:20:27,268) [kworker/4:1H]
(root,0,0,00:01:00/640-00:20:27,275) [kworker/1:1H]
(root,0,0,00:00:43/640-00:20:26,335) [kworker/2:1H]
(root,0,0,00:00:00/640-00:20:25,342) [raid5wq]
(root,0,0,01:11:03/640-00:20:25,392) [jbd2/sda1-8]
(root,0,0,00:00:00/640-00:20:25,393) [ext4-rsv-conver]
(root,0,0,00:00:37/640-00:20:25,395) [kworker/3:1H]
(root,0,0,00:03:12/640-00:20:25,398) [kworker/5:1H]
(root,0,0,00:04:21/640-00:20:25,431) [kworker/6:1H]
(root,0,0,00:02:02/640-00:20:25,464) [kworker/0:1H]
(root,258048,88932,01:17:46/640-00:20:24,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/640-00:20:24,476) [iscsi_eh]
(root,0,0,00:00:00/640-00:20:24,485) [ib-comp-wq]
(root,0,0,00:00:00/640-00:20:24,486) [ib_mcast]
(root,0,0,00:00:00/640-00:20:24,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/640-00:20:24,494) [rdma_cm]
(root,97708,1596,00:00:00/640-00:20:24,498) /sbin/lvmetad -f
(root,43436,3896,00:05:02/640-00:20:24,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:04/640-00:20:24,713) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/35:33,826) [kworker/6:1]
(root,25992,3444,00:00:03/640-00:20:22,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:29:20/640-00:20:19,1244) /usr/sbin/irqbalance --foreground
(root,382960,2356,00:18:34/640-00:20:19,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(gitlab-psql,8307804,48916,00:00:00/33:26,1248) postgres: gitlab gitlabhq_production [local] idle
(syslog,263036,4340,00:24:05/640-00:20:19,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:10:54/640-00:20:19,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:02:53/640-00:20:19,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:42/640-00:20:19,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:52/640-00:20:19,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:33/640-00:20:19,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/640-00:20:19,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/640-00:20:19,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/640-00:20:19,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:48/640-00:20:19,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:19:20/640-00:20:19,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:04/640-00:20:19,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/640-00:20:19,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/640-00:20:19,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:03/640-00:20:19,1379) nginx: worker process
(www-data,143788,3960,00:00:09/640-00:20:19,1380) nginx: worker process
(www-data,143788,5000,00:00:44/640-00:20:19,1381) nginx: worker process
(www-data,143788,3964,00:00:01/640-00:20:19,1382) nginx: worker process
(www-data,143788,4056,00:00:00/640-00:20:19,1383) nginx: worker process
(www-data,143788,4184,00:00:00/640-00:20:19,1384) nginx: worker process
(www-data,143788,4056,00:00:00/640-00:20:19,1386) nginx: worker process
(www-data,143788,4184,00:00:00/640-00:20:19,1388) nginx: worker process
(root,14888,1756,00:00:00/640-00:20:19,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:17/640-00:20:19,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:24/640-00:20:18,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/640-00:20:18,1498) runsv redis-exporter
(root,4396,712,00:00:07/640-00:20:18,1500) runsv node-exporter
(root,4396,820,00:00:06/640-00:20:18,1501) runsv prometheus
(root,4396,824,00:00:06/640-00:20:18,1502) runsv sidekiq
(root,4396,720,00:00:06/640-00:20:18,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/640-00:20:18,1507) runsv alertmanager
(root,4396,856,00:00:05/640-00:20:18,1509) runsv postgresql
(root,4396,744,00:00:07/640-00:20:18,1510) runsv postgres-exporter
(root,4396,788,00:00:06/640-00:20:18,1511) runsv grafana
(root,4396,780,00:00:06/640-00:20:18,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/640-00:20:18,1513) runsv logrotate
(root,4396,856,00:00:05/640-00:20:18,1514) runsv puma
(root,4396,744,00:00:06/640-00:20:18,1515) runsv nginx
(root,4396,740,00:00:06/640-00:20:18,1516) runsv gitaly
(root,4396,860,00:00:05/640-00:20:18,1517) runsv redis
(root,4396,760,00:00:07/640-00:20:18,1519) runsv registry
(root,4540,864,00:00:06/640-00:20:18,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/640-00:20:18,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/640-00:20:18,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:56:11/640-00:20:18,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:13:15/640-00:20:18,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/640-00:20:18,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/640-00:20:18,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/640-00:20:18,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/640-00:20:18,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/640-00:20:18,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/640-00:20:18,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:51/640-00:20:18,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:17/640-00:20:18,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/640-00:20:18,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:50/640-00:20:18,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/640-00:20:18,1558) svlogd -tt /var/log/gitlab/postgresql
(git,1545944,943540,00:00:03/30:49,1745) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1733360,983512,00:00:36/03:12:50,1821) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/29:25,1962) [kworker/u16:2]
(gitlab-psql,8307260,49900,00:00:00/24:11,2832) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:51/14-07:06:01,3144) [kworker/4:0]
(gitlab-psql,8311788,60320,00:00:00/21:37,3202) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306668,52212,00:00:00/19:30,3541) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306240,46688,00:00:00/09:43,5067) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/08:53,5211) [kworker/u16:1]
(gitlab-psql,8307140,47792,00:00:00/07:14,5486) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8304736,38960,00:00:00/06:17,5633) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307084,50644,00:00:00/06:17,5634) postgres: gitlab gitlabhq_production [local] idle
(root,4628,848,00:00:00/04:17,5943) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,732,00:00:00/04:17,5947) sleep 600
(root,4628,796,00:00:00/498-08:00:23,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,800924,10000,00:09:54/498-08:00:23,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87356,8412,00:43:13/498-08:00:23,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:29/498-08:00:23,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/00:23,6521) [kworker/u16:0]
(gitlab-psql,8305504,37232,00:00:00/00:03,6609) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8303824,23052,00:00:00/00:00,6614) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3592,00:00:00/00:00,6698) /bin/bash /usr/bin/check_mk_agent
(root,36700,3056,00:00:00/00:00,6716) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1136,00:00:00/00:00,6717) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1726708,985356,00:00:31/02:32:30,8479) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:14/2-06:48:34,11118) [kworker/7:0]
(root,0,0,00:00:00/02:15:39,11623) [kworker/2:0]
(root,0,0,00:00:25/3-05:57:32,11837) [kworker/0:1]
(root,0,0,00:00:40/10-23:37:19,12007) [kworker/1:1]
(root,0,0,00:00:00/02:08:04,13104) [kworker/4:2]
(root,0,0,00:00:00/1-00:42:00,13428) [kworker/1:2]
(root,0,0,00:00:00/02:00:04,14676) [kworker/3:1]
(git,1750256,998784,00:00:16/01:53:30,16085) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1597656,981036,00:00:14/01:45:50,17389) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,0,0,00:00:04/1-08:10:17,18395) [kworker/3:2]
(systemd-resolve,70628,4856,00:00:00/04:15:13,22280) /lib/systemd/systemd-resolved
(root,0,0,00:00:30/7-08:38:45,22932) [kworker/5:1]
(root,0,0,00:00:00/01:06:19,24035) [kworker/5:0]
(gitlab-prometheus,1795260,12324,08:43:26/244-00:11:48,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:29:47/244-00:11:48,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,136564,1-21:16:44/244-00:11:47,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45672,5-12:30:06/244-00:11:47,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39140,1-07:20:31/244-00:11:47,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,50584,03:49:54/244-00:11:47,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/244-00:11:46,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:34/244-00:11:46,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/244-00:11:46,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/244-00:11:46,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/244-00:11:46,29021) nginx: worker process
(gitlab-www,67708,25088,06:16:04/244-00:11:46,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/244-00:11:46,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/244-00:11:46,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/244-00:11:46,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:49/244-00:11:46,29026) nginx: cache manager process
(gitlab-prometheus,719468,13472,1-05:55:33/244-00:11:45,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14076,1-07:12:55/244-00:11:45,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:19:23/244-00:11:44,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3202636,149748,2-18:48:31/244-00:11:44,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,293976,00:15:22/244-00:11:44,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:56/244-00:11:44,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:24/244-00:11:44,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:19:42/244-00:11:44,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:16:31/244-00:11:44,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:24/244-00:11:44,29064) postgres: logical replication launcher   
(git,1461948,919380,04:00:24/244-00:11:43,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16952,13-11:17:56/244-00:11:42,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16016,09:49:20/244-00:11:42,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3162256,108756,20:43:34/244-00:11:42,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,20:38:05/244-00:11:42,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15484,01:07:07/244-00:11:42,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:42/244-00:11:38,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4920044,1237488,37-11:56:37/244-00:11:38,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(root,0,0,00:00:00/52:31,29200) [kworker/7:1]
(gitlab-psql,8309408,94348,3-16:59:20/244-00:11:26,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-17:46:25/244-00:11:23,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(root,0,0,00:00:41/3-06:53:41,29322) [kworker/6:0]
(gitlab-psql,8306184,34736,00:31:57/244-00:10:19,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/244-00:10:19,29560) postgres: gitlab gitlabhq_production [local] idle
(git,1734900,1009548,00:00:44/03:29:50,30497) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1764192,1048420,00:00:42/03:29:31,30565) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8308084,51556,00:00:00/47:19,31294) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:41/11-00:52:35,31304) [kworker/2:1]
(root,0,0,00:00:00/45:01,31644) [kworker/0:2]
(git,1743712,1033888,00:00:40/03:20:50,32230) puma: cluster worker 2: 29076 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-06 00:54

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91298b29549

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8096,00:29:49/638-00:07:48,1) /sbin/init
(root,0,0,00:00:24/638-00:07:48,2) [kthreadd]
(root,0,0,00:00:00/638-00:07:48,4) [kworker/0:0H]
(root,0,0,00:00:00/638-00:07:48,6) [mm_percpu_wq]
(root,0,0,00:07:15/638-00:07:48,7) [ksoftirqd/0]
(root,0,0,19:55:59/638-00:07:48,8) [rcu_sched]
(root,0,0,00:00:00/638-00:07:48,9) [rcu_bh]
(root,0,0,00:00:20/638-00:07:48,10) [migration/0]
(root,0,0,00:03:31/638-00:07:48,11) [watchdog/0]
(root,0,0,00:00:00/638-00:07:48,12) [cpuhp/0]
(root,0,0,00:00:00/638-00:07:48,13) [cpuhp/1]
(root,0,0,00:03:16/638-00:07:48,14) [watchdog/1]
(root,0,0,00:00:19/638-00:07:48,15) [migration/1]
(root,0,0,00:03:59/638-00:07:48,16) [ksoftirqd/1]
(root,0,0,00:00:00/638-00:07:48,18) [kworker/1:0H]
(root,0,0,00:00:00/638-00:07:48,19) [cpuhp/2]
(root,0,0,00:03:29/638-00:07:48,20) [watchdog/2]
(root,0,0,00:00:17/638-00:07:48,21) [migration/2]
(root,0,0,00:02:56/638-00:07:48,22) [ksoftirqd/2]
(root,0,0,00:00:00/638-00:07:48,24) [kworker/2:0H]
(root,0,0,00:00:00/638-00:07:48,25) [cpuhp/3]
(root,0,0,00:03:12/638-00:07:48,26) [watchdog/3]
(root,0,0,00:00:16/638-00:07:48,27) [migration/3]
(root,0,0,00:02:21/638-00:07:48,28) [ksoftirqd/3]
(root,0,0,00:00:00/638-00:07:48,30) [kworker/3:0H]
(root,0,0,00:00:00/638-00:07:48,31) [cpuhp/4]
(root,0,0,00:03:26/638-00:07:48,32) [watchdog/4]
(root,0,0,00:00:14/638-00:07:48,33) [migration/4]
(root,0,0,00:07:17/638-00:07:48,34) [ksoftirqd/4]
(root,0,0,00:00:00/638-00:07:48,36) [kworker/4:0H]
(root,0,0,00:00:00/638-00:07:48,37) [cpuhp/5]
(root,0,0,00:03:23/638-00:07:48,38) [watchdog/5]
(root,0,0,00:00:16/638-00:07:48,39) [migration/5]
(root,0,0,00:04:32/638-00:07:48,40) [ksoftirqd/5]
(root,0,0,00:00:00/638-00:07:48,42) [kworker/5:0H]
(root,0,0,00:00:00/638-00:07:48,43) [cpuhp/6]
(root,0,0,00:03:13/638-00:07:48,44) [watchdog/6]
(root,0,0,00:00:27/638-00:07:48,45) [migration/6]
(root,0,0,00:02:29/638-00:07:48,46) [ksoftirqd/6]
(root,0,0,00:00:00/638-00:07:48,48) [kworker/6:0H]
(root,0,0,00:00:00/638-00:07:48,49) [cpuhp/7]
(root,0,0,00:03:06/638-00:07:48,50) [watchdog/7]
(root,0,0,00:00:23/638-00:07:48,51) [migration/7]
(root,0,0,00:02:15/638-00:07:48,52) [ksoftirqd/7]
(root,0,0,00:00:00/638-00:07:48,54) [kworker/7:0H]
(root,0,0,00:00:00/638-00:07:48,55) [kdevtmpfs]
(root,0,0,00:00:00/638-00:07:48,56) [netns]
(root,0,0,00:00:00/638-00:07:48,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/638-00:07:48,58) [kauditd]
(root,0,0,00:01:40/638-00:07:48,62) [khungtaskd]
(root,0,0,00:00:00/638-00:07:48,63) [oom_reaper]
(root,0,0,00:00:00/638-00:07:48,64) [writeback]
(root,0,0,00:00:02/638-00:07:48,65) [kcompactd0]
(root,0,0,00:00:00/638-00:07:48,66) [ksmd]
(root,0,0,00:08:39/638-00:07:48,67) [khugepaged]
(root,0,0,00:00:00/638-00:07:48,68) [crypto]
(root,0,0,00:00:00/638-00:07:48,69) [kintegrityd]
(root,0,0,00:00:00/638-00:07:48,70) [kblockd]
(root,0,0,00:00:00/638-00:07:48,71) [ata_sff]
(root,0,0,00:00:00/638-00:07:48,72) [md]
(root,0,0,00:00:00/638-00:07:48,73) [edac-poller]
(root,0,0,00:00:00/638-00:07:48,74) [devfreq_wq]
(root,0,0,00:00:00/638-00:07:48,75) [watchdogd]
(root,0,0,02:09:25/638-00:07:48,79) [kswapd0]
(root,0,0,00:00:00/638-00:07:48,80) [kworker/u17:0]
(root,0,0,00:00:00/638-00:07:48,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/638-00:07:48,123) [kthrotld]
(root,0,0,00:00:00/638-00:07:48,124) [acpi_thermal_pm]
(root,0,0,00:00:00/638-00:07:48,130) [scsi_eh_0]
(root,0,0,00:00:00/638-00:07:48,131) [scsi_tmf_0]
(root,0,0,00:00:00/638-00:07:48,132) [scsi_eh_1]
(root,0,0,00:00:00/638-00:07:48,133) [scsi_tmf_1]
(root,0,0,00:00:00/638-00:07:47,139) [ipv6_addrconf]
(root,0,0,00:00:00/638-00:07:47,148) [kstrp]
(root,0,0,00:00:00/638-00:07:47,166) [charger_manager]
(root,0,0,00:00:00/638-00:07:47,223) [scsi_eh_2]
(root,0,0,00:00:00/638-00:07:47,224) [scsi_tmf_2]
(root,0,0,00:03:38/638-00:07:46,267) [kworker/7:1H]
(root,0,0,00:29:01/638-00:07:42,268) [kworker/4:1H]
(root,0,0,00:01:00/638-00:07:42,275) [kworker/1:1H]
(root,0,0,00:00:43/638-00:07:41,335) [kworker/2:1H]
(root,0,0,00:00:00/638-00:07:40,342) [raid5wq]
(root,0,0,01:10:49/638-00:07:40,392) [jbd2/sda1-8]
(root,0,0,00:00:00/638-00:07:40,393) [ext4-rsv-conver]
(root,0,0,00:00:37/638-00:07:40,395) [kworker/3:1H]
(root,0,0,00:03:12/638-00:07:40,398) [kworker/5:1H]
(root,0,0,00:04:20/638-00:07:40,431) [kworker/6:1H]
(root,0,0,00:02:02/638-00:07:40,464) [kworker/0:1H]
(root,217088,78360,01:17:28/638-00:07:39,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/638-00:07:39,476) [iscsi_eh]
(root,0,0,00:00:00/638-00:07:39,485) [ib-comp-wq]
(root,0,0,00:00:00/638-00:07:39,486) [ib_mcast]
(root,0,0,00:00:00/638-00:07:39,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/638-00:07:39,494) [rdma_cm]
(root,97708,1596,00:00:00/638-00:07:39,498) /sbin/lvmetad -f
(root,43436,3896,00:05:01/638-00:07:39,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:03/638-00:07:39,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/638-00:07:37,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:29:03/638-00:07:34,1244) /usr/sbin/irqbalance --foreground
(root,382924,2320,00:18:30/638-00:07:34,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:24:00/638-00:07:34,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:10:52/638-00:07:34,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:02:39/638-00:07:34,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:41/638-00:07:34,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:45/638-00:07:34,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:32/638-00:07:34,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/638-00:07:34,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/638-00:07:34,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/638-00:07:34,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:41/638-00:07:34,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:16:56/638-00:07:34,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:02/638-00:07:34,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/638-00:07:34,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/638-00:07:34,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:02/638-00:07:34,1379) nginx: worker process
(www-data,143788,3960,00:00:09/638-00:07:34,1380) nginx: worker process
(www-data,143788,5000,00:00:44/638-00:07:34,1381) nginx: worker process
(www-data,143788,3964,00:00:01/638-00:07:34,1382) nginx: worker process
(www-data,143788,4056,00:00:00/638-00:07:34,1383) nginx: worker process
(www-data,143788,4184,00:00:00/638-00:07:34,1384) nginx: worker process
(www-data,143788,4056,00:00:00/638-00:07:34,1386) nginx: worker process
(www-data,143788,4184,00:00:00/638-00:07:34,1388) nginx: worker process
(root,14888,1756,00:00:00/638-00:07:34,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:11/638-00:07:34,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:21/638-00:07:33,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/638-00:07:33,1498) runsv redis-exporter
(root,4396,712,00:00:07/638-00:07:33,1500) runsv node-exporter
(root,4396,820,00:00:06/638-00:07:33,1501) runsv prometheus
(root,4396,824,00:00:06/638-00:07:33,1502) runsv sidekiq
(root,4396,720,00:00:06/638-00:07:33,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/638-00:07:33,1507) runsv alertmanager
(root,4396,856,00:00:05/638-00:07:33,1509) runsv postgresql
(root,4396,744,00:00:07/638-00:07:33,1510) runsv postgres-exporter
(root,4396,788,00:00:06/638-00:07:33,1511) runsv grafana
(root,4396,780,00:00:06/638-00:07:33,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/638-00:07:33,1513) runsv logrotate
(root,4396,856,00:00:05/638-00:07:33,1514) runsv puma
(root,4396,744,00:00:06/638-00:07:33,1515) runsv nginx
(root,4396,740,00:00:06/638-00:07:33,1516) runsv gitaly
(root,4396,860,00:00:05/638-00:07:33,1517) runsv redis
(root,4396,760,00:00:07/638-00:07:33,1519) runsv registry
(root,4540,864,00:00:06/638-00:07:33,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/638-00:07:33,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/638-00:07:33,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:55:47/638-00:07:33,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:12:56/638-00:07:33,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/638-00:07:33,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/638-00:07:33,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/638-00:07:33,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/638-00:07:33,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/638-00:07:33,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/638-00:07:33,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:46/638-00:07:33,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:13/638-00:07:33,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/638-00:07:33,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:49/638-00:07:33,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/638-00:07:33,1558) svlogd -tt /var/log/gitlab/postgresql
(git,1753440,1042832,00:01:09/07:14:28,2359) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,0,0,00:00:44/12-06:53:16,3144) [kworker/4:0]
(git,1755380,1037008,00:01:10/07:12:28,3155) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/55:48,3338) [kworker/0:2]
(root,4628,816,00:00:00/51:38,3979) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8312416,74980,00:00:00/42:48,5416) postgres: gitlab gitlabhq_production [local] idle
(root,4532,792,00:00:00/41:36,5693) sleep 3000
(root,4628,796,00:00:00/496-07:47:38,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,792732,19308,00:09:51/496-07:47:38,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87356,8412,00:42:47/496-07:47:38,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:27/496-07:47:38,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(git,1722608,1018628,00:00:48/06:45:08,9249) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1702240,995316,00:00:23/03:28:26,9940) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/36:53,10293) [kworker/3:2]
(gitlab-psql,8313564,72384,00:00:00/36:26,10348) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/35:47,10588) [kworker/6:1]
(root,0,0,00:00:00/34:30,10784) [kworker/7:1]
(root,0,0,00:00:29/8-01:52:11,10982) [kworker/3:1]
(root,0,0,00:00:00/34:26,11004) [kworker/2:2]
(gitlab-psql,8312220,72332,00:00:00/34:19,11094) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/06:35:49,11118) [kworker/7:0]
(gitlab-psql,8307132,47692,00:00:00/32:20,11509) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/31:46,11585) [kworker/1:0]
(gitlab-psql,8307024,47596,00:00:00/30:44,11749) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:10/1-05:44:47,11837) [kworker/0:1]
(gitlab-psql,8309924,60844,00:00:00/29:43,11905) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:33/8-23:24:34,12007) [kworker/1:1]
(gitlab-psql,8307132,47836,00:00:00/26:40,12398) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307208,53212,00:00:00/25:47,12549) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/23:30,12909) [kworker/u16:0]
(gitlab-psql,8307132,47628,00:00:00/18:58,13672) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/18:00,13840) [kworker/u16:2]
(root,0,0,00:00:00/15:42,14342) [kworker/4:2]
(gitlab-psql,8307132,47872,00:00:00/13:38,14665) postgres: gitlab gitlabhq_production [local] idle
(git,1704176,986080,00:00:40/06:14:28,15009) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8309680,53844,00:00:00/07:36,15409) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/04:26,15867) [kworker/u16:1]
(root,0,0,00:00:00/02:02,16292) [kworker/6:2]
(gitlab-psql,8305448,36000,00:00:00/01:48,16324) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3448,00:00:00/00:00,16634) /bin/bash /usr/bin/check_mk_agent
(root,36700,3208,00:00:00/00:00,16652) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1124,00:00:00/00:00,16653) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1725792,970724,00:00:35/05:30:27,21889) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(systemd-resolve,70628,4896,00:00:00/05:25:40,22667) /lib/systemd/systemd-resolved
(root,0,0,00:00:22/5-08:26:00,22932) [kworker/5:1]
(git,1662192,979544,00:00:13/01:42:06,27574) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(gitlab-prometheus,1795260,14120,08:39:03/241-23:59:03,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:29:01/241-23:59:03,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,134992,1-20:53:15/241-23:59:02,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45628,5-11:19:00/241-23:59:02,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39204,1-07:05:43/241-23:59:02,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,47088,03:47:40/241-23:59:02,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/241-23:59:01,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:34/241-23:59:01,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/241-23:59:01,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/241-23:59:01,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/241-23:59:01,29021) nginx: worker process
(gitlab-www,67708,25108,06:13:31/241-23:59:01,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/241-23:59:01,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/241-23:59:01,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/241-23:59:01,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:48/241-23:59:01,29026) nginx: cache manager process
(gitlab-prometheus,719468,14772,1-05:40:22/241-23:59:00,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14688,1-06:56:47/241-23:59:00,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:19:13/241-23:58:59,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3218040,160764,2-18:14:00/241-23:58:59,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,291364,00:15:14/241-23:58:59,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:52/241-23:58:59,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:19/241-23:58:59,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:19:32/241-23:58:59,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:14:20/241-23:58:59,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:24/241-23:58:59,29064) postgres: logical replication launcher   
(git,1461948,919336,03:58:22/241-23:58:58,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16896,13-08:29:35/241-23:58:57,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,17912,09:44:23/241-23:58:57,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108756,20:33:22/241-23:58:57,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,20:28:39/241-23:58:57,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,13316,01:06:41/241-23:58:57,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:35/241-23:58:53,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1181668,37-04:06:42/241-23:58:53,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,94348,3-16:12:48/241-23:58:41,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,76820,1-17:24:13/241-23:58:38,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(root,0,0,00:00:15/1-06:40:56,29322) [kworker/6:0]
(gitlab-psql,8306184,34736,00:31:41/241-23:57:34,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/241-23:57:34,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:34/9-00:39:50,31304) [kworker/2:1]
(root,0,0,00:00:00/01:15:48,32380) [kworker/5:2]
(git,1751392,1044868,00:01:15/07:18:28,32484) puma: cluster worker 3: 29076 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-04 00:42

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91287c9bd22

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7784,00:29:43/636-00:54:04,1) /sbin/init
(root,0,0,00:00:24/636-00:54:04,2) [kthreadd]
(root,0,0,00:00:00/636-00:54:04,4) [kworker/0:0H]
(root,0,0,00:00:00/636-00:54:04,6) [mm_percpu_wq]
(root,0,0,00:07:13/636-00:54:04,7) [ksoftirqd/0]
(root,0,0,19:51:36/636-00:54:04,8) [rcu_sched]
(root,0,0,00:00:00/636-00:54:04,9) [rcu_bh]
(root,0,0,00:00:20/636-00:54:04,10) [migration/0]
(root,0,0,00:03:31/636-00:54:04,11) [watchdog/0]
(root,0,0,00:00:00/636-00:54:04,12) [cpuhp/0]
(root,0,0,00:00:00/636-00:54:04,13) [cpuhp/1]
(root,0,0,00:03:15/636-00:54:04,14) [watchdog/1]
(root,0,0,00:00:19/636-00:54:04,15) [migration/1]
(root,0,0,00:03:57/636-00:54:04,16) [ksoftirqd/1]
(root,0,0,00:00:00/636-00:54:04,18) [kworker/1:0H]
(root,0,0,00:00:00/636-00:54:04,19) [cpuhp/2]
(root,0,0,00:03:28/636-00:54:04,20) [watchdog/2]
(root,0,0,00:00:17/636-00:54:04,21) [migration/2]
(root,0,0,00:02:55/636-00:54:04,22) [ksoftirqd/2]
(root,0,0,00:00:00/636-00:54:04,24) [kworker/2:0H]
(root,0,0,00:00:00/636-00:54:04,25) [cpuhp/3]
(root,0,0,00:03:11/636-00:54:04,26) [watchdog/3]
(root,0,0,00:00:16/636-00:54:04,27) [migration/3]
(root,0,0,00:02:19/636-00:54:04,28) [ksoftirqd/3]
(root,0,0,00:00:00/636-00:54:04,30) [kworker/3:0H]
(root,0,0,00:00:00/636-00:54:04,31) [cpuhp/4]
(root,0,0,00:03:25/636-00:54:04,32) [watchdog/4]
(root,0,0,00:00:14/636-00:54:04,33) [migration/4]
(root,0,0,00:07:15/636-00:54:04,34) [ksoftirqd/4]
(root,0,0,00:00:00/636-00:54:04,36) [kworker/4:0H]
(root,0,0,00:00:00/636-00:54:04,37) [cpuhp/5]
(root,0,0,00:03:22/636-00:54:04,38) [watchdog/5]
(root,0,0,00:00:16/636-00:54:04,39) [migration/5]
(root,0,0,00:04:31/636-00:54:04,40) [ksoftirqd/5]
(root,0,0,00:00:00/636-00:54:04,42) [kworker/5:0H]
(root,0,0,00:00:00/636-00:54:04,43) [cpuhp/6]
(root,0,0,00:03:12/636-00:54:04,44) [watchdog/6]
(root,0,0,00:00:27/636-00:54:04,45) [migration/6]
(root,0,0,00:02:27/636-00:54:04,46) [ksoftirqd/6]
(root,0,0,00:00:00/636-00:54:04,48) [kworker/6:0H]
(root,0,0,00:00:00/636-00:54:04,49) [cpuhp/7]
(root,0,0,00:03:05/636-00:54:04,50) [watchdog/7]
(root,0,0,00:00:23/636-00:54:04,51) [migration/7]
(root,0,0,00:02:13/636-00:54:04,52) [ksoftirqd/7]
(root,0,0,00:00:00/636-00:54:04,54) [kworker/7:0H]
(root,0,0,00:00:00/636-00:54:04,55) [kdevtmpfs]
(root,0,0,00:00:00/636-00:54:04,56) [netns]
(root,0,0,00:00:00/636-00:54:04,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/636-00:54:04,58) [kauditd]
(root,0,0,00:01:40/636-00:54:04,62) [khungtaskd]
(root,0,0,00:00:00/636-00:54:04,63) [oom_reaper]
(root,0,0,00:00:00/636-00:54:04,64) [writeback]
(root,0,0,00:00:02/636-00:54:04,65) [kcompactd0]
(root,0,0,00:00:00/636-00:54:04,66) [ksmd]
(root,0,0,00:08:38/636-00:54:04,67) [khugepaged]
(root,0,0,00:00:00/636-00:54:04,68) [crypto]
(root,0,0,00:00:00/636-00:54:04,69) [kintegrityd]
(root,0,0,00:00:00/636-00:54:04,70) [kblockd]
(root,0,0,00:00:00/636-00:54:04,71) [ata_sff]
(root,0,0,00:00:00/636-00:54:04,72) [md]
(root,0,0,00:00:00/636-00:54:04,73) [edac-poller]
(root,0,0,00:00:00/636-00:54:04,74) [devfreq_wq]
(root,0,0,00:00:00/636-00:54:04,75) [watchdogd]
(root,0,0,02:08:54/636-00:54:04,79) [kswapd0]
(root,0,0,00:00:00/636-00:54:04,80) [kworker/u17:0]
(root,0,0,00:00:00/636-00:54:04,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/636-00:54:04,123) [kthrotld]
(root,0,0,00:00:00/636-00:54:04,124) [acpi_thermal_pm]
(root,0,0,00:00:00/636-00:54:04,130) [scsi_eh_0]
(root,0,0,00:00:00/636-00:54:04,131) [scsi_tmf_0]
(root,0,0,00:00:00/636-00:54:04,132) [scsi_eh_1]
(root,0,0,00:00:00/636-00:54:04,133) [scsi_tmf_1]
(root,0,0,00:00:00/636-00:54:03,139) [ipv6_addrconf]
(root,0,0,00:00:00/636-00:54:03,148) [kstrp]
(root,0,0,00:00:00/636-00:54:03,166) [charger_manager]
(root,0,0,00:00:00/636-00:54:03,223) [scsi_eh_2]
(root,0,0,00:00:00/636-00:54:03,224) [scsi_tmf_2]
(root,0,0,00:03:38/636-00:54:02,267) [kworker/7:1H]
(root,0,0,00:28:55/636-00:53:58,268) [kworker/4:1H]
(root,0,0,00:01:00/636-00:53:58,275) [kworker/1:1H]
(root,0,0,00:00:43/636-00:53:57,335) [kworker/2:1H]
(root,0,0,00:00:00/636-00:53:56,342) [raid5wq]
(root,0,0,01:10:34/636-00:53:56,392) [jbd2/sda1-8]
(root,0,0,00:00:00/636-00:53:56,393) [ext4-rsv-conver]
(root,0,0,00:00:36/636-00:53:56,395) [kworker/3:1H]
(root,0,0,00:03:11/636-00:53:56,398) [kworker/5:1H]
(root,0,0,00:04:19/636-00:53:56,431) [kworker/6:1H]
(root,0,0,00:02:01/636-00:53:56,464) [kworker/0:1H]
(root,167580,56764,01:17:12/636-00:53:55,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/636-00:53:55,476) [iscsi_eh]
(root,0,0,00:00:00/636-00:53:55,485) [ib-comp-wq]
(root,0,0,00:00:00/636-00:53:55,486) [ib_mcast]
(root,0,0,00:00:00/636-00:53:55,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/636-00:53:55,494) [rdma_cm]
(root,97708,1596,00:00:00/636-00:53:55,498) /sbin/lvmetad -f
(root,43436,3896,00:05:00/636-00:53:55,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:03/636-00:53:55,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/636-00:53:53,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:28:47/636-00:53:50,1244) /usr/sbin/irqbalance --foreground
(root,382880,2272,00:18:27/636-00:53:50,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4336,00:23:55/636-00:53:50,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:10:50/636-00:53:50,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:02:27/636-00:53:50,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:40/636-00:53:50,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:37/636-00:53:50,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:31/636-00:53:50,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/636-00:53:50,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/636-00:53:50,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/636-00:53:50,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:35/636-00:53:50,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:14:30/636-00:53:50,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:09:01/636-00:53:50,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/636-00:53:50,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/636-00:53:50,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:01/636-00:53:50,1379) nginx: worker process
(www-data,143788,3960,00:00:09/636-00:53:50,1380) nginx: worker process
(www-data,143788,5000,00:00:44/636-00:53:50,1381) nginx: worker process
(www-data,143788,3964,00:00:01/636-00:53:50,1382) nginx: worker process
(www-data,143788,4056,00:00:00/636-00:53:50,1383) nginx: worker process
(www-data,143788,4184,00:00:00/636-00:53:50,1384) nginx: worker process
(www-data,143788,4056,00:00:00/636-00:53:50,1386) nginx: worker process
(www-data,143788,4184,00:00:00/636-00:53:50,1388) nginx: worker process
(root,14888,1756,00:00:00/636-00:53:50,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:07/636-00:53:50,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:18/636-00:53:49,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/636-00:53:49,1498) runsv redis-exporter
(root,4396,712,00:00:07/636-00:53:49,1500) runsv node-exporter
(root,4396,820,00:00:06/636-00:53:49,1501) runsv prometheus
(root,4396,824,00:00:06/636-00:53:49,1502) runsv sidekiq
(root,4396,720,00:00:06/636-00:53:49,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/636-00:53:49,1507) runsv alertmanager
(root,4396,856,00:00:05/636-00:53:49,1509) runsv postgresql
(root,4396,744,00:00:07/636-00:53:49,1510) runsv postgres-exporter
(root,4396,788,00:00:06/636-00:53:49,1511) runsv grafana
(root,4396,780,00:00:06/636-00:53:49,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/636-00:53:49,1513) runsv logrotate
(root,4396,856,00:00:05/636-00:53:49,1514) runsv puma
(root,4396,744,00:00:06/636-00:53:49,1515) runsv nginx
(root,4396,740,00:00:06/636-00:53:49,1516) runsv gitaly
(root,4396,860,00:00:05/636-00:53:49,1517) runsv redis
(root,4396,760,00:00:07/636-00:53:49,1519) runsv registry
(root,4540,864,00:00:06/636-00:53:49,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/636-00:53:49,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/636-00:53:49,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:55:19/636-00:53:49,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:12:37/636-00:53:49,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/636-00:53:49,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/636-00:53:49,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/636-00:53:49,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/636-00:53:49,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/636-00:53:49,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/636-00:53:49,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:42/636-00:53:49,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:07/636-00:53:49,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/636-00:53:49,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:49/636-00:53:49,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/636-00:53:49,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:37/10-07:39:32,3144) [kworker/4:0]
(gitlab-psql,8307132,48528,00:00:00/38:10,4969) postgres: gitlab gitlabhq_production [local] idle
(root,4628,828,00:00:00/37:57,4990) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307132,48588,00:00:00/33:01,5763) postgres: gitlab gitlabhq_production [local] idle
(root,4628,796,00:00:00/494-08:33:54,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,759964,14992,00:09:49/494-08:33:54,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87356,8412,00:42:22/494-08:33:54,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:26/494-08:33:54,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(gitlab-psql,8307224,52812,00:00:00/28:11,6535) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307436,52684,00:00:00/28:11,6537) postgres: gitlab gitlabhq_production [local] idle
(root,4532,816,00:00:00/27:57,6567) sleep 3000
(gitlab-psql,8307152,52120,00:00:00/23:16,7319) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:13/2-01:05:45,7408) [kworker/7:1]
(gitlab-psql,8307132,48536,00:00:00/18:23,8084) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48196,00:00:00/17:36,8171) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/13:49,8784) [kworker/u16:1]
(gitlab-psql,8306360,47604,00:00:00/12:05,9077) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47936,00:00:00/09:53,9419) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/07:15,9853) [kworker/u16:0]
(gitlab-psql,8307132,47804,00:00:00/04:19,10325) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47796,00:00:00/02:18,10646) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:36,10729) [kworker/u16:2]
(gitlab-psql,8305216,37612,00:00:00/00:17,10977) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:22/6-02:38:27,10982) [kworker/3:1]
(git,0,0,00:00:00/00:00,11020) [ps] <defunct>
(root,20180,3608,00:00:00/00:00,11031) /bin/bash /usr/bin/check_mk_agent
(root,36700,3204,00:00:00/00:00,11049) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1180,00:00:00/00:00,11050) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1635544,1001452,00:00:18/02:55:03,11293) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:00:25/7-00:10:50,12007) [kworker/1:1]
(systemd-resolve,70628,4820,00:00:00/09:28:25,12804) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/09:28:24,12811) [kworker/1:2]
(root,0,0,00:00:00/1-01:20:33,18197) [kworker/2:2]
(root,0,0,00:00:14/1-03:57:26,20333) [kworker/6:1]
(git,1661144,1023972,00:01:11/11:50:35,22161) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1650904,1026780,00:01:07/11:49:34,22343) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1650904,992988,00:01:05/11:48:35,22513) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1661144,1025160,00:01:06/11:47:35,22690) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1659096,1023936,00:01:08/11:46:35,22871) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:13/3-09:12:16,22932) [kworker/5:1]
(git,1659096,1021544,00:01:04/11:44:35,23202) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,0,0,00:04:39/36-01:25:53,23207) [kworker/0:2]
(root,0,0,00:00:00/01:26:01,28153) [kworker/5:0]
(root,0,0,00:00:00/01:25:55,28244) [kworker/6:0]
(root,0,0,00:00:00/01:25:55,28250) [kworker/0:1]
(gitlab-prometheus,1795260,12316,08:34:41/240-00:45:19,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:28:16/240-00:45:19,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,130324,1-20:26:47/240-00:45:18,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45732,5-10:08:50/240-00:45:18,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,35968,1-06:49:22/240-00:45:18,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,50476,03:45:28/240-00:45:18,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/240-00:45:17,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:33/240-00:45:17,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/240-00:45:17,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/240-00:45:17,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/240-00:45:17,29021) nginx: worker process
(gitlab-www,67708,25108,06:10:53/240-00:45:17,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/240-00:45:17,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/240-00:45:17,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/240-00:45:17,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:47/240-00:45:17,29026) nginx: cache manager process
(gitlab-prometheus,719468,15104,1-05:25:23/240-00:45:16,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14892,1-06:40:48/240-00:45:16,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:19:03/240-00:45:15,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3192536,156676,2-17:39:52/240-00:45:15,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,288864,00:15:03/240-00:45:15,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:49/240-00:45:15,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:13/240-00:45:15,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:19:22/240-00:45:15,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:12:07/240-00:45:15,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:24/240-00:45:15,29064) postgres: logical replication launcher   
(git,1461948,919372,03:56:23/240-00:45:14,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16684,13-05:42:15/240-00:45:13,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16324,09:39:28/240-00:45:13,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108756,20:23:03/240-00:45:13,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87492,20:19:12/240-00:45:13,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15400,01:06:15/240-00:45:13,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:28/240-00:45:09,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1256192,36-20:09:43/240-00:45:09,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,91680,3-15:26:06/240-00:44:57,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-17:01:51/240-00:44:54,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:31:25/240-00:43:50,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/240-00:43:50,29560) postgres: gitlab gitlabhq_production [local] idle
(git,1570008,955188,00:00:08/01:21:42,30240) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/01:18:16,30848) [kworker/4:1]
(root,0,0,00:00:00/01:15:38,31236) [kworker/7:2]
(root,0,0,00:00:26/7-01:26:06,31304) [kworker/2:1]
(root,0,0,00:00:00/1-06:01:26,32485) [kworker/3:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-02 01:28

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9123ece6b2a

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7988,00:29:38/634-00:28:08,1) /sbin/init
(root,0,0,00:00:24/634-00:28:08,2) [kthreadd]
(root,0,0,00:00:00/634-00:28:08,4) [kworker/0:0H]
(root,0,0,00:00:00/634-00:28:08,6) [mm_percpu_wq]
(root,0,0,00:07:11/634-00:28:08,7) [ksoftirqd/0]
(root,0,0,19:47:19/634-00:28:08,8) [rcu_sched]
(root,0,0,00:00:00/634-00:28:08,9) [rcu_bh]
(root,0,0,00:00:20/634-00:28:08,10) [migration/0]
(root,0,0,00:03:30/634-00:28:08,11) [watchdog/0]
(root,0,0,00:00:00/634-00:28:08,12) [cpuhp/0]
(root,0,0,00:00:00/634-00:28:08,13) [cpuhp/1]
(root,0,0,00:03:14/634-00:28:08,14) [watchdog/1]
(root,0,0,00:00:19/634-00:28:08,15) [migration/1]
(root,0,0,00:03:57/634-00:28:08,16) [ksoftirqd/1]
(root,0,0,00:00:00/634-00:28:08,18) [kworker/1:0H]
(root,0,0,00:00:00/634-00:28:08,19) [cpuhp/2]
(root,0,0,00:03:27/634-00:28:08,20) [watchdog/2]
(root,0,0,00:00:17/634-00:28:08,21) [migration/2]
(root,0,0,00:02:54/634-00:28:08,22) [ksoftirqd/2]
(root,0,0,00:00:00/634-00:28:08,24) [kworker/2:0H]
(root,0,0,00:00:00/634-00:28:08,25) [cpuhp/3]
(root,0,0,00:03:10/634-00:28:08,26) [watchdog/3]
(root,0,0,00:00:16/634-00:28:08,27) [migration/3]
(root,0,0,00:02:19/634-00:28:08,28) [ksoftirqd/3]
(root,0,0,00:00:00/634-00:28:08,30) [kworker/3:0H]
(root,0,0,00:00:00/634-00:28:08,31) [cpuhp/4]
(root,0,0,00:03:24/634-00:28:08,32) [watchdog/4]
(root,0,0,00:00:14/634-00:28:08,33) [migration/4]
(root,0,0,00:07:13/634-00:28:08,34) [ksoftirqd/4]
(root,0,0,00:00:00/634-00:28:08,36) [kworker/4:0H]
(root,0,0,00:00:00/634-00:28:08,37) [cpuhp/5]
(root,0,0,00:03:21/634-00:28:08,38) [watchdog/5]
(root,0,0,00:00:16/634-00:28:08,39) [migration/5]
(root,0,0,00:04:30/634-00:28:08,40) [ksoftirqd/5]
(root,0,0,00:00:00/634-00:28:08,42) [kworker/5:0H]
(root,0,0,00:00:00/634-00:28:08,43) [cpuhp/6]
(root,0,0,00:03:12/634-00:28:08,44) [watchdog/6]
(root,0,0,00:00:27/634-00:28:08,45) [migration/6]
(root,0,0,00:02:27/634-00:28:08,46) [ksoftirqd/6]
(root,0,0,00:00:00/634-00:28:08,48) [kworker/6:0H]
(root,0,0,00:00:00/634-00:28:08,49) [cpuhp/7]
(root,0,0,00:03:04/634-00:28:08,50) [watchdog/7]
(root,0,0,00:00:22/634-00:28:08,51) [migration/7]
(root,0,0,00:02:13/634-00:28:08,52) [ksoftirqd/7]
(root,0,0,00:00:00/634-00:28:08,54) [kworker/7:0H]
(root,0,0,00:00:00/634-00:28:08,55) [kdevtmpfs]
(root,0,0,00:00:00/634-00:28:08,56) [netns]
(root,0,0,00:00:00/634-00:28:08,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/634-00:28:08,58) [kauditd]
(root,0,0,00:01:40/634-00:28:08,62) [khungtaskd]
(root,0,0,00:00:00/634-00:28:08,63) [oom_reaper]
(root,0,0,00:00:00/634-00:28:08,64) [writeback]
(root,0,0,00:00:02/634-00:28:08,65) [kcompactd0]
(root,0,0,00:00:00/634-00:28:08,66) [ksmd]
(root,0,0,00:08:36/634-00:28:08,67) [khugepaged]
(root,0,0,00:00:00/634-00:28:08,68) [crypto]
(root,0,0,00:00:00/634-00:28:08,69) [kintegrityd]
(root,0,0,00:00:00/634-00:28:08,70) [kblockd]
(root,0,0,00:00:00/634-00:28:08,71) [ata_sff]
(root,0,0,00:00:00/634-00:28:08,72) [md]
(root,0,0,00:00:00/634-00:28:08,73) [edac-poller]
(root,0,0,00:00:00/634-00:28:08,74) [devfreq_wq]
(root,0,0,00:00:00/634-00:28:08,75) [watchdogd]
(root,0,0,02:08:24/634-00:28:08,79) [kswapd0]
(root,0,0,00:00:00/634-00:28:08,80) [kworker/u17:0]
(root,0,0,00:00:00/634-00:28:08,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/634-00:28:08,123) [kthrotld]
(root,0,0,00:00:00/634-00:28:08,124) [acpi_thermal_pm]
(root,0,0,00:00:00/634-00:28:08,130) [scsi_eh_0]
(root,0,0,00:00:00/634-00:28:08,131) [scsi_tmf_0]
(root,0,0,00:00:00/634-00:28:08,132) [scsi_eh_1]
(root,0,0,00:00:00/634-00:28:08,133) [scsi_tmf_1]
(root,0,0,00:00:00/634-00:28:07,139) [ipv6_addrconf]
(root,0,0,00:00:00/634-00:28:07,148) [kstrp]
(root,0,0,00:00:00/634-00:28:07,166) [charger_manager]
(root,0,0,00:00:00/634-00:28:07,223) [scsi_eh_2]
(root,0,0,00:00:00/634-00:28:07,224) [scsi_tmf_2]
(root,0,0,00:03:37/634-00:28:06,267) [kworker/7:1H]
(root,0,0,00:28:49/634-00:28:02,268) [kworker/4:1H]
(root,0,0,00:01:00/634-00:28:02,275) [kworker/1:1H]
(root,0,0,00:00:43/634-00:28:01,335) [kworker/2:1H]
(root,0,0,00:00:00/634-00:28:00,342) [raid5wq]
(root,0,0,01:10:20/634-00:28:00,392) [jbd2/sda1-8]
(root,0,0,00:00:00/634-00:28:00,393) [ext4-rsv-conver]
(root,0,0,00:00:36/634-00:28:00,395) [kworker/3:1H]
(root,0,0,00:03:10/634-00:28:00,398) [kworker/5:1H]
(root,0,0,00:04:18/634-00:28:00,431) [kworker/6:1H]
(root,0,0,00:02:01/634-00:28:00,464) [kworker/0:1H]
(root,122516,28804,01:16:55/634-00:27:59,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/634-00:27:59,476) [iscsi_eh]
(root,0,0,00:00:00/634-00:27:59,485) [ib-comp-wq]
(root,0,0,00:00:00/634-00:27:59,486) [ib_mcast]
(root,0,0,00:00:00/634-00:27:59,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/634-00:27:59,494) [rdma_cm]
(root,97708,1596,00:00:00/634-00:27:59,498) /sbin/lvmetad -f
(root,43436,3896,00:04:59/634-00:27:59,508) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/01:00:09,701) [kworker/2:0]
(systemd-timesync,141928,2684,00:03:02/634-00:27:59,713) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/01:00:08,716) [kworker/5:0]
(root,25992,3444,00:00:03/634-00:27:57,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:28:29/634-00:27:54,1244) /usr/sbin/irqbalance --foreground
(root,383016,2408,00:18:23/634-00:27:54,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4336,00:23:50/634-00:27:54,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19084,00:10:48/634-00:27:54,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:02:14/634-00:27:54,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:40/634-00:27:54,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:30/634-00:27:54,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:30/634-00:27:54,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/634-00:27:54,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/634-00:27:54,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/634-00:27:54,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:27/634-00:27:54,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:12:01/634-00:27:54,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:59/634-00:27:54,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/634-00:27:54,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/634-00:27:54,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:05:01/634-00:27:54,1379) nginx: worker process
(www-data,143788,3960,00:00:09/634-00:27:54,1380) nginx: worker process
(www-data,143788,5000,00:00:44/634-00:27:54,1381) nginx: worker process
(www-data,143788,3964,00:00:01/634-00:27:54,1382) nginx: worker process
(www-data,143788,4056,00:00:00/634-00:27:54,1383) nginx: worker process
(www-data,143788,4184,00:00:00/634-00:27:54,1384) nginx: worker process
(www-data,143788,4056,00:00:00/634-00:27:54,1386) nginx: worker process
(www-data,143788,4184,00:00:00/634-00:27:54,1388) nginx: worker process
(root,14888,1756,00:00:00/634-00:27:54,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:21:01/634-00:27:54,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:15/634-00:27:53,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/634-00:27:53,1498) runsv redis-exporter
(root,4396,712,00:00:07/634-00:27:53,1500) runsv node-exporter
(root,4396,820,00:00:06/634-00:27:53,1501) runsv prometheus
(root,4396,824,00:00:06/634-00:27:53,1502) runsv sidekiq
(root,4396,720,00:00:06/634-00:27:53,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/634-00:27:53,1507) runsv alertmanager
(root,4396,856,00:00:05/634-00:27:53,1509) runsv postgresql
(root,4396,744,00:00:07/634-00:27:53,1510) runsv postgres-exporter
(root,4396,788,00:00:06/634-00:27:53,1511) runsv grafana
(root,4396,780,00:00:06/634-00:27:53,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/634-00:27:53,1513) runsv logrotate
(root,4396,856,00:00:05/634-00:27:53,1514) runsv puma
(root,4396,744,00:00:06/634-00:27:53,1515) runsv nginx
(root,4396,740,00:00:06/634-00:27:53,1516) runsv gitaly
(root,4396,860,00:00:05/634-00:27:53,1517) runsv redis
(root,4396,760,00:00:07/634-00:27:53,1519) runsv registry
(root,4540,864,00:00:06/634-00:27:53,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/634-00:27:53,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/634-00:27:53,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:54:56/634-00:27:53,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:12:19/634-00:27:53,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/634-00:27:53,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/634-00:27:53,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/634-00:27:53,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:06/634-00:27:53,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/634-00:27:53,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/634-00:27:53,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:37/634-00:27:53,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:04/634-00:27:53,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/634-00:27:53,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:48/634-00:27:53,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/634-00:27:53,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:52/4-05:40:21,2261) [kworker/6:2]
(root,0,0,00:00:00/57:46,2449) [kworker/0:1]
(gitlab-psql,8318660,81004,00:00:01/56:50,2776) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:29/8-07:13:36,3144) [kworker/4:0]
(git,1662192,973648,00:00:07/49:23,5448) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1585368,971628,00:00:07/48:23,5621) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(gitlab-psql,8309996,62264,00:00:01/48:05,5662) postgres: gitlab gitlabhq_production [local] idle
(git,1575128,962272,00:00:06/47:23,5895) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1587416,968716,00:00:06/46:23,6066) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,4628,796,00:00:00/492-08:07:58,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,749592,7636,00:09:46/492-08:07:58,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87232,8412,00:41:56/492-08:07:58,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:25/492-08:07:58,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/45:37,6257) [kworker/3:0]
(git,1647856,968008,00:00:06/45:23,6283) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1643760,959132,00:00:06/44:23,6457) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8312196,73364,00:00:01/43:26,6617) postgres: gitlab gitlabhq_production [local] idle
(git,1628400,954288,00:00:05/43:23,6622) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1649904,967092,00:00:06/42:23,6799) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-psql,8312888,81624,00:00:00/40:56,7019) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/39:49,7408) [kworker/7:1]
(root,0,0,00:00:00/38:14,8009) [kworker/4:2]
(root,0,0,00:00:00/36:28,8621) [kworker/6:1]
(root,0,0,00:00:00/34:52,9164) [kworker/u16:3]
(root,0,0,00:00:00/34:52,9165) [kworker/1:0]
(gitlab-psql,8307260,49096,00:00:00/28:01,10376) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:15/4-02:12:31,10982) [kworker/3:1]
(gitlab-psql,8307260,49372,00:00:00/19:47,11700) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48140,00:00:00/18:15,11970) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:18/4-23:44:54,12007) [kworker/1:1]
(gitlab-psql,8306820,51532,00:00:00/15:53,12311) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48040,00:00:00/14:08,12591) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307392,53032,00:00:00/13:56,12619) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48384,00:00:00/12:16,12893) postgres: gitlab gitlabhq_production [local] idle
(root,4628,804,00:00:00/12:04,12915) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:00/07:43,13585) [kworker/u16:0]
(gitlab-psql,8307132,47760,00:00:00/05:24,13988) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/02:18,14464) [kworker/u16:1]
(gitlab-psql,8305212,38152,00:00:00/02:05,14486) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8303928,26772,00:00:00/02:05,14491) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305016,40572,00:00:00/02:04,14492) postgres: gitlab gitlabhq_production [local] idle
(root,4532,836,00:00:00/02:04,14498) sleep 3000
(root,0,0,00:00:19/3-04:23:26,14842) [kworker/7:2]
(root,20180,3688,00:00:00/00:00,14924) /bin/bash /usr/bin/check_mk_agent
(root,36700,3132,00:00:00/00:00,14942) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1148,00:00:00/00:00,14943) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(systemd-resolve,70628,4876,00:00:00/01:54:18,18280) /lib/systemd/systemd-resolved
(root,0,0,00:00:05/1-08:46:20,22932) [kworker/5:1]
(root,0,0,00:04:23/34-00:59:57,23207) [kworker/0:2]
(gitlab-prometheus,1795260,12324,08:30:13/238-00:19:23,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:27:29/238-00:19:23,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,132540,1-20:05:56/238-00:19:22,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45688,5-08:58:01/238-00:19:22,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,36976,1-06:35:27/238-00:19:22,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,49752,03:43:13/238-00:19:22,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/238-00:19:21,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:33/238-00:19:21,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/238-00:19:21,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/238-00:19:21,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/238-00:19:21,29021) nginx: worker process
(gitlab-www,67708,25112,06:08:27/238-00:19:21,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/238-00:19:21,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/238-00:19:21,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/238-00:19:21,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:45/238-00:19:21,29026) nginx: cache manager process
(gitlab-prometheus,719468,14652,1-05:10:01/238-00:19:20,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14028,1-06:24:27/238-00:19:20,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:18:54/238-00:19:19,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3207416,173884,2-17:04:55/238-00:19:19,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,288864,00:14:59/238-00:19:19,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:45/238-00:19:19,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:09/238-00:19:19,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:19:12/238-00:19:19,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:09:56/238-00:19:19,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:24/238-00:19:19,29064) postgres: logical replication launcher   
(git,1461948,919420,03:54:27/238-00:19:18,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16708,13-02:52:04/238-00:19:17,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,15660,09:34:22/238-00:19:17,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108852,20:12:08/238-00:19:17,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,20:09:28/238-00:19:17,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,13984,01:05:48/238-00:19:17,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:21/238-00:19:13,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1140496,36-12:24:02/238-00:19:13,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,91680,3-14:40:37/238-00:19:01,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-16:39:28/238-00:18:58,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:31:09/238-00:17:54,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/238-00:17:54,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:18/5-01:00:10,31304) [kworker/2:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-30 01:02

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9122a108518

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7996,00:29:31/632-00:27:41,1) /sbin/init
(root,0,0,00:00:23/632-00:27:41,2) [kthreadd]
(root,0,0,00:00:00/632-00:27:41,4) [kworker/0:0H]
(root,0,0,00:00:00/632-00:27:41,6) [mm_percpu_wq]
(root,0,0,00:07:10/632-00:27:41,7) [ksoftirqd/0]
(root,0,0,19:42:59/632-00:27:41,8) [rcu_sched]
(root,0,0,00:00:00/632-00:27:41,9) [rcu_bh]
(root,0,0,00:00:20/632-00:27:41,10) [migration/0]
(root,0,0,00:03:29/632-00:27:41,11) [watchdog/0]
(root,0,0,00:00:00/632-00:27:41,12) [cpuhp/0]
(root,0,0,00:00:00/632-00:27:41,13) [cpuhp/1]
(root,0,0,00:03:14/632-00:27:41,14) [watchdog/1]
(root,0,0,00:00:19/632-00:27:41,15) [migration/1]
(root,0,0,00:03:56/632-00:27:41,16) [ksoftirqd/1]
(root,0,0,00:00:00/632-00:27:41,18) [kworker/1:0H]
(root,0,0,00:00:00/632-00:27:41,19) [cpuhp/2]
(root,0,0,00:03:27/632-00:27:41,20) [watchdog/2]
(root,0,0,00:00:17/632-00:27:41,21) [migration/2]
(root,0,0,00:02:54/632-00:27:41,22) [ksoftirqd/2]
(root,0,0,00:00:00/632-00:27:41,24) [kworker/2:0H]
(root,0,0,00:00:00/632-00:27:41,25) [cpuhp/3]
(root,0,0,00:03:10/632-00:27:41,26) [watchdog/3]
(root,0,0,00:00:16/632-00:27:41,27) [migration/3]
(root,0,0,00:02:18/632-00:27:41,28) [ksoftirqd/3]
(root,0,0,00:00:00/632-00:27:41,30) [kworker/3:0H]
(root,0,0,00:00:00/632-00:27:41,31) [cpuhp/4]
(root,0,0,00:03:24/632-00:27:41,32) [watchdog/4]
(root,0,0,00:00:14/632-00:27:41,33) [migration/4]
(root,0,0,00:07:11/632-00:27:41,34) [ksoftirqd/4]
(root,0,0,00:00:00/632-00:27:41,36) [kworker/4:0H]
(root,0,0,00:00:00/632-00:27:41,37) [cpuhp/5]
(root,0,0,00:03:21/632-00:27:41,38) [watchdog/5]
(root,0,0,00:00:16/632-00:27:41,39) [migration/5]
(root,0,0,00:04:29/632-00:27:41,40) [ksoftirqd/5]
(root,0,0,00:00:00/632-00:27:41,42) [kworker/5:0H]
(root,0,0,00:00:00/632-00:27:41,43) [cpuhp/6]
(root,0,0,00:03:11/632-00:27:41,44) [watchdog/6]
(root,0,0,00:00:27/632-00:27:41,45) [migration/6]
(root,0,0,00:02:26/632-00:27:41,46) [ksoftirqd/6]
(root,0,0,00:00:00/632-00:27:41,48) [kworker/6:0H]
(root,0,0,00:00:00/632-00:27:41,49) [cpuhp/7]
(root,0,0,00:03:04/632-00:27:41,50) [watchdog/7]
(root,0,0,00:00:22/632-00:27:41,51) [migration/7]
(root,0,0,00:02:13/632-00:27:41,52) [ksoftirqd/7]
(root,0,0,00:00:00/632-00:27:41,54) [kworker/7:0H]
(root,0,0,00:00:00/632-00:27:41,55) [kdevtmpfs]
(root,0,0,00:00:00/632-00:27:41,56) [netns]
(root,0,0,00:00:00/632-00:27:41,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/632-00:27:41,58) [kauditd]
(root,0,0,00:01:39/632-00:27:41,62) [khungtaskd]
(root,0,0,00:00:00/632-00:27:41,63) [oom_reaper]
(root,0,0,00:00:00/632-00:27:41,64) [writeback]
(root,0,0,00:00:02/632-00:27:41,65) [kcompactd0]
(root,0,0,00:00:00/632-00:27:41,66) [ksmd]
(root,0,0,00:08:34/632-00:27:41,67) [khugepaged]
(root,0,0,00:00:00/632-00:27:41,68) [crypto]
(root,0,0,00:00:00/632-00:27:41,69) [kintegrityd]
(root,0,0,00:00:00/632-00:27:41,70) [kblockd]
(root,0,0,00:00:00/632-00:27:41,71) [ata_sff]
(root,0,0,00:00:00/632-00:27:41,72) [md]
(root,0,0,00:00:00/632-00:27:41,73) [edac-poller]
(root,0,0,00:00:00/632-00:27:41,74) [devfreq_wq]
(root,0,0,00:00:00/632-00:27:41,75) [watchdogd]
(root,0,0,02:07:54/632-00:27:41,79) [kswapd0]
(root,0,0,00:00:00/632-00:27:41,80) [kworker/u17:0]
(root,0,0,00:00:00/632-00:27:41,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/632-00:27:41,123) [kthrotld]
(root,0,0,00:00:00/632-00:27:41,124) [acpi_thermal_pm]
(root,0,0,00:00:00/632-00:27:41,130) [scsi_eh_0]
(root,0,0,00:00:00/632-00:27:41,131) [scsi_tmf_0]
(root,0,0,00:00:00/632-00:27:41,132) [scsi_eh_1]
(root,0,0,00:00:00/632-00:27:41,133) [scsi_tmf_1]
(root,0,0,00:00:00/632-00:27:40,139) [ipv6_addrconf]
(root,0,0,00:00:00/632-00:27:40,148) [kstrp]
(root,0,0,00:00:00/632-00:27:40,166) [charger_manager]
(root,0,0,00:00:00/632-00:27:40,223) [scsi_eh_2]
(root,0,0,00:00:00/632-00:27:40,224) [scsi_tmf_2]
(root,0,0,00:03:36/632-00:27:39,267) [kworker/7:1H]
(root,0,0,00:28:43/632-00:27:35,268) [kworker/4:1H]
(root,0,0,00:00:59/632-00:27:35,275) [kworker/1:1H]
(root,0,0,00:00:43/632-00:27:34,335) [kworker/2:1H]
(root,0,0,00:00:00/632-00:27:33,342) [raid5wq]
(root,0,0,01:10:06/632-00:27:33,392) [jbd2/sda1-8]
(root,0,0,00:00:00/632-00:27:33,393) [ext4-rsv-conver]
(root,0,0,00:00:36/632-00:27:33,395) [kworker/3:1H]
(root,0,0,00:03:10/632-00:27:33,398) [kworker/5:1H]
(root,4532,816,00:00:00/01:41,424) sleep 3000
(root,0,0,00:04:17/632-00:27:33,431) [kworker/6:1H]
(gitlab-psql,8304988,39040,00:00:00/01:34,437) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307028,45248,00:00:00/01:34,439) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:02:01/632-00:27:33,464) [kworker/0:1H]
(root,253584,90216,01:16:38/632-00:27:32,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/632-00:27:32,476) [iscsi_eh]
(root,0,0,00:00:00/632-00:27:32,485) [ib-comp-wq]
(root,0,0,00:00:00/632-00:27:32,486) [ib_mcast]
(root,0,0,00:00:00/632-00:27:32,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/632-00:27:32,494) [rdma_cm]
(root,97708,1596,00:00:00/632-00:27:32,498) /sbin/lvmetad -f
(root,43436,3896,00:04:59/632-00:27:32,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:02/632-00:27:32,713) /lib/systemd/systemd-timesyncd
(root,20180,3648,00:00:00/00:00,742) /bin/bash /usr/bin/check_mk_agent
(root,36700,2976,00:00:00/00:00,760) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1084,00:00:00/00:00,761) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,25992,3444,00:00:03/632-00:27:30,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:28:13/632-00:27:27,1244) /usr/sbin/irqbalance --foreground
(root,382992,2384,00:18:20/632-00:27:27,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4336,00:23:44/632-00:27:27,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19172,00:10:46/632-00:27:27,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:02:01/632-00:27:27,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:39/632-00:27:27,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:22/632-00:27:27,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:29/632-00:27:27,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/632-00:27:27,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/632-00:27:27,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/632-00:27:27,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:21/632-00:27:27,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:09:35/632-00:27:27,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:57/632-00:27:27,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/632-00:27:27,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/632-00:27:27,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:59/632-00:27:27,1379) nginx: worker process
(www-data,143788,3960,00:00:09/632-00:27:27,1380) nginx: worker process
(www-data,143788,5000,00:00:44/632-00:27:27,1381) nginx: worker process
(www-data,143788,3964,00:00:01/632-00:27:27,1382) nginx: worker process
(www-data,143788,4056,00:00:00/632-00:27:27,1383) nginx: worker process
(www-data,143788,4184,00:00:00/632-00:27:27,1384) nginx: worker process
(www-data,143788,4056,00:00:00/632-00:27:27,1386) nginx: worker process
(www-data,143788,4184,00:00:00/632-00:27:27,1388) nginx: worker process
(root,14888,1756,00:00:00/632-00:27:27,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:57/632-00:27:27,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:12/632-00:27:26,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/632-00:27:26,1498) runsv redis-exporter
(root,4396,712,00:00:07/632-00:27:26,1500) runsv node-exporter
(root,4396,820,00:00:06/632-00:27:26,1501) runsv prometheus
(root,4396,824,00:00:06/632-00:27:26,1502) runsv sidekiq
(root,4396,720,00:00:06/632-00:27:26,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/632-00:27:26,1507) runsv alertmanager
(root,4396,856,00:00:05/632-00:27:26,1509) runsv postgresql
(root,4396,744,00:00:07/632-00:27:26,1510) runsv postgres-exporter
(root,4396,788,00:00:06/632-00:27:26,1511) runsv grafana
(root,4396,780,00:00:06/632-00:27:26,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/632-00:27:26,1513) runsv logrotate
(root,4396,856,00:00:05/632-00:27:26,1514) runsv puma
(root,4396,744,00:00:06/632-00:27:26,1515) runsv nginx
(root,4396,740,00:00:06/632-00:27:26,1516) runsv gitaly
(root,4396,860,00:00:05/632-00:27:26,1517) runsv redis
(root,4396,760,00:00:06/632-00:27:26,1519) runsv registry
(root,4540,864,00:00:06/632-00:27:26,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/632-00:27:26,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/632-00:27:26,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:54:32/632-00:27:26,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:12:00/632-00:27:26,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/632-00:27:26,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:06/632-00:27:26,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/632-00:27:26,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/632-00:27:26,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/632-00:27:26,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/632-00:27:26,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:32/632-00:27:26,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:19:00/632-00:27:26,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/632-00:27:26,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:48/632-00:27:26,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/632-00:27:26,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:27/2-05:39:54,2261) [kworker/6:2]
(root,0,0,00:00:44/10-22:29:56,2356) [kworker/5:2]
(root,0,0,00:00:22/6-07:13:09,3144) [kworker/4:0]
(systemd-resolve,70628,4860,00:00:00/07:04:53,5287) /lib/systemd/systemd-resolved
(root,4628,796,00:00:00/490-08:07:31,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,850072,24644,00:09:43/490-08:07:31,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87232,8412,00:41:31/490-08:07:31,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:24/490-08:07:31,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(git,1705200,996592,00:00:18/01:48:01,10496) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:07/2-02:12:04,10982) [kworker/3:1]
(root,0,0,00:00:10/2-23:44:27,12007) [kworker/1:1]
(root,0,0,00:00:00/03:15:28,12586) [kworker/7:1]
(git,1718512,976556,00:00:20/01:25:21,14809) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:00:07/1-04:22:59,14842) [kworker/7:2]
(root,0,0,00:00:00/01:19:45,15764) [kworker/0:1]
(root,0,0,00:00:00/01:07:50,18093) [kworker/5:1]
(root,0,0,00:00:00/59:44,22106) [kworker/3:0]
(root,0,0,00:00:00/59:43,22117) [kworker/4:1]
(root,0,0,00:00:00/59:43,22123) [kworker/6:0]
(root,0,0,00:00:00/59:37,22167) [kworker/1:0]
(root,0,0,00:04:06/32-00:59:30,23207) [kworker/0:2]
(git,1677664,975228,00:00:09/57:21,23659) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(gitlab-psql,8312068,62716,00:00:01/56:01,23867) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/53:55,24183) [kworker/2:0]
(git,1773808,1032404,00:00:51/02:40:55,25607) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1751392,1042036,00:01:01/02:39:55,25773) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1726704,1033936,00:01:01/02:34:55,26680) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1646832,969812,00:00:05/36:41,26958) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(gitlab-psql,8309696,61032,00:00:00/36:29,27044) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306968,48044,00:00:00/29:27,28150) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309852,61524,00:00:00/27:13,28498) postgres: gitlab gitlabhq_production [local] idle
(gitlab-prometheus,1795260,12868,08:25:45/236-00:18:56,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:26:43/236-00:18:56,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,134244,1-19:43:35/236-00:18:55,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45620,5-07:46:48/236-00:18:55,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39396,1-06:21:00/236-00:18:55,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917612,45128,03:40:59/236-00:18:55,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/236-00:18:54,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:33/236-00:18:54,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/236-00:18:54,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/236-00:18:54,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/236-00:18:54,29021) nginx: worker process
(gitlab-www,67708,25112,06:05:54/236-00:18:54,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/236-00:18:54,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/236-00:18:54,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/236-00:18:54,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:44/236-00:18:54,29026) nginx: cache manager process
(gitlab-prometheus,719468,13244,1-04:54:53/236-00:18:53,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15512,1-06:08:11/236-00:18:53,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:18:44/236-00:18:52,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3222836,221492,2-16:30:05/236-00:18:52,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,286396,00:14:51/236-00:18:52,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:42/236-00:18:52,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:08:04/236-00:18:52,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:19:02/236-00:18:52,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:07:45/236-00:18:52,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:23/236-00:18:52,29064) postgres: logical replication launcher   
(git,1461948,919372,03:52:26/236-00:18:51,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16896,13-00:02:08/236-00:18:50,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16656,09:29:21/236-00:18:50,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108852,20:01:26/236-00:18:50,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:59:57/236-00:18:50,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15104,01:05:21/236-00:18:50,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:14/236-00:18:46,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1181708,36-04:23:57/236-00:18:46,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,91680,3-13:53:41/236-00:18:34,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-16:16:43/236-00:18:31,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8312484,54828,00:00:00/22:36,29491) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:30:53/236-00:17:27,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/236-00:17:27,29560) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8308148,52524,00:00:00/20:07,29934) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,55132,00:00:00/18:30,30150) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8308124,51276,00:00:00/17:59,30262) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/14:50,30738) [kworker/u16:2]
(gitlab-psql,8306768,52596,00:00:00/13:29,30987) postgres: gitlab gitlabhq_production [local] idle
(root,4628,752,00:00:00/11:41,31303) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:11/3-00:59:43,31304) [kworker/2:1]
(git,1530072,929236,00:00:01/11:41,31309) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8307272,55672,00:00:00/11:04,31436) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/09:28,31713) [kworker/u16:1]
(gitlab-psql,8307100,51072,00:00:00/05:41,32258) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306928,49496,00:00:00/04:45,32408) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/04:05,32532) [kworker/u16:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-28 01:01

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91225891082

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8212,00:29:24/630-00:32:28,1) /sbin/init
(root,0,0,00:00:23/630-00:32:28,2) [kthreadd]
(root,0,0,00:00:00/630-00:32:28,4) [kworker/0:0H]
(root,0,0,00:00:00/630-00:32:28,6) [mm_percpu_wq]
(root,0,0,00:07:08/630-00:32:28,7) [ksoftirqd/0]
(root,0,0,19:38:47/630-00:32:28,8) [rcu_sched]
(root,0,0,00:00:00/630-00:32:28,9) [rcu_bh]
(root,0,0,00:00:20/630-00:32:28,10) [migration/0]
(root,0,0,00:03:28/630-00:32:28,11) [watchdog/0]
(root,0,0,00:00:00/630-00:32:28,12) [cpuhp/0]
(root,0,0,00:00:00/630-00:32:28,13) [cpuhp/1]
(root,0,0,00:03:13/630-00:32:28,14) [watchdog/1]
(root,0,0,00:00:19/630-00:32:28,15) [migration/1]
(root,0,0,00:03:55/630-00:32:28,16) [ksoftirqd/1]
(root,0,0,00:00:00/630-00:32:28,18) [kworker/1:0H]
(root,0,0,00:00:00/630-00:32:28,19) [cpuhp/2]
(root,0,0,00:03:26/630-00:32:28,20) [watchdog/2]
(root,0,0,00:00:17/630-00:32:28,21) [migration/2]
(root,0,0,00:02:53/630-00:32:28,22) [ksoftirqd/2]
(root,0,0,00:00:00/630-00:32:28,24) [kworker/2:0H]
(root,0,0,00:00:00/630-00:32:28,25) [cpuhp/3]
(root,0,0,00:03:09/630-00:32:28,26) [watchdog/3]
(root,0,0,00:00:16/630-00:32:28,27) [migration/3]
(root,0,0,00:02:18/630-00:32:28,28) [ksoftirqd/3]
(root,0,0,00:00:00/630-00:32:28,30) [kworker/3:0H]
(root,0,0,00:00:00/630-00:32:28,31) [cpuhp/4]
(root,0,0,00:03:23/630-00:32:28,32) [watchdog/4]
(root,0,0,00:00:14/630-00:32:28,33) [migration/4]
(root,0,0,00:07:09/630-00:32:28,34) [ksoftirqd/4]
(root,0,0,00:00:00/630-00:32:28,36) [kworker/4:0H]
(root,0,0,00:00:00/630-00:32:28,37) [cpuhp/5]
(root,0,0,00:03:20/630-00:32:28,38) [watchdog/5]
(root,0,0,00:00:16/630-00:32:28,39) [migration/5]
(root,0,0,00:04:27/630-00:32:28,40) [ksoftirqd/5]
(root,0,0,00:00:00/630-00:32:28,42) [kworker/5:0H]
(root,0,0,00:00:00/630-00:32:28,43) [cpuhp/6]
(root,0,0,00:03:11/630-00:32:28,44) [watchdog/6]
(root,0,0,00:00:27/630-00:32:28,45) [migration/6]
(root,0,0,00:02:25/630-00:32:28,46) [ksoftirqd/6]
(root,0,0,00:00:00/630-00:32:28,48) [kworker/6:0H]
(root,0,0,00:00:00/630-00:32:28,49) [cpuhp/7]
(root,0,0,00:03:03/630-00:32:28,50) [watchdog/7]
(root,0,0,00:00:22/630-00:32:28,51) [migration/7]
(root,0,0,00:02:12/630-00:32:28,52) [ksoftirqd/7]
(root,0,0,00:00:00/630-00:32:28,54) [kworker/7:0H]
(root,0,0,00:00:00/630-00:32:28,55) [kdevtmpfs]
(root,0,0,00:00:00/630-00:32:28,56) [netns]
(root,0,0,00:00:00/630-00:32:28,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/630-00:32:28,58) [kauditd]
(root,0,0,00:01:39/630-00:32:28,62) [khungtaskd]
(root,0,0,00:00:00/630-00:32:28,63) [oom_reaper]
(root,0,0,00:00:00/630-00:32:28,64) [writeback]
(root,0,0,00:00:02/630-00:32:28,65) [kcompactd0]
(root,0,0,00:00:00/630-00:32:28,66) [ksmd]
(root,0,0,00:08:33/630-00:32:28,67) [khugepaged]
(root,0,0,00:00:00/630-00:32:28,68) [crypto]
(root,0,0,00:00:00/630-00:32:28,69) [kintegrityd]
(root,0,0,00:00:00/630-00:32:28,70) [kblockd]
(root,0,0,00:00:00/630-00:32:28,71) [ata_sff]
(root,0,0,00:00:00/630-00:32:28,72) [md]
(root,0,0,00:00:00/630-00:32:28,73) [edac-poller]
(root,0,0,00:00:00/630-00:32:28,74) [devfreq_wq]
(root,0,0,00:00:00/630-00:32:28,75) [watchdogd]
(root,0,0,02:07:25/630-00:32:28,79) [kswapd0]
(root,0,0,00:00:00/630-00:32:28,80) [kworker/u17:0]
(root,0,0,00:00:00/630-00:32:28,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/630-00:32:28,123) [kthrotld]
(root,0,0,00:00:00/630-00:32:28,124) [acpi_thermal_pm]
(root,0,0,00:00:00/630-00:32:28,130) [scsi_eh_0]
(root,0,0,00:00:00/630-00:32:28,131) [scsi_tmf_0]
(root,0,0,00:00:00/630-00:32:28,132) [scsi_eh_1]
(root,0,0,00:00:00/630-00:32:28,133) [scsi_tmf_1]
(root,0,0,00:00:00/630-00:32:27,139) [ipv6_addrconf]
(root,0,0,00:00:00/630-00:32:27,148) [kstrp]
(root,0,0,00:00:00/630-00:32:27,166) [charger_manager]
(root,0,0,00:00:00/630-00:32:27,223) [scsi_eh_2]
(root,0,0,00:00:00/630-00:32:27,224) [scsi_tmf_2]
(root,0,0,00:03:35/630-00:32:26,267) [kworker/7:1H]
(root,0,0,00:28:37/630-00:32:22,268) [kworker/4:1H]
(root,0,0,00:00:59/630-00:32:22,275) [kworker/1:1H]
(gitlab-psql,8309708,55180,00:00:00/36:18,330) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:42/630-00:32:21,335) [kworker/2:1H]
(root,0,0,00:00:00/630-00:32:20,342) [raid5wq]
(root,0,0,01:09:51/630-00:32:20,392) [jbd2/sda1-8]
(root,0,0,00:00:00/630-00:32:20,393) [ext4-rsv-conver]
(root,0,0,00:00:36/630-00:32:20,395) [kworker/3:1H]
(root,0,0,00:03:09/630-00:32:20,398) [kworker/5:1H]
(root,0,0,00:04:16/630-00:32:20,431) [kworker/6:1H]
(root,0,0,00:02:00/630-00:32:20,464) [kworker/0:1H]
(root,220816,82320,01:16:23/630-00:32:19,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/630-00:32:19,476) [iscsi_eh]
(root,0,0,00:00:00/630-00:32:19,485) [ib-comp-wq]
(root,0,0,00:00:00/630-00:32:19,486) [ib_mcast]
(root,0,0,00:00:00/630-00:32:19,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/630-00:32:19,494) [rdma_cm]
(root,97708,1596,00:00:00/630-00:32:19,498) /sbin/lvmetad -f
(root,43436,3896,00:04:58/630-00:32:19,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:02/630-00:32:19,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/630-00:32:17,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:27:56/630-00:32:14,1244) /usr/sbin/irqbalance --foreground
(root,382944,2336,00:18:16/630-00:32:14,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4336,00:23:40/630-00:32:14,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19172,00:10:44/630-00:32:14,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:01:49/630-00:32:14,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:38/630-00:32:14,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:15/630-00:32:14,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:28/630-00:32:14,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/630-00:32:14,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/630-00:32:14,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/630-00:32:14,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:15/630-00:32:14,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:07:09/630-00:32:14,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:56/630-00:32:14,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/630-00:32:14,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/630-00:32:14,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:59/630-00:32:14,1379) nginx: worker process
(www-data,143788,3960,00:00:09/630-00:32:14,1380) nginx: worker process
(www-data,143788,5000,00:00:44/630-00:32:14,1381) nginx: worker process
(www-data,143788,3964,00:00:01/630-00:32:14,1382) nginx: worker process
(www-data,143788,4056,00:00:00/630-00:32:14,1383) nginx: worker process
(www-data,143788,4184,00:00:00/630-00:32:14,1384) nginx: worker process
(www-data,143788,4056,00:00:00/630-00:32:14,1386) nginx: worker process
(www-data,143788,4184,00:00:00/630-00:32:14,1388) nginx: worker process
(root,14888,1756,00:00:00/630-00:32:14,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:53/630-00:32:14,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:09/630-00:32:13,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/630-00:32:13,1498) runsv redis-exporter
(root,4396,712,00:00:07/630-00:32:13,1500) runsv node-exporter
(root,4396,820,00:00:06/630-00:32:13,1501) runsv prometheus
(root,4396,824,00:00:06/630-00:32:13,1502) runsv sidekiq
(root,4396,720,00:00:06/630-00:32:13,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/630-00:32:13,1507) runsv alertmanager
(root,4396,856,00:00:05/630-00:32:13,1509) runsv postgresql
(root,4396,744,00:00:07/630-00:32:13,1510) runsv postgres-exporter
(root,4396,788,00:00:06/630-00:32:13,1511) runsv grafana
(root,4396,780,00:00:06/630-00:32:13,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:28/630-00:32:13,1513) runsv logrotate
(root,4396,856,00:00:05/630-00:32:13,1514) runsv puma
(root,4396,744,00:00:06/630-00:32:13,1515) runsv nginx
(root,4396,740,00:00:06/630-00:32:13,1516) runsv gitaly
(root,4396,860,00:00:05/630-00:32:13,1517) runsv redis
(root,4396,760,00:00:06/630-00:32:13,1519) runsv registry
(root,4540,864,00:00:06/630-00:32:13,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/630-00:32:13,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/630-00:32:13,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:54:06/630-00:32:13,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:11:42/630-00:32:13,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/630-00:32:13,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/630-00:32:13,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/630-00:32:13,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/630-00:32:13,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/630-00:32:13,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/630-00:32:13,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:27/630-00:32:13,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:55/630-00:32:13,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/630-00:32:13,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:48/630-00:32:13,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/630-00:32:13,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:03/05:44:41,2261) [kworker/6:2]
(git,1662192,973248,00:00:06/25:28,2321) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,0,0,00:00:36/8-22:34:43,2356) [kworker/5:2]
(gitlab-psql,8310716,64976,00:00:01/24:14,2570) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/22:38,2783) [kworker/u16:1]
(gitlab-psql,8307072,52520,00:00:00/22:21,2813) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:15/4-07:17:56,3144) [kworker/4:0]
(gitlab-psql,8309856,61772,00:00:00/18:12,3506) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70760,4944,00:00:00/08:23:15,3602) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/16:48,3703) [kworker/u16:0]
(root,4628,856,00:00:00/16:31,3729) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8306884,54392,00:00:00/15:11,3979) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/08:07,5064) [kworker/u16:2]
(root,4532,744,00:00:00/06:31,5393) sleep 3000
(gitlab-psql,8306376,44304,00:00:00/06:10,5521) postgres: gitlab gitlabhq_production [local] idle
(git,1510104,912356,00:00:00/04:08,5858) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(gitlab-psql,8306944,52216,00:00:00/02:31,6113) postgres: gitlab gitlabhq_production [local] idle
(root,4628,796,00:00:00/488-08:12:18,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,825288,22608,00:09:41/488-08:12:18,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87232,8412,00:41:12/488-08:12:18,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:23/488-08:12:18,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,72296,5760,00:00:00/01:56,6232) sshd: [accepted]
(root,72296,5576,00:00:00/01:15,6408) sshd: [accepted]
(root,72296,5648,00:00:00/00:35,6478) sshd: [accepted]
(root,20180,3412,00:00:00/00:00,6611) /bin/bash /usr/bin/check_mk_agent
(root,36700,3056,00:00:00/00:00,6629) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1084,00:00:00/00:00,6630) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/02:16:51,10982) [kworker/3:1]
(root,0,0,00:00:03/23:49:14,12007) [kworker/1:1]
(git,1739108,1025276,00:00:53/04:38:41,13562) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1736032,1034488,00:00:53/04:35:41,14090) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1728752,1006484,00:00:58/04:34:41,14262) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1720560,1027812,00:00:56/04:33:41,14434) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1756004,1039764,00:00:51/04:32:41,14617) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/01:24:11,20710) [kworker/5:1]
(git,1675504,972012,00:00:12/01:20:49,21226) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/01:18:58,21533) [kworker/2:2]
(root,0,0,00:00:00/01:18:50,21664) [kworker/6:1]
(root,0,0,00:03:51/30-01:04:17,23207) [kworker/0:2]
(gitlab-psql,8307328,55060,00:00:00/01:06:16,23787) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:04:40,26651) [kworker/7:2]
(root,0,0,00:00:00/01:04:39,26659) [kworker/0:1]
(gitlab-psql,8307996,50688,00:00:00/01:00:33,28526) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/58:50,28922) [kworker/1:2]
(gitlab-prometheus,1795260,12252,08:21:24/234-00:23:43,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:25:58/234-00:23:43,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,135004,1-19:20:33/234-00:23:42,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45552,5-06:36:32/234-00:23:42,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,37768,1-06:05:55/234-00:23:42,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917632,45016,03:38:48/234-00:23:42,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/234-00:23:41,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:33/234-00:23:41,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/234-00:23:41,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/234-00:23:41,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/234-00:23:41,29021) nginx: worker process
(gitlab-www,67708,25112,06:03:21/234-00:23:41,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/234-00:23:41,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/234-00:23:41,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/234-00:23:41,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:42/234-00:23:41,29026) nginx: cache manager process
(gitlab-prometheus,719468,15204,1-04:40:03/234-00:23:40,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,13988,1-05:52:07/234-00:23:40,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:18:34/234-00:23:39,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3192460,161380,2-15:55:53/234-00:23:39,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,279472,00:14:43/234-00:23:39,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:38/234-00:23:39,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:59/234-00:23:39,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:52/234-00:23:39,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:05:33/234-00:23:39,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:23/234-00:23:39,29064) postgres: logical replication launcher   
(git,1461948,919332,03:50:26/234-00:23:38,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16820,12-21:14:38/234-00:23:37,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,15308,09:24:23/234-00:23:37,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108844,19:50:44/234-00:23:37,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:50:36/234-00:23:37,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15304,01:04:54/234-00:23:37,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:08/234-00:23:33,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1214180,35-20:25:35/234-00:23:33,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(root,0,0,00:00:00/58:15,29244) [kworker/4:2]
(gitlab-psql,8309408,87200,3-13:07:42/234-00:23:21,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-15:54:25/234-00:23:18,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:30:37/234-00:22:14,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/234-00:22:14,29560) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309992,64012,00:00:01/54:24,29941) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:49/17-09:07:36,30723) [kworker/7:1]
(root,0,0,00:00:08/2-09:48:20,31153) [kworker/3:2]
(root,0,0,00:00:03/1-01:04:30,31304) [kworker/2:1]
(gitlab-psql,8307224,54484,00:00:00/45:03,31478) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313368,72208,00:00:00/44:21,31553) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-26 01:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91266fff61e

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8044,00:29:18/628-00:18:33,1) /sbin/init
(root,0,0,00:00:23/628-00:18:33,2) [kthreadd]
(root,0,0,00:00:00/628-00:18:33,4) [kworker/0:0H]
(root,0,0,00:00:00/628-00:18:33,6) [mm_percpu_wq]
(root,0,0,00:07:06/628-00:18:33,7) [ksoftirqd/0]
(root,0,0,19:34:36/628-00:18:33,8) [rcu_sched]
(root,0,0,00:00:00/628-00:18:33,9) [rcu_bh]
(root,0,0,00:00:20/628-00:18:33,10) [migration/0]
(root,0,0,00:03:28/628-00:18:33,11) [watchdog/0]
(root,0,0,00:00:00/628-00:18:33,12) [cpuhp/0]
(root,0,0,00:00:00/628-00:18:33,13) [cpuhp/1]
(root,0,0,00:03:12/628-00:18:33,14) [watchdog/1]
(root,0,0,00:00:19/628-00:18:33,15) [migration/1]
(root,0,0,00:03:54/628-00:18:33,16) [ksoftirqd/1]
(root,0,0,00:00:00/628-00:18:33,18) [kworker/1:0H]
(root,0,0,00:00:00/628-00:18:33,19) [cpuhp/2]
(root,0,0,00:03:25/628-00:18:33,20) [watchdog/2]
(root,0,0,00:00:17/628-00:18:33,21) [migration/2]
(root,0,0,00:02:52/628-00:18:33,22) [ksoftirqd/2]
(root,0,0,00:00:00/628-00:18:33,24) [kworker/2:0H]
(root,0,0,00:00:00/628-00:18:33,25) [cpuhp/3]
(root,0,0,00:03:08/628-00:18:33,26) [watchdog/3]
(root,0,0,00:00:16/628-00:18:33,27) [migration/3]
(root,0,0,00:02:17/628-00:18:33,28) [ksoftirqd/3]
(root,0,0,00:00:00/628-00:18:33,30) [kworker/3:0H]
(root,0,0,00:00:00/628-00:18:33,31) [cpuhp/4]
(root,0,0,00:03:22/628-00:18:33,32) [watchdog/4]
(root,0,0,00:00:14/628-00:18:33,33) [migration/4]
(root,0,0,00:07:08/628-00:18:33,34) [ksoftirqd/4]
(root,0,0,00:00:00/628-00:18:33,36) [kworker/4:0H]
(root,0,0,00:00:00/628-00:18:33,37) [cpuhp/5]
(root,0,0,00:03:19/628-00:18:33,38) [watchdog/5]
(root,0,0,00:00:16/628-00:18:33,39) [migration/5]
(root,0,0,00:04:26/628-00:18:33,40) [ksoftirqd/5]
(root,0,0,00:00:00/628-00:18:33,42) [kworker/5:0H]
(root,0,0,00:00:00/628-00:18:33,43) [cpuhp/6]
(root,0,0,00:03:10/628-00:18:33,44) [watchdog/6]
(root,0,0,00:00:27/628-00:18:33,45) [migration/6]
(root,0,0,00:02:24/628-00:18:33,46) [ksoftirqd/6]
(root,0,0,00:00:00/628-00:18:33,48) [kworker/6:0H]
(root,0,0,00:00:00/628-00:18:33,49) [cpuhp/7]
(root,0,0,00:03:03/628-00:18:33,50) [watchdog/7]
(root,0,0,00:00:22/628-00:18:33,51) [migration/7]
(root,0,0,00:02:11/628-00:18:33,52) [ksoftirqd/7]
(root,0,0,00:00:00/628-00:18:33,54) [kworker/7:0H]
(root,0,0,00:00:00/628-00:18:33,55) [kdevtmpfs]
(root,0,0,00:00:00/628-00:18:33,56) [netns]
(root,0,0,00:00:00/628-00:18:33,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/628-00:18:33,58) [kauditd]
(root,0,0,00:01:39/628-00:18:33,62) [khungtaskd]
(root,0,0,00:00:00/628-00:18:33,63) [oom_reaper]
(root,0,0,00:00:00/628-00:18:33,64) [writeback]
(root,0,0,00:00:02/628-00:18:33,65) [kcompactd0]
(root,0,0,00:00:00/628-00:18:33,66) [ksmd]
(root,0,0,00:08:31/628-00:18:33,67) [khugepaged]
(root,0,0,00:00:00/628-00:18:33,68) [crypto]
(root,0,0,00:00:00/628-00:18:33,69) [kintegrityd]
(root,0,0,00:00:00/628-00:18:33,70) [kblockd]
(root,0,0,00:00:00/628-00:18:33,71) [ata_sff]
(root,0,0,00:00:00/628-00:18:33,72) [md]
(root,0,0,00:00:00/628-00:18:33,73) [edac-poller]
(root,0,0,00:00:00/628-00:18:33,74) [devfreq_wq]
(root,0,0,00:00:00/628-00:18:33,75) [watchdogd]
(root,0,0,02:06:56/628-00:18:33,79) [kswapd0]
(root,0,0,00:00:00/628-00:18:33,80) [kworker/u17:0]
(root,0,0,00:00:00/628-00:18:33,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/628-00:18:33,123) [kthrotld]
(root,0,0,00:00:00/628-00:18:33,124) [acpi_thermal_pm]
(root,0,0,00:00:00/628-00:18:33,130) [scsi_eh_0]
(root,0,0,00:00:00/628-00:18:33,131) [scsi_tmf_0]
(root,0,0,00:00:00/628-00:18:33,132) [scsi_eh_1]
(root,0,0,00:00:00/628-00:18:33,133) [scsi_tmf_1]
(root,0,0,00:00:00/628-00:18:32,139) [ipv6_addrconf]
(root,0,0,00:00:00/628-00:18:32,148) [kstrp]
(root,0,0,00:00:00/628-00:18:32,166) [charger_manager]
(root,0,0,00:00:00/628-00:18:32,223) [scsi_eh_2]
(root,0,0,00:00:00/628-00:18:32,224) [scsi_tmf_2]
(root,0,0,00:03:35/628-00:18:31,267) [kworker/7:1H]
(root,0,0,00:28:31/628-00:18:27,268) [kworker/4:1H]
(root,0,0,00:00:59/628-00:18:27,275) [kworker/1:1H]
(root,0,0,00:00:42/628-00:18:26,335) [kworker/2:1H]
(root,0,0,00:00:00/628-00:18:25,342) [raid5wq]
(root,0,0,01:09:37/628-00:18:25,392) [jbd2/sda1-8]
(root,0,0,00:00:00/628-00:18:25,393) [ext4-rsv-conver]
(root,0,0,00:00:36/628-00:18:25,395) [kworker/3:1H]
(root,0,0,00:03:09/628-00:18:25,398) [kworker/5:1H]
(root,0,0,00:04:15/628-00:18:25,431) [kworker/6:1H]
(root,0,0,00:02:00/628-00:18:25,464) [kworker/0:1H]
(root,167556,61112,01:16:06/628-00:18:24,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/628-00:18:24,476) [iscsi_eh]
(root,0,0,00:00:00/628-00:18:24,485) [ib-comp-wq]
(root,0,0,00:00:00/628-00:18:24,486) [ib_mcast]
(root,0,0,00:00:00/628-00:18:24,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/628-00:18:24,494) [rdma_cm]
(root,97708,1596,00:00:00/628-00:18:24,498) /sbin/lvmetad -f
(root,43436,3896,00:04:57/628-00:18:24,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:01/628-00:18:24,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/628-00:18:22,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:27:39/628-00:18:19,1244) /usr/sbin/irqbalance --foreground
(root,382896,2288,00:18:13/628-00:18:19,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:35/628-00:18:19,1251) /usr/sbin/rsyslogd -n
(clamav,306860,19152,00:10:41/628-00:18:19,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:01:35/628-00:18:19,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:37/628-00:18:19,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:08/628-00:18:19,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:27/628-00:18:19,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/628-00:18:19,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/628-00:18:19,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/628-00:18:19,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:08/628-00:18:19,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:04:43/628-00:18:19,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:54/628-00:18:19,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/628-00:18:19,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/628-00:18:19,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:58/628-00:18:19,1379) nginx: worker process
(www-data,143788,3960,00:00:09/628-00:18:19,1380) nginx: worker process
(www-data,143788,5000,00:00:44/628-00:18:19,1381) nginx: worker process
(www-data,143788,3964,00:00:01/628-00:18:19,1382) nginx: worker process
(www-data,143788,4056,00:00:00/628-00:18:19,1383) nginx: worker process
(www-data,143788,4184,00:00:00/628-00:18:19,1384) nginx: worker process
(www-data,143788,4056,00:00:00/628-00:18:19,1386) nginx: worker process
(www-data,143788,4184,00:00:00/628-00:18:19,1388) nginx: worker process
(root,14888,1756,00:00:00/628-00:18:19,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:49/628-00:18:19,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:06/628-00:18:18,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/628-00:18:18,1498) runsv redis-exporter
(root,4396,712,00:00:07/628-00:18:18,1500) runsv node-exporter
(root,4396,820,00:00:06/628-00:18:18,1501) runsv prometheus
(root,4396,824,00:00:06/628-00:18:18,1502) runsv sidekiq
(root,4396,720,00:00:06/628-00:18:18,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/628-00:18:18,1507) runsv alertmanager
(root,4396,856,00:00:05/628-00:18:18,1509) runsv postgresql
(root,4396,744,00:00:07/628-00:18:18,1510) runsv postgres-exporter
(root,4396,788,00:00:06/628-00:18:18,1511) runsv grafana
(root,4396,780,00:00:06/628-00:18:18,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/628-00:18:18,1513) runsv logrotate
(root,4396,856,00:00:05/628-00:18:18,1514) runsv puma
(root,4396,744,00:00:06/628-00:18:18,1515) runsv nginx
(root,4396,740,00:00:06/628-00:18:18,1516) runsv gitaly
(root,4396,860,00:00:05/628-00:18:18,1517) runsv redis
(root,4396,760,00:00:06/628-00:18:18,1519) runsv registry
(root,4540,864,00:00:06/628-00:18:18,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/628-00:18:18,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/628-00:18:18,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:53:43/628-00:18:18,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:11:24/628-00:18:18,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/628-00:18:18,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/628-00:18:18,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/628-00:18:18,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/628-00:18:18,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/628-00:18:18,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/628-00:18:18,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:22/628-00:18:18,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:51/628-00:18:18,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/628-00:18:18,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:47/628-00:18:18,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/628-00:18:18,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:28/6-22:20:48,2356) [kworker/5:2]
(root,0,0,00:00:08/2-07:04:01,3144) [kworker/4:0]
(root,4628,796,00:00:00/486-07:58:23,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,792728,19108,00:09:38/486-07:58:23,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87232,8412,00:40:49/486-07:58:23,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:22/486-07:58:23,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:01:31/24-21:27:37,12666) [kworker/2:2]
(root,0,0,00:01:44/8-05:05:12,14126) [kworker/6:0]
(root,0,0,00:00:00/01:06:22,15715) [kworker/5:0]
(gitlab-psql,8306660,47940,00:00:00/59:23,16775) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/1-00:09:45,18162) [kworker/1:1]
(root,0,0,00:00:00/50:23,20967) [kworker/7:2]
(root,0,0,00:00:00/50:22,20992) [kworker/0:0]
(root,0,0,00:00:00/50:09,21372) [kworker/3:0]
(gitlab-psql,8309752,59000,00:00:00/47:25,22470) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/20:20:21,22711) [kworker/2:0]
(root,0,0,00:00:00/44:22,23001) [kworker/4:2]
(root,0,0,00:03:35/28-00:50:22,23207) [kworker/0:2]
(gitlab-psql,8307132,48608,00:00:00/40:45,23565) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307024,47556,00:00:00/38:44,23888) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47808,00:00:00/37:44,24037) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,54776,00:00:00/34:04,24634) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307108,53296,00:00:00/31:39,24987) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47808,00:00:00/30:41,25145) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307024,47748,00:00:00/29:58,25282) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306752,53204,00:00:00/25:33,25960) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/21:07,26741) [kworker/u16:0]
(gitlab-psql,8306660,46472,00:00:00/11:31,28267) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/07:48,28862) [kworker/u16:2]
(gitlab-prometheus,1795260,12976,08:16:59/232-00:09:48,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:25:12/232-00:09:48,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,132836,1-18:59:21/232-00:09:47,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45700,5-05:26:58/232-00:09:47,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39192,1-05:51:39/232-00:09:47,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917648,49692,03:36:35/232-00:09:47,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/232-00:09:46,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:32/232-00:09:46,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/232-00:09:46,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/232-00:09:46,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/232-00:09:46,29021) nginx: worker process
(gitlab-www,67708,25112,06:00:48/232-00:09:46,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/232-00:09:46,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/232-00:09:46,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/232-00:09:46,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:41/232-00:09:46,29026) nginx: cache manager process
(gitlab-prometheus,719468,14768,1-04:24:57/232-00:09:45,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14476,1-05:35:57/232-00:09:45,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:18:24/232-00:09:44,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3201168,154580,2-15:21:16/232-00:09:44,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,279472,00:14:37/232-00:09:44,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:35/232-00:09:44,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:54/232-00:09:44,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:42/232-00:09:44,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:03:23/232-00:09:44,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:23/232-00:09:44,29064) postgres: logical replication launcher   
(git,1461948,919288,03:48:28/232-00:09:43,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16668,12-18:27:33/232-00:09:42,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16956,09:19:22/232-00:09:42,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108960,19:40:43/232-00:09:42,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:41:03/232-00:09:42,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,14400,01:04:27/232-00:09:42,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:13:01/232-00:09:38,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1223532,35-12:39:43/232-00:09:38,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,87200,3-12:22:51/232-00:09:26,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-15:32:22/232-00:09:23,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:30:21/232-00:08:19,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/232-00:08:19,29560) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306728,46088,00:00:00/04:23,29667) postgres: gitlab gitlabhq_production [local] idle
(root,4628,784,00:00:00/02:40,29957) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,808,00:00:00/02:40,29965) sleep 600
(root,0,0,00:00:00/02:32,29979) [kworker/u16:1]
(root,20180,3544,00:00:00/00:00,30419) /bin/bash /usr/bin/check_mk_agent
(root,36700,3108,00:00:00/00:00,30437) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1104,00:00:00/00:00,30438) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:01:36/15-08:53:41,30723) [kworker/7:1]
(root,0,0,00:00:00/16:14:00,30754) [kworker/6:1]
(git,1634520,973656,00:00:35/06:18:45,30769) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1634520,983064,00:00:39/06:17:45,30944) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1634520,980968,00:00:37/06:16:45,31122) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(systemd-resolve,70628,4540,00:00:00/09:34:25,31147) /lib/systemd/systemd-resolved
(root,0,0,00:00:01/09:34:25,31153) [kworker/3:2]
(git,1626328,978740,00:00:37/06:15:44,31299) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1634520,987324,00:00:38/06:14:45,31461) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1642712,979392,00:00:37/06:13:45,31627) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,0,0,00:00:15/4-06:00:02,31693) [kworker/1:2]
(git,1634520,962612,00:00:33/06:12:45,31795) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1635544,956032,00:00:32/06:11:45,31957) puma: cluster worker 4: 29076 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-24 00:52

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9122b1c4779

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8208,00:29:12/626-00:21:34,1) /sbin/init
(root,0,0,00:00:23/626-00:21:34,2) [kthreadd]
(root,0,0,00:00:00/626-00:21:34,4) [kworker/0:0H]
(root,0,0,00:00:00/626-00:21:34,6) [mm_percpu_wq]
(root,0,0,00:07:05/626-00:21:34,7) [ksoftirqd/0]
(root,0,0,19:30:34/626-00:21:34,8) [rcu_sched]
(root,0,0,00:00:00/626-00:21:34,9) [rcu_bh]
(root,0,0,00:00:19/626-00:21:34,10) [migration/0]
(root,0,0,00:03:27/626-00:21:34,11) [watchdog/0]
(root,0,0,00:00:00/626-00:21:34,12) [cpuhp/0]
(root,0,0,00:00:00/626-00:21:34,13) [cpuhp/1]
(root,0,0,00:03:12/626-00:21:34,14) [watchdog/1]
(root,0,0,00:00:18/626-00:21:34,15) [migration/1]
(root,0,0,00:03:53/626-00:21:34,16) [ksoftirqd/1]
(root,0,0,00:00:00/626-00:21:34,18) [kworker/1:0H]
(root,0,0,00:00:00/626-00:21:34,19) [cpuhp/2]
(root,0,0,00:03:25/626-00:21:34,20) [watchdog/2]
(root,0,0,00:00:17/626-00:21:34,21) [migration/2]
(root,0,0,00:02:51/626-00:21:34,22) [ksoftirqd/2]
(root,0,0,00:00:00/626-00:21:34,24) [kworker/2:0H]
(root,0,0,00:00:00/626-00:21:34,25) [cpuhp/3]
(root,0,0,00:03:08/626-00:21:34,26) [watchdog/3]
(root,0,0,00:00:16/626-00:21:34,27) [migration/3]
(root,0,0,00:02:16/626-00:21:34,28) [ksoftirqd/3]
(root,0,0,00:00:00/626-00:21:34,30) [kworker/3:0H]
(root,0,0,00:00:00/626-00:21:34,31) [cpuhp/4]
(root,0,0,00:03:22/626-00:21:34,32) [watchdog/4]
(root,0,0,00:00:14/626-00:21:34,33) [migration/4]
(root,0,0,00:07:06/626-00:21:34,34) [ksoftirqd/4]
(root,0,0,00:00:00/626-00:21:34,36) [kworker/4:0H]
(root,0,0,00:00:00/626-00:21:34,37) [cpuhp/5]
(root,0,0,00:03:19/626-00:21:34,38) [watchdog/5]
(root,0,0,00:00:16/626-00:21:34,39) [migration/5]
(root,0,0,00:04:25/626-00:21:34,40) [ksoftirqd/5]
(root,0,0,00:00:00/626-00:21:34,42) [kworker/5:0H]
(root,0,0,00:00:00/626-00:21:34,43) [cpuhp/6]
(root,0,0,00:03:09/626-00:21:34,44) [watchdog/6]
(root,0,0,00:00:27/626-00:21:34,45) [migration/6]
(root,0,0,00:02:24/626-00:21:34,46) [ksoftirqd/6]
(root,0,0,00:00:00/626-00:21:34,48) [kworker/6:0H]
(root,0,0,00:00:00/626-00:21:34,49) [cpuhp/7]
(root,0,0,00:03:02/626-00:21:34,50) [watchdog/7]
(root,0,0,00:00:22/626-00:21:34,51) [migration/7]
(root,0,0,00:02:11/626-00:21:34,52) [ksoftirqd/7]
(root,0,0,00:00:00/626-00:21:34,54) [kworker/7:0H]
(root,0,0,00:00:00/626-00:21:34,55) [kdevtmpfs]
(root,0,0,00:00:00/626-00:21:34,56) [netns]
(root,0,0,00:00:00/626-00:21:34,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/626-00:21:34,58) [kauditd]
(root,0,0,00:01:38/626-00:21:34,62) [khungtaskd]
(root,0,0,00:00:00/626-00:21:34,63) [oom_reaper]
(root,0,0,00:00:00/626-00:21:34,64) [writeback]
(root,0,0,00:00:02/626-00:21:34,65) [kcompactd0]
(root,0,0,00:00:00/626-00:21:34,66) [ksmd]
(root,0,0,00:08:30/626-00:21:34,67) [khugepaged]
(root,0,0,00:00:00/626-00:21:34,68) [crypto]
(root,0,0,00:00:00/626-00:21:34,69) [kintegrityd]
(root,0,0,00:00:00/626-00:21:34,70) [kblockd]
(root,0,0,00:00:00/626-00:21:34,71) [ata_sff]
(root,0,0,00:00:00/626-00:21:34,72) [md]
(root,0,0,00:00:00/626-00:21:34,73) [edac-poller]
(root,0,0,00:00:00/626-00:21:34,74) [devfreq_wq]
(root,0,0,00:00:00/626-00:21:34,75) [watchdogd]
(root,0,0,02:06:28/626-00:21:34,79) [kswapd0]
(root,0,0,00:00:00/626-00:21:34,80) [kworker/u17:0]
(root,0,0,00:00:00/626-00:21:34,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/626-00:21:34,123) [kthrotld]
(root,0,0,00:00:00/626-00:21:34,124) [acpi_thermal_pm]
(root,0,0,00:00:00/626-00:21:34,130) [scsi_eh_0]
(root,0,0,00:00:00/626-00:21:34,131) [scsi_tmf_0]
(root,0,0,00:00:00/626-00:21:34,132) [scsi_eh_1]
(root,0,0,00:00:00/626-00:21:34,133) [scsi_tmf_1]
(root,0,0,00:00:00/626-00:21:33,139) [ipv6_addrconf]
(root,0,0,00:00:00/626-00:21:33,148) [kstrp]
(root,0,0,00:00:00/626-00:21:33,166) [charger_manager]
(root,0,0,00:00:00/626-00:21:33,223) [scsi_eh_2]
(root,0,0,00:00:00/626-00:21:33,224) [scsi_tmf_2]
(root,0,0,00:03:34/626-00:21:32,267) [kworker/7:1H]
(root,0,0,00:28:25/626-00:21:28,268) [kworker/4:1H]
(root,0,0,00:00:59/626-00:21:28,275) [kworker/1:1H]
(root,0,0,00:00:42/626-00:21:27,335) [kworker/2:1H]
(root,0,0,00:00:00/626-00:21:26,342) [raid5wq]
(root,0,0,01:09:23/626-00:21:26,392) [jbd2/sda1-8]
(root,0,0,00:00:00/626-00:21:26,393) [ext4-rsv-conver]
(root,0,0,00:00:36/626-00:21:26,395) [kworker/3:1H]
(root,0,0,00:03:08/626-00:21:26,398) [kworker/5:1H]
(git,1720560,989392,00:00:44/04:30:17,422) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,0,0,00:04:15/626-00:21:26,431) [kworker/6:1H]
(root,0,0,00:01:59/626-00:21:26,464) [kworker/0:1H]
(root,130708,35772,01:15:51/626-00:21:25,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/626-00:21:25,476) [iscsi_eh]
(root,0,0,00:00:00/626-00:21:25,485) [ib-comp-wq]
(root,0,0,00:00:00/626-00:21:25,486) [ib_mcast]
(root,0,0,00:00:00/626-00:21:25,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/626-00:21:25,494) [rdma_cm]
(root,97708,1596,00:00:00/626-00:21:25,498) /sbin/lvmetad -f
(root,43436,3896,00:04:56/626-00:21:25,508) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/04:30:14,559) [kworker/3:0]
(systemd-timesync,141928,2684,00:03:01/626-00:21:25,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/626-00:21:23,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:27:22/626-00:21:20,1244) /usr/sbin/irqbalance --foreground
(root,383036,2428,00:18:10/626-00:21:20,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:30/626-00:21:20,1251) /usr/sbin/rsyslogd -n
(clamav,306860,20976,00:10:39/626-00:21:20,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:01:22/626-00:21:20,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:37/626-00:21:20,1289) /usr/sbin/cron -f
(root,286252,6272,00:35:00/626-00:21:20,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:26/626-00:21:20,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/626-00:21:20,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/626-00:21:20,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/626-00:21:20,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:33:01/626-00:21:20,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:02:18/626-00:21:20,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:52/626-00:21:20,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/626-00:21:20,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/626-00:21:20,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:57/626-00:21:20,1379) nginx: worker process
(www-data,143788,3960,00:00:09/626-00:21:20,1380) nginx: worker process
(www-data,143788,5000,00:00:44/626-00:21:20,1381) nginx: worker process
(www-data,143788,3964,00:00:01/626-00:21:20,1382) nginx: worker process
(www-data,143788,4056,00:00:00/626-00:21:20,1383) nginx: worker process
(www-data,143788,4184,00:00:00/626-00:21:20,1384) nginx: worker process
(www-data,143788,4056,00:00:00/626-00:21:20,1386) nginx: worker process
(www-data,143788,4184,00:00:00/626-00:21:20,1388) nginx: worker process
(root,14888,1756,00:00:00/626-00:21:20,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:44/626-00:21:20,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:03/626-00:21:19,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/626-00:21:19,1498) runsv redis-exporter
(root,4396,712,00:00:07/626-00:21:19,1500) runsv node-exporter
(root,4396,820,00:00:06/626-00:21:19,1501) runsv prometheus
(root,4396,824,00:00:06/626-00:21:19,1502) runsv sidekiq
(root,4396,720,00:00:06/626-00:21:19,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/626-00:21:19,1507) runsv alertmanager
(root,4396,856,00:00:05/626-00:21:19,1509) runsv postgresql
(root,4396,744,00:00:07/626-00:21:19,1510) runsv postgres-exporter
(root,4396,788,00:00:06/626-00:21:19,1511) runsv grafana
(root,4396,780,00:00:06/626-00:21:19,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/626-00:21:19,1513) runsv logrotate
(root,4396,856,00:00:05/626-00:21:19,1514) runsv puma
(root,4396,744,00:00:06/626-00:21:19,1515) runsv nginx
(root,4396,740,00:00:06/626-00:21:19,1516) runsv gitaly
(root,4396,860,00:00:05/626-00:21:19,1517) runsv redis
(root,4396,760,00:00:06/626-00:21:19,1519) runsv registry
(root,4540,864,00:00:06/626-00:21:19,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/626-00:21:19,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/626-00:21:19,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:53:18/626-00:21:19,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:11:05/626-00:21:19,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/626-00:21:19,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/626-00:21:19,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/626-00:21:19,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/626-00:21:19,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/626-00:21:19,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/626-00:21:19,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:18/626-00:21:19,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:47/626-00:21:19,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/626-00:21:19,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:47/626-00:21:19,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/626-00:21:19,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:19/4-22:23:49,2356) [kworker/5:2]
(root,0,0,00:00:01/07:07:02,3144) [kworker/4:0]
(root,0,0,00:00:04/01:01:05,4419) [kworker/u16:2]
(git,1650928,977380,00:00:09/57:56,5095) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8311416,73428,00:00:00/57:50,5150) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314424,75372,00:00:01/57:45,5164) postgres: gitlab gitlabhq_production [local] idle
(git,1652976,975112,00:00:07/57:16,5336) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(gitlab-psql,8309920,61520,00:00:01/56:51,5388) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,4932,00:00:00/04:05:10,6043) /lib/systemd/systemd-resolved
(root,4628,796,00:00:00/484-08:01:24,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,776344,12604,00:09:36/484-08:01:24,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87232,8412,00:40:32/484-08:01:24,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:21/484-08:01:24,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/53:46,8604) [kworker/6:2]
(root,0,0,00:00:00/53:45,8663) [kworker/1:0]
(root,0,0,00:00:00/53:44,8666) [kworker/2:1]
(git,1779440,1037620,00:00:25/03:50:57,8799) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/47:27,10914) [kworker/7:0]
(gitlab-psql,8312564,73324,00:00:00/47:25,10944) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:23/22-21:30:38,12666) [kworker/2:2]
(gitlab-psql,8307216,50732,00:00:00/32:58,13318) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:18/6-05:08:13,14126) [kworker/6:0]
(gitlab-psql,8311884,66712,00:00:00/23:31,14775) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,47664,00:00:00/22:12,15019) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309824,61124,00:00:00/20:39,15239) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47836,00:00:00/18:05,15673) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/15:21,16129) [kworker/u16:0]
(gitlab-psql,8311472,64712,00:00:00/14:31,16216) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/07:56,17265) [kworker/u16:1]
(gitlab-psql,8314468,75484,00:00:00/07:27,17317) postgres: gitlab gitlabhq_production [local] idle
(root,4628,800,00:00:00/05:44,17595) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,740,00:00:00/05:44,17599) sleep 600
(root,0,0,00:00:00/04:51,17938) [kworker/6:1]
(gitlab-psql,8306496,41888,00:00:00/04:28,18073) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311544,63940,00:00:00/04:28,18074) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8308344,54456,00:00:00/04:28,18075) postgres: gitlab gitlabhq_production [local] idle
(git,1515224,920236,00:00:00/03:35,18223) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8307304,54988,00:00:00/02:33,18390) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306884,46088,00:00:00/00:39,18696) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3648,00:00:00/00:00,18851) /bin/bash /usr/bin/check_mk_agent
(root,36700,3212,00:00:00/00:00,18869) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1212,00:00:00/00:00,18870) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1766128,1045420,00:00:51/05:33:18,21924) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1747696,1027512,00:00:17/02:25:36,22417) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:03:19/26-00:53:23,23207) [kworker/0:2]
(root,0,0,00:00:30/8-08:12:28,27850) [kworker/3:1]
(root,0,0,00:00:00/01:49:27,28327) [kworker/5:1]
(gitlab-prometheus,1795260,12304,08:12:38/230-00:12:49,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:24:27/230-00:12:49,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,132748,1-18:37:19/230-00:12:48,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45716,5-04:18:43/230-00:12:48,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39040,1-05:37:01/230-00:12:48,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,48320,03:34:25/230-00:12:48,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/230-00:12:47,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:32/230-00:12:47,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/230-00:12:47,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/230-00:12:47,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/230-00:12:47,29021) nginx: worker process
(gitlab-www,67708,25112,05:58:16/230-00:12:47,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/230-00:12:47,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/230-00:12:47,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/230-00:12:47,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:40/230-00:12:47,29026) nginx: cache manager process
(gitlab-prometheus,719468,15340,1-04:10:02/230-00:12:46,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,13972,1-05:19:58/230-00:12:46,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:18:15/230-00:12:45,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3217432,161144,2-14:47:03/230-00:12:45,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,276656,00:14:31/230-00:12:45,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:31/230-00:12:45,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:50/230-00:12:45,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:32/230-00:12:45,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,04:01:12/230-00:12:45,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:23/230-00:12:45,29064) postgres: logical replication launcher   
(git,1461948,919212,03:46:34/230-00:12:44,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16564,12-15:42:51/230-00:12:43,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16028,09:14:27/230-00:12:43,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108960,19:31:01/230-00:12:43,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:31:39/230-00:12:43,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,13252,01:04:00/230-00:12:43,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:54/230-00:12:39,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4919312,1211532,35-04:57:03/230-00:12:39,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,87200,3-11:39:26/230-00:12:27,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-15:11:05/230-00:12:24,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(root,0,0,00:00:00/04:50:11,29331) [kworker/0:0]
(gitlab-psql,8306184,34736,00:30:05/230-00:11:20,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/230-00:11:20,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:24/13-08:56:42,30723) [kworker/7:1]
(root,0,0,00:00:08/2-06:03:03,31693) [kworker/1:2]
(root,0,0,00:00:03/1-07:40:15,31788) [kworker/4:1]
(git,1736944,988784,00:00:11/01:28:16,32476) puma: cluster worker 6: 29076 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-22 00:55

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9129b98c3de

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8276,00:29:07/624-16:07:41,1) /sbin/init
(root,0,0,00:00:23/624-16:07:41,2) [kthreadd]
(root,0,0,00:00:00/624-16:07:41,4) [kworker/0:0H]
(root,0,0,00:00:00/624-16:07:41,6) [mm_percpu_wq]
(root,0,0,00:07:04/624-16:07:41,7) [ksoftirqd/0]
(root,0,0,19:27:50/624-16:07:41,8) [rcu_sched]
(root,0,0,00:00:00/624-16:07:41,9) [rcu_bh]
(root,0,0,00:00:19/624-16:07:41,10) [migration/0]
(root,0,0,00:03:26/624-16:07:41,11) [watchdog/0]
(root,0,0,00:00:00/624-16:07:41,12) [cpuhp/0]
(root,0,0,00:00:00/624-16:07:41,13) [cpuhp/1]
(root,0,0,00:03:11/624-16:07:41,14) [watchdog/1]
(root,0,0,00:00:18/624-16:07:41,15) [migration/1]
(root,0,0,00:03:52/624-16:07:41,16) [ksoftirqd/1]
(root,0,0,00:00:00/624-16:07:41,18) [kworker/1:0H]
(root,0,0,00:00:00/624-16:07:41,19) [cpuhp/2]
(root,0,0,00:03:24/624-16:07:41,20) [watchdog/2]
(root,0,0,00:00:17/624-16:07:41,21) [migration/2]
(root,0,0,00:02:51/624-16:07:41,22) [ksoftirqd/2]
(root,0,0,00:00:00/624-16:07:41,24) [kworker/2:0H]
(root,0,0,00:00:00/624-16:07:41,25) [cpuhp/3]
(root,0,0,00:03:07/624-16:07:41,26) [watchdog/3]
(root,0,0,00:00:16/624-16:07:41,27) [migration/3]
(root,0,0,00:02:16/624-16:07:41,28) [ksoftirqd/3]
(root,0,0,00:00:00/624-16:07:41,30) [kworker/3:0H]
(root,0,0,00:00:00/624-16:07:41,31) [cpuhp/4]
(root,0,0,00:03:21/624-16:07:41,32) [watchdog/4]
(root,0,0,00:00:14/624-16:07:41,33) [migration/4]
(root,0,0,00:07:04/624-16:07:41,34) [ksoftirqd/4]
(root,0,0,00:00:00/624-16:07:41,36) [kworker/4:0H]
(root,0,0,00:00:00/624-16:07:41,37) [cpuhp/5]
(root,0,0,00:03:18/624-16:07:41,38) [watchdog/5]
(root,0,0,00:00:15/624-16:07:41,39) [migration/5]
(root,0,0,00:04:24/624-16:07:41,40) [ksoftirqd/5]
(root,0,0,00:00:00/624-16:07:41,42) [kworker/5:0H]
(root,0,0,00:00:00/624-16:07:41,43) [cpuhp/6]
(root,0,0,00:03:09/624-16:07:41,44) [watchdog/6]
(root,0,0,00:00:26/624-16:07:41,45) [migration/6]
(root,0,0,00:02:23/624-16:07:41,46) [ksoftirqd/6]
(root,0,0,00:00:00/624-16:07:41,48) [kworker/6:0H]
(root,0,0,00:00:00/624-16:07:41,49) [cpuhp/7]
(root,0,0,00:03:02/624-16:07:41,50) [watchdog/7]
(root,0,0,00:00:22/624-16:07:41,51) [migration/7]
(root,0,0,00:02:10/624-16:07:41,52) [ksoftirqd/7]
(root,0,0,00:00:00/624-16:07:41,54) [kworker/7:0H]
(root,0,0,00:00:00/624-16:07:41,55) [kdevtmpfs]
(root,0,0,00:00:00/624-16:07:41,56) [netns]
(root,0,0,00:00:00/624-16:07:41,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/624-16:07:41,58) [kauditd]
(root,0,0,00:01:38/624-16:07:41,62) [khungtaskd]
(root,0,0,00:00:00/624-16:07:41,63) [oom_reaper]
(root,0,0,00:00:00/624-16:07:41,64) [writeback]
(root,0,0,00:00:02/624-16:07:41,65) [kcompactd0]
(root,0,0,00:00:00/624-16:07:41,66) [ksmd]
(root,0,0,00:08:29/624-16:07:41,67) [khugepaged]
(root,0,0,00:00:00/624-16:07:41,68) [crypto]
(root,0,0,00:00:00/624-16:07:41,69) [kintegrityd]
(root,0,0,00:00:00/624-16:07:41,70) [kblockd]
(root,0,0,00:00:00/624-16:07:41,71) [ata_sff]
(root,0,0,00:00:00/624-16:07:41,72) [md]
(root,0,0,00:00:00/624-16:07:41,73) [edac-poller]
(root,0,0,00:00:00/624-16:07:41,74) [devfreq_wq]
(root,0,0,00:00:00/624-16:07:41,75) [watchdogd]
(root,0,0,02:05:58/624-16:07:41,79) [kswapd0]
(root,0,0,00:00:00/624-16:07:41,80) [kworker/u17:0]
(root,0,0,00:00:00/624-16:07:41,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/624-16:07:41,123) [kthrotld]
(root,0,0,00:00:00/624-16:07:41,124) [acpi_thermal_pm]
(root,0,0,00:00:00/624-16:07:41,130) [scsi_eh_0]
(root,0,0,00:00:00/624-16:07:41,131) [scsi_tmf_0]
(root,0,0,00:00:00/624-16:07:41,132) [scsi_eh_1]
(root,0,0,00:00:00/624-16:07:41,133) [scsi_tmf_1]
(root,0,0,00:00:00/624-16:07:40,139) [ipv6_addrconf]
(root,0,0,00:00:00/624-16:07:40,148) [kstrp]
(root,0,0,00:00:00/624-16:07:40,166) [charger_manager]
(root,0,0,00:00:00/624-16:07:40,223) [scsi_eh_2]
(root,0,0,00:00:00/624-16:07:40,224) [scsi_tmf_2]
(root,0,0,00:03:33/624-16:07:39,267) [kworker/7:1H]
(root,0,0,00:28:21/624-16:07:35,268) [kworker/4:1H]
(root,0,0,00:00:59/624-16:07:35,275) [kworker/1:1H]
(root,0,0,00:00:42/624-16:07:34,335) [kworker/2:1H]
(root,0,0,00:00:00/624-16:07:33,342) [raid5wq]
(root,0,0,01:09:14/624-16:07:33,392) [jbd2/sda1-8]
(root,0,0,00:00:00/624-16:07:33,393) [ext4-rsv-conver]
(root,0,0,00:00:36/624-16:07:33,395) [kworker/3:1H]
(root,0,0,00:03:08/624-16:07:33,398) [kworker/5:1H]
(root,0,0,00:04:14/624-16:07:33,431) [kworker/6:1H]
(root,0,0,00:01:59/624-16:07:33,464) [kworker/0:1H]
(root,265960,120276,01:15:41/624-16:07:32,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/624-16:07:32,476) [iscsi_eh]
(root,0,0,00:00:00/624-16:07:32,485) [ib-comp-wq]
(root,0,0,00:00:00/624-16:07:32,486) [ib_mcast]
(root,0,0,00:00:00/624-16:07:32,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/624-16:07:32,494) [rdma_cm]
(root,97708,1596,00:00:00/624-16:07:32,498) /sbin/lvmetad -f
(root,43436,3896,00:04:56/624-16:07:32,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:01/624-16:07:32,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/624-16:07:30,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:27:10/624-16:07:27,1244) /usr/sbin/irqbalance --foreground
(root,383268,2384,00:18:08/624-16:07:27,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:27/624-16:07:27,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21524,00:10:39/624-16:07:27,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:01:14/624-16:07:27,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:36/624-16:07:27,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:56/624-16:07:27,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:25/624-16:07:27,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/624-16:07:27,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/624-16:07:27,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/624-16:07:27,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:57/624-16:07:27,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,12:00:41/624-16:07:27,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:51/624-16:07:27,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/624-16:07:27,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/624-16:07:27,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:57/624-16:07:27,1379) nginx: worker process
(www-data,143788,3960,00:00:09/624-16:07:27,1380) nginx: worker process
(www-data,143788,5000,00:00:44/624-16:07:27,1381) nginx: worker process
(www-data,143788,3964,00:00:01/624-16:07:27,1382) nginx: worker process
(www-data,143788,4056,00:00:00/624-16:07:27,1383) nginx: worker process
(www-data,143788,4184,00:00:00/624-16:07:27,1384) nginx: worker process
(www-data,143788,4056,00:00:00/624-16:07:27,1386) nginx: worker process
(www-data,143788,4184,00:00:00/624-16:07:27,1388) nginx: worker process
(root,14888,1756,00:00:00/624-16:07:27,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:42/624-16:07:27,1404) /usr/sbin/sshd -D
(root,4548,1332,00:15:01/624-16:07:26,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/624-16:07:26,1498) runsv redis-exporter
(root,4396,712,00:00:07/624-16:07:26,1500) runsv node-exporter
(root,4396,820,00:00:06/624-16:07:26,1501) runsv prometheus
(root,4396,824,00:00:06/624-16:07:26,1502) runsv sidekiq
(root,4396,720,00:00:06/624-16:07:26,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/624-16:07:26,1507) runsv alertmanager
(root,4396,856,00:00:05/624-16:07:26,1509) runsv postgresql
(root,4396,744,00:00:07/624-16:07:26,1510) runsv postgres-exporter
(root,4396,788,00:00:06/624-16:07:26,1511) runsv grafana
(root,4396,780,00:00:06/624-16:07:26,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/624-16:07:26,1513) runsv logrotate
(root,4396,856,00:00:05/624-16:07:26,1514) runsv puma
(root,4396,744,00:00:06/624-16:07:26,1515) runsv nginx
(root,4396,740,00:00:06/624-16:07:26,1516) runsv gitaly
(root,4396,860,00:00:05/624-16:07:26,1517) runsv redis
(root,4396,760,00:00:06/624-16:07:26,1519) runsv registry
(root,4540,864,00:00:06/624-16:07:26,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/624-16:07:26,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/624-16:07:26,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:53:01/624-16:07:26,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:10:53/624-16:07:26,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/624-16:07:26,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/624-16:07:26,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/624-16:07:26,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/624-16:07:26,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/624-16:07:26,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/624-16:07:26,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:14/624-16:07:26,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:44/624-16:07:26,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/624-16:07:26,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:47/624-16:07:26,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/624-16:07:26,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/02:15:07,2115) [kworker/3:0]
(root,0,0,00:00:14/3-14:09:56,2356) [kworker/5:2]
(root,4628,796,00:00:00/482-23:47:31,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,874652,32304,00:09:35/482-23:47:31,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87232,8412,00:40:21/482-23:47:31,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:21/482-23:47:31,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:02:32/42-23:19:33,9942) [kworker/4:0]
(root,0,0,00:00:00/11:15:39,11001) [kworker/2:0]
(root,0,0,00:00:00/23:25:52,12575) [kworker/7:2]
(root,0,0,00:01:18/21-13:16:45,12666) [kworker/2:2]
(root,0,0,00:01:01/4-20:54:20,14126) [kworker/6:0]
(git,1757424,1001004,00:00:20/57:22,14569) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(gitlab-psql,8313988,70776,00:00:02/56:47,14638) postgres: gitlab gitlabhq_production [local] idle
(git,1671408,983716,00:00:10/56:22,14739) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1664240,981416,00:00:08/55:22,14904) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8310648,67736,00:00:01/54:37,14995) postgres: gitlab gitlabhq_production [local] idle
(git,1655024,980008,00:00:07/54:22,15073) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(gitlab-psql,8314400,68380,00:00:01/53:41,15163) postgres: gitlab gitlabhq_production [local] idle
(git,1825008,1007716,00:00:17/53:22,15247) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1725680,1012448,00:00:16/52:22,15413) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,4628,804,00:00:00/51:54,15475) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8309692,60604,00:00:01/51:37,15510) postgres: gitlab gitlabhq_production [local] idle
(git,1587416,972300,00:00:07/51:22,15594) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8309896,61776,00:00:01/51:15,15619) postgres: gitlab gitlabhq_production [local] idle
(git,1680112,992556,00:00:09/50:22,15763) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-psql,8314484,76928,00:00:01/49:02,15966) postgres: gitlab gitlabhq_production [local] idle
(root,4532,812,00:00:00/41:54,17081) sleep 3000
(gitlab-psql,8311804,65232,00:00:00/41:36,17114) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312972,78012,00:00:00/37:10,17860) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8315276,69324,00:00:01/29:29,19106) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8315324,79904,00:00:00/27:45,19348) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/24:24,20135) [kworker/u16:3]
(root,0,0,00:00:00/24:24,20136) [kworker/0:0]
(gitlab-psql,8306352,45712,00:00:00/17:39,21401) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,4892,00:00:00/03:30:44,22151) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/10:57,22467) [kworker/u16:0]
(root,0,0,00:00:00/03:25:29,23072) [kworker/1:1]
(root,0,0,00:03:08/24-16:39:30,23207) [kworker/0:2]
(root,0,0,00:00:00/16:33:25,23282) [kworker/4:2]
(root,0,0,00:00:00/04:00,23576) [kworker/u16:1]
(root,0,0,00:00:00/16:28:11,24109) [kworker/6:1]
(gitlab-psql,8306856,42344,00:00:00/00:18,24164) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3716,00:00:00/00:00,24276) /bin/bash /usr/bin/check_mk_agent
(root,36700,3204,00:00:00/00:00,24294) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1176,00:00:00/00:00,24295) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:25/6-23:58:35,27850) [kworker/3:1]
(gitlab-prometheus,1795260,14832,08:09:43/228-15:58:56,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:23:57/228-15:58:56,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,138028,1-18:18:53/228-15:58:55,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45600,5-03:33:22/228-15:58:55,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,41928,1-05:26:39/228-15:58:55,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,51132,03:32:57/228-15:58:55,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/228-15:58:54,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:31/228-15:58:54,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/228-15:58:54,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/228-15:58:54,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/228-15:58:54,29021) nginx: worker process
(gitlab-www,67860,25228,05:56:29/228-15:58:54,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/228-15:58:54,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/228-15:58:54,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/228-15:58:54,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:39/228-15:58:54,29026) nginx: cache manager process
(gitlab-prometheus,719468,16860,1-03:59:58/228-15:58:53,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15352,1-05:09:17/228-15:58:53,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:18:09/228-15:58:52,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3186196,166792,2-14:24:03/228-15:58:52,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,274288,00:14:24/228-15:58:52,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:29/228-15:58:52,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:46/228-15:58:52,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:26/228-15:58:52,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:59:43/228-15:58:52,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:23/228-15:58:52,29064) postgres: logical replication launcher   
(git,1461948,919292,03:45:11/228-15:58:51,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16992,12-13:52:22/228-15:58:50,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16740,09:11:11/228-15:58:50,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108604,19:24:34/228-15:58:50,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:25:23/228-15:58:50,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,18644,01:03:42/228-15:58:50,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:50/228-15:58:46,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918956,1199888,34-23:46:46/228-15:58:46,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,85996,3-11:11:09/228-15:58:34,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-14:57:00/228-15:58:31,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:29:55/228-15:57:27,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/228-15:57:27,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/18:44:03,30302) [kworker/5:0]
(root,0,0,00:01:15/12-00:42:49,30723) [kworker/7:1]
(root,0,0,00:00:03/21:49:10,31693) [kworker/1:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-20 16:41

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9129a7dae5c

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8260,00:29:05/624-01:07:29,1) /sbin/init
(root,0,0,00:00:23/624-01:07:29,2) [kthreadd]
(root,0,0,00:00:00/624-01:07:29,4) [kworker/0:0H]
(root,0,0,00:00:00/624-01:07:29,6) [mm_percpu_wq]
(root,0,0,00:07:03/624-01:07:29,7) [ksoftirqd/0]
(root,0,0,19:26:34/624-01:07:29,8) [rcu_sched]
(root,0,0,00:00:00/624-01:07:29,9) [rcu_bh]
(root,0,0,00:00:19/624-01:07:29,10) [migration/0]
(root,0,0,00:03:26/624-01:07:29,11) [watchdog/0]
(root,0,0,00:00:00/624-01:07:29,12) [cpuhp/0]
(root,0,0,00:00:00/624-01:07:29,13) [cpuhp/1]
(root,0,0,00:03:11/624-01:07:29,14) [watchdog/1]
(root,0,0,00:00:18/624-01:07:29,15) [migration/1]
(root,0,0,00:03:52/624-01:07:29,16) [ksoftirqd/1]
(root,0,0,00:00:00/624-01:07:29,18) [kworker/1:0H]
(root,0,0,00:00:00/624-01:07:29,19) [cpuhp/2]
(root,0,0,00:03:24/624-01:07:29,20) [watchdog/2]
(root,0,0,00:00:17/624-01:07:29,21) [migration/2]
(root,0,0,00:02:50/624-01:07:29,22) [ksoftirqd/2]
(root,0,0,00:00:00/624-01:07:29,24) [kworker/2:0H]
(root,0,0,00:00:00/624-01:07:29,25) [cpuhp/3]
(root,0,0,00:03:07/624-01:07:29,26) [watchdog/3]
(root,0,0,00:00:16/624-01:07:29,27) [migration/3]
(root,0,0,00:02:16/624-01:07:29,28) [ksoftirqd/3]
(root,0,0,00:00:00/624-01:07:29,30) [kworker/3:0H]
(root,0,0,00:00:00/624-01:07:29,31) [cpuhp/4]
(root,0,0,00:03:21/624-01:07:29,32) [watchdog/4]
(root,0,0,00:00:14/624-01:07:29,33) [migration/4]
(root,0,0,00:07:04/624-01:07:29,34) [ksoftirqd/4]
(root,0,0,00:00:00/624-01:07:29,36) [kworker/4:0H]
(root,0,0,00:00:00/624-01:07:29,37) [cpuhp/5]
(root,0,0,00:03:18/624-01:07:29,38) [watchdog/5]
(root,0,0,00:00:15/624-01:07:29,39) [migration/5]
(root,0,0,00:04:24/624-01:07:29,40) [ksoftirqd/5]
(root,0,0,00:00:00/624-01:07:29,42) [kworker/5:0H]
(root,0,0,00:00:00/624-01:07:29,43) [cpuhp/6]
(root,0,0,00:03:09/624-01:07:29,44) [watchdog/6]
(root,0,0,00:00:26/624-01:07:29,45) [migration/6]
(root,0,0,00:02:23/624-01:07:29,46) [ksoftirqd/6]
(root,0,0,00:00:00/624-01:07:29,48) [kworker/6:0H]
(root,0,0,00:00:00/624-01:07:29,49) [cpuhp/7]
(root,0,0,00:03:01/624-01:07:29,50) [watchdog/7]
(root,0,0,00:00:22/624-01:07:29,51) [migration/7]
(root,0,0,00:02:10/624-01:07:29,52) [ksoftirqd/7]
(root,0,0,00:00:00/624-01:07:29,54) [kworker/7:0H]
(root,0,0,00:00:00/624-01:07:29,55) [kdevtmpfs]
(root,0,0,00:00:00/624-01:07:29,56) [netns]
(root,0,0,00:00:00/624-01:07:29,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/624-01:07:29,58) [kauditd]
(root,0,0,00:01:38/624-01:07:29,62) [khungtaskd]
(root,0,0,00:00:00/624-01:07:29,63) [oom_reaper]
(root,0,0,00:00:00/624-01:07:29,64) [writeback]
(root,0,0,00:00:02/624-01:07:29,65) [kcompactd0]
(root,0,0,00:00:00/624-01:07:29,66) [ksmd]
(root,0,0,00:08:28/624-01:07:29,67) [khugepaged]
(root,0,0,00:00:00/624-01:07:29,68) [crypto]
(root,0,0,00:00:00/624-01:07:29,69) [kintegrityd]
(root,0,0,00:00:00/624-01:07:29,70) [kblockd]
(root,0,0,00:00:00/624-01:07:29,71) [ata_sff]
(root,0,0,00:00:00/624-01:07:29,72) [md]
(root,0,0,00:00:00/624-01:07:29,73) [edac-poller]
(root,0,0,00:00:00/624-01:07:29,74) [devfreq_wq]
(root,0,0,00:00:00/624-01:07:29,75) [watchdogd]
(root,0,0,02:05:58/624-01:07:29,79) [kswapd0]
(root,0,0,00:00:00/624-01:07:29,80) [kworker/u17:0]
(root,0,0,00:00:00/624-01:07:29,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/624-01:07:29,123) [kthrotld]
(root,0,0,00:00:00/624-01:07:29,124) [acpi_thermal_pm]
(root,0,0,00:00:00/624-01:07:29,130) [scsi_eh_0]
(root,0,0,00:00:00/624-01:07:29,131) [scsi_tmf_0]
(root,0,0,00:00:00/624-01:07:29,132) [scsi_eh_1]
(root,0,0,00:00:00/624-01:07:29,133) [scsi_tmf_1]
(root,0,0,00:00:00/624-01:07:28,139) [ipv6_addrconf]
(root,0,0,00:00:00/624-01:07:28,148) [kstrp]
(root,0,0,00:00:00/624-01:07:28,166) [charger_manager]
(root,0,0,00:00:00/624-01:07:28,223) [scsi_eh_2]
(root,0,0,00:00:00/624-01:07:28,224) [scsi_tmf_2]
(root,0,0,00:03:33/624-01:07:27,267) [kworker/7:1H]
(root,0,0,00:28:19/624-01:07:23,268) [kworker/4:1H]
(root,0,0,00:00:58/624-01:07:23,275) [kworker/1:1H]
(root,0,0,00:00:42/624-01:07:22,335) [kworker/2:1H]
(root,0,0,00:00:00/624-01:07:21,342) [raid5wq]
(root,0,0,01:09:09/624-01:07:21,392) [jbd2/sda1-8]
(root,0,0,00:00:00/624-01:07:21,393) [ext4-rsv-conver]
(root,0,0,00:00:36/624-01:07:21,395) [kworker/3:1H]
(root,0,0,00:03:07/624-01:07:21,398) [kworker/5:1H]
(root,0,0,00:04:14/624-01:07:21,431) [kworker/6:1H]
(root,0,0,00:01:59/624-01:07:21,464) [kworker/0:1H]
(root,257768,100288,01:15:37/624-01:07:20,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/624-01:07:20,476) [iscsi_eh]
(root,0,0,00:00:00/624-01:07:20,485) [ib-comp-wq]
(root,0,0,00:00:00/624-01:07:20,486) [ib_mcast]
(root,0,0,00:00:00/624-01:07:20,487) [ib_nl_sa_wq]
(git,1755380,1004392,00:00:50/06:42:54,493) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/624-01:07:20,494) [rdma_cm]
(root,97708,1596,00:00:00/624-01:07:20,498) /sbin/lvmetad -f
(root,43436,3896,00:04:55/624-01:07:20,508) /lib/systemd/systemd-udevd
(gitlab-psql,8307132,48732,00:00:00/35:34,509) postgres: gitlab gitlabhq_production [local] idle
(systemd-timesync,141928,2684,00:03:00/624-01:07:20,713) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/06:40:50,941) [kworker/1:1]
(root,25992,3444,00:00:03/624-01:07:18,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:00/32:45,1024) [kworker/2:1]
(git,1713396,969428,00:00:30/03:23:12,1202) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,110516,3424,01:27:05/624-01:07:15,1244) /usr/sbin/irqbalance --foreground
(root,382992,2384,00:18:06/624-01:07:15,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:26/624-01:07:15,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21524,00:10:38/624-01:07:15,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:01:10/624-01:07:15,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:36/624-01:07:15,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:54/624-01:07:15,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:25/624-01:07:15,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/624-01:07:15,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/624-01:07:15,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/624-01:07:15,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:55/624-01:07:15,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:59:56/624-01:07:15,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:51/624-01:07:15,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/624-01:07:15,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/624-01:07:15,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:57/624-01:07:15,1379) nginx: worker process
(www-data,143788,3960,00:00:09/624-01:07:15,1380) nginx: worker process
(www-data,143788,5000,00:00:44/624-01:07:15,1381) nginx: worker process
(www-data,143788,3964,00:00:01/624-01:07:15,1382) nginx: worker process
(www-data,143788,4056,00:00:00/624-01:07:15,1383) nginx: worker process
(www-data,143788,4184,00:00:00/624-01:07:15,1384) nginx: worker process
(www-data,143788,4056,00:00:00/624-01:07:15,1386) nginx: worker process
(www-data,143788,4184,00:00:00/624-01:07:15,1388) nginx: worker process
(root,14888,1756,00:00:00/624-01:07:15,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:40/624-01:07:15,1404) /usr/sbin/sshd -D
(gitlab-psql,8307132,48400,00:00:00/30:26,1435) postgres: gitlab gitlabhq_production [local] idle
(root,4548,1332,00:15:00/624-01:07:14,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/624-01:07:14,1498) runsv redis-exporter
(root,4396,712,00:00:07/624-01:07:14,1500) runsv node-exporter
(root,4396,820,00:00:06/624-01:07:14,1501) runsv prometheus
(root,4396,824,00:00:06/624-01:07:14,1502) runsv sidekiq
(root,4396,720,00:00:06/624-01:07:14,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/624-01:07:14,1507) runsv alertmanager
(root,4396,856,00:00:05/624-01:07:14,1509) runsv postgresql
(root,4396,744,00:00:07/624-01:07:14,1510) runsv postgres-exporter
(root,4396,788,00:00:06/624-01:07:14,1511) runsv grafana
(root,4396,780,00:00:06/624-01:07:14,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/624-01:07:14,1513) runsv logrotate
(root,4396,856,00:00:05/624-01:07:14,1514) runsv puma
(root,4396,744,00:00:06/624-01:07:14,1515) runsv nginx
(root,4396,740,00:00:06/624-01:07:14,1516) runsv gitaly
(root,4396,860,00:00:05/624-01:07:14,1517) runsv redis
(root,4396,760,00:00:06/624-01:07:14,1519) runsv registry
(root,4540,864,00:00:06/624-01:07:14,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/624-01:07:14,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/624-01:07:14,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:52:54/624-01:07:14,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:10:47/624-01:07:14,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/624-01:07:14,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/624-01:07:14,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/624-01:07:14,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/624-01:07:14,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/624-01:07:14,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/624-01:07:14,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:13/624-01:07:14,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:43/624-01:07:14,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/624-01:07:14,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:47/624-01:07:14,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/624-01:07:14,1558) svlogd -tt /var/log/gitlab/postgresql
(gitlab-psql,8307264,53028,00:00:00/25:33,2293) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306808,51288,00:00:00/25:33,2295) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:11/2-23:09:44,2356) [kworker/5:2]
(gitlab-psql,8307024,47720,00:00:00/17:05,3672) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309656,53156,00:00:00/15:33,3902) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/11:42,4533) [kworker/u16:1]
(gitlab-psql,8307140,48104,00:00:00/08:13,5113) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47800,00:00:00/07:13,5276) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48028,00:00:00/05:12,5589) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305336,39112,00:00:00/02:26,5987) postgres: gitlab gitlabhq_production [local] idle
(root,72296,5760,00:00:00/01:32,6137) sshd: [accepted]
(sshd,72296,748,00:00:00/01:23,6152) sshd: [net]
(root,4628,796,00:00:00/482-08:47:19,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,874652,17832,00:09:34/482-08:47:19,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87232,8412,00:40:15/482-08:47:19,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:20/482-08:47:19,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/00:47,6276) [kworker/u16:0]
(root,20180,3600,00:00:00/00:00,6513) /bin/bash /usr/bin/check_mk_agent
(root,36700,3048,00:00:00/00:00,6533) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1160,00:00:00/00:00,6534) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1598680,984224,00:00:15/02:46:12,7713) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:02:30/42-08:19:21,9942) [kworker/4:0]
(root,0,0,00:00:00/08:25:40,12575) [kworker/7:2]
(root,0,0,00:01:16/20-22:16:33,12666) [kworker/2:2]
(git,1728756,991892,00:00:38/05:21:53,13881) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:53/4-05:54:08,14126) [kworker/6:0]
(git,1604824,991688,00:00:14/02:00:32,14965) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/01:39:35,21122) [kworker/3:0]
(git,1770224,1042892,00:01:00/07:45:14,21544) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,0,0,00:03:03/24-01:39:18,23207) [kworker/0:2]
(root,0,0,00:00:00/01:33:13,23282) [kworker/4:2]
(root,0,0,00:00:00/01:27:59,24109) [kworker/6:1]
(git,1780468,1054028,00:01:04/07:19:54,25900) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,0,0,00:00:23/6-08:58:23,27850) [kworker/3:1]
(gitlab-psql,8307260,55552,00:00:00/01:03:46,28175) postgres: gitlab gitlabhq_production [local] idle
(gitlab-prometheus,1795260,12332,08:08:21/228-00:58:44,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:23:43/228-00:58:44,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,136236,1-18:13:15/228-00:58:43,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45496,5-03:11:32/228-00:58:43,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,40360,1-05:22:21/228-00:58:43,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,49996,03:32:16/228-00:58:43,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/228-00:58:42,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24220,00:03:31/228-00:58:42,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/228-00:58:42,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/228-00:58:42,29020) nginx: worker process
(gitlab-www,69244,26056,00:01:58/228-00:58:42,29021) nginx: worker process
(gitlab-www,67860,25228,05:55:43/228-00:58:42,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/228-00:58:42,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/228-00:58:42,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/228-00:58:42,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:38/228-00:58:42,29026) nginx: cache manager process
(gitlab-prometheus,719468,14992,1-03:55:16/228-00:58:41,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14460,1-05:04:18/228-00:58:41,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:18:06/228-00:58:40,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3193252,162448,2-14:13:18/228-00:58:40,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,274288,00:14:23/228-00:58:40,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:28/228-00:58:40,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:45/228-00:58:40,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:23/228-00:58:40,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:59:03/228-00:58:40,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:23/228-00:58:40,29064) postgres: logical replication launcher   
(git,1461948,919268,03:44:38/228-00:58:39,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16900,12-13:00:29/228-00:58:38,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,14964,09:09:39/228-00:58:38,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108604,19:21:29/228-00:58:38,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:22:24/228-00:58:38,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15616,01:03:33/228-00:58:38,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:48/228-00:58:34,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1175124,34-21:22:13/228-00:58:34,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,85996,3-10:57:02/228-00:58:22,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333160,75592,1-14:50:08/228-00:58:19,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:29:49/228-00:57:15,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/228-00:57:15,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:44:18,30080) [kworker/0:1]
(systemd-resolve,70756,5704,00:00:00/09:31:15,30107) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/03:43:51,30302) [kworker/5:0]
(root,4628,820,00:00:00/51:42,30373) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:01:11/11-09:42:37,30723) [kworker/7:1]
(root,0,0,00:00:00/46:12,31278) [kworker/u16:2]
(root,0,0,00:00:01/06:48:58,31693) [kworker/1:2]
(root,4532,788,00:00:00/41:42,31967) sleep 3000
(gitlab-psql,8307144,52740,00:00:00/41:08,32087) postgres: gitlab gitlabhq_production [local] idle
(git,1745248,1023928,00:00:50/06:44:33,32495) puma: cluster worker 5: 29076 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-20 01:41

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9129badca49

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7984,00:29:00/622-00:14:51,1) /sbin/init
(root,0,0,00:00:23/622-00:14:51,2) [kthreadd]
(root,0,0,00:00:00/622-00:14:51,4) [kworker/0:0H]
(root,0,0,00:00:00/622-00:14:51,6) [mm_percpu_wq]
(root,0,0,00:07:02/622-00:14:51,7) [ksoftirqd/0]
(root,0,0,19:22:25/622-00:14:51,8) [rcu_sched]
(root,0,0,00:00:00/622-00:14:51,9) [rcu_bh]
(root,0,0,00:00:19/622-00:14:51,10) [migration/0]
(root,0,0,00:03:26/622-00:14:51,11) [watchdog/0]
(root,0,0,00:00:00/622-00:14:51,12) [cpuhp/0]
(root,0,0,00:00:00/622-00:14:51,13) [cpuhp/1]
(root,0,0,00:03:10/622-00:14:51,14) [watchdog/1]
(root,0,0,00:00:18/622-00:14:51,15) [migration/1]
(root,0,0,00:03:51/622-00:14:51,16) [ksoftirqd/1]
(root,0,0,00:00:00/622-00:14:51,18) [kworker/1:0H]
(root,0,0,00:00:00/622-00:14:51,19) [cpuhp/2]
(root,0,0,00:03:23/622-00:14:51,20) [watchdog/2]
(root,0,0,00:00:17/622-00:14:51,21) [migration/2]
(root,0,0,00:02:50/622-00:14:51,22) [ksoftirqd/2]
(root,0,0,00:00:00/622-00:14:51,24) [kworker/2:0H]
(root,0,0,00:00:00/622-00:14:51,25) [cpuhp/3]
(root,0,0,00:03:07/622-00:14:51,26) [watchdog/3]
(root,0,0,00:00:16/622-00:14:51,27) [migration/3]
(root,0,0,00:02:15/622-00:14:51,28) [ksoftirqd/3]
(root,0,0,00:00:00/622-00:14:51,30) [kworker/3:0H]
(root,0,0,00:00:00/622-00:14:51,31) [cpuhp/4]
(root,0,0,00:03:20/622-00:14:51,32) [watchdog/4]
(root,0,0,00:00:14/622-00:14:51,33) [migration/4]
(root,0,0,00:07:02/622-00:14:51,34) [ksoftirqd/4]
(root,0,0,00:00:00/622-00:14:51,36) [kworker/4:0H]
(root,0,0,00:00:00/622-00:14:51,37) [cpuhp/5]
(root,0,0,00:03:17/622-00:14:51,38) [watchdog/5]
(root,0,0,00:00:15/622-00:14:51,39) [migration/5]
(root,0,0,00:04:23/622-00:14:51,40) [ksoftirqd/5]
(root,0,0,00:00:00/622-00:14:51,42) [kworker/5:0H]
(root,0,0,00:00:00/622-00:14:51,43) [cpuhp/6]
(root,0,0,00:03:08/622-00:14:51,44) [watchdog/6]
(root,0,0,00:00:26/622-00:14:51,45) [migration/6]
(root,0,0,00:02:22/622-00:14:51,46) [ksoftirqd/6]
(root,0,0,00:00:00/622-00:14:51,48) [kworker/6:0H]
(root,0,0,00:00:00/622-00:14:51,49) [cpuhp/7]
(root,0,0,00:03:01/622-00:14:51,50) [watchdog/7]
(root,0,0,00:00:22/622-00:14:51,51) [migration/7]
(root,0,0,00:02:10/622-00:14:51,52) [ksoftirqd/7]
(root,0,0,00:00:00/622-00:14:51,54) [kworker/7:0H]
(root,0,0,00:00:00/622-00:14:51,55) [kdevtmpfs]
(root,0,0,00:00:00/622-00:14:51,56) [netns]
(root,0,0,00:00:00/622-00:14:51,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/622-00:14:51,58) [kauditd]
(root,0,0,00:01:38/622-00:14:51,62) [khungtaskd]
(root,0,0,00:00:00/622-00:14:51,63) [oom_reaper]
(root,0,0,00:00:00/622-00:14:51,64) [writeback]
(root,0,0,00:00:02/622-00:14:51,65) [kcompactd0]
(root,0,0,00:00:00/622-00:14:51,66) [ksmd]
(root,0,0,00:08:26/622-00:14:51,67) [khugepaged]
(root,0,0,00:00:00/622-00:14:51,68) [crypto]
(root,0,0,00:00:00/622-00:14:51,69) [kintegrityd]
(root,0,0,00:00:00/622-00:14:51,70) [kblockd]
(root,0,0,00:00:00/622-00:14:51,71) [ata_sff]
(root,0,0,00:00:00/622-00:14:51,72) [md]
(root,0,0,00:00:00/622-00:14:51,73) [edac-poller]
(root,0,0,00:00:00/622-00:14:51,74) [devfreq_wq]
(root,0,0,00:00:00/622-00:14:51,75) [watchdogd]
(root,0,0,02:05:30/622-00:14:51,79) [kswapd0]
(root,0,0,00:00:00/622-00:14:51,80) [kworker/u17:0]
(root,0,0,00:00:00/622-00:14:51,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/622-00:14:51,123) [kthrotld]
(root,0,0,00:00:00/622-00:14:51,124) [acpi_thermal_pm]
(root,0,0,00:00:00/622-00:14:51,130) [scsi_eh_0]
(root,0,0,00:00:00/622-00:14:51,131) [scsi_tmf_0]
(root,0,0,00:00:00/622-00:14:51,132) [scsi_eh_1]
(root,0,0,00:00:00/622-00:14:51,133) [scsi_tmf_1]
(root,0,0,00:00:00/622-00:14:50,139) [ipv6_addrconf]
(root,0,0,00:00:00/622-00:14:50,148) [kstrp]
(root,0,0,00:00:00/622-00:14:50,166) [charger_manager]
(root,0,0,00:00:00/622-00:14:50,223) [scsi_eh_2]
(root,0,0,00:00:00/622-00:14:50,224) [scsi_tmf_2]
(root,0,0,00:03:33/622-00:14:49,267) [kworker/7:1H]
(root,0,0,00:28:13/622-00:14:45,268) [kworker/4:1H]
(root,0,0,00:00:58/622-00:14:45,275) [kworker/1:1H]
(root,0,0,00:00:42/622-00:14:44,335) [kworker/2:1H]
(root,0,0,00:00:00/622-00:14:43,342) [raid5wq]
(root,0,0,01:08:56/622-00:14:43,392) [jbd2/sda1-8]
(root,0,0,00:00:00/622-00:14:43,393) [ext4-rsv-conver]
(root,0,0,00:00:36/622-00:14:43,395) [kworker/3:1H]
(root,0,0,00:03:07/622-00:14:43,398) [kworker/5:1H]
(root,0,0,00:04:13/622-00:14:43,431) [kworker/6:1H]
(root,0,0,00:01:58/622-00:14:43,464) [kworker/0:1H]
(root,220844,77576,01:15:19/622-00:14:42,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/622-00:14:42,476) [iscsi_eh]
(root,0,0,00:00:00/622-00:14:42,485) [ib-comp-wq]
(root,0,0,00:00:00/622-00:14:42,486) [ib_mcast]
(root,0,0,00:00:00/622-00:14:42,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/622-00:14:42,494) [rdma_cm]
(root,97708,1596,00:00:00/622-00:14:42,498) /sbin/lvmetad -f
(root,43436,3896,00:04:55/622-00:14:42,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:00/622-00:14:42,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/622-00:14:40,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:26:48/622-00:14:37,1244) /usr/sbin/irqbalance --foreground
(root,382960,2352,00:18:03/622-00:14:37,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:20/622-00:14:37,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21548,00:10:36/622-00:14:37,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:00:58/622-00:14:37,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:35/622-00:14:37,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:46/622-00:14:37,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5500,00:04:24/622-00:14:37,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/622-00:14:37,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/622-00:14:37,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/622-00:14:37,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:49/622-00:14:37,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:57:30/622-00:14:37,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:49/622-00:14:37,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/622-00:14:37,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/622-00:14:37,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:56/622-00:14:37,1379) nginx: worker process
(www-data,143788,3960,00:00:09/622-00:14:37,1380) nginx: worker process
(www-data,143788,5000,00:00:44/622-00:14:37,1381) nginx: worker process
(www-data,143788,3964,00:00:01/622-00:14:37,1382) nginx: worker process
(www-data,143788,4056,00:00:00/622-00:14:37,1383) nginx: worker process
(www-data,143788,4184,00:00:00/622-00:14:37,1384) nginx: worker process
(www-data,143788,4056,00:00:00/622-00:14:37,1386) nginx: worker process
(www-data,143788,4184,00:00:00/622-00:14:37,1388) nginx: worker process
(root,14888,1756,00:00:00/622-00:14:37,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:35/622-00:14:37,1404) /usr/sbin/sshd -D
(root,4548,1332,00:14:57/622-00:14:36,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/622-00:14:36,1498) runsv redis-exporter
(root,4396,712,00:00:06/622-00:14:36,1500) runsv node-exporter
(root,4396,820,00:00:06/622-00:14:36,1501) runsv prometheus
(root,4396,824,00:00:06/622-00:14:36,1502) runsv sidekiq
(root,4396,720,00:00:06/622-00:14:36,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/622-00:14:36,1507) runsv alertmanager
(root,4396,856,00:00:05/622-00:14:36,1509) runsv postgresql
(root,4396,744,00:00:07/622-00:14:36,1510) runsv postgres-exporter
(root,4396,788,00:00:06/622-00:14:36,1511) runsv grafana
(root,4396,780,00:00:06/622-00:14:36,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/622-00:14:36,1513) runsv logrotate
(root,4396,856,00:00:05/622-00:14:36,1514) runsv puma
(root,4396,744,00:00:06/622-00:14:36,1515) runsv nginx
(root,4396,740,00:00:06/622-00:14:36,1516) runsv gitaly
(root,4396,860,00:00:05/622-00:14:36,1517) runsv redis
(root,4396,760,00:00:06/622-00:14:36,1519) runsv registry
(root,4540,864,00:00:06/622-00:14:36,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/622-00:14:36,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/622-00:14:36,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:52:31/622-00:14:36,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:10:29/622-00:14:36,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/622-00:14:36,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/622-00:14:36,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/622-00:14:36,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/622-00:14:36,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/622-00:14:36,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/622-00:14:36,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:08/622-00:14:36,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:39/622-00:14:36,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/622-00:14:36,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:46/622-00:14:36,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/622-00:14:36,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:03/22:17:06,2356) [kworker/5:2]
(git,1598680,983564,00:00:13/02:11:35,6125) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,4628,796,00:00:00/480-07:54:41,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,850076,18336,00:09:31/480-07:54:41,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87108,8288,00:39:48/480-07:54:41,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:19/480-07:54:41,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/02:06:52,6848) [kworker/5:0]
(git,1669336,1027020,00:01:07/11:52:00,7291) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1659096,1029076,00:01:05/11:51:00,7469) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1650904,1020404,00:01:05/11:50:00,7644) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1669336,992236,00:01:07/11:49:00,7823) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1650904,1027508,00:01:01/11:47:00,8166) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:02:22/40-07:26:43,9942) [kworker/4:0]
(root,0,0,00:00:00/01:47:12,10024) [kworker/2:1]
(root,0,0,00:01:08/18-21:23:55,12666) [kworker/2:2]
(root,0,0,00:00:27/2-05:01:30,14126) [kworker/6:0]
(root,0,0,00:00:00/04:39:47,14317) [kworker/3:0]
(root,0,0,00:00:00/04:37:36,14805) [kworker/0:0]
(gitlab-psql,8307060,49204,00:00:00/01:00:21,17413) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306796,54108,00:00:00/59:42,17481) postgres: gitlab gitlabhq_production [local] idle
(root,4628,776,00:00:00/59:08,17590) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307260,50488,00:00:00/58:48,17625) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306628,52496,00:00:00/52:22,18674) postgres: gitlab gitlabhq_production [local] idle
(root,4532,740,00:00:00/49:08,19182) sleep 3000
(root,0,0,00:00:00/46:50,22210) [kworker/1:0]
(root,0,0,00:00:00/46:42,22315) [kworker/7:0]
(root,0,0,00:02:47/22-00:46:40,23207) [kworker/0:2]
(git,1635544,989360,00:00:23/03:40:56,24024) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(gitlab-psql,8310432,54228,00:00:00/41:28,24228) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311780,59348,00:00:00/40:49,24292) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/39:10,24584) [kworker/6:2]
(root,0,0,00:00:00/36:10,25064) [kworker/u16:1]
(gitlab-psql,8307548,54168,00:00:00/34:00,25395) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,5160,00:00:00/32:41,25590) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/32:41,25597) [kworker/1:1]
(gitlab-psql,8307140,48508,00:00:00/32:14,25714) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307072,48132,00:00:00/26:19,26641) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307140,48088,00:00:00/24:12,26971) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306276,47404,00:00:00/20:59,27467) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:15/4-08:05:45,27850) [kworker/3:1]
(gitlab-prometheus,1795260,12264,08:03:52/226-00:06:06,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:22:57/226-00:06:06,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,131860,1-17:49:55/226-00:06:05,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45836,5-02:00:59/226-00:06:05,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,40424,1-05:08:06/226-00:06:05,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,52032,03:30:02/226-00:06:05,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/226-00:06:04,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24232,00:03:31/226-00:06:04,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/226-00:06:04,29019) nginx: worker process
(gitlab-www,65828,22804,00:01:27/226-00:06:04,29020) nginx: worker process
(gitlab-www,69244,26064,00:01:58/226-00:06:04,29021) nginx: worker process
(gitlab-www,67860,25240,05:53:13/226-00:06:04,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/226-00:06:04,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/226-00:06:04,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/226-00:06:04,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:37/226-00:06:04,29026) nginx: cache manager process
(gitlab-prometheus,719468,14608,1-03:39:56/226-00:06:03,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15052,1-04:47:58/226-00:06:03,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:17:56/226-00:06:02,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3202780,155996,2-13:38:06/226-00:06:02,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,274288,00:14:17/226-00:06:02,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:24/226-00:06:02,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:41/226-00:06:02,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:13/226-00:06:02,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:56:52/226-00:06:02,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:23/226-00:06:02,29064) postgres: logical replication launcher   
(git,1461948,919184,03:42:41/226-00:06:01,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16544,12-10:12:01/226-00:06:00,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16236,09:04:42/226-00:06:00,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108684,19:11:36/226-00:06:00,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:12:50/226-00:06:00,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,13772,01:03:06/226-00:06:00,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:41/226-00:05:56,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1187416,34-13:32:55/226-00:05:56,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,85996,3-10:11:29/226-00:05:44,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,75592,1-14:28:06/226-00:05:41,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:29:33/226-00:04:37,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/226-00:04:37,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:08:02,29595) [kworker/4:1]
(root,0,0,00:00:00/08:55,29699) [kworker/u16:0]
(root,0,0,00:00:00/02:57,30648) [kworker/u16:2]
(root,0,0,00:00:58/9-08:49:59,30723) [kworker/7:1]
(git,1520344,921532,00:00:00/02:34,30736) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(gitlab-psql,8307304,55440,00:00:00/02:05,30802) postgres: gitlab gitlabhq_production [local] idle
(root,72296,5632,00:00:00/01:10,30953) sshd: [accepted]
(gitlab-psql,8305208,36784,00:00:00/00:29,31079) postgres: gitlab gitlabhq_production [local] idle
(root,72296,5708,00:00:00/00:07,31122) sshd: [accepted]
(root,20180,3628,00:00:00/00:00,31172) /bin/bash /usr/bin/check_mk_agent
(root,36700,3148,00:00:00/00:00,31191) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1152,00:00:00/00:00,31192) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-18 00:49

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912928070af

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7984,00:28:56/620-02:48:06,1) /sbin/init
(root,0,0,00:00:23/620-02:48:06,2) [kthreadd]
(root,0,0,00:00:00/620-02:48:06,4) [kworker/0:0H]
(root,0,0,00:00:00/620-02:48:06,6) [mm_percpu_wq]
(root,0,0,00:07:00/620-02:48:06,7) [ksoftirqd/0]
(root,0,0,19:18:36/620-02:48:06,8) [rcu_sched]
(root,0,0,00:00:00/620-02:48:06,9) [rcu_bh]
(root,0,0,00:00:19/620-02:48:06,10) [migration/0]
(root,0,0,00:03:25/620-02:48:06,11) [watchdog/0]
(root,0,0,00:00:00/620-02:48:06,12) [cpuhp/0]
(root,0,0,00:00:00/620-02:48:06,13) [cpuhp/1]
(root,0,0,00:03:10/620-02:48:06,14) [watchdog/1]
(root,0,0,00:00:18/620-02:48:06,15) [migration/1]
(root,0,0,00:03:50/620-02:48:06,16) [ksoftirqd/1]
(root,0,0,00:00:00/620-02:48:06,18) [kworker/1:0H]
(root,0,0,00:00:00/620-02:48:06,19) [cpuhp/2]
(root,0,0,00:03:22/620-02:48:06,20) [watchdog/2]
(root,0,0,00:00:17/620-02:48:06,21) [migration/2]
(root,0,0,00:02:49/620-02:48:06,22) [ksoftirqd/2]
(root,0,0,00:00:00/620-02:48:06,24) [kworker/2:0H]
(root,0,0,00:00:00/620-02:48:06,25) [cpuhp/3]
(root,0,0,00:03:06/620-02:48:06,26) [watchdog/3]
(root,0,0,00:00:16/620-02:48:06,27) [migration/3]
(root,0,0,00:02:15/620-02:48:06,28) [ksoftirqd/3]
(root,0,0,00:00:00/620-02:48:06,30) [kworker/3:0H]
(root,0,0,00:00:00/620-02:48:06,31) [cpuhp/4]
(root,0,0,00:03:20/620-02:48:06,32) [watchdog/4]
(root,0,0,00:00:14/620-02:48:06,33) [migration/4]
(root,0,0,00:07:00/620-02:48:06,34) [ksoftirqd/4]
(root,0,0,00:00:00/620-02:48:06,36) [kworker/4:0H]
(root,0,0,00:00:00/620-02:48:06,37) [cpuhp/5]
(root,0,0,00:03:17/620-02:48:06,38) [watchdog/5]
(root,0,0,00:00:15/620-02:48:06,39) [migration/5]
(root,0,0,00:04:22/620-02:48:06,40) [ksoftirqd/5]
(root,0,0,00:00:00/620-02:48:06,42) [kworker/5:0H]
(root,0,0,00:00:00/620-02:48:06,43) [cpuhp/6]
(root,0,0,00:03:07/620-02:48:06,44) [watchdog/6]
(root,0,0,00:00:26/620-02:48:06,45) [migration/6]
(root,0,0,00:02:22/620-02:48:06,46) [ksoftirqd/6]
(root,0,0,00:00:00/620-02:48:06,48) [kworker/6:0H]
(root,0,0,00:00:00/620-02:48:06,49) [cpuhp/7]
(root,0,0,00:03:00/620-02:48:06,50) [watchdog/7]
(root,0,0,00:00:22/620-02:48:06,51) [migration/7]
(root,0,0,00:02:09/620-02:48:06,52) [ksoftirqd/7]
(root,0,0,00:00:00/620-02:48:06,54) [kworker/7:0H]
(root,0,0,00:00:00/620-02:48:06,55) [kdevtmpfs]
(root,0,0,00:00:00/620-02:48:06,56) [netns]
(root,0,0,00:00:00/620-02:48:06,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/620-02:48:06,58) [kauditd]
(root,0,0,00:01:37/620-02:48:06,62) [khungtaskd]
(root,0,0,00:00:00/620-02:48:06,63) [oom_reaper]
(root,0,0,00:00:00/620-02:48:06,64) [writeback]
(root,0,0,00:00:01/620-02:48:06,65) [kcompactd0]
(root,0,0,00:00:00/620-02:48:06,66) [ksmd]
(root,0,0,00:08:25/620-02:48:06,67) [khugepaged]
(root,0,0,00:00:00/620-02:48:06,68) [crypto]
(root,0,0,00:00:00/620-02:48:06,69) [kintegrityd]
(root,0,0,00:00:00/620-02:48:06,70) [kblockd]
(root,0,0,00:00:00/620-02:48:06,71) [ata_sff]
(root,0,0,00:00:00/620-02:48:06,72) [md]
(root,0,0,00:00:00/620-02:48:06,73) [edac-poller]
(root,0,0,00:00:00/620-02:48:06,74) [devfreq_wq]
(root,0,0,00:00:00/620-02:48:06,75) [watchdogd]
(root,0,0,02:05:01/620-02:48:06,79) [kswapd0]
(root,0,0,00:00:00/620-02:48:06,80) [kworker/u17:0]
(root,0,0,00:00:00/620-02:48:06,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/620-02:48:06,123) [kthrotld]
(root,0,0,00:00:00/620-02:48:06,124) [acpi_thermal_pm]
(root,0,0,00:00:00/620-02:48:06,130) [scsi_eh_0]
(root,0,0,00:00:00/620-02:48:06,131) [scsi_tmf_0]
(root,0,0,00:00:00/620-02:48:06,132) [scsi_eh_1]
(root,0,0,00:00:00/620-02:48:06,133) [scsi_tmf_1]
(root,0,0,00:00:00/620-02:48:05,139) [ipv6_addrconf]
(root,0,0,00:00:00/620-02:48:05,148) [kstrp]
(root,0,0,00:00:00/620-02:48:05,166) [charger_manager]
(root,0,0,00:00:00/620-02:48:05,223) [scsi_eh_2]
(root,0,0,00:00:00/620-02:48:05,224) [scsi_tmf_2]
(root,0,0,00:03:32/620-02:48:04,267) [kworker/7:1H]
(root,0,0,00:28:08/620-02:48:00,268) [kworker/4:1H]
(root,0,0,00:00:58/620-02:48:00,275) [kworker/1:1H]
(root,0,0,00:00:42/620-02:47:59,335) [kworker/2:1H]
(root,0,0,00:00:00/620-02:47:58,342) [raid5wq]
(root,0,0,01:08:43/620-02:47:58,392) [jbd2/sda1-8]
(root,0,0,00:00:00/620-02:47:58,393) [ext4-rsv-conver]
(root,0,0,00:00:35/620-02:47:58,395) [kworker/3:1H]
(root,0,0,00:03:06/620-02:47:58,398) [kworker/5:1H]
(root,0,0,00:04:12/620-02:47:58,431) [kworker/6:1H]
(root,0,0,00:01:58/620-02:47:58,464) [kworker/0:1H]
(root,183972,72052,01:15:04/620-02:47:57,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/620-02:47:57,476) [iscsi_eh]
(root,0,0,00:00:00/620-02:47:57,485) [ib-comp-wq]
(root,0,0,00:00:00/620-02:47:57,486) [ib_mcast]
(root,0,0,00:00:00/620-02:47:57,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/620-02:47:57,494) [rdma_cm]
(root,97708,1596,00:00:00/620-02:47:57,498) /sbin/lvmetad -f
(root,43436,3896,00:04:54/620-02:47:57,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:00/620-02:47:57,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/620-02:47:55,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:26:32/620-02:47:52,1244) /usr/sbin/irqbalance --foreground
(root,382904,2296,00:18:00/620-02:47:52,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:16/620-02:47:52,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21572,00:10:34/620-02:47:52,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:00:48/620-02:47:52,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:34/620-02:47:52,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:39/620-02:47:52,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5496,00:04:24/620-02:47:52,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/620-02:47:52,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/620-02:47:52,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/620-02:47:52,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:44/620-02:47:52,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:55:14/620-02:47:52,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:48/620-02:47:52,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/620-02:47:52,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/620-02:47:52,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:56/620-02:47:52,1379) nginx: worker process
(www-data,143788,3960,00:00:09/620-02:47:52,1380) nginx: worker process
(www-data,143788,5000,00:00:44/620-02:47:52,1381) nginx: worker process
(www-data,143788,3964,00:00:01/620-02:47:52,1382) nginx: worker process
(www-data,143788,4056,00:00:00/620-02:47:52,1383) nginx: worker process
(www-data,143788,4184,00:00:00/620-02:47:52,1384) nginx: worker process
(www-data,143788,4056,00:00:00/620-02:47:52,1386) nginx: worker process
(www-data,143788,4184,00:00:00/620-02:47:52,1388) nginx: worker process
(root,14888,1756,00:00:00/620-02:47:52,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:30/620-02:47:52,1404) /usr/sbin/sshd -D
(root,4548,1332,00:14:54/620-02:47:51,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/620-02:47:51,1498) runsv redis-exporter
(root,4396,712,00:00:06/620-02:47:51,1500) runsv node-exporter
(root,4396,820,00:00:06/620-02:47:51,1501) runsv prometheus
(root,4396,824,00:00:06/620-02:47:51,1502) runsv sidekiq
(root,4396,720,00:00:06/620-02:47:51,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/620-02:47:51,1507) runsv alertmanager
(root,4396,856,00:00:05/620-02:47:51,1509) runsv postgresql
(root,4396,744,00:00:07/620-02:47:51,1510) runsv postgres-exporter
(root,4396,788,00:00:06/620-02:47:51,1511) runsv grafana
(root,4396,780,00:00:06/620-02:47:51,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/620-02:47:51,1513) runsv logrotate
(root,4396,856,00:00:05/620-02:47:51,1514) runsv puma
(root,4396,744,00:00:06/620-02:47:51,1515) runsv nginx
(root,4396,740,00:00:06/620-02:47:51,1516) runsv gitaly
(root,4396,860,00:00:05/620-02:47:51,1517) runsv redis
(root,4396,760,00:00:06/620-02:47:51,1519) runsv registry
(root,4540,864,00:00:06/620-02:47:51,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/620-02:47:51,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/620-02:47:51,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:52:10/620-02:47:51,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:10:12/620-02:47:51,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/620-02:47:51,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/620-02:47:51,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/620-02:47:51,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/620-02:47:51,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/620-02:47:51,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/620-02:47:51,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:04/620-02:47:51,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:36/620-02:47:51,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/620-02:47:51,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:46/620-02:47:51,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/620-02:47:51,1558) svlogd -tt /var/log/gitlab/postgresql
(root,4628,796,00:00:00/478-10:27:56,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,825500,18860,00:09:29/478-10:27:56,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87108,8288,00:39:25/478-10:27:56,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:18/478-10:27:56,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:02:16/38-09:59:58,9942) [kworker/4:0]
(root,0,0,00:00:00/04:33:13,11699) [kworker/5:0]
(root,0,0,00:00:00/04:33:13,11700) [kworker/0:0]
(root,0,0,00:00:00/07:47:39,11746) [kworker/4:1]
(root,0,0,00:01:01/16-23:57:10,12666) [kworker/2:2]
(root,0,0,00:00:04/07:34:45,14126) [kworker/6:0]
(root,0,0,00:00:00/03:55:56,18611) [kworker/2:1]
(git,1734896,1013192,00:00:37/03:52:00,19234) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1725680,1007644,00:00:41/03:51:00,19402) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1712368,1007132,00:00:36/03:50:00,19612) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1722608,983000,00:00:39/03:49:00,19803) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(systemd-resolve,70628,4892,00:00:00/07:00:27,19814) /lib/systemd/systemd-resolved
(git,1726704,987756,00:00:36/03:48:00,19984) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1720672,981392,00:00:38/03:47:00,20156) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1734896,995392,00:00:37/03:46:00,20324) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1715440,977992,00:00:37/03:45:00,20492) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,0,0,00:01:56/32-03:20:20,21982) [kworker/1:2]
(root,0,0,00:02:32/20-03:19:55,23207) [kworker/0:2]
(gitlab-psql,8307132,48084,00:00:00/36:48,24565) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307432,58320,00:00:00/33:43,25043) postgres: gitlab gitlabhq_production [local] idle
(root,4628,832,00:00:00/32:26,25229) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,760,00:00:00/22:26,26809) sleep 3000
(gitlab-psql,8306768,55132,00:00:00/22:00,26852) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48524,00:00:00/19:19,27298) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47864,00:00:00/16:45,27734) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:09/2-10:39:00,27850) [kworker/3:1]
(root,0,0,00:00:00/03:19:37,27855) [kworker/1:1]
(root,0,0,00:00:00/03:19:35,27902) [kworker/3:0]
(gitlab-psql,8306804,53212,00:00:00/14:10,28105) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48432,00:00:00/13:58,28126) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/12:55,28291) [kworker/u16:0]
(gitlab-psql,8307132,48596,00:00:00/11:58,28443) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306884,50960,00:00:00/09:45,28824) postgres: gitlab gitlabhq_production [local] idle
(gitlab-prometheus,1795260,12580,07:59:44/224-02:39:21,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:22:14/224-02:39:21,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,135956,1-17:30:14/224-02:39:20,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45696,5-00:55:52/224-02:39:20,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,41076,1-04:55:13/224-02:39:20,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,51232,03:27:58/224-02:39:20,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/224-02:39:19,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24248,00:03:30/224-02:39:19,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/224-02:39:19,29019) nginx: worker process
(gitlab-www,65828,22820,00:01:27/224-02:39:19,29020) nginx: worker process
(gitlab-www,69244,26080,00:01:58/224-02:39:19,29021) nginx: worker process
(gitlab-www,67860,25256,05:50:54/224-02:39:19,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/224-02:39:19,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/224-02:39:19,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/224-02:39:19,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:36/224-02:39:19,29026) nginx: cache manager process
(gitlab-prometheus,719468,15088,1-03:25:45/224-02:39:18,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14064,1-04:33:01/224-02:39:18,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:17:47/224-02:39:17,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3187252,162348,2-13:05:42/224-02:39:17,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,274288,00:14:14/224-02:39:17,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:21/224-02:39:17,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:38/224-02:39:17,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:03/224-02:39:17,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:54:53/224-02:39:17,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:22/224-02:39:17,29064) postgres: logical replication launcher   
(git,1461948,919176,03:40:53/224-02:39:16,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16796,12-07:36:27/224-02:39:15,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16800,09:00:02/224-02:39:15,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108696,19:02:24/224-02:39:15,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:03:56/224-02:39:15,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15976,01:02:41/224-02:39:15,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:35/224-02:39:11,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1138024,34-06:21:48/224-02:39:11,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,85996,3-09:29:01/224-02:38:59,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,75592,1-14:07:38/224-02:38:56,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8307132,48016,00:00:00/07:56,29314) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:15:55,29315) [kworker/5:2]
(root,0,0,00:00:00/07:42,29463) [kworker/u16:1]
(root,0,0,00:00:00/07:42,29464) [kworker/6:1]
(gitlab-psql,8306184,34736,00:29:18/224-02:37:52,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/224-02:37:52,29560) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305572,41996,00:00:00/06:13,29679) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306876,47804,00:00:00/02:54,30252) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/00:36,30601) [kworker/u16:2]
(root,20180,3572,00:00:00/00:00,30704) /bin/bash /usr/bin/check_mk_agent
(root,36700,3056,00:00:00/00:00,30722) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,0,0,00:00:47/7-11:23:14,30723) [kworker/7:1]
(root,13560,1072,00:00:00/00:00,30724) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/02:55:56,32704) [kworker/7:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-16 03:22

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912cb2d6c7a

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7984,00:28:56/620-00:52:19,1) /sbin/init
(root,0,0,00:00:23/620-00:52:19,2) [kthreadd]
(root,0,0,00:00:00/620-00:52:19,4) [kworker/0:0H]
(root,0,0,00:00:00/620-00:52:19,6) [mm_percpu_wq]
(root,0,0,00:07:00/620-00:52:19,7) [ksoftirqd/0]
(root,0,0,19:18:27/620-00:52:19,8) [rcu_sched]
(root,0,0,00:00:00/620-00:52:19,9) [rcu_bh]
(root,0,0,00:00:19/620-00:52:19,10) [migration/0]
(root,0,0,00:03:25/620-00:52:19,11) [watchdog/0]
(root,0,0,00:00:00/620-00:52:19,12) [cpuhp/0]
(root,0,0,00:00:00/620-00:52:19,13) [cpuhp/1]
(root,0,0,00:03:10/620-00:52:19,14) [watchdog/1]
(root,0,0,00:00:18/620-00:52:19,15) [migration/1]
(root,0,0,00:03:50/620-00:52:19,16) [ksoftirqd/1]
(root,0,0,00:00:00/620-00:52:19,18) [kworker/1:0H]
(root,0,0,00:00:00/620-00:52:19,19) [cpuhp/2]
(root,0,0,00:03:22/620-00:52:19,20) [watchdog/2]
(root,0,0,00:00:17/620-00:52:19,21) [migration/2]
(root,0,0,00:02:49/620-00:52:19,22) [ksoftirqd/2]
(root,0,0,00:00:00/620-00:52:19,24) [kworker/2:0H]
(root,0,0,00:00:00/620-00:52:19,25) [cpuhp/3]
(root,0,0,00:03:06/620-00:52:19,26) [watchdog/3]
(root,0,0,00:00:16/620-00:52:19,27) [migration/3]
(root,0,0,00:02:15/620-00:52:19,28) [ksoftirqd/3]
(root,0,0,00:00:00/620-00:52:19,30) [kworker/3:0H]
(root,0,0,00:00:00/620-00:52:19,31) [cpuhp/4]
(root,0,0,00:03:20/620-00:52:19,32) [watchdog/4]
(root,0,0,00:00:14/620-00:52:19,33) [migration/4]
(root,0,0,00:07:00/620-00:52:19,34) [ksoftirqd/4]
(root,0,0,00:00:00/620-00:52:19,36) [kworker/4:0H]
(root,0,0,00:00:00/620-00:52:19,37) [cpuhp/5]
(root,0,0,00:03:17/620-00:52:19,38) [watchdog/5]
(root,0,0,00:00:15/620-00:52:19,39) [migration/5]
(root,0,0,00:04:22/620-00:52:19,40) [ksoftirqd/5]
(root,0,0,00:00:00/620-00:52:19,42) [kworker/5:0H]
(root,0,0,00:00:00/620-00:52:19,43) [cpuhp/6]
(root,0,0,00:03:07/620-00:52:19,44) [watchdog/6]
(root,0,0,00:00:26/620-00:52:19,45) [migration/6]
(root,0,0,00:02:22/620-00:52:19,46) [ksoftirqd/6]
(root,0,0,00:00:00/620-00:52:19,48) [kworker/6:0H]
(root,0,0,00:00:00/620-00:52:19,49) [cpuhp/7]
(root,0,0,00:03:00/620-00:52:19,50) [watchdog/7]
(root,0,0,00:00:22/620-00:52:19,51) [migration/7]
(root,0,0,00:02:09/620-00:52:19,52) [ksoftirqd/7]
(root,0,0,00:00:00/620-00:52:19,54) [kworker/7:0H]
(root,0,0,00:00:00/620-00:52:19,55) [kdevtmpfs]
(root,0,0,00:00:00/620-00:52:19,56) [netns]
(root,0,0,00:00:00/620-00:52:19,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/620-00:52:19,58) [kauditd]
(root,0,0,00:01:37/620-00:52:19,62) [khungtaskd]
(root,0,0,00:00:00/620-00:52:19,63) [oom_reaper]
(root,0,0,00:00:00/620-00:52:19,64) [writeback]
(root,0,0,00:00:01/620-00:52:19,65) [kcompactd0]
(root,0,0,00:00:00/620-00:52:19,66) [ksmd]
(root,0,0,00:08:25/620-00:52:19,67) [khugepaged]
(root,0,0,00:00:00/620-00:52:19,68) [crypto]
(root,0,0,00:00:00/620-00:52:19,69) [kintegrityd]
(root,0,0,00:00:00/620-00:52:19,70) [kblockd]
(root,0,0,00:00:00/620-00:52:19,71) [ata_sff]
(root,0,0,00:00:00/620-00:52:19,72) [md]
(root,0,0,00:00:00/620-00:52:19,73) [edac-poller]
(root,0,0,00:00:00/620-00:52:19,74) [devfreq_wq]
(root,0,0,00:00:00/620-00:52:19,75) [watchdogd]
(root,0,0,02:05:01/620-00:52:19,79) [kswapd0]
(root,0,0,00:00:00/620-00:52:19,80) [kworker/u17:0]
(root,0,0,00:00:00/620-00:52:19,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/620-00:52:19,123) [kthrotld]
(root,0,0,00:00:00/620-00:52:19,124) [acpi_thermal_pm]
(root,0,0,00:00:00/620-00:52:19,130) [scsi_eh_0]
(root,0,0,00:00:00/620-00:52:19,131) [scsi_tmf_0]
(root,0,0,00:00:00/620-00:52:19,132) [scsi_eh_1]
(root,0,0,00:00:00/620-00:52:19,133) [scsi_tmf_1]
(root,0,0,00:00:00/620-00:52:18,139) [ipv6_addrconf]
(root,0,0,00:00:00/620-00:52:18,148) [kstrp]
(root,0,0,00:00:00/620-00:52:18,166) [charger_manager]
(root,0,0,00:00:00/620-00:52:18,223) [scsi_eh_2]
(root,0,0,00:00:00/620-00:52:18,224) [scsi_tmf_2]
(root,0,0,00:03:32/620-00:52:17,267) [kworker/7:1H]
(root,0,0,00:28:08/620-00:52:13,268) [kworker/4:1H]
(root,0,0,00:00:58/620-00:52:13,275) [kworker/1:1H]
(root,0,0,00:00:42/620-00:52:12,335) [kworker/2:1H]
(root,0,0,00:00:00/620-00:52:11,342) [raid5wq]
(root,0,0,01:08:42/620-00:52:11,392) [jbd2/sda1-8]
(root,0,0,00:00:00/620-00:52:11,393) [ext4-rsv-conver]
(root,0,0,00:00:35/620-00:52:11,395) [kworker/3:1H]
(root,0,0,00:03:06/620-00:52:11,398) [kworker/5:1H]
(root,0,0,00:04:12/620-00:52:11,431) [kworker/6:1H]
(root,0,0,00:01:58/620-00:52:11,464) [kworker/0:1H]
(root,183972,71292,01:15:04/620-00:52:10,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/620-00:52:10,476) [iscsi_eh]
(root,0,0,00:00:00/620-00:52:10,485) [ib-comp-wq]
(root,0,0,00:00:00/620-00:52:10,486) [ib_mcast]
(root,0,0,00:00:00/620-00:52:10,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/620-00:52:10,494) [rdma_cm]
(root,97708,1596,00:00:00/620-00:52:10,498) /sbin/lvmetad -f
(root,43436,3896,00:04:54/620-00:52:10,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:03:00/620-00:52:10,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/620-00:52:08,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:00/56:12,1171) [kworker/6:2]
(root,110516,3424,01:26:31/620-00:52:05,1244) /usr/sbin/irqbalance --foreground
(root,382904,2296,00:18:00/620-00:52:05,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:16/620-00:52:05,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21572,00:10:34/620-00:52:05,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:00:48/620-00:52:05,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:34/620-00:52:05,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:39/620-00:52:05,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5496,00:04:24/620-00:52:05,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/620-00:52:05,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/620-00:52:05,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(gitlab-psql,8311988,72212,00:00:00/55:35,1351) postgres: gitlab gitlabhq_production [local] idle
(root,185940,16060,00:00:00/620-00:52:05,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:44/620-00:52:05,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:55:09/620-00:52:05,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:48/620-00:52:05,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/620-00:52:05,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/620-00:52:05,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:56/620-00:52:05,1379) nginx: worker process
(www-data,143788,3960,00:00:09/620-00:52:05,1380) nginx: worker process
(www-data,143788,5000,00:00:44/620-00:52:05,1381) nginx: worker process
(www-data,143788,3964,00:00:01/620-00:52:05,1382) nginx: worker process
(www-data,143788,4056,00:00:00/620-00:52:05,1383) nginx: worker process
(www-data,143788,4184,00:00:00/620-00:52:05,1384) nginx: worker process
(www-data,143788,4056,00:00:00/620-00:52:05,1386) nginx: worker process
(www-data,143788,4184,00:00:00/620-00:52:05,1388) nginx: worker process
(root,14888,1756,00:00:00/620-00:52:05,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:29/620-00:52:05,1404) /usr/sbin/sshd -D
(root,4548,1332,00:14:54/620-00:52:04,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/620-00:52:04,1498) runsv redis-exporter
(root,4396,712,00:00:06/620-00:52:04,1500) runsv node-exporter
(root,4396,820,00:00:06/620-00:52:04,1501) runsv prometheus
(root,4396,824,00:00:06/620-00:52:04,1502) runsv sidekiq
(root,4396,720,00:00:06/620-00:52:04,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/620-00:52:04,1507) runsv alertmanager
(root,4396,856,00:00:05/620-00:52:04,1509) runsv postgresql
(root,4396,744,00:00:07/620-00:52:04,1510) runsv postgres-exporter
(root,4396,788,00:00:06/620-00:52:04,1511) runsv grafana
(root,4396,780,00:00:06/620-00:52:04,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/620-00:52:04,1513) runsv logrotate
(root,4396,856,00:00:05/620-00:52:04,1514) runsv puma
(root,4396,744,00:00:06/620-00:52:04,1515) runsv nginx
(root,4396,740,00:00:06/620-00:52:04,1516) runsv gitaly
(root,4396,860,00:00:05/620-00:52:04,1517) runsv redis
(root,4396,760,00:00:06/620-00:52:04,1519) runsv registry
(root,4540,864,00:00:06/620-00:52:04,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/620-00:52:04,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/620-00:52:04,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:52:09/620-00:52:04,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:10:12/620-00:52:04,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/620-00:52:04,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/620-00:52:04,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/620-00:52:04,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/620-00:52:04,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/620-00:52:04,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/620-00:52:04,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:24:03/620-00:52:04,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:36/620-00:52:04,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/620-00:52:04,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:46/620-00:52:04,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/620-00:52:04,1558) svlogd -tt /var/log/gitlab/postgresql
(gitlab-psql,8307260,55252,00:00:00/44:55,4747) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48812,00:00:00/39:47,5545) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307408,49872,00:00:00/37:13,5917) postgres: gitlab gitlabhq_production [local] idle
(root,4628,804,00:00:00/36:40,6030) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4628,796,00:00:00/478-08:32:09,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,825500,15088,00:09:29/478-08:32:09,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87108,8288,00:39:24/478-08:32:09,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:18/478-08:32:09,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,4532,832,00:00:00/26:39,7670) sleep 3000
(gitlab-psql,8306268,48956,00:00:00/26:04,7781) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47992,00:00:00/25:58,7794) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311884,54932,00:00:00/18:55,8894) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/18:23,8949) [kworker/u16:2]
(gitlab-psql,8307220,49576,00:00:00/13:45,9721) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47944,00:00:00/12:53,9871) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:02:16/38-08:04:11,9942) [kworker/4:0]
(gitlab-psql,8307136,49288,00:00:00/10:10,10274) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/07:48,10678) [kworker/u16:1]
(gitlab-psql,8304584,37688,00:00:00/03:13,11385) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:55,11627) [kworker/u16:0]
(root,0,0,00:00:00/02:37:26,11699) [kworker/5:0]
(root,0,0,00:00:00/02:37:26,11700) [kworker/0:0]
(root,0,0,00:00:00/05:51:52,11746) [kworker/4:1]
(gitlab-psql,8306884,46216,00:00:00/00:49,11803) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3536,00:00:00/00:01,11980) /bin/bash /usr/bin/check_mk_agent
(root,36700,3128,00:00:00/00:00,11998) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1152,00:00:00/00:00,11999) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:01:01/16-22:01:23,12666) [kworker/2:2]
(root,0,0,00:00:02/05:38:58,14126) [kworker/6:0]
(root,0,0,00:00:00/02:00:09,18611) [kworker/2:1]
(git,1720560,984836,00:00:24/01:56:13,19234) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1708272,1012332,00:00:28/01:55:13,19402) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1705200,1011868,00:00:22/01:54:13,19612) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1715440,1006100,00:00:24/01:53:13,19803) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(systemd-resolve,70628,4892,00:00:00/05:04:40,19814) /lib/systemd/systemd-resolved
(git,1707248,1011092,00:00:22/01:52:13,19984) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1720672,1008952,00:00:26/01:51:13,20156) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1712368,1021324,00:00:23/01:50:13,20324) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1715440,1010512,00:00:24/01:49:13,20492) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,0,0,00:01:55/32-01:24:33,21982) [kworker/1:2]
(root,0,0,00:02:32/20-01:24:08,23207) [kworker/0:2]
(root,0,0,00:00:08/2-08:43:13,27850) [kworker/3:1]
(root,0,0,00:00:00/01:23:50,27855) [kworker/1:1]
(root,0,0,00:00:00/01:23:48,27902) [kworker/3:0]
(gitlab-prometheus,1795260,12580,07:59:34/224-00:43:34,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:22:12/224-00:43:34,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,135228,1-17:29:33/224-00:43:33,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45912,5-00:53:14/224-00:43:33,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,38592,1-04:54:41/224-00:43:33,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,50968,03:27:53/224-00:43:33,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/224-00:43:32,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24248,00:03:30/224-00:43:32,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/224-00:43:32,29019) nginx: worker process
(gitlab-www,65828,22820,00:01:27/224-00:43:32,29020) nginx: worker process
(gitlab-www,69244,26080,00:01:58/224-00:43:32,29021) nginx: worker process
(gitlab-www,67860,25256,05:50:48/224-00:43:32,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/224-00:43:32,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/224-00:43:32,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:25/224-00:43:32,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:36/224-00:43:32,29026) nginx: cache manager process
(gitlab-prometheus,719468,16196,1-03:25:09/224-00:43:31,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14612,1-04:32:24/224-00:43:31,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:17:47/224-00:43:30,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3224700,166816,2-13:04:22/224-00:43:30,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,274288,00:14:14/224-00:43:30,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:21/224-00:43:30,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:37/224-00:43:30,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:18:03/224-00:43:30,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:54:48/224-00:43:30,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:22/224-00:43:30,29064) postgres: logical replication launcher   
(git,1461948,919176,03:40:48/224-00:43:29,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16400,12-07:30:06/224-00:43:28,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,17828,08:59:50/224-00:43:28,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108696,19:02:02/224-00:43:28,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,19:03:34/224-00:43:28,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15264,01:02:40/224-00:43:28,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:34/224-00:43:24,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1174192,34-06:04:25/224-00:43:24,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,85996,3-09:27:20/224-00:43:12,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,75592,1-14:06:49/224-00:43:09,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(root,0,0,00:00:00/01:20:08,29315) [kworker/5:2]
(gitlab-psql,8306184,34736,00:29:17/224-00:42:05,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/224-00:42:05,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:46/7-09:27:27,30723) [kworker/7:1]
(root,0,0,00:00:00/01:00:09,32704) [kworker/7:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-16 01:26

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91272aa2aa2

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7984,00:28:49/618-00:20:52,1) /sbin/init
(root,0,0,00:00:23/618-00:20:52,2) [kthreadd]
(root,0,0,00:00:00/618-00:20:52,4) [kworker/0:0H]
(root,0,0,00:00:00/618-00:20:52,6) [mm_percpu_wq]
(root,0,0,00:06:59/618-00:20:52,7) [ksoftirqd/0]
(root,0,0,19:14:11/618-00:20:52,8) [rcu_sched]
(root,0,0,00:00:00/618-00:20:52,9) [rcu_bh]
(root,0,0,00:00:19/618-00:20:52,10) [migration/0]
(root,0,0,00:03:24/618-00:20:52,11) [watchdog/0]
(root,0,0,00:00:00/618-00:20:52,12) [cpuhp/0]
(root,0,0,00:00:00/618-00:20:52,13) [cpuhp/1]
(root,0,0,00:03:09/618-00:20:52,14) [watchdog/1]
(root,0,0,00:00:18/618-00:20:52,15) [migration/1]
(root,0,0,00:03:49/618-00:20:52,16) [ksoftirqd/1]
(root,0,0,00:00:00/618-00:20:52,18) [kworker/1:0H]
(root,0,0,00:00:00/618-00:20:52,19) [cpuhp/2]
(root,0,0,00:03:22/618-00:20:52,20) [watchdog/2]
(root,0,0,00:00:17/618-00:20:52,21) [migration/2]
(root,0,0,00:02:49/618-00:20:52,22) [ksoftirqd/2]
(root,0,0,00:00:00/618-00:20:52,24) [kworker/2:0H]
(root,0,0,00:00:00/618-00:20:52,25) [cpuhp/3]
(root,0,0,00:03:05/618-00:20:52,26) [watchdog/3]
(root,0,0,00:00:16/618-00:20:52,27) [migration/3]
(root,0,0,00:02:14/618-00:20:52,28) [ksoftirqd/3]
(root,0,0,00:00:00/618-00:20:52,30) [kworker/3:0H]
(root,0,0,00:00:00/618-00:20:52,31) [cpuhp/4]
(root,0,0,00:03:19/618-00:20:52,32) [watchdog/4]
(root,0,0,00:00:14/618-00:20:52,33) [migration/4]
(root,0,0,00:06:58/618-00:20:52,34) [ksoftirqd/4]
(root,0,0,00:00:00/618-00:20:52,36) [kworker/4:0H]
(root,0,0,00:00:00/618-00:20:52,37) [cpuhp/5]
(root,0,0,00:03:16/618-00:20:52,38) [watchdog/5]
(root,0,0,00:00:15/618-00:20:52,39) [migration/5]
(root,0,0,00:04:21/618-00:20:52,40) [ksoftirqd/5]
(root,0,0,00:00:00/618-00:20:52,42) [kworker/5:0H]
(root,0,0,00:00:00/618-00:20:52,43) [cpuhp/6]
(root,0,0,00:03:07/618-00:20:52,44) [watchdog/6]
(root,0,0,00:00:26/618-00:20:52,45) [migration/6]
(root,0,0,00:02:21/618-00:20:52,46) [ksoftirqd/6]
(root,0,0,00:00:00/618-00:20:52,48) [kworker/6:0H]
(root,0,0,00:00:00/618-00:20:52,49) [cpuhp/7]
(root,0,0,00:03:00/618-00:20:52,50) [watchdog/7]
(root,0,0,00:00:22/618-00:20:52,51) [migration/7]
(root,0,0,00:02:09/618-00:20:52,52) [ksoftirqd/7]
(root,0,0,00:00:00/618-00:20:52,54) [kworker/7:0H]
(root,0,0,00:00:00/618-00:20:52,55) [kdevtmpfs]
(root,0,0,00:00:00/618-00:20:52,56) [netns]
(root,0,0,00:00:00/618-00:20:52,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/618-00:20:52,58) [kauditd]
(root,0,0,00:01:37/618-00:20:52,62) [khungtaskd]
(root,0,0,00:00:00/618-00:20:52,63) [oom_reaper]
(root,0,0,00:00:00/618-00:20:52,64) [writeback]
(root,0,0,00:00:01/618-00:20:52,65) [kcompactd0]
(root,0,0,00:00:00/618-00:20:52,66) [ksmd]
(root,0,0,00:08:23/618-00:20:52,67) [khugepaged]
(root,0,0,00:00:00/618-00:20:52,68) [crypto]
(root,0,0,00:00:00/618-00:20:52,69) [kintegrityd]
(root,0,0,00:00:00/618-00:20:52,70) [kblockd]
(root,0,0,00:00:00/618-00:20:52,71) [ata_sff]
(root,0,0,00:00:00/618-00:20:52,72) [md]
(root,0,0,00:00:00/618-00:20:52,73) [edac-poller]
(root,0,0,00:00:00/618-00:20:52,74) [devfreq_wq]
(root,0,0,00:00:00/618-00:20:52,75) [watchdogd]
(root,0,0,02:04:32/618-00:20:52,79) [kswapd0]
(root,0,0,00:00:00/618-00:20:52,80) [kworker/u17:0]
(root,0,0,00:00:00/618-00:20:52,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/618-00:20:52,123) [kthrotld]
(root,0,0,00:00:00/618-00:20:52,124) [acpi_thermal_pm]
(root,0,0,00:00:00/618-00:20:52,130) [scsi_eh_0]
(root,0,0,00:00:00/618-00:20:52,131) [scsi_tmf_0]
(root,0,0,00:00:00/618-00:20:52,132) [scsi_eh_1]
(root,0,0,00:00:00/618-00:20:52,133) [scsi_tmf_1]
(root,0,0,00:00:00/618-00:20:51,139) [ipv6_addrconf]
(root,0,0,00:00:00/618-00:20:51,148) [kstrp]
(root,0,0,00:00:00/618-00:20:51,166) [charger_manager]
(root,0,0,00:00:00/618-00:20:51,223) [scsi_eh_2]
(root,0,0,00:00:00/618-00:20:51,224) [scsi_tmf_2]
(root,0,0,00:03:31/618-00:20:50,267) [kworker/7:1H]
(root,0,0,00:28:02/618-00:20:46,268) [kworker/4:1H]
(root,0,0,00:00:58/618-00:20:46,275) [kworker/1:1H]
(root,0,0,00:00:42/618-00:20:45,335) [kworker/2:1H]
(root,0,0,00:00:00/618-00:20:44,342) [raid5wq]
(root,0,0,01:08:28/618-00:20:44,392) [jbd2/sda1-8]
(root,0,0,00:00:00/618-00:20:44,393) [ext4-rsv-conver]
(root,0,0,00:00:35/618-00:20:44,395) [kworker/3:1H]
(root,0,0,00:03:06/618-00:20:44,398) [kworker/5:1H]
(root,0,0,00:04:11/618-00:20:44,431) [kworker/6:1H]
(root,0,0,00:01:58/618-00:20:44,464) [kworker/0:1H]
(root,130708,37896,01:14:46/618-00:20:43,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/618-00:20:43,476) [iscsi_eh]
(root,0,0,00:00:00/618-00:20:43,485) [ib-comp-wq]
(root,0,0,00:00:00/618-00:20:43,486) [ib_mcast]
(root,0,0,00:00:00/618-00:20:43,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/618-00:20:43,494) [rdma_cm]
(root,97708,1596,00:00:00/618-00:20:43,498) /sbin/lvmetad -f
(root,43436,3896,00:04:53/618-00:20:43,508) /lib/systemd/systemd-udevd
(root,0,0,00:02:25/12-00:53:08,601) [kworker/6:2]
(systemd-timesync,141928,2684,00:02:59/618-00:20:43,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/618-00:20:41,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:26:14/618-00:20:38,1244) /usr/sbin/irqbalance --foreground
(root,383040,2432,00:17:56/618-00:20:38,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:10/618-00:20:38,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21580,00:10:31/618-00:20:38,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:00:35/618-00:20:38,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:34/618-00:20:38,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:31/618-00:20:38,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5496,00:04:22/618-00:20:38,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/618-00:20:38,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/618-00:20:38,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/618-00:20:38,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:37/618-00:20:38,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:52:39/618-00:20:38,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:46/618-00:20:38,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/618-00:20:38,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/618-00:20:38,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:55/618-00:20:38,1379) nginx: worker process
(www-data,143788,3960,00:00:09/618-00:20:38,1380) nginx: worker process
(www-data,143788,5000,00:00:44/618-00:20:38,1381) nginx: worker process
(www-data,143788,3964,00:00:01/618-00:20:38,1382) nginx: worker process
(www-data,143788,4056,00:00:00/618-00:20:38,1383) nginx: worker process
(www-data,143788,4184,00:00:00/618-00:20:38,1384) nginx: worker process
(www-data,143788,4056,00:00:00/618-00:20:38,1386) nginx: worker process
(www-data,143788,4184,00:00:00/618-00:20:38,1388) nginx: worker process
(root,14888,1756,00:00:00/618-00:20:38,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:23/618-00:20:38,1404) /usr/sbin/sshd -D
(root,4548,1332,00:14:51/618-00:20:37,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/618-00:20:37,1498) runsv redis-exporter
(root,4396,712,00:00:06/618-00:20:37,1500) runsv node-exporter
(root,4396,820,00:00:06/618-00:20:37,1501) runsv prometheus
(root,4396,824,00:00:06/618-00:20:37,1502) runsv sidekiq
(root,4396,720,00:00:06/618-00:20:37,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/618-00:20:37,1507) runsv alertmanager
(root,4396,856,00:00:05/618-00:20:37,1509) runsv postgresql
(root,4396,744,00:00:07/618-00:20:37,1510) runsv postgres-exporter
(root,4396,788,00:00:06/618-00:20:37,1511) runsv grafana
(root,4396,780,00:00:06/618-00:20:37,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/618-00:20:37,1513) runsv logrotate
(root,4396,856,00:00:05/618-00:20:37,1514) runsv puma
(root,4396,744,00:00:06/618-00:20:37,1515) runsv nginx
(root,4396,740,00:00:06/618-00:20:37,1516) runsv gitaly
(root,4396,860,00:00:05/618-00:20:37,1517) runsv redis
(root,4396,760,00:00:06/618-00:20:37,1519) runsv registry
(root,4540,864,00:00:06/618-00:20:37,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/618-00:20:37,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/618-00:20:37,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:51:45/618-00:20:37,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:09:53/618-00:20:37,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/618-00:20:37,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/618-00:20:37,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/618-00:20:37,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/618-00:20:37,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/618-00:20:37,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/618-00:20:37,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:23:59/618-00:20:37,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:31/618-00:20:37,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/618-00:20:37,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:46/618-00:20:37,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/618-00:20:37,1558) svlogd -tt /var/log/gitlab/postgresql
(git,1733360,992428,00:00:23/01:16:16,4838) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1780464,992596,00:00:20/01:12:16,5881) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,4628,796,00:00:00/476-08:00:42,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,800924,15688,00:09:26/476-08:00:42,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87108,8288,00:39:00/476-08:00:42,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:17/476-08:00:42,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(systemd-resolve,70628,4536,00:00:00/01:08:34,6660) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/01:00:44,8014) [kworker/6:0]
(root,0,0,00:00:00/56:36,8903) [kworker/7:2]
(git,1700596,1007276,00:00:14/56:15,8986) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/03:45:22,9173) [kworker/4:2]
(gitlab-psql,8316108,76260,00:00:00/55:39,9271) postgres: gitlab gitlabhq_production [local] idle
(git,1670384,986600,00:00:11/55:16,9375) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1699060,1005932,00:00:12/54:56,9493) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(gitlab-psql,8312524,78912,00:00:02/54:55,9505) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:02:08/36-07:32:44,9942) [kworker/4:0]
(root,0,0,00:00:00/52:57,12629) [kworker/1:0]
(root,0,0,00:00:00/52:56,12646) [kworker/2:0]
(root,0,0,00:00:54/14-21:29:56,12666) [kworker/2:2]
(git,1870688,1052748,00:00:47/03:14:45,14313) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1814260,1045356,00:00:50/03:13:45,14484) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/47:16,14748) [kworker/0:1]
(gitlab-psql,8307916,50276,00:00:00/45:01,15100) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/40:37,15956) [kworker/5:1]
(root,0,0,00:00:00/40:37,15957) [kworker/3:2]
(root,0,0,00:00:00/35:03,16799) [kworker/u16:2]
(gitlab-psql,8307020,51132,00:00:00/33:44,16993) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311412,69152,00:00:00/27:09,18065) postgres: gitlab gitlabhq_production [local] idle
(git,1528536,928744,00:00:01/26:36,18201) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-psql,8307216,54764,00:00:00/15:28,19990) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47740,00:00:00/11:52,20522) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/08:42,21028) [kworker/u16:0]
(gitlab-psql,8307280,48056,00:00:00/08:39,21087) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306756,47960,00:00:00/06:32,21408) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307072,47792,00:00:00/06:13,21468) postgres: gitlab gitlabhq_production [local] idle
(root,4628,804,00:00:00/05:16,21621) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,808,00:00:00/05:16,21626) sleep 600
(gitlab-psql,8307132,47736,00:00:00/04:41,21743) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306856,42456,00:00:00/03:08,21954) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:48/30-00:53:06,21982) [kworker/1:2]
(root,0,0,00:00:00/02:51,21983) [kworker/u16:1]
(root,20180,3700,00:00:00/00:00,22549) /bin/bash /usr/bin/check_mk_agent
(root,36700,3144,00:00:00/00:00,22567) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1176,00:00:00/00:00,22568) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:02:16/18-00:52:41,23207) [kworker/0:2]
(root,0,0,00:00:08/2-04:02:06,25023) [kworker/5:0]
(root,0,0,00:00:01/08:11:46,27850) [kworker/3:1]
(gitlab-prometheus,1795260,12820,07:55:05/222-00:12:07,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:21:26/222-00:12:07,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182024,133744,1-17:03:47/222-00:12:06,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45900,4-23:43:56/222-00:12:06,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,38068,1-04:40:02/222-00:12:06,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,48364,03:25:40/222-00:12:06,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/222-00:12:05,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24256,00:03:30/222-00:12:05,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/222-00:12:05,29019) nginx: worker process
(gitlab-www,65828,22828,00:01:27/222-00:12:05,29020) nginx: worker process
(gitlab-www,69244,26088,00:01:58/222-00:12:05,29021) nginx: worker process
(gitlab-www,69652,27056,05:48:11/222-00:12:05,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/222-00:12:05,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/222-00:12:05,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:24/222-00:12:05,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:34/222-00:12:05,29026) nginx: cache manager process
(gitlab-prometheus,719468,15316,1-03:09:55/222-00:12:04,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14500,1-04:16:21/222-00:12:04,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:17:37/222-00:12:03,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3188560,160096,2-12:29:22/222-00:12:03,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,272444,00:14:06/222-00:12:03,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:18/222-00:12:03,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:33/222-00:12:03,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:17:53/222-00:12:03,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:52:36/222-00:12:03,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:22/222-00:12:03,29064) postgres: logical replication launcher   
(git,1461948,919172,03:38:44/222-00:12:02,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16704,12-04:42:10/222-00:12:01,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,18356,08:54:46/222-00:12:01,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108772,18:52:09/222-00:12:01,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87508,18:54:00/222-00:12:01,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,14008,01:02:12/222-00:12:01,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:27/222-00:11:57,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1142540,33-22:21:22/222-00:11:57,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,84988,3-08:42:59/222-00:11:45,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,75592,1-13:44:58/222-00:11:42,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:29:02/222-00:10:38,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/222-00:10:38,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:33/5-08:56:00,30723) [kworker/7:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-14 00:55

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912aa9ae5f8

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7984,00:28:43/616-00:23:39,1) /sbin/init
(root,0,0,00:00:23/616-00:23:39,2) [kthreadd]
(root,0,0,00:00:00/616-00:23:39,4) [kworker/0:0H]
(root,0,0,00:00:00/616-00:23:39,6) [mm_percpu_wq]
(root,0,0,00:06:57/616-00:23:39,7) [ksoftirqd/0]
(root,0,0,19:10:00/616-00:23:39,8) [rcu_sched]
(root,0,0,00:00:00/616-00:23:39,9) [rcu_bh]
(root,0,0,00:00:19/616-00:23:39,10) [migration/0]
(root,0,0,00:03:23/616-00:23:39,11) [watchdog/0]
(root,0,0,00:00:00/616-00:23:39,12) [cpuhp/0]
(root,0,0,00:00:00/616-00:23:39,13) [cpuhp/1]
(root,0,0,00:03:08/616-00:23:39,14) [watchdog/1]
(root,0,0,00:00:18/616-00:23:39,15) [migration/1]
(root,0,0,00:03:48/616-00:23:39,16) [ksoftirqd/1]
(root,0,0,00:00:00/616-00:23:39,18) [kworker/1:0H]
(root,0,0,00:00:00/616-00:23:39,19) [cpuhp/2]
(root,0,0,00:03:21/616-00:23:39,20) [watchdog/2]
(root,0,0,00:00:17/616-00:23:39,21) [migration/2]
(root,0,0,00:02:48/616-00:23:39,22) [ksoftirqd/2]
(root,0,0,00:00:00/616-00:23:39,24) [kworker/2:0H]
(root,0,0,00:00:00/616-00:23:39,25) [cpuhp/3]
(root,0,0,00:03:05/616-00:23:39,26) [watchdog/3]
(root,0,0,00:00:16/616-00:23:39,27) [migration/3]
(root,0,0,00:02:14/616-00:23:39,28) [ksoftirqd/3]
(root,0,0,00:00:00/616-00:23:39,30) [kworker/3:0H]
(root,0,0,00:00:00/616-00:23:39,31) [cpuhp/4]
(root,0,0,00:03:18/616-00:23:39,32) [watchdog/4]
(root,0,0,00:00:13/616-00:23:39,33) [migration/4]
(root,0,0,00:06:56/616-00:23:39,34) [ksoftirqd/4]
(root,0,0,00:00:00/616-00:23:39,36) [kworker/4:0H]
(root,0,0,00:00:00/616-00:23:39,37) [cpuhp/5]
(root,0,0,00:03:15/616-00:23:39,38) [watchdog/5]
(root,0,0,00:00:15/616-00:23:39,39) [migration/5]
(root,0,0,00:04:20/616-00:23:39,40) [ksoftirqd/5]
(root,0,0,00:00:00/616-00:23:39,42) [kworker/5:0H]
(root,0,0,00:00:00/616-00:23:39,43) [cpuhp/6]
(root,0,0,00:03:06/616-00:23:39,44) [watchdog/6]
(root,0,0,00:00:26/616-00:23:39,45) [migration/6]
(root,0,0,00:02:20/616-00:23:39,46) [ksoftirqd/6]
(root,0,0,00:00:00/616-00:23:39,48) [kworker/6:0H]
(root,0,0,00:00:00/616-00:23:39,49) [cpuhp/7]
(root,0,0,00:02:59/616-00:23:39,50) [watchdog/7]
(root,0,0,00:00:22/616-00:23:39,51) [migration/7]
(root,0,0,00:02:08/616-00:23:39,52) [ksoftirqd/7]
(root,0,0,00:00:00/616-00:23:39,54) [kworker/7:0H]
(root,0,0,00:00:00/616-00:23:39,55) [kdevtmpfs]
(root,0,0,00:00:00/616-00:23:39,56) [netns]
(root,0,0,00:00:00/616-00:23:39,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/616-00:23:39,58) [kauditd]
(root,0,0,00:01:37/616-00:23:39,62) [khungtaskd]
(root,0,0,00:00:00/616-00:23:39,63) [oom_reaper]
(root,0,0,00:00:00/616-00:23:39,64) [writeback]
(root,0,0,00:00:01/616-00:23:39,65) [kcompactd0]
(root,0,0,00:00:00/616-00:23:39,66) [ksmd]
(root,0,0,00:08:22/616-00:23:39,67) [khugepaged]
(root,0,0,00:00:00/616-00:23:39,68) [crypto]
(root,0,0,00:00:00/616-00:23:39,69) [kintegrityd]
(root,0,0,00:00:00/616-00:23:39,70) [kblockd]
(root,0,0,00:00:00/616-00:23:39,71) [ata_sff]
(root,0,0,00:00:00/616-00:23:39,72) [md]
(root,0,0,00:00:00/616-00:23:39,73) [edac-poller]
(root,0,0,00:00:00/616-00:23:39,74) [devfreq_wq]
(root,0,0,00:00:00/616-00:23:39,75) [watchdogd]
(root,0,0,02:04:03/616-00:23:39,79) [kswapd0]
(root,0,0,00:00:00/616-00:23:39,80) [kworker/u17:0]
(root,0,0,00:00:00/616-00:23:39,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/616-00:23:39,123) [kthrotld]
(root,0,0,00:00:00/616-00:23:39,124) [acpi_thermal_pm]
(root,0,0,00:00:00/616-00:23:39,130) [scsi_eh_0]
(root,0,0,00:00:00/616-00:23:39,131) [scsi_tmf_0]
(root,0,0,00:00:00/616-00:23:39,132) [scsi_eh_1]
(root,0,0,00:00:00/616-00:23:39,133) [scsi_tmf_1]
(root,0,0,00:00:00/616-00:23:38,139) [ipv6_addrconf]
(root,0,0,00:00:00/616-00:23:38,148) [kstrp]
(root,0,0,00:00:00/616-00:23:38,166) [charger_manager]
(root,0,0,00:00:00/616-00:23:38,223) [scsi_eh_2]
(root,0,0,00:00:00/616-00:23:38,224) [scsi_tmf_2]
(root,0,0,00:03:30/616-00:23:37,267) [kworker/7:1H]
(root,0,0,00:27:56/616-00:23:33,268) [kworker/4:1H]
(root,0,0,00:00:58/616-00:23:33,275) [kworker/1:1H]
(root,0,0,00:00:41/616-00:23:32,335) [kworker/2:1H]
(root,0,0,00:00:00/616-00:23:31,342) [raid5wq]
(root,0,0,01:08:14/616-00:23:31,392) [jbd2/sda1-8]
(root,0,0,00:00:00/616-00:23:31,393) [ext4-rsv-conver]
(root,0,0,00:00:35/616-00:23:31,395) [kworker/3:1H]
(root,0,0,00:03:05/616-00:23:31,398) [kworker/5:1H]
(root,0,0,00:04:10/616-00:23:31,431) [kworker/6:1H]
(root,0,0,00:01:57/616-00:23:31,464) [kworker/0:1H]
(root,253700,103416,01:14:26/616-00:23:30,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/616-00:23:30,476) [iscsi_eh]
(root,0,0,00:00:00/616-00:23:30,485) [ib-comp-wq]
(root,0,0,00:00:00/616-00:23:30,486) [ib_mcast]
(root,0,0,00:00:00/616-00:23:30,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/616-00:23:30,494) [rdma_cm]
(root,97708,1596,00:00:00/616-00:23:30,498) /sbin/lvmetad -f
(root,43436,3896,00:04:52/616-00:23:30,508) /lib/systemd/systemd-udevd
(root,0,0,00:01:59/10-00:55:55,601) [kworker/6:2]
(systemd-timesync,141928,2684,00:02:59/616-00:23:30,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/616-00:23:28,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:25:57/616-00:23:25,1244) /usr/sbin/irqbalance --foreground
(root,382988,2380,00:17:53/616-00:23:25,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:23:04/616-00:23:25,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21604,00:10:30/616-00:23:25,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:00:21/616-00:23:25,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:33/616-00:23:25,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:23/616-00:23:25,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5492,00:04:21/616-00:23:25,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/616-00:23:25,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/616-00:23:25,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/616-00:23:25,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:30/616-00:23:25,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:50:14/616-00:23:25,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:44/616-00:23:25,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/616-00:23:25,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/616-00:23:25,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:54/616-00:23:25,1379) nginx: worker process
(www-data,143788,3960,00:00:09/616-00:23:25,1380) nginx: worker process
(www-data,143788,5000,00:00:44/616-00:23:25,1381) nginx: worker process
(www-data,143788,3964,00:00:01/616-00:23:25,1382) nginx: worker process
(www-data,143788,4056,00:00:00/616-00:23:25,1383) nginx: worker process
(www-data,143788,4184,00:00:00/616-00:23:25,1384) nginx: worker process
(www-data,143788,4056,00:00:00/616-00:23:25,1386) nginx: worker process
(www-data,143788,4184,00:00:00/616-00:23:25,1388) nginx: worker process
(root,14888,1756,00:00:00/616-00:23:25,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:17/616-00:23:25,1404) /usr/sbin/sshd -D
(root,4548,1332,00:14:48/616-00:23:24,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(gitlab-psql,8306976,53784,00:00:00/52:32,1494) postgres: gitlab gitlabhq_production [local] idle
(root,4396,796,00:00:06/616-00:23:24,1498) runsv redis-exporter
(root,4396,712,00:00:06/616-00:23:24,1500) runsv node-exporter
(root,4396,820,00:00:06/616-00:23:24,1501) runsv prometheus
(root,4396,824,00:00:06/616-00:23:24,1502) runsv sidekiq
(root,4396,720,00:00:06/616-00:23:24,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/616-00:23:24,1507) runsv alertmanager
(root,4396,856,00:00:05/616-00:23:24,1509) runsv postgresql
(root,4396,744,00:00:07/616-00:23:24,1510) runsv postgres-exporter
(root,4396,788,00:00:06/616-00:23:24,1511) runsv grafana
(root,4396,780,00:00:06/616-00:23:24,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/616-00:23:24,1513) runsv logrotate
(root,4396,856,00:00:05/616-00:23:24,1514) runsv puma
(root,4396,744,00:00:06/616-00:23:24,1515) runsv nginx
(root,4396,740,00:00:06/616-00:23:24,1516) runsv gitaly
(root,4396,860,00:00:05/616-00:23:24,1517) runsv redis
(root,4396,760,00:00:06/616-00:23:24,1519) runsv registry
(root,4540,864,00:00:06/616-00:23:24,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/616-00:23:24,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/616-00:23:24,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:51:22/616-00:23:24,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:09:33/616-00:23:24,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/616-00:23:24,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/616-00:23:24,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/616-00:23:24,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/616-00:23:24,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/616-00:23:24,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/616-00:23:24,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:23:54/616-00:23:24,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:27/616-00:23:24,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/616-00:23:24,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:45/616-00:23:24,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/616-00:23:24,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/06:24:53,1862) [kworker/6:0]
(root,0,0,00:00:00/44:41,2912) [kworker/5:2]
(gitlab-psql,8307132,47796,00:00:00/44:38,2918) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310416,53968,00:00:00/38:39,3859) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,48004,00:00:00/38:10,3959) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307812,51520,00:00:00/36:34,4187) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47444,00:00:00/33:52,4642) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307152,52784,00:00:00/29:30,5318) postgres: gitlab gitlabhq_production [local] idle
(root,4628,796,00:00:00/474-08:03:29,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,866460,36760,00:09:23/474-08:03:29,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87108,8288,00:38:31/474-08:03:29,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:15/474-08:03:29,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/17:38,7206) [kworker/u16:0]
(gitlab-psql,8307256,48844,00:00:00/14:55,7644) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/12:11,8094) [kworker/u16:2]
(root,4628,816,00:00:00/08:07,8748) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,816,00:00:00/08:07,8752) sleep 600
(git,1510616,918240,00:00:00/04:44,9294) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-psql,8307456,55500,00:00:00/03:07,9578) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8304508,31568,00:00:00/01:30,9800) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:10,9887) [kworker/u16:1]
(root,0,0,00:02:01/34-07:35:31,9942) [kworker/4:0]
(root,20180,3660,00:00:00/00:00,10104) /bin/bash /usr/bin/check_mk_agent
(root,36700,3124,00:00:00/00:00,10122) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1160,00:00:00/00:00,10123) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:46/12-21:32:43,12666) [kworker/2:2]
(git,1775856,1037516,00:01:05/05:12:31,13761) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1751280,1037728,00:01:07/05:08:31,14434) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/02:04:53,15111) [kworker/4:2]
(git,1745140,1022216,00:00:36/01:57:25,16318) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:00:19/5-06:22:46,16648) [kworker/3:2]
(systemd-resolve,70628,4892,00:00:00/07:40:20,18859) /lib/systemd/systemd-resolved
(git,1715440,1005652,00:00:32/01:42:45,18860) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/07:40:20,18865) [kworker/3:1]
(git,1708272,1007768,00:00:26/01:40:45,20283) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,0,0,00:01:40/28-00:55:53,21982) [kworker/1:2]
(root,0,0,00:01:59/16-00:55:28,23207) [kworker/0:2]
(root,0,0,00:00:00/01:24:53,24234) [kworker/7:0]
(root,0,0,00:00:00/04:04:53,25023) [kworker/5:0]
(git,1629400,998468,00:00:09/01:16:44,25827) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-prometheus,1795260,13156,07:50:41/220-00:14:54,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:20:41/220-00:14:54,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181768,132020,1-16:40:02/220-00:14:53,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45512,4-22:35:23/220-00:14:53,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39256,1-04:25:01/220-00:14:53,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,49976,03:23:26/220-00:14:53,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/220-00:14:52,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24256,00:03:29/220-00:14:52,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/220-00:14:52,29019) nginx: worker process
(gitlab-www,65828,22828,00:01:27/220-00:14:52,29020) nginx: worker process
(gitlab-www,69244,26088,00:01:58/220-00:14:52,29021) nginx: worker process
(gitlab-www,69652,27056,05:45:31/220-00:14:52,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/220-00:14:52,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/220-00:14:52,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:24/220-00:14:52,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:33/220-00:14:52,29026) nginx: cache manager process
(gitlab-prometheus,719468,14316,1-02:54:42/220-00:14:51,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14904,1-04:00:18/220-00:14:51,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:17:27/220-00:14:50,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3203524,160604,2-11:54:35/220-00:14:50,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,272444,00:14:00/220-00:14:50,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:14/220-00:14:50,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:29/220-00:14:50,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:17:43/220-00:14:50,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:50:27/220-00:14:50,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:22/220-00:14:50,29064) postgres: logical replication launcher   
(git,1461948,919120,03:36:46/220-00:14:49,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(git,1564888,964268,00:00:06/57:44,29078) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(gitlab-redis,177904,16628,12-01:53:26/220-00:14:48,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,15792,08:49:47/220-00:14:48,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108860,18:42:23/220-00:14:48,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87572,18:44:21/220-00:14:48,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,14100,01:01:45/220-00:14:48,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:21/220-00:14:44,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1117368,33-14:33:05/220-00:14:44,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,84988,3-07:57:40/220-00:14:32,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,75592,1-13:23:33/220-00:14:29,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8307280,55660,00:00:00/57:16,29325) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309416,51016,00:00:00/57:16,29326) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:28:46/220-00:13:25,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/220-00:13:25,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:21/3-08:58:47,30723) [kworker/7:1]
(root,0,0,00:00:00/55:50,32259) [kworker/0:0]
(root,0,0,00:00:00/55:49,32279) [kworker/2:1]
(root,0,0,00:00:00/55:43,32369) [kworker/1:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-12 00:57

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9123826aad9

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7984,00:28:36/614-00:32:28,1) /sbin/init
(root,0,0,00:00:23/614-00:32:28,2) [kthreadd]
(root,0,0,00:00:00/614-00:32:28,4) [kworker/0:0H]
(root,0,0,00:00:00/614-00:32:28,6) [mm_percpu_wq]
(root,0,0,00:06:55/614-00:32:28,7) [ksoftirqd/0]
(root,0,0,19:05:35/614-00:32:28,8) [rcu_sched]
(root,0,0,00:00:00/614-00:32:28,9) [rcu_bh]
(root,0,0,00:00:19/614-00:32:28,10) [migration/0]
(root,0,0,00:03:23/614-00:32:28,11) [watchdog/0]
(root,0,0,00:00:00/614-00:32:28,12) [cpuhp/0]
(root,0,0,00:00:00/614-00:32:28,13) [cpuhp/1]
(root,0,0,00:03:08/614-00:32:28,14) [watchdog/1]
(root,0,0,00:00:18/614-00:32:28,15) [migration/1]
(root,0,0,00:03:47/614-00:32:28,16) [ksoftirqd/1]
(root,0,0,00:00:00/614-00:32:28,18) [kworker/1:0H]
(root,0,0,00:00:00/614-00:32:28,19) [cpuhp/2]
(root,0,0,00:03:20/614-00:32:28,20) [watchdog/2]
(root,0,0,00:00:17/614-00:32:28,21) [migration/2]
(root,0,0,00:02:47/614-00:32:28,22) [ksoftirqd/2]
(root,0,0,00:00:00/614-00:32:28,24) [kworker/2:0H]
(root,0,0,00:00:00/614-00:32:28,25) [cpuhp/3]
(root,0,0,00:03:04/614-00:32:28,26) [watchdog/3]
(root,0,0,00:00:16/614-00:32:28,27) [migration/3]
(root,0,0,00:02:13/614-00:32:28,28) [ksoftirqd/3]
(root,0,0,00:00:00/614-00:32:28,30) [kworker/3:0H]
(root,0,0,00:00:00/614-00:32:28,31) [cpuhp/4]
(root,0,0,00:03:18/614-00:32:28,32) [watchdog/4]
(root,0,0,00:00:13/614-00:32:28,33) [migration/4]
(root,0,0,00:06:55/614-00:32:28,34) [ksoftirqd/4]
(root,0,0,00:00:00/614-00:32:28,36) [kworker/4:0H]
(root,0,0,00:00:00/614-00:32:28,37) [cpuhp/5]
(root,0,0,00:03:15/614-00:32:28,38) [watchdog/5]
(root,0,0,00:00:15/614-00:32:28,39) [migration/5]
(root,0,0,00:04:18/614-00:32:28,40) [ksoftirqd/5]
(root,0,0,00:00:00/614-00:32:28,42) [kworker/5:0H]
(root,0,0,00:00:00/614-00:32:28,43) [cpuhp/6]
(root,0,0,00:03:05/614-00:32:28,44) [watchdog/6]
(root,0,0,00:00:26/614-00:32:28,45) [migration/6]
(root,0,0,00:02:19/614-00:32:28,46) [ksoftirqd/6]
(root,0,0,00:00:00/614-00:32:28,48) [kworker/6:0H]
(root,0,0,00:00:00/614-00:32:28,49) [cpuhp/7]
(root,0,0,00:02:58/614-00:32:28,50) [watchdog/7]
(root,0,0,00:00:22/614-00:32:28,51) [migration/7]
(root,0,0,00:02:07/614-00:32:28,52) [ksoftirqd/7]
(root,0,0,00:00:00/614-00:32:28,54) [kworker/7:0H]
(root,0,0,00:00:00/614-00:32:28,55) [kdevtmpfs]
(root,0,0,00:00:00/614-00:32:28,56) [netns]
(root,0,0,00:00:00/614-00:32:28,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/614-00:32:28,58) [kauditd]
(root,0,0,00:01:36/614-00:32:28,62) [khungtaskd]
(root,0,0,00:00:00/614-00:32:28,63) [oom_reaper]
(root,0,0,00:00:00/614-00:32:28,64) [writeback]
(root,0,0,00:00:01/614-00:32:28,65) [kcompactd0]
(root,0,0,00:00:00/614-00:32:28,66) [ksmd]
(root,0,0,00:08:20/614-00:32:28,67) [khugepaged]
(root,0,0,00:00:00/614-00:32:28,68) [crypto]
(root,0,0,00:00:00/614-00:32:28,69) [kintegrityd]
(root,0,0,00:00:00/614-00:32:28,70) [kblockd]
(root,0,0,00:00:00/614-00:32:28,71) [ata_sff]
(root,0,0,00:00:00/614-00:32:28,72) [md]
(root,0,0,00:00:00/614-00:32:28,73) [edac-poller]
(root,0,0,00:00:00/614-00:32:28,74) [devfreq_wq]
(root,0,0,00:00:00/614-00:32:28,75) [watchdogd]
(root,0,0,02:03:33/614-00:32:28,79) [kswapd0]
(root,0,0,00:00:00/614-00:32:28,80) [kworker/u17:0]
(root,0,0,00:00:00/614-00:32:28,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/614-00:32:28,123) [kthrotld]
(root,0,0,00:00:00/614-00:32:28,124) [acpi_thermal_pm]
(root,0,0,00:00:00/614-00:32:28,130) [scsi_eh_0]
(root,0,0,00:00:00/614-00:32:28,131) [scsi_tmf_0]
(root,0,0,00:00:00/614-00:32:28,132) [scsi_eh_1]
(root,0,0,00:00:00/614-00:32:28,133) [scsi_tmf_1]
(root,0,0,00:00:00/614-00:32:27,139) [ipv6_addrconf]
(root,0,0,00:00:00/614-00:32:27,148) [kstrp]
(root,0,0,00:00:00/614-00:32:27,166) [charger_manager]
(root,0,0,00:00:00/614-00:32:27,223) [scsi_eh_2]
(root,0,0,00:00:00/614-00:32:27,224) [scsi_tmf_2]
(root,0,0,00:03:29/614-00:32:26,267) [kworker/7:1H]
(root,0,0,00:27:50/614-00:32:22,268) [kworker/4:1H]
(root,0,0,00:00:57/614-00:32:22,275) [kworker/1:1H]
(root,0,0,00:00:41/614-00:32:21,335) [kworker/2:1H]
(root,0,0,00:00:00/614-00:32:20,342) [raid5wq]
(root,0,0,01:08:00/614-00:32:20,392) [jbd2/sda1-8]
(root,0,0,00:00:00/614-00:32:20,393) [ext4-rsv-conver]
(root,0,0,00:00:35/614-00:32:20,395) [kworker/3:1H]
(root,0,0,00:03:04/614-00:32:20,398) [kworker/5:1H]
(root,20180,3664,00:00:00/00:00,419) /bin/bash /usr/bin/check_mk_agent
(root,0,0,00:04:09/614-00:32:20,431) [kworker/6:1H]
(root,34400,2880,00:00:00/00:00,438) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1200,00:00:00/00:00,439) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:01:57/614-00:32:20,464) [kworker/0:1H]
(root,212740,88424,01:14:05/614-00:32:19,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/614-00:32:19,476) [iscsi_eh]
(root,0,0,00:00:00/614-00:32:19,485) [ib-comp-wq]
(root,0,0,00:00:00/614-00:32:19,486) [ib_mcast]
(root,0,0,00:00:00/614-00:32:19,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/614-00:32:19,494) [rdma_cm]
(root,97708,1596,00:00:00/614-00:32:19,498) /sbin/lvmetad -f
(root,43436,3896,00:04:52/614-00:32:19,508) /lib/systemd/systemd-udevd
(root,0,0,00:01:34/8-01:04:44,601) [kworker/6:2]
(systemd-timesync,141928,2684,00:02:58/614-00:32:19,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/614-00:32:17,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:25:39/614-00:32:14,1244) /usr/sbin/irqbalance --foreground
(root,382920,2312,00:17:49/614-00:32:14,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:22:58/614-00:32:14,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21628,00:10:27/614-00:32:14,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,01:00:05/614-00:32:14,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:31/614-00:32:14,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:14/614-00:32:14,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:20/614-00:32:14,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/614-00:32:14,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/614-00:32:14,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/614-00:32:14,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:21/614-00:32:14,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:47:46/614-00:32:14,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:43/614-00:32:14,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/614-00:32:14,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/614-00:32:14,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:53/614-00:32:14,1379) nginx: worker process
(www-data,143788,3960,00:00:09/614-00:32:14,1380) nginx: worker process
(www-data,143788,5000,00:00:44/614-00:32:14,1381) nginx: worker process
(www-data,143788,3964,00:00:01/614-00:32:14,1382) nginx: worker process
(www-data,143788,4056,00:00:00/614-00:32:14,1383) nginx: worker process
(www-data,143788,4184,00:00:00/614-00:32:14,1384) nginx: worker process
(www-data,143788,4056,00:00:00/614-00:32:14,1386) nginx: worker process
(www-data,143788,4184,00:00:00/614-00:32:14,1388) nginx: worker process
(root,14888,1756,00:00:00/614-00:32:14,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:11/614-00:32:14,1404) /usr/sbin/sshd -D
(root,4548,1332,00:14:45/614-00:32:13,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/614-00:32:13,1498) runsv redis-exporter
(root,4396,712,00:00:06/614-00:32:13,1500) runsv node-exporter
(root,4396,820,00:00:06/614-00:32:13,1501) runsv prometheus
(root,4396,824,00:00:06/614-00:32:13,1502) runsv sidekiq
(root,4396,720,00:00:06/614-00:32:13,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/614-00:32:13,1507) runsv alertmanager
(root,4396,856,00:00:05/614-00:32:13,1509) runsv postgresql
(root,4396,744,00:00:07/614-00:32:13,1510) runsv postgres-exporter
(root,4396,788,00:00:06/614-00:32:13,1511) runsv grafana
(root,4396,780,00:00:06/614-00:32:13,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/614-00:32:13,1513) runsv logrotate
(root,4396,856,00:00:05/614-00:32:13,1514) runsv puma
(root,4396,744,00:00:06/614-00:32:13,1515) runsv nginx
(root,4396,740,00:00:06/614-00:32:13,1516) runsv gitaly
(root,4396,860,00:00:05/614-00:32:13,1517) runsv redis
(root,4396,760,00:00:06/614-00:32:13,1519) runsv registry
(root,4540,864,00:00:06/614-00:32:13,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/614-00:32:13,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/614-00:32:13,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:50:58/614-00:32:13,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:09:05/614-00:32:13,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/614-00:32:13,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/614-00:32:13,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/614-00:32:13,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/614-00:32:13,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/614-00:32:13,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/614-00:32:13,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:23:49/614-00:32:13,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:23/614-00:32:13,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/614-00:32:13,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:45/614-00:32:13,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/614-00:32:13,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/05:56:13,3393) [kworker/0:0]
(root,0,0,00:00:00/18:44:16,5809) [kworker/7:2]
(root,4628,796,00:00:00/472-08:12:18,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,849912,36168,00:09:20/472-08:12:18,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87108,8288,00:38:03/472-08:12:18,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:14/472-08:12:18,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/1-00:51:34,9537) [kworker/6:0]
(root,0,0,00:01:53/32-07:44:20,9942) [kworker/4:0]
(root,0,0,00:00:38/10-21:41:32,12666) [kworker/2:2]
(root,0,0,00:00:00/01:35:22,13368) [kworker/3:0]
(systemd-resolve,70628,4760,00:00:00/04:51:46,13735) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/04:51:46,13751) [kworker/1:1]
(root,0,0,00:00:11/3-06:31:35,16648) [kworker/3:2]
(root,0,0,00:00:00/01:04:28,21024) [kworker/5:0]
(root,0,0,00:00:00/01:04:22,21089) [kworker/2:1]
(root,0,0,00:01:33/26-01:04:42,21982) [kworker/1:2]
(gitlab-psql,8307212,53256,00:00:00/01:02:16,22513) postgres: gitlab gitlabhq_production [local] idle
(git,1634520,986744,00:00:43/07:15:19,22646) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1642712,991728,00:00:44/07:14:19,22818) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1626328,980728,00:00:45/07:13:19,22988) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1642712,989832,00:00:43/07:12:18,23159) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:01:43/14-01:04:17,23207) [kworker/0:2]
(root,0,0,00:00:00/57:55,23236) [kworker/4:2]
(gitlab-psql,8307072,47916,00:00:00/57:48,23257) postgres: gitlab gitlabhq_production [local] idle
(git,1642712,990792,00:00:43/07:11:19,23324) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-psql,8307132,48068,00:00:00/57:07,23390) postgres: gitlab gitlabhq_production [local] idle
(git,1634520,1007600,00:00:45/07:10:19,23492) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,107984,7108,00:00:00/56:11,23551) sshd: git [priv]
(git,76624,7320,00:00:00/56:10,23558) /lib/systemd/systemd --user
(git,259536,2716,00:00:00/56:10,23559) (sd-pam)
(git,1634520,988252,00:00:43/07:09:19,23657) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,107984,3292,00:00:00/56:09,23683) sshd: git
(git,1642712,985400,00:00:41/07:08:19,23828) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(gitlab-psql,8307172,54884,00:00:00/55:14,23845) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48144,00:00:00/53:41,24060) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307056,51912,00:00:00/38:02,26530) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48048,00:00:00/32:09,27441) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/30:17,27714) [kworker/u16:0]
(gitlab-psql,8310736,59884,00:00:00/27:04,28269) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:16/4-02:41:15,28395) [kworker/5:2]
(root,0,0,00:00:00/24:21,28667) [kworker/u16:2]
(gitlab-prometheus,1795260,16932,07:46:13/218-00:23:43,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:19:55/218-00:23:43,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181768,133060,1-16:17:44/218-00:23:42,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45596,4-21:26:04/218-00:23:42,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,40772,1-04:07:39/218-00:23:42,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,50672,03:21:12/218-00:23:42,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/218-00:23:41,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24256,00:03:29/218-00:23:41,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/218-00:23:41,29019) nginx: worker process
(gitlab-www,65828,22828,00:01:27/218-00:23:41,29020) nginx: worker process
(gitlab-www,69244,26088,00:01:58/218-00:23:41,29021) nginx: worker process
(gitlab-www,69652,27056,05:42:13/218-00:23:41,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/218-00:23:41,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/218-00:23:41,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:24/218-00:23:41,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:31/218-00:23:41,29026) nginx: cache manager process
(gitlab-prometheus,719468,15400,1-02:39:21/218-00:23:40,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15020,1-03:44:03/218-00:23:40,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:17:17/218-00:23:39,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3224872,171740,2-11:19:37/218-00:23:39,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,270828,00:13:54/218-00:23:39,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:11/218-00:23:39,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:24/218-00:23:39,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:17:33/218-00:23:39,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:48:16/218-00:23:39,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:22/218-00:23:39,29064) postgres: logical replication launcher   
(git,1461948,919124,03:34:43/218-00:23:38,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16752,11-23:01:59/218-00:23:37,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16524,08:44:42/218-00:23:37,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108864,18:32:29/218-00:23:37,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87572,18:34:25/218-00:23:37,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,17368,01:01:18/218-00:23:37,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:14/218-00:23:33,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1171524,33-06:37:41/218-00:23:33,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,84988,3-07:11:19/218-00:23:21,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,75592,1-13:01:48/218-00:23:18,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:28:29/218-00:22:14,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/218-00:22:14,29560) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47500,00:00:00/18:20,29903) postgres: gitlab gitlabhq_production [local] idle
(root,4628,804,00:00:00/17:00,30144) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307024,47304,00:00:00/14:18,30527) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:08/1-09:07:36,30723) [kworker/7:1]
(gitlab-psql,8306736,53420,00:00:00/10:21,31147) postgres: gitlab gitlabhq_production [local] idle
(root,4532,836,00:00:00/06:59,31761) sleep 3000
(gitlab-psql,8306660,46140,00:00:00/06:24,31821) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/00:40,32737) [kworker/u16:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-10 01:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912cb0769d1

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7984,00:28:29/612-00:42:25,1) /sbin/init
(root,0,0,00:00:23/612-00:42:25,2) [kthreadd]
(root,0,0,00:00:00/612-00:42:25,4) [kworker/0:0H]
(root,0,0,00:00:00/612-00:42:25,6) [mm_percpu_wq]
(root,0,0,00:06:54/612-00:42:25,7) [ksoftirqd/0]
(root,0,0,19:01:29/612-00:42:25,8) [rcu_sched]
(root,0,0,00:00:00/612-00:42:25,9) [rcu_bh]
(root,0,0,00:00:19/612-00:42:25,10) [migration/0]
(root,0,0,00:03:22/612-00:42:25,11) [watchdog/0]
(root,0,0,00:00:00/612-00:42:25,12) [cpuhp/0]
(root,0,0,00:00:00/612-00:42:25,13) [cpuhp/1]
(root,0,0,00:03:07/612-00:42:25,14) [watchdog/1]
(root,0,0,00:00:18/612-00:42:25,15) [migration/1]
(root,0,0,00:03:46/612-00:42:25,16) [ksoftirqd/1]
(root,0,0,00:00:00/612-00:42:25,18) [kworker/1:0H]
(root,0,0,00:00:00/612-00:42:25,19) [cpuhp/2]
(root,0,0,00:03:20/612-00:42:25,20) [watchdog/2]
(root,0,0,00:00:17/612-00:42:25,21) [migration/2]
(root,0,0,00:02:47/612-00:42:25,22) [ksoftirqd/2]
(root,0,0,00:00:00/612-00:42:25,24) [kworker/2:0H]
(root,0,0,00:00:00/612-00:42:25,25) [cpuhp/3]
(root,0,0,00:03:03/612-00:42:25,26) [watchdog/3]
(root,0,0,00:00:15/612-00:42:25,27) [migration/3]
(root,0,0,00:02:13/612-00:42:25,28) [ksoftirqd/3]
(root,0,0,00:00:00/612-00:42:25,30) [kworker/3:0H]
(root,0,0,00:00:00/612-00:42:25,31) [cpuhp/4]
(root,0,0,00:03:17/612-00:42:25,32) [watchdog/4]
(root,0,0,00:00:13/612-00:42:25,33) [migration/4]
(root,0,0,00:06:53/612-00:42:25,34) [ksoftirqd/4]
(root,0,0,00:00:00/612-00:42:25,36) [kworker/4:0H]
(root,0,0,00:00:00/612-00:42:25,37) [cpuhp/5]
(root,0,0,00:03:14/612-00:42:25,38) [watchdog/5]
(root,0,0,00:00:15/612-00:42:25,39) [migration/5]
(root,0,0,00:04:17/612-00:42:25,40) [ksoftirqd/5]
(root,0,0,00:00:00/612-00:42:25,42) [kworker/5:0H]
(root,0,0,00:00:00/612-00:42:25,43) [cpuhp/6]
(root,0,0,00:03:05/612-00:42:25,44) [watchdog/6]
(root,0,0,00:00:26/612-00:42:25,45) [migration/6]
(root,0,0,00:02:19/612-00:42:25,46) [ksoftirqd/6]
(root,0,0,00:00:00/612-00:42:25,48) [kworker/6:0H]
(root,0,0,00:00:00/612-00:42:25,49) [cpuhp/7]
(root,0,0,00:02:58/612-00:42:25,50) [watchdog/7]
(root,0,0,00:00:22/612-00:42:25,51) [migration/7]
(root,0,0,00:02:07/612-00:42:25,52) [ksoftirqd/7]
(root,0,0,00:00:00/612-00:42:25,54) [kworker/7:0H]
(root,0,0,00:00:00/612-00:42:25,55) [kdevtmpfs]
(root,0,0,00:00:00/612-00:42:25,56) [netns]
(root,0,0,00:00:00/612-00:42:25,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/612-00:42:25,58) [kauditd]
(root,0,0,00:01:36/612-00:42:25,62) [khungtaskd]
(root,0,0,00:00:00/612-00:42:25,63) [oom_reaper]
(root,0,0,00:00:00/612-00:42:25,64) [writeback]
(root,0,0,00:00:01/612-00:42:25,65) [kcompactd0]
(root,0,0,00:00:00/612-00:42:25,66) [ksmd]
(root,0,0,00:08:18/612-00:42:25,67) [khugepaged]
(root,0,0,00:00:00/612-00:42:25,68) [crypto]
(root,0,0,00:00:00/612-00:42:25,69) [kintegrityd]
(root,0,0,00:00:00/612-00:42:25,70) [kblockd]
(root,0,0,00:00:00/612-00:42:25,71) [ata_sff]
(root,0,0,00:00:00/612-00:42:25,72) [md]
(root,0,0,00:00:00/612-00:42:25,73) [edac-poller]
(root,0,0,00:00:00/612-00:42:25,74) [devfreq_wq]
(root,0,0,00:00:00/612-00:42:25,75) [watchdogd]
(root,0,0,02:03:05/612-00:42:25,79) [kswapd0]
(root,0,0,00:00:00/612-00:42:25,80) [kworker/u17:0]
(root,0,0,00:00:00/612-00:42:25,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/612-00:42:25,123) [kthrotld]
(root,0,0,00:00:00/612-00:42:25,124) [acpi_thermal_pm]
(root,0,0,00:00:00/612-00:42:25,130) [scsi_eh_0]
(root,0,0,00:00:00/612-00:42:25,131) [scsi_tmf_0]
(root,0,0,00:00:00/612-00:42:25,132) [scsi_eh_1]
(root,0,0,00:00:00/612-00:42:25,133) [scsi_tmf_1]
(root,0,0,00:00:00/612-00:42:24,139) [ipv6_addrconf]
(root,0,0,00:00:00/612-00:42:24,148) [kstrp]
(root,0,0,00:00:00/612-00:42:24,166) [charger_manager]
(root,0,0,00:00:00/612-00:42:24,223) [scsi_eh_2]
(root,0,0,00:00:00/612-00:42:24,224) [scsi_tmf_2]
(root,0,0,00:03:29/612-00:42:23,267) [kworker/7:1H]
(root,0,0,00:27:45/612-00:42:19,268) [kworker/4:1H]
(root,0,0,00:00:57/612-00:42:19,275) [kworker/1:1H]
(root,0,0,00:00:41/612-00:42:18,335) [kworker/2:1H]
(root,0,0,00:00:00/612-00:42:17,342) [raid5wq]
(root,0,0,01:07:46/612-00:42:17,392) [jbd2/sda1-8]
(root,0,0,00:00:00/612-00:42:17,393) [ext4-rsv-conver]
(root,0,0,00:00:35/612-00:42:17,395) [kworker/3:1H]
(root,0,0,00:03:04/612-00:42:17,398) [kworker/5:1H]
(root,0,0,00:04:08/612-00:42:17,431) [kworker/6:1H]
(root,0,0,00:01:56/612-00:42:17,464) [kworker/0:1H]
(root,130708,37120,01:13:42/612-00:42:16,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/612-00:42:16,476) [iscsi_eh]
(root,0,0,00:00:00/612-00:42:16,485) [ib-comp-wq]
(root,0,0,00:00:00/612-00:42:16,486) [ib_mcast]
(root,0,0,00:00:00/612-00:42:16,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/612-00:42:16,494) [rdma_cm]
(root,97708,1596,00:00:00/612-00:42:16,498) /sbin/lvmetad -f
(root,43436,3896,00:04:51/612-00:42:16,508) /lib/systemd/systemd-udevd
(root,0,0,00:01:10/6-01:14:41,601) [kworker/6:2]
(root,0,0,00:00:00/01:09:11,615) [kworker/6:0]
(systemd-timesync,141928,2684,00:02:58/612-00:42:16,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/612-00:42:14,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(gitlab-psql,8313492,78540,00:00:01/01:05:24,1182) postgres: gitlab gitlabhq_production [local] idle
(root,110516,3424,01:25:23/612-00:42:11,1244) /usr/sbin/irqbalance --foreground
(root,383064,2456,00:17:46/612-00:42:11,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:22:50/612-00:42:11,1251) /usr/sbin/rsyslogd -n
(clamav,306860,21652,00:10:25/612-00:42:11,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:59:47/612-00:42:11,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:31/612-00:42:11,1289) /usr/sbin/cron -f
(root,286252,6272,00:34:06/612-00:42:11,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:19/612-00:42:11,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/612-00:42:11,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/612-00:42:11,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/612-00:42:11,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:32:12/612-00:42:11,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,11:45:28/612-00:42:11,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:41/612-00:42:11,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/612-00:42:11,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/612-00:42:11,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:53/612-00:42:11,1379) nginx: worker process
(www-data,143788,3960,00:00:09/612-00:42:11,1380) nginx: worker process
(www-data,143788,5000,00:00:44/612-00:42:11,1381) nginx: worker process
(www-data,143788,3964,00:00:01/612-00:42:11,1382) nginx: worker process
(www-data,143788,4056,00:00:00/612-00:42:11,1383) nginx: worker process
(www-data,143788,4184,00:00:00/612-00:42:11,1384) nginx: worker process
(www-data,143788,4056,00:00:00/612-00:42:11,1386) nginx: worker process
(www-data,143788,4184,00:00:00/612-00:42:11,1388) nginx: worker process
(root,14888,1756,00:00:00/612-00:42:11,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:20:04/612-00:42:11,1404) /usr/sbin/sshd -D
(root,4548,1332,00:14:42/612-00:42:10,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/612-00:42:10,1498) runsv redis-exporter
(root,4396,712,00:00:06/612-00:42:10,1500) runsv node-exporter
(root,4396,820,00:00:06/612-00:42:10,1501) runsv prometheus
(root,4396,824,00:00:06/612-00:42:10,1502) runsv sidekiq
(root,4396,720,00:00:06/612-00:42:10,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/612-00:42:10,1507) runsv alertmanager
(root,4396,856,00:00:05/612-00:42:10,1509) runsv postgresql
(root,4396,744,00:00:07/612-00:42:10,1510) runsv postgres-exporter
(root,4396,788,00:00:06/612-00:42:10,1511) runsv grafana
(root,4396,780,00:00:06/612-00:42:10,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:27/612-00:42:10,1513) runsv logrotate
(root,4396,856,00:00:05/612-00:42:10,1514) runsv puma
(root,4396,744,00:00:06/612-00:42:10,1515) runsv nginx
(root,4396,740,00:00:06/612-00:42:10,1516) runsv gitaly
(root,4396,860,00:00:05/612-00:42:10,1517) runsv redis
(root,4396,760,00:00:06/612-00:42:10,1519) runsv registry
(root,4540,864,00:00:06/612-00:42:10,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:10/612-00:42:10,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/612-00:42:10,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:50:35/612-00:42:10,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,02:08:41/612-00:42:10,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:06/612-00:42:10,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/612-00:42:10,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:06/612-00:42:10,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/612-00:42:10,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:20/612-00:42:10,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:06/612-00:42:10,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:23:44/612-00:42:10,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:18:19/612-00:42:10,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:16/612-00:42:10,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:45/612-00:42:10,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:06/612-00:42:10,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/01:00:04,2169) [kworker/u16:1]
(gitlab-psql,8314112,74796,00:00:01/48:59,3993) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312228,69164,00:00:00/44:18,4703) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309620,58516,00:00:00/40:34,5352) postgres: gitlab gitlabhq_production [local] idle
(root,4628,796,00:00:00/470-08:22:15,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,792732,13600,00:09:17/470-08:22:15,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86984,8156,00:37:27/470-08:22:15,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:04:12/470-08:22:15,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(gitlab-psql,8313568,71060,00:00:01/30:48,7047) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312504,67272,00:00:00/29:29,7249) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311536,64932,00:00:00/27:54,7526) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8315128,81032,00:00:00/27:17,7601) postgres: gitlab gitlabhq_production [local] idle
(root,4628,776,00:00:00/27:00,7687) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(git,1707248,1013960,00:00:23/03:16:12,7821) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(gitlab-psql,8316552,80408,00:00:00/19:54,9026) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/18:27,9297) [kworker/u16:0]
(root,4532,836,00:00:00/16:59,9612) sleep 3000
(root,0,0,00:01:46/30-07:54:17,9942) [kworker/4:0]
(root,0,0,00:00:00/13:46,10387) [kworker/2:1]
(root,0,0,00:00:00/13:46,10388) [kworker/3:0]
(git,1876208,1037072,00:01:16/09:18:15,10483) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/12:33:20,10604) [kworker/4:1]
(gitlab-psql,8311172,59788,00:00:00/10:14,11257) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307344,48564,00:00:00/09:07,11488) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307044,48208,00:00:00/08:58,11509) postgres: gitlab gitlabhq_production [local] idle
(git,1851744,1046908,00:01:18/09:11:15,11999) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/04:07,12295) [kworker/u16:2]
(root,0,0,00:00:31/8-21:51:29,12666) [kworker/2:2]
(gitlab-psql,8303976,26492,00:00:00/00:20,12839) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8303824,26676,00:00:00/00:19,12840) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3368,00:00:00/00:00,13030) /bin/bash /usr/bin/check_mk_agent
(root,36700,3132,00:00:00/00:00,13048) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1104,00:00:00/00:00,13049) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1741044,1011428,00:00:43/05:56:13,13453) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:00:04/1-06:41:32,16648) [kworker/3:2]
(git,1744228,1015780,00:00:44/05:32:12,17452) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1695072,982740,00:00:16/02:01:11,20090) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:01:25/24-01:14:39,21982) [kworker/1:2]
(root,0,0,00:01:27/12-01:14:14,23207) [kworker/0:2]
(root,0,0,00:00:00/20:53:50,24630) [kworker/0:1]
(systemd-resolve,70628,4900,00:00:00/11:04:21,25135) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/04:27:20,28064) [kworker/7:1]
(root,0,0,00:00:08/2-02:51:12,28395) [kworker/5:2]
(git,1745140,998624,00:00:50/07:38:33,28695) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1714416,977984,00:00:30/04:22:32,28852) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-prometheus,1795260,12200,07:41:59/216-00:33:40,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,952,01:19:11/216-00:33:40,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181768,132580,1-15:55:52/216-00:33:39,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45716,4-20:20:52/216-00:33:39,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,38528,1-03:51:43/216-00:33:39,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,49188,03:19:06/216-00:33:39,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/216-00:33:38,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,67044,24256,00:03:29/216-00:33:38,29018) nginx: worker process
(gitlab-www,65016,21792,00:00:36/216-00:33:38,29019) nginx: worker process
(gitlab-www,65828,22828,00:01:27/216-00:33:38,29020) nginx: worker process
(gitlab-www,69244,26088,00:01:58/216-00:33:38,29021) nginx: worker process
(gitlab-www,69124,26280,05:39:05/216-00:33:38,29022) nginx: worker process
(gitlab-www,66892,23564,00:00:58/216-00:33:38,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/216-00:33:38,29024) nginx: worker process
(gitlab-www,65496,22076,00:00:24/216-00:33:38,29025) nginx: worker process
(gitlab-www,59784,3828,00:02:30/216-00:33:38,29026) nginx: cache manager process
(gitlab-prometheus,719468,13912,1-02:25:09/216-00:33:37,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14600,1-03:28:50/216-00:33:37,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:17:08/216-00:33:36,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3194480,162184,2-10:46:44/216-00:33:36,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,269368,00:13:47/216-00:33:36,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:06:07/216-00:33:36,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:07:20/216-00:33:36,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:17:23/216-00:33:36,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,03:46:12/216-00:33:36,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:22/216-00:33:36,29064) postgres: logical replication launcher   
(git,1461948,919084,03:32:48/216-00:33:35,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16844,11-20:23:30/216-00:33:34,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,14768,08:40:01/216-00:33:34,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108716,18:23:07/216-00:33:34,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87572,18:25:06/216-00:33:34,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15096,01:00:52/216-00:33:34,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:12:07/216-00:33:30,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4919532,1199088,32-23:19:28/216-00:33:30,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(root,0,0,00:00:06/1-02:28:29,29202) [kworker/7:2]
(gitlab-psql,8309408,84988,3-06:27:11/216-00:33:18,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,75592,1-12:40:52/216-00:33:15,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:28:14/216-00:32:11,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/216-00:32:11,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:14:36,31064) [kworker/1:0]
(root,0,0,00:00:00/01:14:33,31134) [kworker/5:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-08 01:16

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912662f05ba

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8036,00:26:18/564-22:44:04,1) /sbin/init
(root,0,0,00:00:22/564-22:44:04,2) [kthreadd]
(root,0,0,00:00:00/564-22:44:04,4) [kworker/0:0H]
(root,0,0,00:00:00/564-22:44:04,6) [mm_percpu_wq]
(root,0,0,00:06:21/564-22:44:04,7) [ksoftirqd/0]
(root,0,0,17:28:02/564-22:44:04,8) [rcu_sched]
(root,0,0,00:00:00/564-22:44:04,9) [rcu_bh]
(root,0,0,00:00:17/564-22:44:04,10) [migration/0]
(root,0,0,00:03:05/564-22:44:04,11) [watchdog/0]
(root,0,0,00:00:00/564-22:44:04,12) [cpuhp/0]
(root,0,0,00:00:00/564-22:44:04,13) [cpuhp/1]
(root,0,0,00:02:52/564-22:44:04,14) [watchdog/1]
(root,0,0,00:00:17/564-22:44:04,15) [migration/1]
(root,0,0,00:03:28/564-22:44:04,16) [ksoftirqd/1]
(root,0,0,00:00:00/564-22:44:04,18) [kworker/1:0H]
(root,0,0,00:00:00/564-22:44:04,19) [cpuhp/2]
(root,0,0,00:03:03/564-22:44:04,20) [watchdog/2]
(root,0,0,00:00:15/564-22:44:04,21) [migration/2]
(root,0,0,00:02:34/564-22:44:04,22) [ksoftirqd/2]
(root,0,0,00:00:00/564-22:44:04,24) [kworker/2:0H]
(root,0,0,00:00:00/564-22:44:04,25) [cpuhp/3]
(root,0,0,00:02:48/564-22:44:04,26) [watchdog/3]
(root,0,0,00:00:14/564-22:44:04,27) [migration/3]
(root,0,0,00:02:02/564-22:44:04,28) [ksoftirqd/3]
(root,0,0,00:00:00/564-22:44:04,30) [kworker/3:0H]
(root,0,0,00:00:00/564-22:44:04,31) [cpuhp/4]
(root,0,0,00:03:01/564-22:44:04,32) [watchdog/4]
(root,0,0,00:00:12/564-22:44:04,33) [migration/4]
(root,0,0,00:06:15/564-22:44:04,34) [ksoftirqd/4]
(root,0,0,00:00:00/564-22:44:04,36) [kworker/4:0H]
(root,0,0,00:00:00/564-22:44:04,37) [cpuhp/5]
(root,0,0,00:02:58/564-22:44:04,38) [watchdog/5]
(root,0,0,00:00:14/564-22:44:04,39) [migration/5]
(root,0,0,00:03:56/564-22:44:04,40) [ksoftirqd/5]
(root,0,0,00:00:00/564-22:44:04,42) [kworker/5:0H]
(root,0,0,00:00:00/564-22:44:04,43) [cpuhp/6]
(root,0,0,00:02:50/564-22:44:04,44) [watchdog/6]
(root,0,0,00:00:24/564-22:44:04,45) [migration/6]
(root,0,0,00:02:06/564-22:44:04,46) [ksoftirqd/6]
(root,0,0,00:00:00/564-22:44:04,48) [kworker/6:0H]
(root,0,0,00:00:00/564-22:44:04,49) [cpuhp/7]
(root,0,0,00:02:43/564-22:44:04,50) [watchdog/7]
(root,0,0,00:00:20/564-22:44:04,51) [migration/7]
(root,0,0,00:01:57/564-22:44:04,52) [ksoftirqd/7]
(root,0,0,00:00:00/564-22:44:04,54) [kworker/7:0H]
(root,0,0,00:00:00/564-22:44:04,55) [kdevtmpfs]
(root,0,0,00:00:00/564-22:44:04,56) [netns]
(root,0,0,00:00:00/564-22:44:04,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/564-22:44:04,58) [kauditd]
(root,0,0,00:01:29/564-22:44:04,62) [khungtaskd]
(root,0,0,00:00:00/564-22:44:04,63) [oom_reaper]
(root,0,0,00:00:00/564-22:44:04,64) [writeback]
(root,0,0,00:00:01/564-22:44:04,65) [kcompactd0]
(root,0,0,00:00:00/564-22:44:04,66) [ksmd]
(root,0,0,00:07:43/564-22:44:04,67) [khugepaged]
(root,0,0,00:00:00/564-22:44:04,68) [crypto]
(root,0,0,00:00:00/564-22:44:04,69) [kintegrityd]
(root,0,0,00:00:00/564-22:44:04,70) [kblockd]
(root,0,0,00:00:00/564-22:44:04,71) [ata_sff]
(root,0,0,00:00:00/564-22:44:04,72) [md]
(root,0,0,00:00:00/564-22:44:04,73) [edac-poller]
(root,0,0,00:00:00/564-22:44:04,74) [devfreq_wq]
(root,0,0,00:00:00/564-22:44:04,75) [watchdogd]
(root,0,0,01:52:02/564-22:44:04,79) [kswapd0]
(root,0,0,00:00:00/564-22:44:04,80) [kworker/u17:0]
(root,0,0,00:00:00/564-22:44:04,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/564-22:44:04,123) [kthrotld]
(root,0,0,00:00:00/564-22:44:04,124) [acpi_thermal_pm]
(root,0,0,00:00:00/564-22:44:04,130) [scsi_eh_0]
(root,0,0,00:00:00/564-22:44:04,131) [scsi_tmf_0]
(root,0,0,00:00:00/564-22:44:04,132) [scsi_eh_1]
(root,0,0,00:00:00/564-22:44:04,133) [scsi_tmf_1]
(root,0,0,00:00:00/564-22:44:03,139) [ipv6_addrconf]
(root,0,0,00:00:00/564-22:44:03,148) [kstrp]
(root,0,0,00:00:00/564-22:44:03,166) [charger_manager]
(root,0,0,00:00:00/564-22:44:03,223) [scsi_eh_2]
(root,0,0,00:00:00/564-22:44:03,224) [scsi_tmf_2]
(root,0,0,00:03:12/564-22:44:02,267) [kworker/7:1H]
(root,0,0,00:25:37/564-22:43:58,268) [kworker/4:1H]
(root,0,0,00:00:53/564-22:43:58,275) [kworker/1:1H]
(root,0,0,00:00:38/564-22:43:57,335) [kworker/2:1H]
(root,0,0,00:00:00/564-22:43:56,342) [raid5wq]
(root,0,0,01:02:33/564-22:43:56,392) [jbd2/sda1-8]
(root,0,0,00:00:00/564-22:43:56,393) [ext4-rsv-conver]
(root,0,0,00:00:32/564-22:43:56,395) [kworker/3:1H]
(root,0,0,00:02:50/564-22:43:56,398) [kworker/5:1H]
(root,0,0,00:03:49/564-22:43:56,431) [kworker/6:1H]
(root,0,0,00:01:47/564-22:43:56,464) [kworker/0:1H]
(root,138788,43440,01:07:37/564-22:43:55,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/564-22:43:55,476) [iscsi_eh]
(root,0,0,00:00:00/564-22:43:55,485) [ib-comp-wq]
(root,0,0,00:00:00/564-22:43:55,486) [ib_mcast]
(root,0,0,00:00:00/564-22:43:55,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/564-22:43:55,494) [rdma_cm]
(root,97708,1596,00:00:00/564-22:43:55,498) /sbin/lvmetad -f
(root,43436,3896,00:04:33/564-22:43:55,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:02:49/564-22:43:55,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/564-22:43:53,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(gitlab-psql,8307260,48908,00:00:00/14:06,1061) postgres: gitlab gitlabhq_production [local] idle
(root,110516,3424,01:18:45/564-22:43:50,1244) /usr/sbin/irqbalance --foreground
(root,383268,2356,00:16:29/564-22:43:50,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:20:50/564-22:43:50,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29436,00:09:38/564-22:43:50,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:54:27/564-22:43:50,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:13/564-22:43:50,1289) /usr/sbin/cron -f
(root,286252,6272,00:31:18/564-22:43:50,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:02/564-22:43:50,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/564-22:43:50,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/564-22:43:50,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/564-22:43:50,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:29:23/564-22:43:50,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,10:51:07/564-22:43:50,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:04/564-22:43:50,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/564-22:43:50,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/564-22:43:50,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:41/564-22:43:50,1379) nginx: worker process
(www-data,143788,3960,00:00:09/564-22:43:50,1380) nginx: worker process
(www-data,143788,5000,00:00:44/564-22:43:50,1381) nginx: worker process
(www-data,143788,3964,00:00:01/564-22:43:50,1382) nginx: worker process
(www-data,143788,4056,00:00:00/564-22:43:50,1383) nginx: worker process
(www-data,143788,4184,00:00:00/564-22:43:50,1384) nginx: worker process
(www-data,143788,4056,00:00:00/564-22:43:50,1386) nginx: worker process
(www-data,143788,4184,00:00:00/564-22:43:50,1388) nginx: worker process
(root,14888,1756,00:00:00/564-22:43:50,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(gitlab-psql,8306660,45456,00:00:00/12:09,1402) postgres: gitlab gitlabhq_production [local] idle
(root,72296,5912,00:18:19/564-22:43:50,1404) /usr/sbin/sshd -D
(root,4548,1332,00:13:35/564-22:43:49,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/564-22:43:49,1498) runsv redis-exporter
(root,4396,712,00:00:06/564-22:43:49,1500) runsv node-exporter
(root,4396,820,00:00:06/564-22:43:49,1501) runsv prometheus
(root,4396,824,00:00:06/564-22:43:49,1502) runsv sidekiq
(root,4396,720,00:00:05/564-22:43:49,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/564-22:43:49,1507) runsv alertmanager
(root,4396,856,00:00:05/564-22:43:49,1509) runsv postgresql
(root,4396,744,00:00:06/564-22:43:49,1510) runsv postgres-exporter
(root,4396,788,00:00:05/564-22:43:49,1511) runsv grafana
(root,4396,780,00:00:05/564-22:43:49,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:25/564-22:43:49,1513) runsv logrotate
(root,4396,856,00:00:05/564-22:43:49,1514) runsv puma
(root,4396,744,00:00:05/564-22:43:49,1515) runsv nginx
(root,4396,740,00:00:05/564-22:43:49,1516) runsv gitaly
(root,4396,860,00:00:05/564-22:43:49,1517) runsv redis
(root,4396,760,00:00:06/564-22:43:49,1519) runsv registry
(root,4540,864,00:00:05/564-22:43:49,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:09/564-22:43:49,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/564-22:43:49,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:41:55/564-22:43:49,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:58:55/564-22:43:49,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:05/564-22:43:49,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/564-22:43:49,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:05/564-22:43:49,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/564-22:43:49,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:19/564-22:43:49,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:05/564-22:43:49,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:21:54/564-22:43:49,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:16:51/564-22:43:49,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:15/564-22:43:49,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:37/564-22:43:49,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:05/564-22:43:49,1558) svlogd -tt /var/log/gitlab/postgresql
(gitlab-psql,8306368,45928,00:00:00/09:33,1858) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/06:21,2345) [kworker/u16:2]
(root,0,0,00:01:35/12-23:16:27,2582) [kworker/0:2]
(root,0,0,00:00:11/3-00:09:11,2655) [kworker/5:2]
(gitlab-psql,8304536,34156,00:00:00/02:11,3036) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47116,00:00:00/01:30,3158) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/00:10,3351) [kworker/u16:1]
(root,20180,3552,00:00:00/00:00,3392) /bin/bash /usr/bin/check_mk_agent
(root,36700,3140,00:00:00/00:00,3410) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1156,00:00:00/00:00,3411) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/06:40:49,4373) [kworker/7:2]
(root,0,0,00:00:00/19:58:51,5264) [kworker/5:1]
(root,0,0,00:00:00/09:54:18,6025) [kworker/3:1]
(root,4628,796,00:00:00/423-06:23:54,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,743488,17068,00:08:21/423-06:23:54,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86488,7668,00:30:39/423-06:23:54,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:03:50/423-06:23:54,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:58/16-23:16:35,6649) [kworker/1:0]
(root,0,0,00:01:36/29-20:16:58,7555) [kworker/4:1]
(root,0,0,00:00:00/22:54:33,8167) [kworker/4:0]
(root,0,0,00:03:30/17-01:04:51,8171) [kworker/6:2]
(root,0,0,00:00:00/22:54:25,8905) [kworker/6:0]
(root,0,0,00:00:00/19:14:30,12267) [kworker/1:1]
(root,0,0,00:00:00/1-04:18:09,16852) [kworker/2:0]
(root,0,0,00:00:30/9-02:35:24,16876) [kworker/3:2]
(git,1579224,974284,00:00:07/01:42:01,19124) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1587416,976480,00:00:08/01:41:01,19294) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1585368,969972,00:00:09/01:40:01,19464) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1591512,978600,00:00:08/01:39:01,19637) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1592536,978364,00:00:08/01:38:01,19805) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1592536,978296,00:00:08/01:37:01,19970) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1579224,973016,00:00:08/01:36:01,20140) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1585368,974436,00:00:08/01:35:01,20308) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(gitlab-psql,8307268,49444,00:00:00/44:27,28436) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:48/13-23:09:02,28935) [kworker/2:2]
(gitlab-prometheus,1795260,16796,06:02:40/168-22:35:19,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,940,01:02:16/168-22:35:19,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181512,132696,1-07:30:04/168-22:35:18,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45852,3-19:02:37/168-22:35:18,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,40276,21:41:14/168-22:35:18,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,43312,02:30:48/168-22:35:18,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/168-22:35:17,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66824,24072,00:03:20/168-22:35:17,29018) nginx: worker process
(gitlab-www,65016,21860,00:00:36/168-22:35:17,29019) nginx: worker process
(gitlab-www,65828,22592,00:01:27/168-22:35:17,29020) nginx: worker process
(gitlab-www,69244,26180,00:01:57/168-22:35:17,29021) nginx: worker process
(gitlab-www,68564,25968,04:28:02/168-22:35:17,29022) nginx: worker process
(gitlab-www,66892,23580,00:00:58/168-22:35:17,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/168-22:35:17,29024) nginx: worker process
(gitlab-www,65192,22076,00:00:24/168-22:35:17,29025) nginx: worker process
(gitlab-www,59784,3828,00:01:59/168-22:35:17,29026) nginx: cache manager process
(gitlab-prometheus,719468,14300,20:49:07/168-22:35:16,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14172,21:29:55/168-22:35:16,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:13:27/168-22:35:15,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3198372,171852,1-21:51:12/168-22:35:15,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,252460,00:11:15/168-22:35:15,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:04:51/168-22:35:15,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:05:49/168-22:35:15,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:13:42/168-22:35:15,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,02:58:09/168-22:35:15,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:18/168-22:35:15,29064) postgres: logical replication launcher   
(git,1461948,918724,02:48:42/168-22:35:14,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,17020,9-06:57:55/168-22:35:13,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,15428,06:48:44/168-22:35:13,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108716,14:40:24/168-22:35:13,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87584,14:41:14/168-22:35:13,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15404,00:50:49/168-22:35:13,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:09:36/168-22:35:09,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1146848,25-19:51:01/168-22:35:09,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,78888,2-13:20:55/168-22:34:57,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,74632,1-04:35:19/168-22:34:54,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:22:15/168-22:33:50,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/168-22:33:50,29560) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,5128,00:00:00/07:25:07,29743) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/07:25:07,29754) [kworker/0:0]
(root,0,0,00:00:00/36:44,29951) [kworker/u16:0]
(gitlab-psql,8307248,52144,00:00:00/35:53,30047) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307240,54468,00:00:00/34:45,30265) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:51/18-23:10:17,30799) [kworker/7:0]
(root,4628,828,00:00:00/30:02,30963) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307072,47716,00:00:00/28:37,31214) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307308,54696,00:00:00/28:10,31260) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48004,00:00:00/23:42,31983) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,49364,00:00:00/23:00,32057) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306900,47584,00:00:00/22:09,32193) postgres: gitlab gitlabhq_production [local] idle
(root,4532,820,00:00:00/20:02,32519) sleep 3000

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-21 23:18

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912817c2beb

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8228,00:26:15/562-21:43:00,1) /sbin/init
(root,0,0,00:00:22/562-21:43:00,2) [kthreadd]
(root,0,0,00:00:00/562-21:43:00,4) [kworker/0:0H]
(root,0,0,00:00:00/562-21:43:00,6) [mm_percpu_wq]
(root,0,0,00:06:20/562-21:43:00,7) [ksoftirqd/0]
(root,0,0,17:24:21/562-21:43:00,8) [rcu_sched]
(root,0,0,00:00:00/562-21:43:00,9) [rcu_bh]
(root,0,0,00:00:17/562-21:43:00,10) [migration/0]
(root,0,0,00:03:05/562-21:43:00,11) [watchdog/0]
(root,0,0,00:00:00/562-21:43:00,12) [cpuhp/0]
(root,0,0,00:00:00/562-21:43:00,13) [cpuhp/1]
(root,0,0,00:02:51/562-21:43:00,14) [watchdog/1]
(root,0,0,00:00:17/562-21:43:00,15) [migration/1]
(root,0,0,00:03:28/562-21:43:00,16) [ksoftirqd/1]
(root,0,0,00:00:00/562-21:43:00,18) [kworker/1:0H]
(root,0,0,00:00:00/562-21:43:00,19) [cpuhp/2]
(root,0,0,00:03:03/562-21:43:00,20) [watchdog/2]
(root,0,0,00:00:15/562-21:43:00,21) [migration/2]
(root,0,0,00:02:34/562-21:43:00,22) [ksoftirqd/2]
(root,0,0,00:00:00/562-21:43:00,24) [kworker/2:0H]
(root,0,0,00:00:00/562-21:43:00,25) [cpuhp/3]
(root,0,0,00:02:48/562-21:43:00,26) [watchdog/3]
(root,0,0,00:00:14/562-21:43:00,27) [migration/3]
(root,0,0,00:02:02/562-21:43:00,28) [ksoftirqd/3]
(root,0,0,00:00:00/562-21:43:00,30) [kworker/3:0H]
(root,0,0,00:00:00/562-21:43:00,31) [cpuhp/4]
(root,0,0,00:03:01/562-21:43:00,32) [watchdog/4]
(root,0,0,00:00:12/562-21:43:00,33) [migration/4]
(root,0,0,00:06:14/562-21:43:00,34) [ksoftirqd/4]
(root,0,0,00:00:00/562-21:43:00,36) [kworker/4:0H]
(root,0,0,00:00:00/562-21:43:00,37) [cpuhp/5]
(root,0,0,00:02:58/562-21:43:00,38) [watchdog/5]
(root,0,0,00:00:14/562-21:43:00,39) [migration/5]
(root,0,0,00:03:55/562-21:43:00,40) [ksoftirqd/5]
(root,0,0,00:00:00/562-21:43:00,42) [kworker/5:0H]
(root,0,0,00:00:00/562-21:43:00,43) [cpuhp/6]
(root,0,0,00:02:49/562-21:43:00,44) [watchdog/6]
(root,0,0,00:00:24/562-21:43:00,45) [migration/6]
(root,0,0,00:02:05/562-21:43:00,46) [ksoftirqd/6]
(root,0,0,00:00:00/562-21:43:00,48) [kworker/6:0H]
(root,0,0,00:00:00/562-21:43:00,49) [cpuhp/7]
(root,0,0,00:02:43/562-21:43:00,50) [watchdog/7]
(root,0,0,00:00:20/562-21:43:00,51) [migration/7]
(root,0,0,00:01:56/562-21:43:00,52) [ksoftirqd/7]
(root,0,0,00:00:00/562-21:43:00,54) [kworker/7:0H]
(root,0,0,00:00:00/562-21:43:00,55) [kdevtmpfs]
(root,0,0,00:00:00/562-21:43:00,56) [netns]
(root,0,0,00:00:00/562-21:43:00,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/562-21:43:00,58) [kauditd]
(root,0,0,00:01:28/562-21:43:00,62) [khungtaskd]
(root,0,0,00:00:00/562-21:43:00,63) [oom_reaper]
(root,0,0,00:00:00/562-21:43:00,64) [writeback]
(root,0,0,00:00:01/562-21:43:00,65) [kcompactd0]
(root,0,0,00:00:00/562-21:43:00,66) [ksmd]
(root,0,0,00:07:41/562-21:43:00,67) [khugepaged]
(root,0,0,00:00:00/562-21:43:00,68) [crypto]
(root,0,0,00:00:00/562-21:43:00,69) [kintegrityd]
(root,0,0,00:00:00/562-21:43:00,70) [kblockd]
(root,0,0,00:00:00/562-21:43:00,71) [ata_sff]
(root,0,0,00:00:00/562-21:43:00,72) [md]
(root,0,0,00:00:00/562-21:43:00,73) [edac-poller]
(root,0,0,00:00:00/562-21:43:00,74) [devfreq_wq]
(root,0,0,00:00:00/562-21:43:00,75) [watchdogd]
(root,0,0,01:51:35/562-21:43:00,79) [kswapd0]
(root,0,0,00:00:00/562-21:43:00,80) [kworker/u17:0]
(root,0,0,00:00:00/562-21:43:00,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/562-21:43:00,123) [kthrotld]
(root,0,0,00:00:00/562-21:43:00,124) [acpi_thermal_pm]
(root,0,0,00:00:00/562-21:43:00,130) [scsi_eh_0]
(root,0,0,00:00:00/562-21:43:00,131) [scsi_tmf_0]
(root,0,0,00:00:00/562-21:43:00,132) [scsi_eh_1]
(root,0,0,00:00:00/562-21:43:00,133) [scsi_tmf_1]
(root,0,0,00:00:00/562-21:42:59,139) [ipv6_addrconf]
(root,0,0,00:00:00/562-21:42:59,148) [kstrp]
(root,0,0,00:00:00/562-21:42:59,166) [charger_manager]
(root,0,0,00:00:00/562-21:42:59,223) [scsi_eh_2]
(root,0,0,00:00:00/562-21:42:59,224) [scsi_tmf_2]
(root,0,0,00:03:11/562-21:42:58,267) [kworker/7:1H]
(root,0,0,00:25:32/562-21:42:54,268) [kworker/4:1H]
(root,0,0,00:00:52/562-21:42:54,275) [kworker/1:1H]
(root,0,0,00:00:38/562-21:42:53,335) [kworker/2:1H]
(root,0,0,00:00:00/562-21:42:52,342) [raid5wq]
(root,0,0,01:02:20/562-21:42:52,392) [jbd2/sda1-8]
(root,0,0,00:00:00/562-21:42:52,393) [ext4-rsv-conver]
(root,0,0,00:00:32/562-21:42:52,395) [kworker/3:1H]
(root,0,0,00:02:49/562-21:42:52,398) [kworker/5:1H]
(root,0,0,00:03:48/562-21:42:52,431) [kworker/6:1H]
(root,0,0,00:01:46/562-21:42:52,464) [kworker/0:1H]
(root,290292,128644,01:07:27/562-21:42:51,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/562-21:42:51,476) [iscsi_eh]
(root,0,0,00:00:00/562-21:42:51,485) [ib-comp-wq]
(root,0,0,00:00:00/562-21:42:51,486) [ib_mcast]
(root,0,0,00:00:00/562-21:42:51,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/562-21:42:51,494) [rdma_cm]
(root,97708,1596,00:00:00/562-21:42:51,498) /sbin/lvmetad -f
(root,43436,3896,00:04:32/562-21:42:51,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:02:49/562-21:42:51,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/562-21:42:49,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:18:28/562-21:42:46,1244) /usr/sbin/irqbalance --foreground
(root,383268,2312,00:16:26/562-21:42:46,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:20:47/562-21:42:46,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29440,00:09:36/562-21:42:46,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:54:17/562-21:42:46,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:12/562-21:42:46,1289) /usr/sbin/cron -f
(root,286252,6272,00:31:13/562-21:42:46,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:02/562-21:42:46,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/562-21:42:46,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/562-21:42:46,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/562-21:42:46,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:29:17/562-21:42:46,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,10:48:47/562-21:42:46,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:02/562-21:42:46,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/562-21:42:46,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/562-21:42:46,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:41/562-21:42:46,1379) nginx: worker process
(www-data,143788,3960,00:00:09/562-21:42:46,1380) nginx: worker process
(www-data,143788,5000,00:00:44/562-21:42:46,1381) nginx: worker process
(www-data,143788,3964,00:00:01/562-21:42:46,1382) nginx: worker process
(www-data,143788,4056,00:00:00/562-21:42:46,1383) nginx: worker process
(www-data,143788,4184,00:00:00/562-21:42:46,1384) nginx: worker process
(www-data,143788,4056,00:00:00/562-21:42:46,1386) nginx: worker process
(www-data,143788,4184,00:00:00/562-21:42:46,1388) nginx: worker process
(root,14888,1756,00:00:00/562-21:42:46,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:18:16/562-21:42:46,1404) /usr/sbin/sshd -D
(root,4548,1332,00:13:32/562-21:42:45,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/562-21:42:45,1498) runsv redis-exporter
(root,4396,712,00:00:06/562-21:42:45,1500) runsv node-exporter
(root,4396,820,00:00:06/562-21:42:45,1501) runsv prometheus
(root,4396,824,00:00:06/562-21:42:45,1502) runsv sidekiq
(root,4396,720,00:00:05/562-21:42:45,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/562-21:42:45,1507) runsv alertmanager
(root,4396,856,00:00:05/562-21:42:45,1509) runsv postgresql
(root,4396,744,00:00:06/562-21:42:45,1510) runsv postgres-exporter
(root,4396,788,00:00:05/562-21:42:45,1511) runsv grafana
(root,4396,780,00:00:05/562-21:42:45,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:25/562-21:42:45,1513) runsv logrotate
(root,4396,856,00:00:05/562-21:42:45,1514) runsv puma
(root,4396,744,00:00:05/562-21:42:45,1515) runsv nginx
(root,4396,740,00:00:05/562-21:42:45,1516) runsv gitaly
(root,4396,860,00:00:05/562-21:42:45,1517) runsv redis
(root,4396,760,00:00:06/562-21:42:45,1519) runsv registry
(root,4540,864,00:00:05/562-21:42:45,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:09/562-21:42:45,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/562-21:42:45,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:41:33/562-21:42:45,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:58:30/562-21:42:45,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:05/562-21:42:45,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/562-21:42:45,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:05/562-21:42:45,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/562-21:42:45,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:19/562-21:42:45,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:05/562-21:42:45,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:21:49/562-21:42:45,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:16:47/562-21:42:45,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:15/562-21:42:45,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:37/562-21:42:45,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:05/562-21:42:45,1558) svlogd -tt /var/log/gitlab/postgresql
(root,4628,820,00:00:00/29:01,1744) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307260,54672,00:00:00/27:42,1995) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/26:41,2149) [kworker/u16:2]
(gitlab-psql,8307280,49084,00:00:00/24:46,2449) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:20/10-22:15:23,2582) [kworker/0:2]
(root,0,0,00:00:03/23:08:07,2655) [kworker/5:2]
(root,0,0,00:00:00/20:57,3002) [kworker/u16:1]
(root,4532,788,00:00:00/19:01,3464) sleep 3000
(gitlab-psql,8306680,50260,00:00:00/17:08,3763) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306672,45324,00:00:00/17:08,3764) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306936,50828,00:00:00/17:08,3766) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307140,48120,00:00:00/16:38,3872) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48080,00:00:00/14:55,4100) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307072,47244,00:00:00/13:23,4362) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307024,47276,00:00:00/12:53,4415) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/06:26,5454) [kworker/u16:0]
(gitlab-psql,8306788,42272,00:00:00/04:35,5746) postgres: gitlab gitlabhq_production [local] idle
(root,4628,796,00:00:00/421-05:22:50,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,841680,32288,00:08:19/421-05:22:50,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86488,7668,00:30:32/421-05:22:50,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:03:49/421-05:22:50,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(gitlab-psql,8305280,42232,00:00:00/01:07,6292) postgres: gitlab gitlabhq_production [local] idle
(root,72296,5664,00:00:00/00:08,6453) sshd: [accepted]
(root,20180,3608,00:00:00/00:00,6490) /bin/bash /usr/bin/check_mk_agent
(root,36700,3132,00:00:00/00:00,6508) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1144,00:00:00/00:00,6509) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:51/14-22:15:31,6649) [kworker/1:0]
(root,0,0,00:01:29/27-19:15:54,7555) [kworker/4:1]
(root,0,0,00:03:04/15-00:03:47,8171) [kworker/6:2]
(root,0,0,00:00:00/16:14:28,9779) [kworker/7:1]
(git,1627352,996104,00:00:14/02:33:56,13541) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1628376,998864,00:00:14/02:32:56,13711) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1626328,997772,00:00:13/02:31:56,13870) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1707248,1000564,00:00:14/02:30:56,14039) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1690864,1002676,00:00:15/02:29:56,14208) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1627352,1005604,00:00:14/02:28:56,14377) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1698032,999752,00:00:15/02:27:56,14541) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(git,1675504,994588,00:00:12/02:26:56,14706) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/22:15:24,14907) [kworker/3:1]
(root,0,0,00:00:00/22:15:23,14927) [kworker/2:0]
(root,0,0,00:00:23/7-01:34:20,16876) [kworker/3:2]
(root,0,0,00:00:00/21:55:24,19343) [kworker/4:0]
(root,0,0,00:00:00/05:20:14,19505) [kworker/5:0]
(root,0,0,00:00:00/11:15:46,24911) [kworker/6:0]
(root,0,0,00:00:00/04:38:52,26049) [kworker/0:0]
(gitlab-psql,8309424,56348,00:00:00/56:13,28929) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:41/11-22:07:58,28935) [kworker/2:2]
(gitlab-prometheus,1795260,17428,05:58:28/166-21:34:15,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,940,01:01:33/166-21:34:15,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181512,133464,1-07:08:58/166-21:34:14,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45644,3-18:01:17/166-21:34:14,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,40260,21:25:25/166-21:34:14,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,43908,02:28:46/166-21:34:14,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/166-21:34:13,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66824,24072,00:03:20/166-21:34:13,29018) nginx: worker process
(gitlab-www,65016,21860,00:00:36/166-21:34:13,29019) nginx: worker process
(gitlab-www,65828,22592,00:01:27/166-21:34:13,29020) nginx: worker process
(gitlab-www,69244,26180,00:01:57/166-21:34:13,29021) nginx: worker process
(gitlab-www,68564,25968,04:25:01/166-21:34:13,29022) nginx: worker process
(gitlab-www,66892,23580,00:00:58/166-21:34:13,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/166-21:34:13,29024) nginx: worker process
(gitlab-www,65192,22076,00:00:24/166-21:34:13,29025) nginx: worker process
(gitlab-www,59784,3828,00:01:58/166-21:34:13,29026) nginx: cache manager process
(gitlab-prometheus,719468,14444,20:34:35/166-21:34:12,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14440,21:14:37/166-21:34:12,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:13:18/166-21:34:11,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3209888,169432,1-21:17:52/166-21:34:11,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,252460,00:11:09/166-21:34:11,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:04:48/166-21:34:11,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:05:45/166-21:34:11,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:13:33/166-21:34:11,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,02:56:05/166-21:34:11,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:18/166-21:34:11,29064) postgres: logical replication launcher   
(git,1461948,918692,02:46:52/166-21:34:10,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16716,9-04:24:52/166-21:34:09,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,18304,06:43:54/166-21:34:09,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108716,14:30:33/166-21:34:09,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87584,14:31:11/166-21:34:09,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15532,00:50:23/166-21:34:09,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:09:29/166-21:34:05,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4918952,1212524,25-12:56:18/166-21:34:05,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,78888,2-12:42:28/166-21:33:53,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,74632,1-04:15:52/166-21:33:50,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8311804,69484,00:00:00/56:08,29278) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/20:52:35,29538) [kworker/1:1]
(gitlab-psql,8306184,34736,00:22:00/166-21:32:46,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/166-21:32:46,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:39/16-22:09:13,30799) [kworker/7:0]
(systemd-resolve,70760,5232,00:00:00/10:29:52,32362) /lib/systemd/systemd-resolved

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-19 22:17

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9122451a0b2

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8256,00:26:10/560-22:02:53,1) /sbin/init
(root,0,0,00:00:22/560-22:02:53,2) [kthreadd]
(root,0,0,00:00:00/560-22:02:53,4) [kworker/0:0H]
(root,0,0,00:00:00/560-22:02:53,6) [mm_percpu_wq]
(root,0,0,00:06:19/560-22:02:53,7) [ksoftirqd/0]
(root,0,0,17:20:41/560-22:02:53,8) [rcu_sched]
(root,0,0,00:00:00/560-22:02:53,9) [rcu_bh]
(root,0,0,00:00:17/560-22:02:53,10) [migration/0]
(root,0,0,00:03:04/560-22:02:53,11) [watchdog/0]
(root,0,0,00:00:00/560-22:02:53,12) [cpuhp/0]
(root,0,0,00:00:00/560-22:02:53,13) [cpuhp/1]
(root,0,0,00:02:51/560-22:02:53,14) [watchdog/1]
(root,0,0,00:00:17/560-22:02:53,15) [migration/1]
(root,0,0,00:03:27/560-22:02:53,16) [ksoftirqd/1]
(root,0,0,00:00:00/560-22:02:53,18) [kworker/1:0H]
(root,0,0,00:00:00/560-22:02:53,19) [cpuhp/2]
(root,0,0,00:03:02/560-22:02:53,20) [watchdog/2]
(root,0,0,00:00:15/560-22:02:53,21) [migration/2]
(root,0,0,00:02:33/560-22:02:53,22) [ksoftirqd/2]
(root,0,0,00:00:00/560-22:02:53,24) [kworker/2:0H]
(root,0,0,00:00:00/560-22:02:53,25) [cpuhp/3]
(root,0,0,00:02:47/560-22:02:53,26) [watchdog/3]
(root,0,0,00:00:14/560-22:02:53,27) [migration/3]
(root,0,0,00:02:01/560-22:02:53,28) [ksoftirqd/3]
(root,0,0,00:00:00/560-22:02:53,30) [kworker/3:0H]
(root,0,0,00:00:00/560-22:02:53,31) [cpuhp/4]
(root,0,0,00:03:00/560-22:02:53,32) [watchdog/4]
(root,0,0,00:00:12/560-22:02:53,33) [migration/4]
(root,0,0,00:06:13/560-22:02:53,34) [ksoftirqd/4]
(root,0,0,00:00:00/560-22:02:53,36) [kworker/4:0H]
(root,0,0,00:00:00/560-22:02:53,37) [cpuhp/5]
(root,0,0,00:02:57/560-22:02:53,38) [watchdog/5]
(root,0,0,00:00:14/560-22:02:53,39) [migration/5]
(root,0,0,00:03:54/560-22:02:53,40) [ksoftirqd/5]
(root,0,0,00:00:00/560-22:02:53,42) [kworker/5:0H]
(root,0,0,00:00:00/560-22:02:53,43) [cpuhp/6]
(root,0,0,00:02:49/560-22:02:53,44) [watchdog/6]
(root,0,0,00:00:24/560-22:02:53,45) [migration/6]
(root,0,0,00:02:04/560-22:02:53,46) [ksoftirqd/6]
(root,0,0,00:00:00/560-22:02:53,48) [kworker/6:0H]
(root,0,0,00:00:00/560-22:02:53,49) [cpuhp/7]
(root,0,0,00:02:42/560-22:02:53,50) [watchdog/7]
(root,0,0,00:00:20/560-22:02:53,51) [migration/7]
(root,0,0,00:01:56/560-22:02:53,52) [ksoftirqd/7]
(root,0,0,00:00:00/560-22:02:53,54) [kworker/7:0H]
(root,0,0,00:00:00/560-22:02:53,55) [kdevtmpfs]
(root,0,0,00:00:00/560-22:02:53,56) [netns]
(root,0,0,00:00:00/560-22:02:53,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/560-22:02:53,58) [kauditd]
(root,0,0,00:01:28/560-22:02:53,62) [khungtaskd]
(root,0,0,00:00:00/560-22:02:53,63) [oom_reaper]
(root,0,0,00:00:00/560-22:02:53,64) [writeback]
(root,0,0,00:00:01/560-22:02:53,65) [kcompactd0]
(root,0,0,00:00:00/560-22:02:53,66) [ksmd]
(root,0,0,00:07:40/560-22:02:53,67) [khugepaged]
(root,0,0,00:00:00/560-22:02:53,68) [crypto]
(root,0,0,00:00:00/560-22:02:53,69) [kintegrityd]
(root,0,0,00:00:00/560-22:02:53,70) [kblockd]
(root,0,0,00:00:00/560-22:02:53,71) [ata_sff]
(root,0,0,00:00:00/560-22:02:53,72) [md]
(root,0,0,00:00:00/560-22:02:53,73) [edac-poller]
(root,0,0,00:00:00/560-22:02:53,74) [devfreq_wq]
(root,0,0,00:00:00/560-22:02:53,75) [watchdogd]
(root,0,0,01:51:09/560-22:02:53,79) [kswapd0]
(root,0,0,00:00:00/560-22:02:53,80) [kworker/u17:0]
(root,0,0,00:00:00/560-22:02:53,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/560-22:02:53,123) [kthrotld]
(root,0,0,00:00:00/560-22:02:53,124) [acpi_thermal_pm]
(root,0,0,00:00:00/560-22:02:53,130) [scsi_eh_0]
(root,0,0,00:00:00/560-22:02:53,131) [scsi_tmf_0]
(root,0,0,00:00:00/560-22:02:53,132) [scsi_eh_1]
(root,0,0,00:00:00/560-22:02:53,133) [scsi_tmf_1]
(root,0,0,00:00:00/560-22:02:52,139) [ipv6_addrconf]
(root,0,0,00:00:00/560-22:02:52,148) [kstrp]
(root,0,0,00:00:00/560-22:02:52,166) [charger_manager]
(root,0,0,00:00:00/560-22:02:52,223) [scsi_eh_2]
(root,0,0,00:00:00/560-22:02:52,224) [scsi_tmf_2]
(root,0,0,00:03:11/560-22:02:51,267) [kworker/7:1H]
(root,0,0,00:25:26/560-22:02:47,268) [kworker/4:1H]
(root,0,0,00:00:52/560-22:02:47,275) [kworker/1:1H]
(root,0,0,00:00:38/560-22:02:46,335) [kworker/2:1H]
(root,0,0,00:00:00/560-22:02:45,342) [raid5wq]
(git,1712368,971832,00:00:27/03:08:02,375) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(root,0,0,01:02:07/560-22:02:45,392) [jbd2/sda1-8]
(root,0,0,00:00:00/560-22:02:45,393) [ext4-rsv-conver]
(root,0,0,00:00:32/560-22:02:45,395) [kworker/3:1H]
(root,0,0,00:02:48/560-22:02:45,398) [kworker/5:1H]
(root,0,0,00:03:47/560-22:02:45,431) [kworker/6:1H]
(root,0,0,00:01:46/560-22:02:45,464) [kworker/0:1H]
(root,257648,106152,01:07:15/560-22:02:44,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/560-22:02:44,476) [iscsi_eh]
(root,0,0,00:00:00/560-22:02:44,485) [ib-comp-wq]
(root,0,0,00:00:00/560-22:02:44,486) [ib_mcast]
(root,0,0,00:00:00/560-22:02:44,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/560-22:02:44,494) [rdma_cm]
(root,97708,1596,00:00:00/560-22:02:44,498) /sbin/lvmetad -f
(root,43436,3896,00:04:31/560-22:02:44,508) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/03:07:02,666) [kworker/1:1]
(systemd-timesync,141928,2684,00:02:48/560-22:02:44,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/560-22:02:42,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:18:11/560-22:02:39,1244) /usr/sbin/irqbalance --foreground
(root,383268,2456,00:16:23/560-22:02:39,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:20:44/560-22:02:39,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29480,00:09:34/560-22:02:39,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:54:06/560-22:02:39,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:12/560-22:02:39,1289) /usr/sbin/cron -f
(root,286252,6272,00:31:07/560-22:02:39,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:01/560-22:02:39,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/560-22:02:39,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/560-22:02:39,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/560-22:02:39,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:29:11/560-22:02:39,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,10:46:30/560-22:02:39,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:08:01/560-22:02:39,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/560-22:02:39,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/560-22:02:39,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:40/560-22:02:39,1379) nginx: worker process
(www-data,143788,3960,00:00:09/560-22:02:39,1380) nginx: worker process
(www-data,143788,5000,00:00:44/560-22:02:39,1381) nginx: worker process
(www-data,143788,3964,00:00:01/560-22:02:39,1382) nginx: worker process
(www-data,143788,4056,00:00:00/560-22:02:39,1383) nginx: worker process
(www-data,143788,4184,00:00:00/560-22:02:39,1384) nginx: worker process
(www-data,143788,4056,00:00:00/560-22:02:39,1386) nginx: worker process
(www-data,143788,4184,00:00:00/560-22:02:39,1388) nginx: worker process
(root,14888,1756,00:00:00/560-22:02:39,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:18:12/560-22:02:39,1404) /usr/sbin/sshd -D
(root,4548,1332,00:13:29/560-22:02:38,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:06/560-22:02:38,1498) runsv redis-exporter
(root,4396,712,00:00:06/560-22:02:38,1500) runsv node-exporter
(root,4396,820,00:00:06/560-22:02:38,1501) runsv prometheus
(root,4396,824,00:00:06/560-22:02:38,1502) runsv sidekiq
(root,4396,720,00:00:05/560-22:02:38,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/560-22:02:38,1507) runsv alertmanager
(root,4396,856,00:00:05/560-22:02:38,1509) runsv postgresql
(root,4396,744,00:00:06/560-22:02:38,1510) runsv postgres-exporter
(root,4396,788,00:00:05/560-22:02:38,1511) runsv grafana
(root,4396,780,00:00:05/560-22:02:38,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:25/560-22:02:38,1513) runsv logrotate
(root,4396,856,00:00:05/560-22:02:38,1514) runsv puma
(root,4396,744,00:00:05/560-22:02:38,1515) runsv nginx
(root,4396,740,00:00:05/560-22:02:38,1516) runsv gitaly
(root,4396,860,00:00:05/560-22:02:38,1517) runsv redis
(root,4396,760,00:00:06/560-22:02:38,1519) runsv registry
(root,4540,864,00:00:05/560-22:02:38,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:09/560-22:02:38,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/560-22:02:38,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:41:10/560-22:02:38,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:58:06/560-22:02:38,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:05/560-22:02:38,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/560-22:02:38,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:05/560-22:02:38,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/560-22:02:38,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:19/560-22:02:38,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:05/560-22:02:38,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:21:45/560-22:02:38,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:16:43/560-22:02:38,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:15/560-22:02:38,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:36/560-22:02:38,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:05/560-22:02:38,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/02:57:29,2467) [kworker/7:2]
(root,0,0,00:01:05/8-22:35:16,2582) [kworker/0:2]
(systemd-resolve,70628,5164,00:00:00/05:32:41,3823) /lib/systemd/systemd-resolved
(root,4628,796,00:00:00/419-05:42:43,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,817308,21832,00:08:17/419-05:42:43,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86364,7544,00:30:20/419-05:42:43,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:03:48/419-05:42:43,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:44/12-22:35:24,6649) [kworker/1:0]
(root,0,0,00:01:23/25-19:35:47,7555) [kworker/4:1]
(root,0,0,00:00:00/02:23:03,8050) [kworker/0:0]
(root,0,0,00:02:39/13-00:23:40,8171) [kworker/6:2]
(root,0,0,00:00:00/05:02:54,9044) [kworker/4:2]
(root,0,0,00:00:03/1-00:24:19,11261) [kworker/5:2]
(root,0,0,00:00:00/04:48:39,13041) [kworker/2:0]
(git,1751284,1006448,00:00:45/04:46:48,14118) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1722608,1005456,00:00:45/04:45:48,14285) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1747188,1016100,00:00:48/04:44:48,14454) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1734896,1004908,00:00:42/04:42:48,14788) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1743200,1034864,00:00:46/04:41:48,14952) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1746272,1014928,00:00:42/04:39:48,15288) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:16/5-01:54:13,16876) [kworker/3:2]
(root,0,0,00:00:00/04:27:01,17517) [kworker/6:1]
(gitlab-psql,8314316,70552,00:00:01/01:00:56,20956) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/16:59:20,21228) [kworker/3:1]
(root,4628,852,00:00:00/48:58,23094) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8309776,56804,00:00:00/46:19,23528) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:57:29,24262) [kworker/5:1]
(gitlab-psql,8311144,72576,00:00:01/40:50,24354) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310396,66548,00:00:00/40:42,24371) postgres: gitlab gitlabhq_production [local] idle
(root,4532,744,00:00:00/38:58,24653) sleep 3000
(gitlab-psql,8319704,82988,00:00:00/36:37,25050) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312216,68416,00:00:00/25:51,27012) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311132,68748,00:00:00/21:39,27854) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,49288,00:00:00/16:42,28754) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:34/9-22:27:51,28935) [kworker/2:2]
(gitlab-prometheus,1795260,13308,05:54:22/164-21:54:08,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,940,01:00:51/164-21:54:08,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181512,135672,1-06:47:18/164-21:54:07,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45576,3-17:01:20/164-21:54:07,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,40668,21:09:21/164-21:54:07,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,43032,02:26:50/164-21:54:07,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/164-21:54:06,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66824,24072,00:03:19/164-21:54:06,29018) nginx: worker process
(gitlab-www,65016,21860,00:00:36/164-21:54:06,29019) nginx: worker process
(gitlab-www,65828,22592,00:01:27/164-21:54:06,29020) nginx: worker process
(gitlab-www,69244,26180,00:01:56/164-21:54:06,29021) nginx: worker process
(gitlab-www,69984,27128,04:22:00/164-21:54:06,29022) nginx: worker process
(gitlab-www,66892,23580,00:00:58/164-21:54:06,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/164-21:54:06,29024) nginx: worker process
(gitlab-www,65192,22076,00:00:24/164-21:54:06,29025) nginx: worker process
(gitlab-www,59784,3828,00:01:57/164-21:54:06,29026) nginx: cache manager process
(gitlab-prometheus,719468,14312,20:20:40/164-21:54:05,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14296,20:59:50/164-21:54:05,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:13:09/164-21:54:04,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3181612,167484,1-20:45:48/164-21:54:04,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,252460,00:11:01/164-21:54:04,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:04:44/164-21:54:04,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:05:41/164-21:54:04,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:13:24/164-21:54:04,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,02:54:03/164-21:54:04,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:18/164-21:54:04,29064) postgres: logical replication launcher   
(git,1461948,918612,02:45:02/164-21:54:03,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16900,9-01:56:03/164-21:54:02,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,15300,06:39:19/164-21:54:02,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108784,14:21:01/164-21:54:02,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87320,14:21:11/164-21:54:02,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15188,00:49:58/164-21:54:02,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:09:23/164-21:53:58,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,1604848,942012,00:00:02/15:21,29192) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,4914916,1150904,25-06:07:00/164-21:53:58,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,78888,2-12:04:10/164-21:53:46,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,74632,1-03:56:40/164-21:53:43,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8314168,71268,00:00:00/13:42,29508) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:21:46/164-21:52:39,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/164-21:52:39,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/11:19,29941) [kworker/u16:2]
(gitlab-psql,8309768,58480,00:00:00/10:28,30088) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310852,66468,00:00:00/09:51,30147) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309100,58780,00:00:00/08:41,30473) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310384,58856,00:00:00/08:35,30540) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:27/14-22:29:06,30799) [kworker/7:0]
(root,0,0,00:00:00/05:38,31067) [kworker/u16:1]
(root,20180,3588,00:00:00/00:00,31920) /bin/bash /usr/bin/check_mk_agent
(root,36700,3060,00:00:00/00:00,31938) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1156,00:00:00/00:00,31939) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-17 22:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9122a97b62b

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7800,00:26:05/558-22:11:08,1) /sbin/init
(root,0,0,00:00:22/558-22:11:08,2) [kthreadd]
(root,0,0,00:00:00/558-22:11:08,4) [kworker/0:0H]
(root,0,0,00:00:00/558-22:11:08,6) [mm_percpu_wq]
(root,0,0,00:06:17/558-22:11:08,7) [ksoftirqd/0]
(root,0,0,17:16:56/558-22:11:08,8) [rcu_sched]
(root,0,0,00:00:00/558-22:11:08,9) [rcu_bh]
(root,0,0,00:00:17/558-22:11:08,10) [migration/0]
(root,0,0,00:03:03/558-22:11:08,11) [watchdog/0]
(root,0,0,00:00:00/558-22:11:08,12) [cpuhp/0]
(root,0,0,00:00:00/558-22:11:08,13) [cpuhp/1]
(root,0,0,00:02:50/558-22:11:08,14) [watchdog/1]
(root,0,0,00:00:16/558-22:11:08,15) [migration/1]
(root,0,0,00:03:26/558-22:11:08,16) [ksoftirqd/1]
(root,0,0,00:00:00/558-22:11:08,18) [kworker/1:0H]
(root,0,0,00:00:00/558-22:11:08,19) [cpuhp/2]
(root,0,0,00:03:01/558-22:11:08,20) [watchdog/2]
(root,0,0,00:00:15/558-22:11:08,21) [migration/2]
(root,0,0,00:02:33/558-22:11:08,22) [ksoftirqd/2]
(root,0,0,00:00:00/558-22:11:08,24) [kworker/2:0H]
(root,0,0,00:00:00/558-22:11:08,25) [cpuhp/3]
(root,0,0,00:02:46/558-22:11:08,26) [watchdog/3]
(root,0,0,00:00:14/558-22:11:08,27) [migration/3]
(root,0,0,00:02:01/558-22:11:08,28) [ksoftirqd/3]
(root,0,0,00:00:00/558-22:11:08,30) [kworker/3:0H]
(root,0,0,00:00:00/558-22:11:08,31) [cpuhp/4]
(root,0,0,00:02:59/558-22:11:08,32) [watchdog/4]
(root,0,0,00:00:12/558-22:11:08,33) [migration/4]
(root,0,0,00:06:11/558-22:11:08,34) [ksoftirqd/4]
(root,0,0,00:00:00/558-22:11:08,36) [kworker/4:0H]
(root,0,0,00:00:00/558-22:11:08,37) [cpuhp/5]
(root,0,0,00:02:56/558-22:11:08,38) [watchdog/5]
(root,0,0,00:00:14/558-22:11:08,39) [migration/5]
(root,0,0,00:03:53/558-22:11:08,40) [ksoftirqd/5]
(root,0,0,00:00:00/558-22:11:08,42) [kworker/5:0H]
(root,0,0,00:00:00/558-22:11:08,43) [cpuhp/6]
(root,0,0,00:02:48/558-22:11:08,44) [watchdog/6]
(root,0,0,00:00:24/558-22:11:08,45) [migration/6]
(root,0,0,00:02:04/558-22:11:08,46) [ksoftirqd/6]
(root,0,0,00:00:00/558-22:11:08,48) [kworker/6:0H]
(root,0,0,00:00:00/558-22:11:08,49) [cpuhp/7]
(root,0,0,00:02:42/558-22:11:08,50) [watchdog/7]
(root,0,0,00:00:20/558-22:11:08,51) [migration/7]
(root,0,0,00:01:55/558-22:11:08,52) [ksoftirqd/7]
(root,0,0,00:00:00/558-22:11:08,54) [kworker/7:0H]
(root,0,0,00:00:00/558-22:11:08,55) [kdevtmpfs]
(root,0,0,00:00:00/558-22:11:08,56) [netns]
(root,0,0,00:00:00/558-22:11:08,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/558-22:11:08,58) [kauditd]
(root,0,0,00:01:28/558-22:11:08,62) [khungtaskd]
(root,0,0,00:00:00/558-22:11:08,63) [oom_reaper]
(root,0,0,00:00:00/558-22:11:08,64) [writeback]
(root,0,0,00:00:01/558-22:11:08,65) [kcompactd0]
(root,0,0,00:00:00/558-22:11:08,66) [ksmd]
(root,0,0,00:07:39/558-22:11:08,67) [khugepaged]
(root,0,0,00:00:00/558-22:11:08,68) [crypto]
(root,0,0,00:00:00/558-22:11:08,69) [kintegrityd]
(root,0,0,00:00:00/558-22:11:08,70) [kblockd]
(root,0,0,00:00:00/558-22:11:08,71) [ata_sff]
(root,0,0,00:00:00/558-22:11:08,72) [md]
(root,0,0,00:00:00/558-22:11:08,73) [edac-poller]
(root,0,0,00:00:00/558-22:11:08,74) [devfreq_wq]
(root,0,0,00:00:00/558-22:11:08,75) [watchdogd]
(root,0,0,01:50:42/558-22:11:08,79) [kswapd0]
(root,0,0,00:00:00/558-22:11:08,80) [kworker/u17:0]
(root,0,0,00:00:00/558-22:11:08,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/558-22:11:08,123) [kthrotld]
(root,0,0,00:00:00/558-22:11:08,124) [acpi_thermal_pm]
(root,0,0,00:00:00/558-22:11:08,130) [scsi_eh_0]
(root,0,0,00:00:00/558-22:11:08,131) [scsi_tmf_0]
(root,0,0,00:00:00/558-22:11:08,132) [scsi_eh_1]
(root,0,0,00:00:00/558-22:11:08,133) [scsi_tmf_1]
(root,0,0,00:00:00/558-22:11:07,139) [ipv6_addrconf]
(root,0,0,00:00:00/558-22:11:07,148) [kstrp]
(root,0,0,00:00:00/558-22:11:07,166) [charger_manager]
(root,0,0,00:00:00/558-22:11:07,223) [scsi_eh_2]
(root,0,0,00:00:00/558-22:11:07,224) [scsi_tmf_2]
(root,0,0,00:03:10/558-22:11:06,267) [kworker/7:1H]
(root,0,0,00:25:21/558-22:11:02,268) [kworker/4:1H]
(root,0,0,00:00:52/558-22:11:02,275) [kworker/1:1H]
(root,0,0,00:00:37/558-22:11:01,335) [kworker/2:1H]
(root,0,0,00:00:00/558-22:11:00,342) [raid5wq]
(root,0,0,01:01:54/558-22:11:00,392) [jbd2/sda1-8]
(root,0,0,00:00:00/558-22:11:00,393) [ext4-rsv-conver]
(root,0,0,00:00:32/558-22:11:00,395) [kworker/3:1H]
(gitlab-psql,8307260,52316,00:00:00/44:56,396) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:02:48/558-22:11:00,398) [kworker/5:1H]
(root,0,0,00:03:46/558-22:11:00,431) [kworker/6:1H]
(root,0,0,00:01:46/558-22:11:00,464) [kworker/0:1H]
(root,233072,84040,01:07:05/558-22:10:59,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/558-22:10:59,476) [iscsi_eh]
(root,0,0,00:00:00/558-22:10:59,485) [ib-comp-wq]
(root,0,0,00:00:00/558-22:10:59,486) [ib_mcast]
(root,0,0,00:00:00/558-22:10:59,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/558-22:10:59,494) [rdma_cm]
(root,97708,1596,00:00:00/558-22:10:59,498) /sbin/lvmetad -f
(root,43436,3896,00:04:30/558-22:10:59,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:02:48/558-22:10:59,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/558-22:10:57,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:17:54/558-22:10:54,1244) /usr/sbin/irqbalance --foreground
(root,383268,2408,00:16:20/558-22:10:54,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:20:40/558-22:10:54,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29488,00:09:32/558-22:10:54,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:53:56/558-22:10:54,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:11/558-22:10:54,1289) /usr/sbin/cron -f
(root,286252,6272,00:31:01/558-22:10:54,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:01/558-22:10:54,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/558-22:10:54,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/558-22:10:54,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(gitlab-psql,8307072,47884,00:00:00/39:09,1331) postgres: gitlab gitlabhq_production [local] idle
(root,185940,16060,00:00:00/558-22:10:54,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:29:06/558-22:10:54,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,10:44:12/558-22:10:54,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:07:59/558-22:10:54,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/07:26:54,1371) [kworker/2:1]
(root,141112,2440,00:00:00/558-22:10:54,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/558-22:10:54,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:40/558-22:10:54,1379) nginx: worker process
(www-data,143788,3960,00:00:09/558-22:10:54,1380) nginx: worker process
(www-data,143788,5000,00:00:44/558-22:10:54,1381) nginx: worker process
(www-data,143788,3964,00:00:01/558-22:10:54,1382) nginx: worker process
(www-data,143788,4056,00:00:00/558-22:10:54,1383) nginx: worker process
(www-data,143788,4184,00:00:00/558-22:10:54,1384) nginx: worker process
(www-data,143788,4056,00:00:00/558-22:10:54,1386) nginx: worker process
(www-data,143788,4184,00:00:00/558-22:10:54,1388) nginx: worker process
(root,14888,1756,00:00:00/558-22:10:54,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:18:10/558-22:10:54,1404) /usr/sbin/sshd -D
(root,4548,1332,00:13:27/558-22:10:53,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:05/558-22:10:53,1498) runsv redis-exporter
(root,4396,712,00:00:06/558-22:10:53,1500) runsv node-exporter
(root,4396,820,00:00:06/558-22:10:53,1501) runsv prometheus
(root,4396,824,00:00:06/558-22:10:53,1502) runsv sidekiq
(root,4396,720,00:00:05/558-22:10:53,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/558-22:10:53,1507) runsv alertmanager
(root,4396,856,00:00:05/558-22:10:53,1509) runsv postgresql
(root,4396,744,00:00:06/558-22:10:53,1510) runsv postgres-exporter
(root,4396,788,00:00:05/558-22:10:53,1511) runsv grafana
(root,4396,780,00:00:05/558-22:10:53,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:25/558-22:10:53,1513) runsv logrotate
(root,4396,856,00:00:05/558-22:10:53,1514) runsv puma
(root,4396,744,00:00:05/558-22:10:53,1515) runsv nginx
(root,4396,740,00:00:05/558-22:10:53,1516) runsv gitaly
(root,4396,860,00:00:05/558-22:10:53,1517) runsv redis
(root,4396,760,00:00:06/558-22:10:53,1519) runsv registry
(root,4540,864,00:00:05/558-22:10:53,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:09/558-22:10:53,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/558-22:10:53,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:40:49/558-22:10:53,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:57:40/558-22:10:53,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:05/558-22:10:53,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/558-22:10:53,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:05/558-22:10:53,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/558-22:10:53,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:19/558-22:10:53,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:05/558-22:10:53,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:21:40/558-22:10:53,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:16:39/558-22:10:53,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:15/558-22:10:53,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:36/558-22:10:53,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:05/558-22:10:53,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/33:08,2318) [kworker/u16:2]
(gitlab-psql,8310424,53964,00:00:00/31:59,2490) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:51/6-22:43:31,2582) [kworker/0:2]
(gitlab-psql,8307132,48084,00:00:00/29:56,2805) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306688,52284,00:00:00/29:19,2927) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/17:15:17,3242) [kworker/4:0]
(gitlab-psql,8310688,54708,00:00:00/20:36,4449) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307072,47488,00:00:00/18:36,4757) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307008,48996,00:00:00/12:54,5663) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/1-19:27:23,5791) [kworker/0:1]
(root,4628,796,00:00:00/417-05:50:58,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,809116,23472,00:08:16/417-05:50:58,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86364,7544,00:30:11/417-05:50:58,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:03:48/417-05:50:58,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(gitlab-psql,8307072,47420,00:00:00/07:26,6484) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:37/10-22:43:39,6649) [kworker/1:0]
(root,0,0,00:00:00/05:19,6824) [kworker/u16:0]
(gitlab-psql,8307132,47312,00:00:00/04:52,6918) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306800,43512,00:00:00/02:09,7298) postgres: gitlab gitlabhq_production [local] idle
(git,1642712,983952,00:00:36/06:48:02,7393) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(root,0,0,00:01:16/23-19:44:02,7555) [kworker/4:1]
(git,1642712,963132,00:00:31/06:47:02,7563) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(root,0,0,00:00:11/3-00:00:55,7722) [kworker/5:1]
(git,1642712,987912,00:00:34/06:46:02,7736) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,20180,3544,00:00:00/00:00,7752) /bin/bash /usr/bin/check_mk_agent
(root,36700,3056,00:00:00/00:00,7770) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1176,00:00:00/00:00,7771) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1642712,991484,00:00:36/06:45:02,7906) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1634520,985416,00:00:34/06:44:02,8073) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:02:15/11-00:31:55,8171) [kworker/6:2]
(git,1635544,987308,00:00:32/06:43:02,8245) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1634520,990532,00:00:37/06:42:02,8414) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1634520,988640,00:00:36/06:41:02,8584) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/09:56:15,10009) [kworker/1:2]
(root,0,0,00:00:00/09:48:54,11222) [kworker/7:2]
(root,0,0,00:00:00/1-08:52:55,11481) [kworker/6:1]
(root,0,0,00:00:00/19:27:00,14547) [kworker/5:2]
(root,0,0,00:00:10/3-02:02:28,16876) [kworker/3:2]
(systemd-resolve,70628,5064,00:00:00/01:53:31,21536) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/1-10:38:53,26381) [kworker/3:1]
(root,0,0,00:00:01/01:13:29,27939) [kworker/u16:1]
(root,0,0,00:00:27/7-22:36:06,28935) [kworker/2:2]
(gitlab-prometheus,1795260,15424,05:50:15/162-22:02:23,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,940,01:00:09/162-22:02:23,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181512,132300,1-06:27:10/162-22:02:22,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45624,3-15:59:46/162-22:02:22,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,37916,20:53:14/162-22:02:22,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,43924,02:24:52/162-22:02:22,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/162-22:02:21,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66824,24072,00:03:19/162-22:02:21,29018) nginx: worker process
(gitlab-www,65016,21860,00:00:36/162-22:02:21,29019) nginx: worker process
(gitlab-www,65828,22592,00:01:27/162-22:02:21,29020) nginx: worker process
(gitlab-www,69244,26180,00:01:56/162-22:02:21,29021) nginx: worker process
(gitlab-www,69984,27128,04:18:56/162-22:02:21,29022) nginx: worker process
(gitlab-www,66892,23580,00:00:58/162-22:02:21,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/162-22:02:21,29024) nginx: worker process
(gitlab-www,65192,22076,00:00:24/162-22:02:21,29025) nginx: worker process
(gitlab-www,59784,3828,00:01:56/162-22:02:21,29026) nginx: cache manager process
(gitlab-prometheus,719468,15688,20:06:36/162-22:02:20,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15844,20:44:54/162-22:02:20,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:13:00/162-22:02:19,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3192504,165836,1-20:13:25/162-22:02:19,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,250272,00:10:56/162-22:02:19,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:04:41/162-22:02:19,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:05:37/162-22:02:19,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:13:15/162-22:02:19,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,02:52:01/162-22:02:19,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:18/162-22:02:19,29064) postgres: logical replication launcher   
(git,1461948,918636,02:43:15/162-22:02:18,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,17052,8-23:24:01/162-22:02:17,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16584,06:34:45/162-22:02:17,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108788,14:11:20/162-22:02:17,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87324,14:11:02/162-22:02:17,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,16376,00:49:32/162-22:02:17,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:09:17/162-22:02:13,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4898464,1196416,24-23:13:17/162-22:02:13,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,78888,2-11:24:24/162-22:02:01,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,74632,1-03:36:53/162-22:01:58,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:21:31/162-22:00:54,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/162-22:00:54,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:15/12-22:37:21,30799) [kworker/7:0]
(gitlab-psql,8306884,53032,00:00:00/57:20,30910) postgres: gitlab gitlabhq_production [local] idle
(root,4628,856,00:00:00/57:16,30920) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307072,47916,00:00:00/49:23,32154) postgres: gitlab gitlabhq_production [local] idle
(root,4532,812,00:00:00/47:16,32490) sleep 3000

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-15 22:45

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91220d64572

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8092,00:26:02/556-21:11:55,1) /sbin/init
(root,0,0,00:00:22/556-21:11:55,2) [kthreadd]
(root,0,0,00:00:00/556-21:11:55,4) [kworker/0:0H]
(root,0,0,00:00:00/556-21:11:55,6) [mm_percpu_wq]
(root,0,0,00:06:16/556-21:11:55,7) [ksoftirqd/0]
(root,0,0,17:13:16/556-21:11:55,8) [rcu_sched]
(root,0,0,00:00:00/556-21:11:55,9) [rcu_bh]
(root,0,0,00:00:17/556-21:11:55,10) [migration/0]
(root,0,0,00:03:03/556-21:11:55,11) [watchdog/0]
(root,0,0,00:00:00/556-21:11:55,12) [cpuhp/0]
(root,0,0,00:00:00/556-21:11:55,13) [cpuhp/1]
(root,0,0,00:02:49/556-21:11:55,14) [watchdog/1]
(root,0,0,00:00:16/556-21:11:55,15) [migration/1]
(root,0,0,00:03:26/556-21:11:55,16) [ksoftirqd/1]
(root,0,0,00:00:00/556-21:11:55,18) [kworker/1:0H]
(root,0,0,00:00:00/556-21:11:55,19) [cpuhp/2]
(root,0,0,00:03:01/556-21:11:55,20) [watchdog/2]
(root,0,0,00:00:15/556-21:11:55,21) [migration/2]
(root,0,0,00:02:32/556-21:11:55,22) [ksoftirqd/2]
(root,0,0,00:00:00/556-21:11:55,24) [kworker/2:0H]
(root,0,0,00:00:00/556-21:11:55,25) [cpuhp/3]
(root,0,0,00:02:46/556-21:11:55,26) [watchdog/3]
(root,0,0,00:00:14/556-21:11:55,27) [migration/3]
(root,0,0,00:02:00/556-21:11:55,28) [ksoftirqd/3]
(root,0,0,00:00:00/556-21:11:55,30) [kworker/3:0H]
(root,0,0,00:00:00/556-21:11:55,31) [cpuhp/4]
(root,0,0,00:02:59/556-21:11:55,32) [watchdog/4]
(root,0,0,00:00:12/556-21:11:55,33) [migration/4]
(root,0,0,00:06:10/556-21:11:55,34) [ksoftirqd/4]
(root,0,0,00:00:00/556-21:11:55,36) [kworker/4:0H]
(root,0,0,00:00:00/556-21:11:55,37) [cpuhp/5]
(root,0,0,00:02:56/556-21:11:55,38) [watchdog/5]
(root,0,0,00:00:14/556-21:11:55,39) [migration/5]
(root,0,0,00:03:53/556-21:11:55,40) [ksoftirqd/5]
(root,0,0,00:00:00/556-21:11:55,42) [kworker/5:0H]
(root,0,0,00:00:00/556-21:11:55,43) [cpuhp/6]
(root,0,0,00:02:48/556-21:11:55,44) [watchdog/6]
(root,0,0,00:00:24/556-21:11:55,45) [migration/6]
(root,0,0,00:02:03/556-21:11:55,46) [ksoftirqd/6]
(root,0,0,00:00:00/556-21:11:55,48) [kworker/6:0H]
(root,0,0,00:00:00/556-21:11:55,49) [cpuhp/7]
(root,0,0,00:02:41/556-21:11:55,50) [watchdog/7]
(root,0,0,00:00:20/556-21:11:55,51) [migration/7]
(root,0,0,00:01:55/556-21:11:55,52) [ksoftirqd/7]
(root,0,0,00:00:00/556-21:11:55,54) [kworker/7:0H]
(root,0,0,00:00:00/556-21:11:55,55) [kdevtmpfs]
(root,0,0,00:00:00/556-21:11:55,56) [netns]
(root,0,0,00:00:00/556-21:11:55,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/556-21:11:55,58) [kauditd]
(root,0,0,00:01:27/556-21:11:55,62) [khungtaskd]
(root,0,0,00:00:00/556-21:11:55,63) [oom_reaper]
(root,0,0,00:00:00/556-21:11:55,64) [writeback]
(root,0,0,00:00:01/556-21:11:55,65) [kcompactd0]
(root,0,0,00:00:00/556-21:11:55,66) [ksmd]
(root,0,0,00:07:37/556-21:11:55,67) [khugepaged]
(root,0,0,00:00:00/556-21:11:55,68) [crypto]
(root,0,0,00:00:00/556-21:11:55,69) [kintegrityd]
(root,0,0,00:00:00/556-21:11:55,70) [kblockd]
(root,0,0,00:00:00/556-21:11:55,71) [ata_sff]
(root,0,0,00:00:00/556-21:11:55,72) [md]
(root,0,0,00:00:00/556-21:11:55,73) [edac-poller]
(root,0,0,00:00:00/556-21:11:55,74) [devfreq_wq]
(root,0,0,00:00:00/556-21:11:55,75) [watchdogd]
(root,0,0,01:50:16/556-21:11:55,79) [kswapd0]
(root,0,0,00:00:00/556-21:11:55,80) [kworker/u17:0]
(root,0,0,00:00:00/556-21:11:55,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/556-21:11:55,123) [kthrotld]
(root,0,0,00:00:00/556-21:11:55,124) [acpi_thermal_pm]
(root,0,0,00:00:00/556-21:11:55,130) [scsi_eh_0]
(root,0,0,00:00:00/556-21:11:55,131) [scsi_tmf_0]
(root,0,0,00:00:00/556-21:11:55,132) [scsi_eh_1]
(root,0,0,00:00:00/556-21:11:55,133) [scsi_tmf_1]
(root,0,0,00:00:00/556-21:11:54,139) [ipv6_addrconf]
(root,0,0,00:00:00/556-21:11:54,148) [kstrp]
(root,0,0,00:00:00/556-21:11:54,166) [charger_manager]
(root,0,0,00:00:00/556-21:11:54,223) [scsi_eh_2]
(root,0,0,00:00:00/556-21:11:54,224) [scsi_tmf_2]
(root,0,0,00:03:09/556-21:11:53,267) [kworker/7:1H]
(root,0,0,00:25:16/556-21:11:49,268) [kworker/4:1H]
(root,0,0,00:00:52/556-21:11:49,275) [kworker/1:1H]
(root,0,0,00:00:37/556-21:11:48,335) [kworker/2:1H]
(root,0,0,00:00:00/556-21:11:47,342) [raid5wq]
(root,0,0,01:01:41/556-21:11:47,392) [jbd2/sda1-8]
(root,0,0,00:00:00/556-21:11:47,393) [ext4-rsv-conver]
(root,0,0,00:00:32/556-21:11:47,395) [kworker/3:1H]
(root,0,0,00:02:47/556-21:11:47,398) [kworker/5:1H]
(root,0,0,00:03:45/556-21:11:47,431) [kworker/6:1H]
(root,0,0,00:01:45/556-21:11:47,464) [kworker/0:1H]
(root,224880,87280,01:06:57/556-21:11:46,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/556-21:11:46,476) [iscsi_eh]
(root,0,0,00:00:00/556-21:11:46,485) [ib-comp-wq]
(root,0,0,00:00:00/556-21:11:46,486) [ib_mcast]
(root,0,0,00:00:00/556-21:11:46,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/556-21:11:46,494) [rdma_cm]
(root,97708,1596,00:00:00/556-21:11:46,498) /sbin/lvmetad -f
(root,43436,3896,00:04:30/556-21:11:46,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:02:47/556-21:11:46,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/556-21:11:44,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:00/23:32:00,1097) [kworker/1:1]
(root,110516,3424,01:17:37/556-21:11:41,1244) /usr/sbin/irqbalance --foreground
(root,383268,2360,00:16:17/556-21:11:41,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:20:38/556-21:11:41,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29488,00:09:30/556-21:11:41,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:53:49/556-21:11:41,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:11/556-21:11:41,1289) /usr/sbin/cron -f
(root,286252,6272,00:30:56/556-21:11:41,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:01/556-21:11:41,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/556-21:11:41,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/556-21:11:41,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/556-21:11:41,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:29:02/556-21:11:41,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,10:41:55/556-21:11:41,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:07:58/556-21:11:41,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/04:34:24,1373) [kworker/3:0]
(root,141112,2440,00:00:00/556-21:11:41,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/556-21:11:41,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:39/556-21:11:41,1379) nginx: worker process
(www-data,143788,3960,00:00:09/556-21:11:41,1380) nginx: worker process
(www-data,143788,5000,00:00:44/556-21:11:41,1381) nginx: worker process
(www-data,143788,3964,00:00:01/556-21:11:41,1382) nginx: worker process
(www-data,143788,4056,00:00:00/556-21:11:41,1383) nginx: worker process
(www-data,143788,4184,00:00:00/556-21:11:41,1384) nginx: worker process
(www-data,143788,4056,00:00:00/556-21:11:41,1386) nginx: worker process
(www-data,143788,4184,00:00:00/556-21:11:41,1388) nginx: worker process
(root,14888,1756,00:00:00/556-21:11:41,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:18:08/556-21:11:41,1404) /usr/sbin/sshd -D
(root,4548,1332,00:13:24/556-21:11:40,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:05/556-21:11:40,1498) runsv redis-exporter
(root,4396,712,00:00:06/556-21:11:40,1500) runsv node-exporter
(root,4396,820,00:00:06/556-21:11:40,1501) runsv prometheus
(root,4396,824,00:00:06/556-21:11:40,1502) runsv sidekiq
(root,4396,720,00:00:05/556-21:11:40,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/556-21:11:40,1507) runsv alertmanager
(root,4396,856,00:00:05/556-21:11:40,1509) runsv postgresql
(root,4396,744,00:00:06/556-21:11:40,1510) runsv postgres-exporter
(root,4396,788,00:00:05/556-21:11:40,1511) runsv grafana
(root,4396,780,00:00:05/556-21:11:40,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:25/556-21:11:40,1513) runsv logrotate
(root,4396,856,00:00:05/556-21:11:40,1514) runsv puma
(root,4396,744,00:00:05/556-21:11:40,1515) runsv nginx
(root,4396,740,00:00:05/556-21:11:40,1516) runsv gitaly
(root,4396,860,00:00:05/556-21:11:40,1517) runsv redis
(root,4396,760,00:00:06/556-21:11:40,1519) runsv registry
(root,4540,864,00:00:05/556-21:11:40,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:09/556-21:11:40,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/556-21:11:40,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:40:27/556-21:11:40,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:57:16/556-21:11:40,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:05/556-21:11:40,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/556-21:11:40,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:05/556-21:11:40,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/556-21:11:40,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:19/556-21:11:40,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:05/556-21:11:40,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:21:36/556-21:11:40,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:16:36/556-21:11:40,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:15/556-21:11:40,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:36/556-21:11:40,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:05/556-21:11:40,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/04:33:17,1598) [kworker/5:2]
(gitlab-psql,8307288,54736,00:00:01/01:06:11,1973) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:36/4-21:44:18,2582) [kworker/0:2]
(git,1737056,1026588,00:00:47/07:41:48,2902) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(gitlab-psql,8307140,48364,00:00:00/01:00:11,2951) postgres: gitlab gitlabhq_production [local] idle
(git,1634520,987548,00:00:38/07:40:48,3078) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1642712,993328,00:00:38/07:39:48,3252) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(root,4628,852,00:00:00/58:06,3297) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8306940,53392,00:00:00/58:03,3309) postgres: gitlab gitlabhq_production [local] idle
(git,1645784,986920,00:00:39/07:38:48,3415) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1642712,993872,00:00:38/07:37:48,3580) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(git,1652952,1021812,00:00:43/07:36:48,3750) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1728752,1028240,00:00:49/07:35:48,3925) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1720560,1018120,00:00:47/07:34:48,4088) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(root,4532,792,00:00:00/48:06,4920) sleep 3000
(root,0,0,00:00:00/47:16,5065) [kworker/u16:2]
(root,0,0,00:00:00/07:25:53,5533) [kworker/4:2]
(root,4628,796,00:00:00/415-04:51:45,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,792732,14616,00:08:14/415-04:51:45,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86364,7544,00:30:03/415-04:51:45,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:03:47/415-04:51:45,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:00/07:25:44,6257) [kworker/7:1]
(gitlab-psql,8307108,50976,00:00:00/38:24,6479) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:31/8-21:44:26,6649) [kworker/1:0]
(root,0,0,00:00:00/20:38:09,6747) [kworker/0:0]
(root,0,0,00:01:10/21-18:44:49,7555) [kworker/4:1]
(root,0,0,00:00:03/23:01:42,7722) [kworker/5:1]
(gitlab-psql,8307036,49996,00:00:00/29:43,7804) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:50/8-23:32:42,8171) [kworker/6:2]
(gitlab-psql,8309744,58572,00:00:00/26:01,8402) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307024,47424,00:00:00/25:48,8423) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47436,00:00:00/23:32,8817) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306276,46220,00:00:00/14:43,10125) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,47524,00:00:00/11:16,10695) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/07:37,11275) [kworker/u16:0]
(gitlab-psql,8307132,47428,00:00:00/05:07,11641) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:33,12213) [kworker/u16:1]
(root,20180,3592,00:00:00/00:00,12461) /bin/bash /usr/bin/check_mk_agent
(root,36700,3192,00:00:00/00:00,12479) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1116,00:00:00/00:00,12480) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:03/1-01:03:15,16876) [kworker/3:2]
(root,0,0,00:00:00/09:02:17,22321) [kworker/6:1]
(root,0,0,00:00:00/15:22:23,24834) [kworker/2:1]
(root,0,0,00:00:20/5-21:36:53,28935) [kworker/2:2]
(gitlab-prometheus,1795260,17328,05:46:07/160-21:03:10,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,940,00:59:26/160-21:03:10,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181512,132168,1-06:07:09/160-21:03:09,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45576,3-14:58:21/160-21:03:09,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,41084,20:37:42/160-21:03:09,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,44996,02:22:53/160-21:03:09,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/160-21:03:08,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66824,24072,00:03:18/160-21:03:08,29018) nginx: worker process
(gitlab-www,65016,21860,00:00:36/160-21:03:08,29019) nginx: worker process
(gitlab-www,65828,22592,00:01:27/160-21:03:08,29020) nginx: worker process
(gitlab-www,69244,26180,00:01:56/160-21:03:08,29021) nginx: worker process
(gitlab-www,69984,27128,04:15:59/160-21:03:08,29022) nginx: worker process
(gitlab-www,66892,23580,00:00:58/160-21:03:08,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/160-21:03:08,29024) nginx: worker process
(gitlab-www,65192,22076,00:00:24/160-21:03:08,29025) nginx: worker process
(gitlab-www,59784,3828,00:01:54/160-21:03:08,29026) nginx: cache manager process
(gitlab-prometheus,719468,15376,19:52:26/160-21:03:07,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14884,20:29:51/160-21:03:07,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:12:51/160-21:03:06,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3206932,170976,1-19:40:46/160-21:03:06,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,250272,00:10:51/160-21:03:06,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:04:38/160-21:03:06,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:05:34/160-21:03:06,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:13:06/160-21:03:06,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,02:49:59/160-21:03:06,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:17/160-21:03:06,29064) postgres: logical replication launcher   
(git,1461948,918600,02:41:28/160-21:03:05,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,17040,8-20:52:00/160-21:03:04,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,14868,06:30:05/160-21:03:04,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108788,14:01:39/160-21:03:04,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87324,14:00:49/160-21:03:04,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,16520,00:49:06/160-21:03:04,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:09:10/160-21:03:00,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4898464,1150964,24-16:21:28/160-21:03:00,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,78888,2-10:45:07/160-21:02:48,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,74632,1-03:17:06/160-21:02:45,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(systemd-resolve,70628,5224,00:00:00/05:00:45,29550) /lib/systemd/systemd-resolved
(gitlab-psql,8306184,34736,00:21:16/160-21:01:41,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/160-21:01:41,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:03/10-21:38:08,30799) [kworker/7:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-13 21:46

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912486d7834

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7996,00:25:58/555-00:18:26,1) /sbin/init
(root,0,0,00:00:22/555-00:18:26,2) [kthreadd]
(root,0,0,00:00:00/555-00:18:26,4) [kworker/0:0H]
(root,0,0,00:00:00/555-00:18:26,6) [mm_percpu_wq]
(root,0,0,00:06:15/555-00:18:26,7) [ksoftirqd/0]
(root,0,0,17:09:43/555-00:18:26,8) [rcu_sched]
(root,0,0,00:00:00/555-00:18:26,9) [rcu_bh]
(root,0,0,00:00:17/555-00:18:26,10) [migration/0]
(root,0,0,00:03:02/555-00:18:26,11) [watchdog/0]
(root,0,0,00:00:00/555-00:18:26,12) [cpuhp/0]
(root,0,0,00:00:00/555-00:18:26,13) [cpuhp/1]
(root,0,0,00:02:49/555-00:18:26,14) [watchdog/1]
(root,0,0,00:00:16/555-00:18:26,15) [migration/1]
(root,0,0,00:03:25/555-00:18:26,16) [ksoftirqd/1]
(root,0,0,00:00:00/555-00:18:26,18) [kworker/1:0H]
(root,0,0,00:00:00/555-00:18:26,19) [cpuhp/2]
(root,0,0,00:03:00/555-00:18:26,20) [watchdog/2]
(root,0,0,00:00:15/555-00:18:26,21) [migration/2]
(root,0,0,00:02:32/555-00:18:26,22) [ksoftirqd/2]
(root,0,0,00:00:00/555-00:18:26,24) [kworker/2:0H]
(root,0,0,00:00:00/555-00:18:26,25) [cpuhp/3]
(root,0,0,00:02:45/555-00:18:26,26) [watchdog/3]
(root,0,0,00:00:14/555-00:18:26,27) [migration/3]
(root,0,0,00:02:00/555-00:18:26,28) [ksoftirqd/3]
(root,0,0,00:00:00/555-00:18:26,30) [kworker/3:0H]
(root,0,0,00:00:00/555-00:18:26,31) [cpuhp/4]
(root,0,0,00:02:58/555-00:18:26,32) [watchdog/4]
(root,0,0,00:00:12/555-00:18:26,33) [migration/4]
(root,0,0,00:06:09/555-00:18:26,34) [ksoftirqd/4]
(root,0,0,00:00:00/555-00:18:26,36) [kworker/4:0H]
(root,0,0,00:00:00/555-00:18:26,37) [cpuhp/5]
(root,0,0,00:02:55/555-00:18:26,38) [watchdog/5]
(root,0,0,00:00:14/555-00:18:26,39) [migration/5]
(root,0,0,00:03:52/555-00:18:26,40) [ksoftirqd/5]
(root,0,0,00:00:00/555-00:18:26,42) [kworker/5:0H]
(root,0,0,00:00:00/555-00:18:26,43) [cpuhp/6]
(root,0,0,00:02:47/555-00:18:26,44) [watchdog/6]
(root,0,0,00:00:24/555-00:18:26,45) [migration/6]
(root,0,0,00:02:03/555-00:18:26,46) [ksoftirqd/6]
(root,0,0,00:00:00/555-00:18:26,48) [kworker/6:0H]
(root,0,0,00:00:00/555-00:18:26,49) [cpuhp/7]
(root,0,0,00:02:40/555-00:18:26,50) [watchdog/7]
(root,0,0,00:00:20/555-00:18:26,51) [migration/7]
(root,0,0,00:01:55/555-00:18:26,52) [ksoftirqd/7]
(root,0,0,00:00:00/555-00:18:26,54) [kworker/7:0H]
(root,0,0,00:00:00/555-00:18:26,55) [kdevtmpfs]
(root,0,0,00:00:00/555-00:18:26,56) [netns]
(root,0,0,00:00:00/555-00:18:26,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/555-00:18:26,58) [kauditd]
(root,0,0,00:01:27/555-00:18:26,62) [khungtaskd]
(root,0,0,00:00:00/555-00:18:26,63) [oom_reaper]
(root,0,0,00:00:00/555-00:18:26,64) [writeback]
(root,0,0,00:00:01/555-00:18:26,65) [kcompactd0]
(root,0,0,00:00:00/555-00:18:26,66) [ksmd]
(root,0,0,00:07:36/555-00:18:26,67) [khugepaged]
(root,0,0,00:00:00/555-00:18:26,68) [crypto]
(root,0,0,00:00:00/555-00:18:26,69) [kintegrityd]
(root,0,0,00:00:00/555-00:18:26,70) [kblockd]
(root,0,0,00:00:00/555-00:18:26,71) [ata_sff]
(root,0,0,00:00:00/555-00:18:26,72) [md]
(root,0,0,00:00:00/555-00:18:26,73) [edac-poller]
(root,0,0,00:00:00/555-00:18:26,74) [devfreq_wq]
(root,0,0,00:00:00/555-00:18:26,75) [watchdogd]
(root,0,0,01:50:02/555-00:18:26,79) [kswapd0]
(root,0,0,00:00:00/555-00:18:26,80) [kworker/u17:0]
(root,0,0,00:00:00/555-00:18:26,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/555-00:18:26,123) [kthrotld]
(root,0,0,00:00:00/555-00:18:26,124) [acpi_thermal_pm]
(root,0,0,00:00:00/555-00:18:26,130) [scsi_eh_0]
(root,0,0,00:00:00/555-00:18:26,131) [scsi_tmf_0]
(root,0,0,00:00:00/555-00:18:26,132) [scsi_eh_1]
(root,0,0,00:00:00/555-00:18:26,133) [scsi_tmf_1]
(root,0,0,00:00:00/555-00:18:25,139) [ipv6_addrconf]
(root,0,0,00:00:00/555-00:18:25,148) [kstrp]
(root,0,0,00:00:00/555-00:18:25,166) [charger_manager]
(root,0,0,00:00:00/555-00:18:25,223) [scsi_eh_2]
(root,0,0,00:00:00/555-00:18:25,224) [scsi_tmf_2]
(root,0,0,00:03:08/555-00:18:24,267) [kworker/7:1H]
(root,0,0,00:25:11/555-00:18:20,268) [kworker/4:1H]
(root,0,0,00:00:52/555-00:18:20,275) [kworker/1:1H]
(root,0,0,00:00:37/555-00:18:19,335) [kworker/2:1H]
(root,0,0,00:00:00/555-00:18:18,342) [raid5wq]
(root,0,0,01:01:29/555-00:18:18,392) [jbd2/sda1-8]
(root,0,0,00:00:00/555-00:18:18,393) [ext4-rsv-conver]
(root,0,0,00:00:32/555-00:18:18,395) [kworker/3:1H]
(root,0,0,00:02:47/555-00:18:18,398) [kworker/5:1H]
(root,0,0,00:03:45/555-00:18:18,431) [kworker/6:1H]
(root,0,0,00:01:45/555-00:18:18,464) [kworker/0:1H]
(root,188012,65276,01:06:47/555-00:18:17,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/555-00:18:17,476) [iscsi_eh]
(root,0,0,00:00:00/555-00:18:17,485) [ib-comp-wq]
(root,0,0,00:00:00/555-00:18:17,486) [ib_mcast]
(root,0,0,00:00:00/555-00:18:17,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/555-00:18:17,494) [rdma_cm]
(root,97708,1596,00:00:00/555-00:18:17,498) /sbin/lvmetad -f
(root,43436,3896,00:04:29/555-00:18:17,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:02:47/555-00:18:17,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:03/555-00:18:15,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:17:22/555-00:18:12,1244) /usr/sbin/irqbalance --foreground
(root,383048,2440,00:16:14/555-00:18:12,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:20:35/555-00:18:12,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29488,00:09:28/555-00:18:12,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:53:40/555-00:18:12,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:11/555-00:18:12,1289) /usr/sbin/cron -f
(root,286252,6272,00:30:50/555-00:18:12,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:04:00/555-00:18:12,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/555-00:18:12,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/555-00:18:12,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/555-00:18:12,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:28:57/555-00:18:12,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,10:39:45/555-00:18:12,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:07:56/555-00:18:12,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/555-00:18:12,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/555-00:18:12,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:39/555-00:18:12,1379) nginx: worker process
(www-data,143788,3960,00:00:09/555-00:18:12,1380) nginx: worker process
(www-data,143788,5000,00:00:44/555-00:18:12,1381) nginx: worker process
(www-data,143788,3964,00:00:01/555-00:18:12,1382) nginx: worker process
(www-data,143788,4056,00:00:00/555-00:18:12,1383) nginx: worker process
(www-data,143788,4184,00:00:00/555-00:18:12,1384) nginx: worker process
(www-data,143788,4056,00:00:00/555-00:18:12,1386) nginx: worker process
(www-data,143788,4184,00:00:00/555-00:18:12,1388) nginx: worker process
(root,14888,1756,00:00:00/555-00:18:12,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:18:05/555-00:18:12,1404) /usr/sbin/sshd -D
(root,0,0,00:00:00/13:23,1417) [kworker/u16:2]
(root,4548,1332,00:13:21/555-00:18:11,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:05/555-00:18:11,1498) runsv redis-exporter
(root,4396,712,00:00:06/555-00:18:11,1500) runsv node-exporter
(root,4396,820,00:00:06/555-00:18:11,1501) runsv prometheus
(root,4396,824,00:00:06/555-00:18:11,1502) runsv sidekiq
(root,4396,720,00:00:05/555-00:18:11,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/555-00:18:11,1507) runsv alertmanager
(root,4396,856,00:00:05/555-00:18:11,1509) runsv postgresql
(root,4396,744,00:00:06/555-00:18:11,1510) runsv postgres-exporter
(root,4396,788,00:00:05/555-00:18:11,1511) runsv grafana
(root,4396,780,00:00:05/555-00:18:11,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:25/555-00:18:11,1513) runsv logrotate
(root,4396,856,00:00:05/555-00:18:11,1514) runsv puma
(root,4396,744,00:00:05/555-00:18:11,1515) runsv nginx
(root,4396,740,00:00:05/555-00:18:11,1516) runsv gitaly
(root,4396,860,00:00:05/555-00:18:11,1517) runsv redis
(root,4396,760,00:00:06/555-00:18:11,1519) runsv registry
(root,4540,864,00:00:05/555-00:18:11,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:09/555-00:18:11,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/555-00:18:11,1525) svlogd -tt /var/log/gitlab/redis-exporter
(git,1526488,927828,00:00:01/13:04,1526) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,4540,1312,01:40:05/555-00:18:11,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:56:52/555-00:18:11,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:05/555-00:18:11,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/555-00:18:11,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:05/555-00:18:11,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/555-00:18:11,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:19/555-00:18:11,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:05/555-00:18:11,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:21:31/555-00:18:11,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:16:32/555-00:18:11,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:15/555-00:18:11,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:35/555-00:18:11,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:05/555-00:18:11,1558) svlogd -tt /var/log/gitlab/postgresql
(git,1522904,926660,00:00:01/12:04,1702) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(gitlab-psql,8307216,55036,00:00:00/11:51,1734) postgres: gitlab gitlabhq_production [local] idle
(git,1526488,930892,00:00:01/11:04,1871) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(gitlab-psql,8306916,49192,00:00:00/10:29,1939) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306276,46764,00:00:00/10:28,1941) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,55236,00:00:00/10:12,2025) postgres: gitlab gitlabhq_production [local] idle
(git,1530072,932092,00:00:01/10:04,2036) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(gitlab-psql,8307264,55108,00:00:00/09:48,2078) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307280,55212,00:00:00/09:34,2097) postgres: gitlab gitlabhq_production [local] idle
(git,1523416,928136,00:00:01/09:04,2204) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(gitlab-psql,8307288,55052,00:00:00/08:55,2231) postgres: gitlab gitlabhq_production [local] idle
(git,1522904,923200,00:00:01/08:04,2370) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(gitlab-psql,8307304,54812,00:00:00/07:37,2426) postgres: gitlab gitlabhq_production [local] idle
(git,1515224,918156,00:00:00/07:04,2540) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:22/3-00:50:49,2582) [kworker/0:2]
(git,1515224,919164,00:00:00/06:04,2706) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(gitlab-psql,8307296,54568,00:00:00/05:40,2755) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/02:05:23,2848) [kworker/2:1]
(root,0,0,00:00:00/05:01,3623) [kworker/1:1]
(gitlab-psql,8307304,54632,00:00:00/04:44,3655) postgres: gitlab gitlabhq_production [local] idle
(root,4628,776,00:00:00/04:41,3661) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,760,00:00:00/04:41,3665) sleep 600
(gitlab-psql,8304680,41076,00:00:00/02:26,4002) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3664,00:00:00/00:00,4520) /bin/bash /usr/bin/check_mk_agent
(root,36700,3188,00:00:00/00:00,4538) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1100,00:00:00/00:00,4539) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,4628,796,00:00:00/413-07:58:16,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,768156,12004,00:08:13/413-07:58:16,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86364,7544,00:29:53/413-07:58:16,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:03:47/413-07:58:16,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:24/7-00:50:57,6649) [kworker/1:0]
(root,0,0,00:01:03/19-21:51:20,7555) [kworker/4:1]
(root,0,0,00:01:27/7-02:39:13,8171) [kworker/6:2]
(root,0,0,00:00:00/01:30:18,12053) [kworker/6:0]
(root,0,0,00:00:00/01:18:16,14140) [kworker/4:2]
(root,0,0,00:00:00/01:10:14,16960) [kworker/0:0]
(root,0,0,00:00:00/53:33,21924) [kworker/5:0]
(root,0,0,00:00:04/1-06:05:01,24179) [kworker/3:1]
(root,0,0,00:00:08/2-03:12:13,24617) [kworker/5:2]
(root,0,0,00:00:00/50:51,26282) [kworker/7:2]
(root,0,0,00:00:13/4-00:43:24,28935) [kworker/2:2]
(gitlab-prometheus,1795260,17332,05:42:15/159-00:09:41,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,940,00:58:46/159-00:09:41,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181512,133132,1-05:47:48/159-00:09:40,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45612,3-14:00:43/159-00:09:40,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,39328,20:22:30/159-00:09:40,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,42516,02:21:02/159-00:09:40,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/159-00:09:39,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66824,24072,00:03:18/159-00:09:39,29018) nginx: worker process
(gitlab-www,65016,21860,00:00:36/159-00:09:39,29019) nginx: worker process
(gitlab-www,65828,22592,00:01:27/159-00:09:39,29020) nginx: worker process
(gitlab-www,69244,26180,00:01:56/159-00:09:39,29021) nginx: worker process
(gitlab-www,69984,27128,04:13:05/159-00:09:39,29022) nginx: worker process
(gitlab-www,66892,23580,00:00:58/159-00:09:39,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/159-00:09:39,29024) nginx: worker process
(gitlab-www,65192,22076,00:00:24/159-00:09:39,29025) nginx: worker process
(gitlab-www,59784,3828,00:01:53/159-00:09:39,29026) nginx: cache manager process
(gitlab-prometheus,719468,14240,19:39:11/159-00:09:38,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14420,20:15:50/159-00:09:38,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:12:42/159-00:09:37,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3179076,161276,1-19:10:26/159-00:09:37,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,250272,00:10:44/159-00:09:37,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:04:35/159-00:09:37,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:05:30/159-00:09:37,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:12:57/159-00:09:37,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,02:48:03/159-00:09:37,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:17/159-00:09:37,29064) postgres: logical replication launcher   
(git,1461948,918636,02:39:45/159-00:09:36,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16880,8-18:28:19/159-00:09:35,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,16200,06:25:45/159-00:09:35,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108788,13:52:36/159-00:09:35,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87324,13:51:20/159-00:09:35,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,14508,00:48:43/159-00:09:35,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:09:05/159-00:09:31,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4898464,1223468,24-09:47:12/159-00:09:31,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,77340,2-10:08:17/159-00:09:19,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,74632,1-02:58:39/159-00:09:16,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:21:01/159-00:08:12,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/159-00:08:12,29560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/36:12,30234) [kworker/u16:1]
(systemd-resolve,70760,4868,00:00:00/04:38:01,30392) /lib/systemd/systemd-resolved
(root,0,0,00:00:52/9-00:44:39,30799) [kworker/7:0]
(gitlab-psql,8307148,51704,00:00:00/31:07,31027) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/02:22:31,31896) [kworker/3:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-12 00:52

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912c14e96a5

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8136,00:25:56/554-13:56:02,1) /sbin/init
(root,0,0,00:00:22/554-13:56:02,2) [kthreadd]
(root,0,0,00:00:00/554-13:56:02,4) [kworker/0:0H]
(root,0,0,00:00:00/554-13:56:02,6) [mm_percpu_wq]
(root,0,0,00:06:14/554-13:56:02,7) [ksoftirqd/0]
(root,0,0,17:08:50/554-13:56:02,8) [rcu_sched]
(root,0,0,00:00:00/554-13:56:02,9) [rcu_bh]
(root,0,0,00:00:17/554-13:56:02,10) [migration/0]
(root,0,0,00:03:02/554-13:56:02,11) [watchdog/0]
(root,0,0,00:00:00/554-13:56:02,12) [cpuhp/0]
(root,0,0,00:00:00/554-13:56:02,13) [cpuhp/1]
(root,0,0,00:02:49/554-13:56:02,14) [watchdog/1]
(root,0,0,00:00:16/554-13:56:02,15) [migration/1]
(root,0,0,00:03:24/554-13:56:02,16) [ksoftirqd/1]
(root,0,0,00:00:00/554-13:56:02,18) [kworker/1:0H]
(root,0,0,00:00:00/554-13:56:02,19) [cpuhp/2]
(root,0,0,00:03:00/554-13:56:02,20) [watchdog/2]
(root,0,0,00:00:15/554-13:56:02,21) [migration/2]
(root,0,0,00:02:31/554-13:56:02,22) [ksoftirqd/2]
(root,0,0,00:00:00/554-13:56:02,24) [kworker/2:0H]
(root,0,0,00:00:00/554-13:56:02,25) [cpuhp/3]
(root,0,0,00:02:45/554-13:56:02,26) [watchdog/3]
(root,0,0,00:00:14/554-13:56:02,27) [migration/3]
(root,0,0,00:01:59/554-13:56:02,28) [ksoftirqd/3]
(root,0,0,00:00:00/554-13:56:02,30) [kworker/3:0H]
(root,0,0,00:00:00/554-13:56:02,31) [cpuhp/4]
(root,0,0,00:02:58/554-13:56:02,32) [watchdog/4]
(root,0,0,00:00:12/554-13:56:02,33) [migration/4]
(root,0,0,00:06:08/554-13:56:02,34) [ksoftirqd/4]
(root,0,0,00:00:00/554-13:56:02,36) [kworker/4:0H]
(root,0,0,00:00:00/554-13:56:02,37) [cpuhp/5]
(root,0,0,00:02:55/554-13:56:02,38) [watchdog/5]
(root,0,0,00:00:14/554-13:56:02,39) [migration/5]
(root,0,0,00:03:51/554-13:56:02,40) [ksoftirqd/5]
(root,0,0,00:00:00/554-13:56:02,42) [kworker/5:0H]
(root,0,0,00:00:00/554-13:56:02,43) [cpuhp/6]
(root,0,0,00:02:47/554-13:56:02,44) [watchdog/6]
(root,0,0,00:00:24/554-13:56:02,45) [migration/6]
(root,0,0,00:02:02/554-13:56:02,46) [ksoftirqd/6]
(root,0,0,00:00:00/554-13:56:02,48) [kworker/6:0H]
(root,0,0,00:00:00/554-13:56:02,49) [cpuhp/7]
(root,0,0,00:02:40/554-13:56:02,50) [watchdog/7]
(root,0,0,00:00:20/554-13:56:02,51) [migration/7]
(root,0,0,00:01:54/554-13:56:02,52) [ksoftirqd/7]
(root,0,0,00:00:00/554-13:56:02,54) [kworker/7:0H]
(root,0,0,00:00:00/554-13:56:02,55) [kdevtmpfs]
(root,0,0,00:00:00/554-13:56:02,56) [netns]
(root,0,0,00:00:00/554-13:56:02,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/554-13:56:02,58) [kauditd]
(root,0,0,00:01:27/554-13:56:02,62) [khungtaskd]
(root,0,0,00:00:00/554-13:56:02,63) [oom_reaper]
(root,0,0,00:00:00/554-13:56:02,64) [writeback]
(root,0,0,00:00:01/554-13:56:02,65) [kcompactd0]
(root,0,0,00:00:00/554-13:56:02,66) [ksmd]
(root,0,0,00:07:35/554-13:56:02,67) [khugepaged]
(root,0,0,00:00:00/554-13:56:02,68) [crypto]
(root,0,0,00:00:00/554-13:56:02,69) [kintegrityd]
(root,0,0,00:00:00/554-13:56:02,70) [kblockd]
(root,0,0,00:00:00/554-13:56:02,71) [ata_sff]
(root,0,0,00:00:00/554-13:56:02,72) [md]
(root,0,0,00:00:00/554-13:56:02,73) [edac-poller]
(root,0,0,00:00:00/554-13:56:02,74) [devfreq_wq]
(root,0,0,00:00:00/554-13:56:02,75) [watchdogd]
(root,0,0,01:49:49/554-13:56:02,79) [kswapd0]
(root,0,0,00:00:00/554-13:56:02,80) [kworker/u17:0]
(root,0,0,00:00:00/554-13:56:02,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/554-13:56:02,123) [kthrotld]
(root,0,0,00:00:00/554-13:56:02,124) [acpi_thermal_pm]
(root,0,0,00:00:00/554-13:56:02,130) [scsi_eh_0]
(root,0,0,00:00:00/554-13:56:02,131) [scsi_tmf_0]
(root,0,0,00:00:00/554-13:56:02,132) [scsi_eh_1]
(root,0,0,00:00:00/554-13:56:02,133) [scsi_tmf_1]
(root,0,0,00:00:00/554-13:56:01,139) [ipv6_addrconf]
(root,0,0,00:00:00/554-13:56:01,148) [kstrp]
(root,0,0,00:00:00/554-13:56:01,166) [charger_manager]
(root,0,0,00:00:00/554-13:56:01,223) [scsi_eh_2]
(root,0,0,00:00:00/554-13:56:01,224) [scsi_tmf_2]
(root,0,0,00:03:08/554-13:56:00,267) [kworker/7:1H]
(root,0,0,00:25:10/554-13:55:56,268) [kworker/4:1H]
(root,0,0,00:00:52/554-13:55:56,275) [kworker/1:1H]
(root,0,0,00:00:37/554-13:55:55,335) [kworker/2:1H]
(root,0,0,00:00:00/554-13:55:54,342) [raid5wq]
(root,0,0,01:01:26/554-13:55:54,392) [jbd2/sda1-8]
(root,0,0,00:00:00/554-13:55:54,393) [ext4-rsv-conver]
(root,0,0,00:00:32/554-13:55:54,395) [kworker/3:1H]
(root,0,0,00:02:46/554-13:55:54,398) [kworker/5:1H]
(root,0,0,00:03:44/554-13:55:54,431) [kworker/6:1H]
(root,0,0,00:01:45/554-13:55:54,464) [kworker/0:1H]
(root,179820,65264,01:06:45/554-13:55:53,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/554-13:55:53,476) [iscsi_eh]
(root,0,0,00:00:00/554-13:55:53,485) [ib-comp-wq]
(root,0,0,00:00:00/554-13:55:53,486) [ib_mcast]
(root,0,0,00:00:00/554-13:55:53,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/554-13:55:53,494) [rdma_cm]
(root,97708,1596,00:00:00/554-13:55:53,498) /sbin/lvmetad -f
(root,43436,3896,00:04:29/554-13:55:53,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2684,00:02:47/554-13:55:53,713) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/03:15,875) [kworker/u16:2]
(gitlab-psql,8306848,42804,00:00:00/03:03,897) postgres: gitlab gitlabhq_production [local] idle
(root,25992,3444,00:00:03/554-13:55:51,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3424,01:17:18/554-13:55:48,1244) /usr/sbin/irqbalance --foreground
(root,383268,2324,00:16:13/554-13:55:48,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:20:35/554-13:55:48,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29488,00:09:28/554-13:55:48,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4004,00:53:37/554-13:55:48,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2784,00:02:11/554-13:55:48,1289) /usr/sbin/cron -f
(root,286252,6272,00:30:49/554-13:55:48,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5488,00:03:59/554-13:55:48,1297) /lib/systemd/systemd-logind
(daemon,28332,2052,00:00:02/554-13:55:48,1300) /usr/sbin/atd -f
(root,169100,13360,00:00:00/554-13:55:48,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16060,00:00:00/554-13:55:48,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5916,00:28:56/554-13:55:48,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,10:39:14/554-13:55:48,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:07:56/554-13:55:48,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2440,00:00:00/554-13:55:48,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1936,00:00:00/554-13:55:48,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143852,5124,00:04:39/554-13:55:48,1379) nginx: worker process
(www-data,143788,3960,00:00:09/554-13:55:48,1380) nginx: worker process
(www-data,143788,5000,00:00:44/554-13:55:48,1381) nginx: worker process
(www-data,143788,3964,00:00:01/554-13:55:48,1382) nginx: worker process
(www-data,143788,4056,00:00:00/554-13:55:48,1383) nginx: worker process
(www-data,143788,4184,00:00:00/554-13:55:48,1384) nginx: worker process
(www-data,143788,4056,00:00:00/554-13:55:48,1386) nginx: worker process
(www-data,143788,4184,00:00:00/554-13:55:48,1388) nginx: worker process
(root,14888,1756,00:00:00/554-13:55:48,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5912,00:18:04/554-13:55:48,1404) /usr/sbin/sshd -D
(root,20180,3644,00:00:00/00:00,1437) /bin/bash /usr/bin/check_mk_agent
(root,36700,3132,00:00:00/00:00,1456) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1100,00:00:00/00:00,1457) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,4548,1332,00:13:21/554-13:55:47,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:05/554-13:55:47,1498) runsv redis-exporter
(root,4396,712,00:00:06/554-13:55:47,1500) runsv node-exporter
(root,4396,820,00:00:06/554-13:55:47,1501) runsv prometheus
(root,4396,824,00:00:06/554-13:55:47,1502) runsv sidekiq
(root,4396,720,00:00:05/554-13:55:47,1506) runsv gitlab-exporter
(root,4396,1228,00:00:07/554-13:55:47,1507) runsv alertmanager
(root,4396,856,00:00:05/554-13:55:47,1509) runsv postgresql
(root,4396,744,00:00:06/554-13:55:47,1510) runsv postgres-exporter
(root,4396,788,00:00:05/554-13:55:47,1511) runsv grafana
(root,4396,780,00:00:05/554-13:55:47,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:25/554-13:55:47,1513) runsv logrotate
(root,4396,856,00:00:05/554-13:55:47,1514) runsv puma
(root,4396,744,00:00:05/554-13:55:47,1515) runsv nginx
(root,4396,740,00:00:05/554-13:55:47,1516) runsv gitaly
(root,4396,860,00:00:05/554-13:55:47,1517) runsv redis
(root,4396,760,00:00:06/554-13:55:47,1519) runsv registry
(root,4540,864,00:00:05/554-13:55:47,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:09/554-13:55:47,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:05/554-13:55:47,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:39:58/554-13:55:47,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:56:47/554-13:55:47,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:05/554-13:55:47,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:05/554-13:55:47,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:05/554-13:55:47,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:05/554-13:55:47,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:19/554-13:55:47,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:05/554-13:55:47,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:21:30/554-13:55:47,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1312,00:16:30/554-13:55:47,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:01:15/554-13:55:47,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1500,00:01:35/554-13:55:47,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1500,00:00:05/554-13:55:47,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:19/2-14:28:25,2582) [kworker/0:2]
(root,4628,796,00:00:00/412-21:35:52,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,768152,18392,00:08:12/412-21:35:52,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86364,7544,00:29:51/412-21:35:52,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:03:47/412-21:35:52,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,0,0,00:00:22/6-14:28:33,6649) [kworker/1:0]
(root,0,0,00:01:02/19-11:28:56,7555) [kworker/4:1]
(root,0,0,00:01:21/6-16:16:49,8171) [kworker/6:2]
(git,1597656,982928,00:00:11/02:18:54,11685) puma: cluster worker 5: 29076 [gitlab-puma-worker]
(git,1605848,989000,00:00:12/02:17:54,11849) puma: cluster worker 3: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/17:53:56,11925) [kworker/0:1]
(git,1619160,992876,00:00:13/02:16:54,12020) puma: cluster worker 0: 29076 [gitlab-puma-worker]
(git,1611992,996260,00:00:13/02:15:54,12187) puma: cluster worker 4: 29076 [gitlab-puma-worker]
(git,1604824,985240,00:00:11/02:14:54,12352) puma: cluster worker 2: 29076 [gitlab-puma-worker]
(git,1611992,997008,00:00:11/02:13:54,12528) puma: cluster worker 6: 29076 [gitlab-puma-worker]
(git,1592536,970296,00:00:10/02:12:54,12708) puma: cluster worker 7: 29076 [gitlab-puma-worker]
(git,1593560,972236,00:00:11/02:11:54,12876) puma: cluster worker 1: 29076 [gitlab-puma-worker]
(root,0,0,00:00:00/08:10:03,18138) [kworker/4:2]
(root,0,0,00:00:00/14:27:52,19185) [kworker/3:0]
(root,0,0,00:00:00/14:17:14,22504) [kworker/6:1]
(gitlab-psql,8310448,53780,00:00:00/01:02:52,23700) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:02/19:42:37,24179) [kworker/3:1]
(systemd-resolve,70760,5148,00:00:00/04:07:07,24530) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/04:07:07,24542) [kworker/1:2]
(root,0,0,00:00:06/1-16:49:49,24617) [kworker/5:2]
(gitlab-psql,8307004,51076,00:00:00/53:49,25139) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/49:59,25734) [kworker/u16:1]
(gitlab-psql,8311108,59808,00:00:00/44:58,26529) postgres: gitlab gitlabhq_production [local] idle
(root,4628,856,00:00:00/42:17,26960) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307132,47652,00:00:00/41:53,27008) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306752,52296,00:00:00/41:38,27087) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307260,48676,00:00:00/38:54,27470) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307024,47588,00:00:00/36:53,27786) postgres: gitlab gitlabhq_production [local] idle
(root,4532,820,00:00:00/32:17,28519) sleep 3000
(gitlab-psql,8307332,52268,00:00:00/32:08,28539) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:12/3-14:21:00,28935) [kworker/2:2]
(gitlab-prometheus,1795260,19588,05:41:21/158-13:47:17,28941) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392728,940,00:58:37/158-13:47:17,28957) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181512,132800,1-05:39:53/158-13:47:16,28963) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,307976,45752,3-13:47:08/158-13:47:16,28976) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,39056,20:17:56/158-13:47:16,28978) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917576,43416,02:20:36/158-13:47:16,28993) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6736,00:00:00/158-13:47:15,29017) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66824,24072,00:03:18/158-13:47:15,29018) nginx: worker process
(gitlab-www,65016,21860,00:00:36/158-13:47:15,29019) nginx: worker process
(gitlab-www,65828,22592,00:01:27/158-13:47:15,29020) nginx: worker process
(gitlab-www,69244,26180,00:01:56/158-13:47:15,29021) nginx: worker process
(gitlab-www,69984,27128,04:12:18/158-13:47:15,29022) nginx: worker process
(gitlab-www,66892,23580,00:00:58/158-13:47:15,29023) nginx: worker process
(gitlab-www,64660,21484,00:00:14/158-13:47:15,29024) nginx: worker process
(gitlab-www,65192,22076,00:00:24/158-13:47:15,29025) nginx: worker process
(gitlab-www,59784,3828,00:01:53/158-13:47:15,29026) nginx: cache manager process
(gitlab-prometheus,719468,13552,19:36:01/158-13:47:14,29029) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14764,20:12:30/158-13:47:14,29039) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201568,00:12:40/158-13:47:13,29048) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3200452,167128,1-19:03:24/158-13:47:13,29050) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,247776,00:10:40/158-13:47:13,29059) postgres: checkpointer   
(gitlab-psql,8294660,65588,00:04:34/158-13:47:13,29060) postgres: background writer   
(gitlab-psql,8294660,21444,00:05:27/158-13:47:13,29061) postgres: walwriter   
(gitlab-psql,8295360,8012,00:12:55/158-13:47:13,29062) postgres: autovacuum launcher   
(gitlab-psql,35788,5248,02:47:33/158-13:47:13,29063) postgres: stats collector   
(gitlab-psql,8295200,6648,00:00:17/158-13:47:13,29064) postgres: logical replication launcher   
(git,1461948,918624,02:39:19/158-13:47:12,29076) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,177904,16980,8-17:54:00/158-13:47:11,29081) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,18948,06:24:43/158-13:47:11,29091) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(git,3160860,108788,13:50:30/158-13:47:11,29097) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,2882084,87324,13:49:04/158-13:47:11,29098) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 28963 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(registry,1881200,15320,00:48:37/158-13:47:11,29102) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,162172,20680,00:09:03/158-13:47:07,29191) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4898464,1206552,24-08:07:39/158-13:47:07,29196) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8309408,76220,2-09:59:44/158-13:46:55,29266) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8333028,74632,1-02:54:23/158-13:46:52,29271) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8306184,34736,00:20:58/158-13:45:48,29558) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314532,63680,00:00:00/158-13:45:48,29560) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307024,47588,00:00:00/22:26,30364) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307072,47776,00:00:00/21:49,30438) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:34:23,30779) [kworker/2:0]
(root,0,0,00:00:49/8-14:22:15,30799) [kworker/7:0]
(root,0,0,00:00:00/16:06:34,31576) [kworker/5:0]
(gitlab-psql,8306776,47664,00:00:00/13:41,31734) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/10:28,32218) [kworker/u16:0]
(root,0,0,00:00:00/18:59:28,32376) [kworker/7:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-11 14:30

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91240847b88

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,7752,00:16:08/345-18:13:35,1) /sbin/init
(root,0,0,00:00:17/345-18:13:35,2) [kthreadd]
(root,0,0,00:00:00/345-18:13:35,4) [kworker/0:0H]
(root,0,0,00:00:00/345-18:13:35,6) [mm_percpu_wq]
(root,0,0,00:03:42/345-18:13:35,7) [ksoftirqd/0]
(root,0,0,10:21:14/345-18:13:35,8) [rcu_sched]
(root,0,0,00:00:00/345-18:13:35,9) [rcu_bh]
(root,0,0,00:00:10/345-18:13:35,10) [migration/0]
(root,0,0,00:01:50/345-18:13:35,11) [watchdog/0]
(root,0,0,00:00:00/345-18:13:35,12) [cpuhp/0]
(root,0,0,00:00:00/345-18:13:35,13) [cpuhp/1]
(root,0,0,00:01:43/345-18:13:35,14) [watchdog/1]
(root,0,0,00:00:10/345-18:13:35,15) [migration/1]
(root,0,0,00:02:01/345-18:13:35,16) [ksoftirqd/1]
(root,0,0,00:00:00/345-18:13:35,18) [kworker/1:0H]
(root,0,0,00:00:00/345-18:13:35,19) [cpuhp/2]
(root,0,0,00:01:49/345-18:13:35,20) [watchdog/2]
(root,0,0,00:00:09/345-18:13:35,21) [migration/2]
(root,0,0,00:01:31/345-18:13:35,22) [ksoftirqd/2]
(root,0,0,00:00:00/345-18:13:35,24) [kworker/2:0H]
(root,0,0,00:00:00/345-18:13:35,25) [cpuhp/3]
(root,0,0,00:01:41/345-18:13:35,26) [watchdog/3]
(root,0,0,00:00:08/345-18:13:35,27) [migration/3]
(root,0,0,00:01:10/345-18:13:35,28) [ksoftirqd/3]
(root,0,0,00:00:00/345-18:13:35,30) [kworker/3:0H]
(root,0,0,00:00:00/345-18:13:35,31) [cpuhp/4]
(root,0,0,00:01:49/345-18:13:35,32) [watchdog/4]
(root,0,0,00:00:07/345-18:13:35,33) [migration/4]
(root,0,0,00:03:32/345-18:13:35,34) [ksoftirqd/4]
(root,0,0,00:00:00/345-18:13:35,36) [kworker/4:0H]
(root,0,0,00:00:00/345-18:13:35,37) [cpuhp/5]
(root,0,0,00:01:47/345-18:13:35,38) [watchdog/5]
(root,0,0,00:00:08/345-18:13:35,39) [migration/5]
(root,0,0,00:02:14/345-18:13:35,40) [ksoftirqd/5]
(root,0,0,00:00:00/345-18:13:35,42) [kworker/5:0H]
(root,0,0,00:00:00/345-18:13:35,43) [cpuhp/6]
(root,0,0,00:01:43/345-18:13:35,44) [watchdog/6]
(root,0,0,00:00:15/345-18:13:35,45) [migration/6]
(root,0,0,00:01:07/345-18:13:35,46) [ksoftirqd/6]
(root,0,0,00:00:00/345-18:13:35,48) [kworker/6:0H]
(root,0,0,00:00:00/345-18:13:35,49) [cpuhp/7]
(root,0,0,00:01:38/345-18:13:35,50) [watchdog/7]
(root,0,0,00:00:12/345-18:13:35,51) [migration/7]
(root,0,0,00:01:07/345-18:13:35,52) [ksoftirqd/7]
(root,0,0,00:00:00/345-18:13:35,54) [kworker/7:0H]
(root,0,0,00:00:00/345-18:13:35,55) [kdevtmpfs]
(root,0,0,00:00:00/345-18:13:35,56) [netns]
(root,0,0,00:00:00/345-18:13:35,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/345-18:13:35,58) [kauditd]
(root,0,0,00:00:52/345-18:13:35,62) [khungtaskd]
(root,0,0,00:00:00/345-18:13:35,63) [oom_reaper]
(root,0,0,00:00:00/345-18:13:35,64) [writeback]
(root,0,0,00:00:00/345-18:13:35,65) [kcompactd0]
(root,0,0,00:00:00/345-18:13:35,66) [ksmd]
(root,0,0,00:04:34/345-18:13:35,67) [khugepaged]
(root,0,0,00:00:00/345-18:13:35,68) [crypto]
(root,0,0,00:00:00/345-18:13:35,69) [kintegrityd]
(root,0,0,00:00:00/345-18:13:35,70) [kblockd]
(root,0,0,00:00:00/345-18:13:35,71) [ata_sff]
(root,0,0,00:00:00/345-18:13:35,72) [md]
(root,0,0,00:00:00/345-18:13:35,73) [edac-poller]
(root,0,0,00:00:00/345-18:13:35,74) [devfreq_wq]
(root,0,0,00:00:00/345-18:13:35,75) [watchdogd]
(root,0,0,01:02:45/345-18:13:35,79) [kswapd0]
(root,0,0,00:00:00/345-18:13:35,80) [kworker/u17:0]
(root,0,0,00:00:00/345-18:13:35,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/345-18:13:35,123) [kthrotld]
(root,0,0,00:00:00/345-18:13:35,124) [acpi_thermal_pm]
(root,0,0,00:00:00/345-18:13:35,130) [scsi_eh_0]
(root,0,0,00:00:00/345-18:13:35,131) [scsi_tmf_0]
(root,0,0,00:00:00/345-18:13:35,132) [scsi_eh_1]
(root,0,0,00:00:00/345-18:13:35,133) [scsi_tmf_1]
(root,0,0,00:00:00/345-18:13:34,139) [ipv6_addrconf]
(root,0,0,00:00:00/345-18:13:34,148) [kstrp]
(root,0,0,00:00:00/345-18:13:34,166) [charger_manager]
(root,0,0,00:00:00/345-18:13:34,223) [scsi_eh_2]
(root,0,0,00:00:00/345-18:13:34,224) [scsi_tmf_2]
(root,0,0,00:01:54/345-18:13:33,267) [kworker/7:1H]
(root,0,0,00:15:45/345-18:13:29,268) [kworker/4:1H]
(root,0,0,00:00:31/345-18:13:29,275) [kworker/1:1H]
(root,0,0,00:00:22/345-18:13:28,335) [kworker/2:1H]
(root,0,0,00:00:00/345-18:13:27,342) [raid5wq]
(root,0,0,00:37:38/345-18:13:27,392) [jbd2/sda1-8]
(root,0,0,00:00:00/345-18:13:27,393) [ext4-rsv-conver]
(root,0,0,00:00:19/345-18:13:27,395) [kworker/3:1H]
(root,0,0,00:01:42/345-18:13:27,398) [kworker/5:1H]
(root,0,0,00:02:17/345-18:13:27,431) [kworker/6:1H]
(root,0,0,00:01:02/345-18:13:27,464) [kworker/0:1H]
(root,187900,70868,00:43:04/345-18:13:26,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/345-18:13:26,476) [iscsi_eh]
(root,0,0,00:00:00/345-18:13:26,485) [ib-comp-wq]
(root,0,0,00:00:00/345-18:13:26,486) [ib_mcast]
(root,0,0,00:00:00/345-18:13:26,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/345-18:13:26,494) [rdma_cm]
(root,97708,1596,00:00:00/345-18:13:26,498) /sbin/lvmetad -f
(root,43436,3900,00:02:45/345-18:13:26,508) /lib/systemd/systemd-udevd
(gitlab-psql,8307128,47536,00:00:00/50:44,531) postgres: gitlab gitlabhq_production [local] idle
(systemd-timesync,141928,2696,00:01:41/345-18:13:26,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:02/345-18:13:24,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3428,00:46:37/345-18:13:21,1244) /usr/sbin/irqbalance --foreground
(root,383268,2372,00:09:55/345-18:13:21,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4340,00:13:26/345-18:13:21,1251) /usr/sbin/rsyslogd -n
(clamav,306860,29792,00:05:48/345-18:13:21,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4008,00:33:50/345-18:13:21,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2796,00:01:17/345-18:13:21,1289) /usr/sbin/cron -f
(root,286252,6352,00:19:14/345-18:13:21,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5492,00:02:25/345-18:13:21,1297) /lib/systemd/systemd-logind
(daemon,28332,2056,00:00:01/345-18:13:21,1300) /usr/sbin/atd -f
(root,169100,13440,00:00:00/345-18:13:21,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,185940,16104,00:00:00/345-18:13:21,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5920,00:18:22/345-18:13:21,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,06:32:34/345-18:13:21,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:04:50/345-18:13:21,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2524,00:00:00/345-18:13:21,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1944,00:00:00/345-18:13:21,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143788,6056,00:01:19/345-18:13:21,1379) nginx: worker process
(www-data,143788,5048,00:00:00/345-18:13:21,1380) nginx: worker process
(www-data,143788,5040,00:00:00/345-18:13:21,1381) nginx: worker process
(www-data,143788,5052,00:00:00/345-18:13:21,1382) nginx: worker process
(www-data,143788,5168,00:00:00/345-18:13:21,1383) nginx: worker process
(www-data,143788,5168,00:00:00/345-18:13:21,1384) nginx: worker process
(www-data,143788,5168,00:00:00/345-18:13:21,1386) nginx: worker process
(www-data,143788,5168,00:00:00/345-18:13:21,1388) nginx: worker process
(root,14888,1756,00:00:00/345-18:13:21,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5920,00:11:33/345-18:13:21,1404) /usr/sbin/sshd -D
(root,0,0,00:00:16/4-18:42:09,1459) [kworker/2:1]
(root,4548,1332,00:08:09/345-18:13:20,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:03/345-18:13:20,1498) runsv redis-exporter
(root,4396,712,00:00:03/345-18:13:20,1500) runsv node-exporter
(root,4396,820,00:00:03/345-18:13:20,1501) runsv prometheus
(root,4396,824,00:00:03/345-18:13:20,1502) runsv sidekiq
(root,4396,720,00:00:03/345-18:13:20,1506) runsv gitlab-exporter
(root,4396,1228,00:00:04/345-18:13:20,1507) runsv alertmanager
(root,4396,856,00:00:03/345-18:13:20,1509) runsv postgresql
(root,4396,744,00:00:04/345-18:13:20,1510) runsv postgres-exporter
(root,4396,788,00:00:03/345-18:13:20,1511) runsv grafana
(root,4396,780,00:00:03/345-18:13:20,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:15/345-18:13:20,1513) runsv logrotate
(root,4396,856,00:00:03/345-18:13:20,1514) runsv puma
(root,4396,744,00:00:03/345-18:13:20,1515) runsv nginx
(root,4396,740,00:00:03/345-18:13:20,1516) runsv gitaly
(root,4396,860,00:00:03/345-18:13:20,1517) runsv redis
(root,4396,760,00:00:03/345-18:13:20,1519) runsv registry
(root,4540,864,00:00:03/345-18:13:20,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:06/345-18:13:20,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:03/345-18:13:20,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,01:01:20/345-18:13:20,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,01:13:06/345-18:13:20,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:03/345-18:13:20,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:03/345-18:13:20,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:03/345-18:13:20,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:03/345-18:13:20,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:04/345-18:13:20,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:03/345-18:13:20,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:13:15/345-18:13:20,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1316,00:09:59/345-18:13:20,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:00:06/345-18:13:20,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1504,00:00:58/345-18:13:20,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1504,00:00:03/345-18:13:20,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/40:55,2171) [kworker/u16:1]
(gitlab-psql,8307060,51836,00:00:00/40:34,2265) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307128,47308,00:00:00/35:01,3153) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306956,53700,00:00:00/33:24,3451) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310704,54132,00:00:00/32:38,3606) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/28:37,4264) [kworker/u16:0]
(gitlab-psql,8306672,51544,00:00:00/26:27,4607) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:26/8-00:27:50,4900) [kworker/4:1]
(gitlab-psql,8307020,47016,00:00:00/20:55,5485) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,5256,00:00:00/20:17,5611) /lib/systemd/systemd-resolved
(gitlab-psql,8306668,49204,00:00:00/19:32,5766) postgres: gitlab gitlabhq_production [local] idle
(root,4628,796,00:00:00/204-01:53:25,6200) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,890676,24300,00:04:25/204-01:53:25,6202) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,84628,5812,00:10:52/204-01:53:25,6203) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1660,00:02:12/204-01:53:25,6207) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(gitlab-psql,8307128,47172,00:00:00/16:17,6290) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/15:09,6464) [kworker/4:2]
(gitlab-psql,8307128,47312,00:00:00/14:52,6499) postgres: gitlab gitlabhq_production [local] idle
(root,4628,800,00:00:00/11:23,7090) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307128,47096,00:00:00/07:00,7763) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307136,47440,00:00:00/03:28,8344) postgres: gitlab gitlabhq_production [local] idle
(root,4532,772,00:00:00/01:23,8665) sleep 3000
(root,0,0,00:00:00/00:54,8716) [kworker/u16:2]
(root,0,0,00:00:00/16:28:41,8737) [kworker/2:2]
(git,1669336,971464,00:00:37/06:38:43,8738) puma: cluster worker 2: 31231 [gitlab-puma-worker]
(root,20180,3460,00:00:00/00:00,8980) /bin/bash /usr/bin/check_mk_agent
(root,36700,3188,00:00:00/00:00,8999) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1068,00:00:00/00:00,9000) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1738968,999248,00:00:36/06:37:43,9066) puma: cluster worker 7: 31231 [gitlab-puma-worker]
(git,1738968,1003676,00:00:38/06:36:43,9233) puma: cluster worker 0: 31231 [gitlab-puma-worker]
(root,0,0,00:04:16/20-18:40:09,9388) [kworker/6:1]
(git,1806576,998376,00:00:41/06:35:43,9402) puma: cluster worker 1: 31231 [gitlab-puma-worker]
(git,1796336,989300,00:00:40/06:34:43,9576) puma: cluster worker 3: 31231 [gitlab-puma-worker]
(git,1814880,1014224,00:00:39/06:33:43,9741) puma: cluster worker 5: 31231 [gitlab-puma-worker]
(git,1645784,943652,00:00:37/06:32:43,9914) puma: cluster worker 4: 31231 [gitlab-puma-worker]
(git,1806576,1011412,00:00:38/06:31:43,10073) puma: cluster worker 6: 31231 [gitlab-puma-worker]
(root,0,0,00:00:47/12-18:42:18,14015) [kworker/5:1]
(gitlab-psql,8309440,82564,3-08:27:18/248-20:53:52,14112) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/12:24:02,16651) [kworker/6:2]
(root,0,0,00:01:32/15-14:44:29,18032) [kworker/7:0]
(root,0,0,00:00:00/18:44:49,18470) [kworker/3:0]
(root,0,0,00:00:00/05:35:03,19146) [kworker/1:1]
(root,0,0,00:00:00/05:34:55,19790) [kworker/7:1]
(root,0,0,00:00:26/3-20:47:11,21384) [kworker/0:1]
(root,0,0,00:02:18/42-18:44:49,22387) [kworker/1:2]
(root,0,0,00:00:00/20:59:38,24923) [kworker/5:2]
(root,0,0,00:00:09/2-18:39:50,25595) [kworker/3:2]
(root,0,0,00:00:00/1-13:07:58,28525) [kworker/0:0]
(gitlab-prometheus,1795516,19644,11:28:41/345-03:22:36,31089) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392472,880,02:02:01/345-03:22:35,31101) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182088,135308,2-08:10:30/345-03:22:35,31107) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,373520,49772,6-02:12:37/345-03:22:34,31122) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2415596,39684,1-20:06:42/345-03:22:33,31128) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917356,55452,05:48:32/345-03:22:33,31141) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6616,00:00:00/345-03:22:32,31164) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,66092,20996,08:53:31/345-03:22:32,31165) nginx: worker process
(gitlab-www,64768,15900,00:00:00/345-03:22:32,31166) nginx: worker process
(gitlab-www,64760,17360,00:00:00/345-03:22:32,31167) nginx: worker process
(gitlab-www,65120,20076,00:01:17/345-03:22:32,31168) nginx: worker process
(gitlab-www,64104,12688,00:00:00/345-03:22:32,31169) nginx: worker process
(gitlab-www,64544,19296,00:00:02/345-03:22:32,31170) nginx: worker process
(gitlab-www,63960,10556,00:00:00/345-03:22:32,31171) nginx: worker process
(gitlab-www,64656,18048,00:00:00/345-03:22:32,31172) nginx: worker process
(gitlab-www,59784,3752,00:03:46/345-03:22:32,31173) nginx: cache manager process
(gitlab-prometheus,719468,15732,1-17:46:50/345-03:22:32,31177) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14900,1-17:11:07/345-03:22:31,31184) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201748,00:26:01/345-03:22:31,31199) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(git,2957868,88984,1-02:05:18/345-03:22:31,31200) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093212,102816,1-01:33:15/345-03:22:31,31202) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(gitlab-psql,8294864,278468,00:21:08/345-03:22:31,31206) postgres: checkpointer   
(gitlab-psql,8294660,65740,00:08:59/345-03:22:31,31207) postgres: background writer   
(gitlab-psql,8294660,21464,00:10:39/345-03:22:31,31208) postgres: walwriter   
(gitlab-psql,8295360,8044,00:25:54/345-03:22:31,31209) postgres: autovacuum launcher   
(gitlab-psql,35788,5624,05:36:19/345-03:22:31,31210) postgres: stats collector   
(gitlab-psql,8295200,6708,00:00:33/345-03:22:31,31211) postgres: logical replication launcher   
(gitlab-prometheus,3122468,170828,3-17:11:14/345-03:22:30,31213) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(git,1458876,837024,05:00:11/345-03:22:29,31231) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15332,16-16:47:58/345-03:22:29,31236) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,18516,13:32:55/345-03:22:29,31291) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1957492,20484,01:08:00/345-03:22:28,31338) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20964,00:18:04/345-03:22:24,31352) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4787872,1149380,47-21:56:28/345-03:22:23,31357) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332760,75052,2-05:48:54/345-03:22:22,31361) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309804,80576,1-06:18:45/345-03:22:10,31380) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306184,33656,00:42:11/345-03:21:23,31627) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306972,46084,00:00:00/345-03:21:22,31634) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-02-15 18:47

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912f2635fdf

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8280,00:02:57/60-07:03:19,1) /sbin/init
(root,0,0,00:00:05/60-07:03:19,2) [kthreadd]
(root,0,0,00:00:00/60-07:03:19,4) [kworker/0:0H]
(root,0,0,00:00:00/60-07:03:19,6) [mm_percpu_wq]
(root,0,0,00:00:42/60-07:03:19,7) [ksoftirqd/0]
(root,0,0,01:52:00/60-07:03:19,8) [rcu_sched]
(root,0,0,00:00:00/60-07:03:19,9) [rcu_bh]
(root,0,0,00:00:02/60-07:03:19,10) [migration/0]
(root,0,0,00:00:19/60-07:03:19,11) [watchdog/0]
(root,0,0,00:00:00/60-07:03:19,12) [cpuhp/0]
(root,0,0,00:00:00/60-07:03:19,13) [cpuhp/1]
(root,0,0,00:00:18/60-07:03:19,14) [watchdog/1]
(root,0,0,00:00:01/60-07:03:19,15) [migration/1]
(root,0,0,00:00:22/60-07:03:19,16) [ksoftirqd/1]
(root,0,0,00:00:00/60-07:03:19,18) [kworker/1:0H]
(root,0,0,00:00:00/60-07:03:19,19) [cpuhp/2]
(root,0,0,00:00:19/60-07:03:19,20) [watchdog/2]
(root,0,0,00:00:01/60-07:03:19,21) [migration/2]
(root,0,0,00:00:16/60-07:03:19,22) [ksoftirqd/2]
(root,0,0,00:00:00/60-07:03:19,24) [kworker/2:0H]
(root,0,0,00:00:00/60-07:03:19,25) [cpuhp/3]
(root,0,0,00:00:18/60-07:03:19,26) [watchdog/3]
(root,0,0,00:00:01/60-07:03:19,27) [migration/3]
(root,0,0,00:00:12/60-07:03:19,28) [ksoftirqd/3]
(root,0,0,00:00:00/60-07:03:19,30) [kworker/3:0H]
(root,0,0,00:00:00/60-07:03:19,31) [cpuhp/4]
(root,0,0,00:00:19/60-07:03:19,32) [watchdog/4]
(root,0,0,00:00:01/60-07:03:19,33) [migration/4]
(root,0,0,00:00:35/60-07:03:19,34) [ksoftirqd/4]
(root,0,0,00:00:00/60-07:03:19,36) [kworker/4:0H]
(root,0,0,00:00:00/60-07:03:19,37) [cpuhp/5]
(root,0,0,00:00:19/60-07:03:19,38) [watchdog/5]
(root,0,0,00:00:01/60-07:03:19,39) [migration/5]
(root,0,0,00:00:24/60-07:03:19,40) [ksoftirqd/5]
(root,0,0,00:00:00/60-07:03:19,42) [kworker/5:0H]
(root,0,0,00:00:00/60-07:03:19,43) [cpuhp/6]
(root,0,0,00:00:18/60-07:03:19,44) [watchdog/6]
(root,0,0,00:00:02/60-07:03:19,45) [migration/6]
(root,0,0,00:00:12/60-07:03:19,46) [ksoftirqd/6]
(root,0,0,00:00:00/60-07:03:19,48) [kworker/6:0H]
(root,0,0,00:00:00/60-07:03:19,49) [cpuhp/7]
(root,0,0,00:00:17/60-07:03:19,50) [watchdog/7]
(root,0,0,00:00:02/60-07:03:19,51) [migration/7]
(root,0,0,00:00:12/60-07:03:19,52) [ksoftirqd/7]
(root,0,0,00:00:00/60-07:03:19,54) [kworker/7:0H]
(root,0,0,00:00:00/60-07:03:19,55) [kdevtmpfs]
(root,0,0,00:00:00/60-07:03:19,56) [netns]
(root,0,0,00:00:00/60-07:03:19,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/60-07:03:19,58) [kauditd]
(root,0,0,00:00:08/60-07:03:19,62) [khungtaskd]
(root,0,0,00:00:00/60-07:03:19,63) [oom_reaper]
(root,0,0,00:00:00/60-07:03:19,64) [writeback]
(root,0,0,00:00:00/60-07:03:19,65) [kcompactd0]
(root,0,0,00:00:00/60-07:03:19,66) [ksmd]
(root,0,0,00:00:44/60-07:03:19,67) [khugepaged]
(root,0,0,00:00:00/60-07:03:19,68) [crypto]
(root,0,0,00:00:00/60-07:03:19,69) [kintegrityd]
(root,0,0,00:00:00/60-07:03:19,70) [kblockd]
(root,0,0,00:00:00/60-07:03:19,71) [ata_sff]
(root,0,0,00:00:00/60-07:03:19,72) [md]
(root,0,0,00:00:00/60-07:03:19,73) [edac-poller]
(root,0,0,00:00:00/60-07:03:19,74) [devfreq_wq]
(root,0,0,00:00:00/60-07:03:19,75) [watchdogd]
(root,0,0,00:08:59/60-07:03:19,79) [kswapd0]
(root,0,0,00:00:00/60-07:03:19,80) [kworker/u17:0]
(root,0,0,00:00:00/60-07:03:19,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/60-07:03:19,123) [kthrotld]
(root,0,0,00:00:00/60-07:03:19,124) [acpi_thermal_pm]
(root,0,0,00:00:00/60-07:03:19,130) [scsi_eh_0]
(root,0,0,00:00:00/60-07:03:19,131) [scsi_tmf_0]
(root,0,0,00:00:00/60-07:03:19,132) [scsi_eh_1]
(root,0,0,00:00:00/60-07:03:19,133) [scsi_tmf_1]
(root,0,0,00:00:00/60-07:03:18,139) [ipv6_addrconf]
(root,0,0,00:00:00/60-07:03:18,148) [kstrp]
(root,0,0,00:00:00/60-07:03:18,166) [charger_manager]
(root,0,0,00:00:00/60-07:03:18,223) [scsi_eh_2]
(root,0,0,00:00:00/60-07:03:18,224) [scsi_tmf_2]
(root,0,0,00:00:20/60-07:03:17,267) [kworker/7:1H]
(root,0,0,00:03:06/60-07:03:13,268) [kworker/4:1H]
(root,0,0,00:00:05/60-07:03:13,275) [kworker/1:1H]
(root,0,0,00:00:04/60-07:03:12,335) [kworker/2:1H]
(root,0,0,00:00:00/60-07:03:11,342) [raid5wq]
(root,0,0,00:06:26/60-07:03:11,392) [jbd2/sda1-8]
(root,0,0,00:00:00/60-07:03:11,393) [ext4-rsv-conver]
(root,0,0,00:00:03/60-07:03:11,395) [kworker/3:1H]
(root,0,0,00:00:19/60-07:03:11,398) [kworker/5:1H]
(root,0,0,00:00:24/60-07:03:11,431) [kworker/6:1H]
(root,0,0,00:00:10/60-07:03:11,464) [kworker/0:1H]
(root,155188,52948,00:07:50/60-07:03:10,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/60-07:03:10,476) [iscsi_eh]
(root,0,0,00:00:00/60-07:03:10,485) [ib-comp-wq]
(root,0,0,00:00:00/60-07:03:10,486) [ib_mcast]
(root,0,0,00:00:00/60-07:03:10,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/60-07:03:10,494) [rdma_cm]
(root,97708,1628,00:00:00/60-07:03:10,498) /sbin/lvmetad -f
(root,43436,3936,00:00:26/60-07:03:10,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2772,00:00:14/60-07:03:10,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:00/60-07:03:08,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3428,00:07:45/60-07:03:05,1244) /usr/sbin/irqbalance --foreground
(root,309400,2176,00:01:42/60-07:03:05,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4592,00:02:40/60-07:03:05,1251) /usr/sbin/rsyslogd -n
(clamav,306820,29760,00:01:02/60-07:03:05,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4072,00:06:19/60-07:03:05,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2808,00:00:11/60-07:03:05,1289) /usr/sbin/cron -f
(root,286252,6384,00:03:22/60-07:03:05,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5564,00:00:27/60-07:03:05,1297) /lib/systemd/systemd-logind
(daemon,28332,2076,00:00:00/60-07:03:05,1300) /usr/sbin/atd -f
(root,169100,13472,00:00:00/60-07:03:05,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,4628,848,00:00:00/60-07:03:05,1317) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,612300,14772,00:01:01/60-07:03:05,1318) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,82768,3908,00:01:22/60-07:03:05,1319) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1672,00:00:39/60-07:03:05,1325) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,185940,16140,00:00:00/60-07:03:05,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5940,00:03:28/60-07:03:05,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,01:08:13/60-07:03:05,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:00:48/60-07:03:05,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2712,00:00:00/60-07:03:05,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1944,00:00:00/60-07:03:05,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143788,6476,00:00:13/60-07:03:05,1379) nginx: worker process
(www-data,143788,5468,00:00:00/60-07:03:05,1380) nginx: worker process
(www-data,143788,5460,00:00:00/60-07:03:05,1381) nginx: worker process
(www-data,143788,5472,00:00:00/60-07:03:05,1382) nginx: worker process
(www-data,143788,5588,00:00:00/60-07:03:05,1383) nginx: worker process
(www-data,143788,5588,00:00:00/60-07:03:05,1384) nginx: worker process
(www-data,143788,5588,00:00:00/60-07:03:05,1386) nginx: worker process
(www-data,143788,5588,00:00:00/60-07:03:05,1388) nginx: worker process
(root,14888,1756,00:00:00/60-07:03:05,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5972,00:02:10/60-07:03:05,1404) /usr/sbin/sshd -D
(root,4548,1332,00:01:24/60-07:03:04,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:00/60-07:03:04,1498) runsv redis-exporter
(root,4396,712,00:00:00/60-07:03:04,1500) runsv node-exporter
(root,4396,820,00:00:00/60-07:03:04,1501) runsv prometheus
(root,4396,824,00:00:00/60-07:03:04,1502) runsv sidekiq
(root,4396,720,00:00:00/60-07:03:04,1506) runsv gitlab-exporter
(root,4396,1228,00:00:01/60-07:03:04,1507) runsv alertmanager
(root,4396,856,00:00:00/60-07:03:04,1509) runsv postgresql
(root,4396,744,00:00:00/60-07:03:04,1510) runsv postgres-exporter
(root,4396,788,00:00:00/60-07:03:04,1511) runsv grafana
(root,4396,780,00:00:00/60-07:03:04,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:02/60-07:03:04,1513) runsv logrotate
(root,4396,856,00:00:00/60-07:03:04,1514) runsv puma
(root,4396,744,00:00:00/60-07:03:04,1515) runsv nginx
(root,4396,740,00:00:00/60-07:03:04,1516) runsv gitaly
(root,4396,860,00:00:00/60-07:03:04,1517) runsv redis
(root,4396,760,00:00:00/60-07:03:04,1519) runsv registry
(root,4540,864,00:00:00/60-07:03:04,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:01/60-07:03:04,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:00/60-07:03:04,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,00:10:47/60-07:03:04,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,00:15:18/60-07:03:04,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:00/60-07:03:04,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:00/60-07:03:04,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:00/60-07:03:04,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:00/60-07:03:04,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:00/60-07:03:04,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:00/60-07:03:04,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:02:16/60-07:03:04,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1316,00:01:46/60-07:03:04,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:00:01/60-07:03:04,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1508,00:00:09/60-07:03:04,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1508,00:00:00/60-07:03:04,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/07:34:25,4667) [kworker/0:2]
(root,0,0,00:00:00/04:29:38,6036) [kworker/2:0]
(gitlab-psql,8307128,46544,00:00:00/01:03:18,7603) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306804,51172,00:00:00/01:02:07,7778) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307128,46980,00:00:00/58:10,8401) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311816,55152,00:00:00/52:31,9245) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:37/11-10:14:02,9437) [kworker/1:0]
(gitlab-psql,8313676,57548,00:00:00/49:58,9665) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/46:58,10128) [kworker/u16:1]
(git,1592536,895136,00:00:23/03:57:35,11076) puma: cluster worker 6: 31231 [gitlab-puma-worker]
(git,1598680,885248,00:00:23/03:56:36,11298) puma: cluster worker 2: 31231 [gitlab-puma-worker]
(git,1585368,877672,00:00:22/03:55:36,11467) puma: cluster worker 3: 31231 [gitlab-puma-worker]
(git,1586392,878256,00:00:20/03:54:36,11637) puma: cluster worker 5: 31231 [gitlab-puma-worker]
(git,1586392,882892,00:00:21/03:53:36,11809) puma: cluster worker 7: 31231 [gitlab-puma-worker]
(gitlab-psql,8307128,46348,00:00:00/35:37,11932) postgres: gitlab gitlabhq_production [local] idle
(git,1671384,969568,00:00:21/03:52:35,11976) puma: cluster worker 1: 31231 [gitlab-puma-worker]
(git,1592536,890484,00:00:24/03:51:36,12139) puma: cluster worker 4: 31231 [gitlab-puma-worker]
(git,1579224,871832,00:00:22/03:50:36,12311) puma: cluster worker 0: 31231 [gitlab-puma-worker]
(root,0,0,00:00:01/06:51:00,12547) [kworker/5:1]
(gitlab-psql,8307104,47628,00:00:00/29:20,12981) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307340,51132,00:00:00/27:51,13192) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:34/16-15:37:13,13425) [kworker/7:2]
(gitlab-psql,8307096,48800,00:00:00/23:22,13853) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306272,45612,00:00:00/16:14,15011) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306920,44048,00:00:00/16:13,15016) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/14:47,15246) [kworker/3:0]
(root,0,0,00:00:00/14:45,15278) [kworker/1:1]
(root,4628,780,00:00:00/10:20,16020) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307132,46312,00:00:00/08:25,16277) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/08:08,16358) [kworker/u16:2]
(root,0,0,00:00:30/9-07:30:47,17149) [kworker/4:1]
(systemd-resolve,70760,5288,00:00:00/06:26:19,17158) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/02:49,17168) [kworker/u16:0]
(root,4532,788,00:00:00/00:20,17587) sleep 3000
(root,20180,3556,00:00:00/00:00,17730) /bin/bash /usr/bin/check_mk_agent
(root,36700,3056,00:00:00/00:00,17748) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1156,00:00:00/00:00,17749) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:06:26/36-07:35:32,20077) [kworker/6:0]
(root,0,0,00:00:00/03:02:16,20760) [kworker/4:0]
(root,0,0,00:00:00/06:07:46,21764) [kworker/7:0]
(root,0,0,00:00:00/05:47:44,25468) [kworker/6:1]
(root,0,0,00:01:20/9-12:33:52,27862) [kworker/0:1]
(root,0,0,00:00:07/2-07:30:05,28646) [kworker/3:1]
(root,0,0,00:00:05/1-15:06:52,30548) [kworker/2:2]
(gitlab-prometheus,1795516,17884,02:01:59/59-16:12:20,31089) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392472,744,00:21:47/59-16:12:19,31101) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2179976,127740,09:37:31/59-16:12:19,31107) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,301832,45432,23:22:06/59-16:12:18,31122) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2111964,36356,08:12:15/59-16:12:17,31128) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917320,40164,00:47:09/59-16:12:17,31141) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6620,00:00:00/59-16:12:16,31164) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,65396,18224,01:46:16/59-16:12:16,31165) nginx: worker process
(gitlab-www,63816,7464,00:00:00/59-16:12:16,31166) nginx: worker process
(gitlab-www,63960,12136,00:00:00/59-16:12:16,31167) nginx: worker process
(gitlab-www,65120,17484,00:00:19/59-16:12:16,31168) nginx: worker process
(gitlab-www,63816,7464,00:00:00/59-16:12:16,31169) nginx: worker process
(gitlab-www,64260,14516,00:00:00/59-16:12:16,31170) nginx: worker process
(gitlab-www,63816,7464,00:00:00/59-16:12:16,31171) nginx: worker process
(gitlab-www,64236,14540,00:00:00/59-16:12:16,31172) nginx: worker process
(gitlab-www,59784,3752,00:00:38/59-16:12:16,31173) nginx: cache manager process
(gitlab-prometheus,719468,14660,07:36:32/59-16:12:16,31177) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14596,07:24:29/59-16:12:15,31184) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201780,00:04:23/59-16:12:15,31199) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(git,2882088,86424,04:49:12/59-16:12:15,31200) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093212,100652,04:47:23/59-16:12:15,31202) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(gitlab-psql,8294864,206516,00:03:50/59-16:12:15,31206) postgres: checkpointer   
(gitlab-psql,8294660,65740,00:01:33/59-16:12:15,31207) postgres: background writer   
(gitlab-psql,8294660,21464,00:01:51/59-16:12:15,31208) postgres: walwriter   
(gitlab-psql,8295360,8044,00:04:28/59-16:12:15,31209) postgres: autovacuum launcher   
(gitlab-psql,35788,5624,00:54:34/59-16:12:15,31210) postgres: stats collector   
(gitlab-psql,8295200,6708,00:00:05/59-16:12:15,31211) postgres: logical replication launcher   
(gitlab-prometheus,3095060,162980,14:29:39/59-16:12:14,31213) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(git,1458876,839040,00:50:03/59-16:12:13,31231) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15380,2-18:21:07/59-16:12:13,31236) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,17628,02:25:34/59-16:12:13,31291) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1805676,19244,00:12:04/59-16:12:12,31338) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20968,00:03:11/59-16:12:08,31352) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4628124,1134048,7-16:57:27/59-16:12:07,31357) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332628,70684,08:49:40/59-16:12:06,31361) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309804,74584,18:03:32/59-16:11:54,31380) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306216,33624,00:06:40/59-16:11:07,31627) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306972,46084,00:00:00/59-16:11:06,31634) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/05:07:44,32273) [kworker/5:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-05-06 07:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912c4eb7c74

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8032,00:02:55/59-07:39:33,1) /sbin/init
(root,0,0,00:00:05/59-07:39:33,2) [kthreadd]
(root,0,0,00:00:00/59-07:39:33,4) [kworker/0:0H]
(root,0,0,00:00:00/59-07:39:33,6) [mm_percpu_wq]
(root,0,0,00:00:41/59-07:39:33,7) [ksoftirqd/0]
(root,0,0,01:50:12/59-07:39:33,8) [rcu_sched]
(root,0,0,00:00:00/59-07:39:33,9) [rcu_bh]
(root,0,0,00:00:01/59-07:39:33,10) [migration/0]
(root,0,0,00:00:19/59-07:39:33,11) [watchdog/0]
(root,0,0,00:00:00/59-07:39:33,12) [cpuhp/0]
(root,0,0,00:00:00/59-07:39:33,13) [cpuhp/1]
(root,0,0,00:00:18/59-07:39:33,14) [watchdog/1]
(root,0,0,00:00:01/59-07:39:33,15) [migration/1]
(root,0,0,00:00:22/59-07:39:33,16) [ksoftirqd/1]
(root,0,0,00:00:00/59-07:39:33,18) [kworker/1:0H]
(root,0,0,00:00:00/59-07:39:33,19) [cpuhp/2]
(root,0,0,00:00:19/59-07:39:33,20) [watchdog/2]
(root,0,0,00:00:01/59-07:39:33,21) [migration/2]
(root,0,0,00:00:16/59-07:39:33,22) [ksoftirqd/2]
(root,0,0,00:00:00/59-07:39:33,24) [kworker/2:0H]
(root,0,0,00:00:00/59-07:39:33,25) [cpuhp/3]
(root,0,0,00:00:17/59-07:39:33,26) [watchdog/3]
(root,0,0,00:00:01/59-07:39:33,27) [migration/3]
(root,0,0,00:00:12/59-07:39:33,28) [ksoftirqd/3]
(root,0,0,00:00:00/59-07:39:33,30) [kworker/3:0H]
(root,0,0,00:00:00/59-07:39:33,31) [cpuhp/4]
(root,0,0,00:00:19/59-07:39:33,32) [watchdog/4]
(root,0,0,00:00:01/59-07:39:33,33) [migration/4]
(root,0,0,00:00:34/59-07:39:33,34) [ksoftirqd/4]
(root,0,0,00:00:00/59-07:39:33,36) [kworker/4:0H]
(root,0,0,00:00:00/59-07:39:33,37) [cpuhp/5]
(root,0,0,00:00:19/59-07:39:33,38) [watchdog/5]
(root,0,0,00:00:01/59-07:39:33,39) [migration/5]
(root,0,0,00:00:24/59-07:39:33,40) [ksoftirqd/5]
(root,0,0,00:00:00/59-07:39:33,42) [kworker/5:0H]
(root,0,0,00:00:00/59-07:39:33,43) [cpuhp/6]
(root,0,0,00:00:18/59-07:39:33,44) [watchdog/6]
(root,0,0,00:00:02/59-07:39:33,45) [migration/6]
(root,0,0,00:00:12/59-07:39:33,46) [ksoftirqd/6]
(root,0,0,00:00:00/59-07:39:33,48) [kworker/6:0H]
(root,0,0,00:00:00/59-07:39:33,49) [cpuhp/7]
(root,0,0,00:00:17/59-07:39:33,50) [watchdog/7]
(root,0,0,00:00:02/59-07:39:33,51) [migration/7]
(root,0,0,00:00:12/59-07:39:33,52) [ksoftirqd/7]
(root,0,0,00:00:00/59-07:39:33,54) [kworker/7:0H]
(root,0,0,00:00:00/59-07:39:33,55) [kdevtmpfs]
(root,0,0,00:00:00/59-07:39:33,56) [netns]
(root,0,0,00:00:00/59-07:39:33,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/59-07:39:33,58) [kauditd]
(root,0,0,00:00:08/59-07:39:33,62) [khungtaskd]
(root,0,0,00:00:00/59-07:39:33,63) [oom_reaper]
(root,0,0,00:00:00/59-07:39:33,64) [writeback]
(root,0,0,00:00:00/59-07:39:33,65) [kcompactd0]
(root,0,0,00:00:00/59-07:39:33,66) [ksmd]
(root,0,0,00:00:43/59-07:39:33,67) [khugepaged]
(root,0,0,00:00:00/59-07:39:33,68) [crypto]
(root,0,0,00:00:00/59-07:39:33,69) [kintegrityd]
(root,0,0,00:00:00/59-07:39:33,70) [kblockd]
(root,0,0,00:00:00/59-07:39:33,71) [ata_sff]
(root,0,0,00:00:00/59-07:39:33,72) [md]
(root,0,0,00:00:00/59-07:39:33,73) [edac-poller]
(root,0,0,00:00:00/59-07:39:33,74) [devfreq_wq]
(root,0,0,00:00:00/59-07:39:33,75) [watchdogd]
(root,0,0,00:08:49/59-07:39:33,79) [kswapd0]
(root,0,0,00:00:00/59-07:39:33,80) [kworker/u17:0]
(root,0,0,00:00:00/59-07:39:33,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/59-07:39:33,123) [kthrotld]
(root,0,0,00:00:00/59-07:39:33,124) [acpi_thermal_pm]
(root,0,0,00:00:00/59-07:39:33,130) [scsi_eh_0]
(root,0,0,00:00:00/59-07:39:33,131) [scsi_tmf_0]
(root,0,0,00:00:00/59-07:39:33,132) [scsi_eh_1]
(root,0,0,00:00:00/59-07:39:33,133) [scsi_tmf_1]
(root,0,0,00:00:00/59-07:39:32,139) [ipv6_addrconf]
(root,0,0,00:00:00/59-07:39:32,148) [kstrp]
(root,0,0,00:00:00/59-07:39:32,166) [charger_manager]
(root,0,0,00:00:00/59-07:39:32,223) [scsi_eh_2]
(root,0,0,00:00:00/59-07:39:32,224) [scsi_tmf_2]
(root,0,0,00:00:20/59-07:39:31,267) [kworker/7:1H]
(root,0,0,00:03:02/59-07:39:27,268) [kworker/4:1H]
(root,0,0,00:00:05/59-07:39:27,275) [kworker/1:1H]
(root,0,0,00:00:03/59-07:39:26,335) [kworker/2:1H]
(root,0,0,00:00:00/59-07:39:25,342) [raid5wq]
(root,0,0,00:06:19/59-07:39:25,392) [jbd2/sda1-8]
(root,0,0,00:00:00/59-07:39:25,393) [ext4-rsv-conver]
(root,0,0,00:00:03/59-07:39:25,395) [kworker/3:1H]
(root,0,0,00:00:19/59-07:39:25,398) [kworker/5:1H]
(root,0,0,00:00:24/59-07:39:25,431) [kworker/6:1H]
(root,0,0,00:00:10/59-07:39:25,464) [kworker/0:1H]
(root,138804,43720,00:07:44/59-07:39:24,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/59-07:39:24,476) [iscsi_eh]
(root,0,0,00:00:00/59-07:39:24,485) [ib-comp-wq]
(root,0,0,00:00:00/59-07:39:24,486) [ib_mcast]
(root,0,0,00:00:00/59-07:39:24,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/59-07:39:24,494) [rdma_cm]
(root,97708,1628,00:00:00/59-07:39:24,498) /sbin/lvmetad -f
(root,43436,3936,00:00:25/59-07:39:24,508) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2772,00:00:14/59-07:39:24,713) /lib/systemd/systemd-timesyncd
(gitlab-psql,8307128,47044,00:00:00/08:43,759) postgres: gitlab gitlabhq_production [local] idle
(root,25992,3444,00:00:00/59-07:39:22,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(gitlab-psql,8304564,36496,00:00:00/06:15,1180) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306260,45416,00:00:00/06:14,1181) postgres: gitlab gitlabhq_production [local] idle
(root,110516,3428,00:07:37/59-07:39:19,1244) /usr/sbin/irqbalance --foreground
(root,309400,2248,00:01:41/59-07:39:19,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4592,00:02:37/59-07:39:19,1251) /usr/sbin/rsyslogd -n
(clamav,306820,29760,00:01:01/59-07:39:19,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,4072,00:06:13/59-07:39:19,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2808,00:00:11/59-07:39:19,1289) /usr/sbin/cron -f
(root,286252,6384,00:03:19/59-07:39:19,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5564,00:00:27/59-07:39:19,1297) /lib/systemd/systemd-logind
(daemon,28332,2076,00:00:00/59-07:39:19,1300) /usr/sbin/atd -f
(root,169100,13472,00:00:00/59-07:39:19,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,4628,848,00:00:00/59-07:39:19,1317) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,612508,19376,00:01:00/59-07:39:19,1318) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,82768,3908,00:01:21/59-07:39:19,1319) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1672,00:00:38/59-07:39:19,1325) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,185940,16140,00:00:00/59-07:39:19,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5940,00:03:25/59-07:39:19,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,01:07:09/59-07:39:19,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:00:47/59-07:39:19,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2712,00:00:00/59-07:39:19,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1944,00:00:00/59-07:39:19,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143788,6476,00:00:13/59-07:39:19,1379) nginx: worker process
(www-data,143788,5468,00:00:00/59-07:39:19,1380) nginx: worker process
(www-data,143788,5460,00:00:00/59-07:39:19,1381) nginx: worker process
(www-data,143788,5472,00:00:00/59-07:39:19,1382) nginx: worker process
(www-data,143788,5588,00:00:00/59-07:39:19,1383) nginx: worker process
(www-data,143788,5588,00:00:00/59-07:39:19,1384) nginx: worker process
(www-data,143788,5588,00:00:00/59-07:39:19,1386) nginx: worker process
(www-data,143788,5588,00:00:00/59-07:39:19,1388) nginx: worker process
(root,14888,1756,00:00:00/59-07:39:19,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5972,00:02:08/59-07:39:19,1404) /usr/sbin/sshd -D
(root,4548,1332,00:01:23/59-07:39:18,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:00/59-07:39:18,1498) runsv redis-exporter
(root,4396,712,00:00:00/59-07:39:18,1500) runsv node-exporter
(root,4396,820,00:00:00/59-07:39:18,1501) runsv prometheus
(root,4396,824,00:00:00/59-07:39:18,1502) runsv sidekiq
(root,4396,720,00:00:00/59-07:39:18,1506) runsv gitlab-exporter
(root,4396,1228,00:00:01/59-07:39:18,1507) runsv alertmanager
(root,4396,856,00:00:00/59-07:39:18,1509) runsv postgresql
(root,4396,744,00:00:00/59-07:39:18,1510) runsv postgres-exporter
(root,4396,788,00:00:00/59-07:39:18,1511) runsv grafana
(root,4396,780,00:00:00/59-07:39:18,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:02/59-07:39:18,1513) runsv logrotate
(root,4396,856,00:00:00/59-07:39:18,1514) runsv puma
(root,4396,744,00:00:00/59-07:39:18,1515) runsv nginx
(root,4396,740,00:00:00/59-07:39:18,1516) runsv gitaly
(root,4396,860,00:00:00/59-07:39:18,1517) runsv redis
(root,4396,760,00:00:00/59-07:39:18,1519) runsv registry
(root,4540,864,00:00:00/59-07:39:18,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:01/59-07:39:18,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:00/59-07:39:18,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,00:10:36/59-07:39:18,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,00:15:03/59-07:39:18,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:00/59-07:39:18,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:00/59-07:39:18,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:00/59-07:39:18,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:00/59-07:39:18,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:00/59-07:39:18,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:00/59-07:39:18,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:02:13/59-07:39:18,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1316,00:01:44/59-07:39:18,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:00:01/59-07:39:18,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1508,00:00:09/59-07:39:18,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1508,00:00:00/59-07:39:18,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/01:44,1930) [kworker/u16:0]
(root,20180,3720,00:00:00/00:00,2292) /bin/bash /usr/bin/check_mk_agent
(root,36700,3052,00:00:00/00:00,2310) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1076,00:00:00/00:00,2311) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(systemd-resolve,70628,5108,00:00:00/02:57:48,5987) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/02:57:48,5992) [kworker/4:2]
(git,1669336,968912,00:00:34/06:04:12,8269) puma: cluster worker 6: 31231 [gitlab-puma-worker]
(root,0,0,00:00:00/06:03:42,8353) [kworker/6:2]
(git,1597656,881236,00:00:34/06:03:13,8463) puma: cluster worker 5: 31231 [gitlab-puma-worker]
(git,1712344,981304,00:00:30/06:02:12,8630) puma: cluster worker 7: 31231 [gitlab-puma-worker]
(git,1619160,917960,00:00:33/06:01:12,8804) puma: cluster worker 1: 31231 [gitlab-puma-worker]
(git,1712344,978948,00:00:32/06:00:13,8976) puma: cluster worker 3: 31231 [gitlab-puma-worker]
(git,1712344,971428,00:00:32/05:59:13,9143) puma: cluster worker 2: 31231 [gitlab-puma-worker]
(git,1597656,893340,00:00:34/05:58:13,9312) puma: cluster worker 4: 31231 [gitlab-puma-worker]
(root,0,0,00:00:34/10-10:50:16,9437) [kworker/1:0]
(git,1642712,944072,00:00:33/05:57:13,9491) puma: cluster worker 0: 31231 [gitlab-puma-worker]
(root,0,0,00:00:38/10-08:10:43,9915) [kworker/5:2]
(root,0,0,00:01:28/15-16:13:27,13425) [kworker/7:2]
(root,0,0,00:00:00/02:04:59,14555) [kworker/2:1]
(root,0,0,00:00:27/8-08:07:01,17149) [kworker/4:1]
(root,0,0,00:00:00/08:11:50,18790) [kworker/0:2]
(root,0,0,00:06:15/35-08:11:46,20077) [kworker/6:0]
(root,0,0,00:00:00/08:06:22,20637) [kworker/5:1]
(root,0,0,00:00:00/01:25:34,20897) [kworker/7:0]
(root,0,0,00:00:00/10:31:03,22135) [kworker/1:2]
(gitlab-psql,8310420,52648,00:00:00/01:00:35,24776) postgres: gitlab gitlabhq_production [local] idle
(root,4628,852,00:00:00/46:37,26939) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8306932,51524,00:00:00/45:08,27199) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/45:05,27209) [kworker/u16:1]
(gitlab-psql,8307068,48072,00:00:00/41:32,27785) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:12/8-13:10:06,27862) [kworker/0:1]
(gitlab-psql,8307272,47272,00:00:00/37:15,28487) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307128,46896,00:00:00/36:55,28523) postgres: gitlab gitlabhq_production [local] idle
(root,4532,764,00:00:00/36:37,28557) sleep 3000
(root,0,0,00:00:04/1-08:06:19,28646) [kworker/3:1]
(root,0,0,00:00:00/07:09:36,29827) [kworker/3:0]
(gitlab-psql,8311108,56916,00:00:00/28:25,29870) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307180,48748,00:00:00/24:30,30477) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:02/15:43:06,30548) [kworker/2:2]
(gitlab-prometheus,1795516,16932,02:00:03/58-16:48:34,31089) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392472,744,00:21:27/58-16:48:33,31101) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2179976,129508,09:27:45/58-16:48:33,31107) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,301832,45444,22:57:54/58-16:48:32,31122) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2111964,39796,08:03:59/58-16:48:31,31128) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917320,39768,00:46:20/58-16:48:31,31141) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6620,00:00:00/58-16:48:30,31164) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,65396,18224,01:44:32/58-16:48:30,31165) nginx: worker process
(gitlab-www,63816,7464,00:00:00/58-16:48:30,31166) nginx: worker process
(gitlab-www,63960,12136,00:00:00/58-16:48:30,31167) nginx: worker process
(gitlab-www,65120,17484,00:00:19/58-16:48:30,31168) nginx: worker process
(gitlab-www,63816,7464,00:00:00/58-16:48:30,31169) nginx: worker process
(gitlab-www,64260,14516,00:00:00/58-16:48:30,31170) nginx: worker process
(gitlab-www,63816,7464,00:00:00/58-16:48:30,31171) nginx: worker process
(gitlab-www,64236,14540,00:00:00/58-16:48:30,31172) nginx: worker process
(gitlab-www,59784,3752,00:00:37/58-16:48:30,31173) nginx: cache manager process
(gitlab-prometheus,719468,13936,07:29:19/58-16:48:30,31177) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,15224,07:17:26/58-16:48:29,31184) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201780,00:04:19/58-16:48:29,31199) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(git,2882088,86424,04:44:38/58-16:48:29,31200) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093212,100652,04:43:02/58-16:48:29,31202) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(gitlab-psql,8294864,206516,00:03:45/58-16:48:29,31206) postgres: checkpointer   
(gitlab-psql,8294660,65740,00:01:31/58-16:48:29,31207) postgres: background writer   
(gitlab-psql,8294660,21464,00:01:49/58-16:48:29,31208) postgres: walwriter   
(gitlab-psql,8295360,8044,00:04:23/58-16:48:29,31209) postgres: autovacuum launcher   
(gitlab-psql,35788,5624,00:53:40/58-16:48:29,31210) postgres: stats collector   
(gitlab-psql,8295200,6708,00:00:05/58-16:48:29,31211) postgres: logical replication launcher   
(gitlab-prometheus,3081108,171112,14:15:07/58-16:48:28,31213) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(git,1458876,839048,00:49:12/58-16:48:27,31231) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15744,2-17:11:40/58-16:48:27,31236) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,17840,02:23:14/58-16:48:27,31291) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1805676,21536,00:11:53/58-16:48:26,31338) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20968,00:03:08/58-16:48:22,31352) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4628124,1156780,7-13:34:39/58-16:48:21,31357) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332492,70684,08:40:33/58-16:48:20,31361) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309804,74584,17:43:40/58-16:48:08,31380) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306216,33624,00:06:33/58-16:47:21,31627) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306972,46084,00:00:00/58-16:47:20,31634) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307128,47168,00:00:00/18:28,31716) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307128,47180,00:00:00/13:20,32531) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/12:46,32585) [kworker/u16:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-05-05 08:13

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9129c7f6f96

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8100,00:01:54/38-00:14:01,1) /sbin/init
(root,0,0,00:00:02/38-00:14:01,2) [kthreadd]
(root,0,0,00:00:00/38-00:14:01,4) [kworker/0:0H]
(root,0,0,00:00:00/38-00:14:01,6) [mm_percpu_wq]
(root,0,0,00:00:28/38-00:14:01,7) [ksoftirqd/0]
(root,0,0,01:10:49/38-00:14:01,8) [rcu_sched]
(root,0,0,00:00:00/38-00:14:01,9) [rcu_bh]
(root,0,0,00:00:01/38-00:14:01,10) [migration/0]
(root,0,0,00:00:12/38-00:14:01,11) [watchdog/0]
(root,0,0,00:00:00/38-00:14:01,12) [cpuhp/0]
(root,0,0,00:00:00/38-00:14:01,13) [cpuhp/1]
(root,0,0,00:00:11/38-00:14:01,14) [watchdog/1]
(root,0,0,00:00:01/38-00:14:01,15) [migration/1]
(root,0,0,00:00:15/38-00:14:01,16) [ksoftirqd/1]
(root,0,0,00:00:00/38-00:14:01,18) [kworker/1:0H]
(root,0,0,00:00:00/38-00:14:01,19) [cpuhp/2]
(root,0,0,00:00:12/38-00:14:01,20) [watchdog/2]
(root,0,0,00:00:01/38-00:14:01,21) [migration/2]
(root,0,0,00:00:10/38-00:14:01,22) [ksoftirqd/2]
(root,0,0,00:00:00/38-00:14:01,24) [kworker/2:0H]
(root,0,0,00:00:00/38-00:14:01,25) [cpuhp/3]
(root,0,0,00:00:11/38-00:14:01,26) [watchdog/3]
(root,0,0,00:00:00/38-00:14:01,27) [migration/3]
(root,0,0,00:00:08/38-00:14:01,28) [ksoftirqd/3]
(root,0,0,00:00:00/38-00:14:01,30) [kworker/3:0H]
(root,0,0,00:00:00/38-00:14:01,31) [cpuhp/4]
(root,0,0,00:00:12/38-00:14:01,32) [watchdog/4]
(root,0,0,00:00:00/38-00:14:01,33) [migration/4]
(root,0,0,00:00:21/38-00:14:01,34) [ksoftirqd/4]
(root,0,0,00:00:00/38-00:14:01,36) [kworker/4:0H]
(root,0,0,00:00:00/38-00:14:01,37) [cpuhp/5]
(root,0,0,00:00:12/38-00:14:01,38) [watchdog/5]
(root,0,0,00:00:00/38-00:14:01,39) [migration/5]
(root,0,0,00:00:15/38-00:14:01,40) [ksoftirqd/5]
(root,0,0,00:00:00/38-00:14:01,42) [kworker/5:0H]
(root,0,0,00:00:00/38-00:14:01,43) [cpuhp/6]
(root,0,0,00:00:12/38-00:14:01,44) [watchdog/6]
(root,0,0,00:00:01/38-00:14:01,45) [migration/6]
(root,0,0,00:00:07/38-00:14:01,46) [ksoftirqd/6]
(root,0,0,00:00:00/38-00:14:01,48) [kworker/6:0H]
(root,0,0,00:00:00/38-00:14:01,49) [cpuhp/7]
(root,0,0,00:00:11/38-00:14:01,50) [watchdog/7]
(root,0,0,00:00:01/38-00:14:01,51) [migration/7]
(root,0,0,00:00:07/38-00:14:01,52) [ksoftirqd/7]
(root,0,0,00:00:00/38-00:14:01,54) [kworker/7:0H]
(root,0,0,00:00:00/38-00:14:01,55) [kdevtmpfs]
(root,0,0,00:00:00/38-00:14:01,56) [netns]
(root,0,0,00:00:00/38-00:14:01,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/38-00:14:01,58) [kauditd]
(root,0,0,00:00:05/38-00:14:01,62) [khungtaskd]
(root,0,0,00:00:00/38-00:14:01,63) [oom_reaper]
(root,0,0,00:00:00/38-00:14:01,64) [writeback]
(root,0,0,00:00:00/38-00:14:01,65) [kcompactd0]
(root,0,0,00:00:00/38-00:14:01,66) [ksmd]
(root,0,0,00:00:28/38-00:14:01,67) [khugepaged]
(root,0,0,00:00:00/38-00:14:01,68) [crypto]
(root,0,0,00:00:00/38-00:14:01,69) [kintegrityd]
(root,0,0,00:00:00/38-00:14:01,70) [kblockd]
(root,0,0,00:00:00/38-00:14:01,71) [ata_sff]
(root,0,0,00:00:00/38-00:14:01,72) [md]
(root,0,0,00:00:00/38-00:14:01,73) [edac-poller]
(root,0,0,00:00:00/38-00:14:01,74) [devfreq_wq]
(root,0,0,00:00:00/38-00:14:01,75) [watchdogd]
(root,0,0,00:05:33/38-00:14:01,79) [kswapd0]
(root,0,0,00:00:00/38-00:14:01,80) [kworker/u17:0]
(root,0,0,00:00:00/38-00:14:01,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/38-00:14:01,123) [kthrotld]
(root,0,0,00:00:00/38-00:14:01,124) [acpi_thermal_pm]
(root,0,0,00:00:00/38-00:14:01,130) [scsi_eh_0]
(root,0,0,00:00:00/38-00:14:01,131) [scsi_tmf_0]
(root,0,0,00:00:00/38-00:14:01,132) [scsi_eh_1]
(root,0,0,00:00:00/38-00:14:01,133) [scsi_tmf_1]
(root,0,0,00:00:00/38-00:14:00,139) [ipv6_addrconf]
(root,0,0,00:00:00/38-00:14:00,148) [kstrp]
(root,0,0,00:00:00/38-00:14:00,166) [charger_manager]
(root,0,0,00:00:00/38-00:14:00,223) [scsi_eh_2]
(root,0,0,00:00:00/38-00:14:00,224) [scsi_tmf_2]
(root,0,0,00:00:13/38-00:13:59,267) [kworker/7:1H]
(root,0,0,00:02:02/38-00:13:55,268) [kworker/4:1H]
(root,0,0,00:00:03/38-00:13:55,275) [kworker/1:1H]
(root,0,0,00:00:02/38-00:13:54,335) [kworker/2:1H]
(root,0,0,00:00:00/38-00:13:53,342) [raid5wq]
(root,0,0,00:04:04/38-00:13:53,392) [jbd2/sda1-8]
(root,0,0,00:00:00/38-00:13:53,393) [ext4-rsv-conver]
(root,0,0,00:00:02/38-00:13:53,395) [kworker/3:1H]
(root,0,0,00:00:12/38-00:13:53,398) [kworker/5:1H]
(root,0,0,00:00:16/38-00:13:53,431) [kworker/6:1H]
(root,0,0,00:00:06/38-00:13:53,464) [kworker/0:1H]
(root,204212,67072,00:05:17/38-00:13:52,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/38-00:13:52,476) [iscsi_eh]
(root,0,0,00:00:00/38-00:13:52,485) [ib-comp-wq]
(root,0,0,00:00:00/38-00:13:52,486) [ib_mcast]
(root,0,0,00:00:00/38-00:13:52,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/38-00:13:52,494) [rdma_cm]
(root,97708,1628,00:00:00/38-00:13:52,498) /sbin/lvmetad -f
(root,43436,3936,00:00:17/38-00:13:52,508) /lib/systemd/systemd-udevd
(root,0,0,00:00:27/8-01:26:54,575) [kworker/4:1]
(systemd-timesync,141928,2804,00:00:09/38-00:13:52,713) /lib/systemd/systemd-timesyncd
(root,25992,3444,00:00:00/38-00:13:50,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3428,00:04:47/38-00:13:47,1244) /usr/sbin/irqbalance --foreground
(root,309120,2240,00:01:03/38-00:13:47,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4596,00:01:48/38-00:13:47,1251) /usr/sbin/rsyslogd -n
(clamav,306788,29740,00:00:38/38-00:13:47,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,3808,00:04:02/38-00:13:47,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2808,00:00:07/38-00:13:47,1289) /usr/sbin/cron -f
(root,286252,6384,00:02:12/38-00:13:47,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5592,00:00:16/38-00:13:47,1297) /lib/systemd/systemd-logind
(daemon,28332,2076,00:00:00/38-00:13:47,1300) /usr/sbin/atd -f
(root,169100,13472,00:00:00/38-00:13:47,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,4628,852,00:00:00/38-00:13:47,1317) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,653424,13740,00:00:41/38-00:13:47,1318) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,82520,3660,00:00:46/38-00:13:47,1319) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1676,00:00:28/38-00:13:47,1325) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,185940,16140,00:00:00/38-00:13:47,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5940,00:02:17/38-00:13:47,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,00:44:04/38-00:13:47,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:00:30/38-00:13:47,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2712,00:00:00/38-00:13:47,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1944,00:00:00/38-00:13:47,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143788,6476,00:00:07/38-00:13:47,1379) nginx: worker process
(www-data,143788,5468,00:00:00/38-00:13:47,1380) nginx: worker process
(www-data,143788,5460,00:00:00/38-00:13:47,1381) nginx: worker process
(www-data,143788,5472,00:00:00/38-00:13:47,1382) nginx: worker process
(www-data,143788,5588,00:00:00/38-00:13:47,1383) nginx: worker process
(www-data,143788,5588,00:00:00/38-00:13:47,1384) nginx: worker process
(www-data,143788,5588,00:00:00/38-00:13:47,1386) nginx: worker process
(www-data,143788,5588,00:00:00/38-00:13:47,1388) nginx: worker process
(root,14888,1756,00:00:00/38-00:13:47,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5972,00:01:27/38-00:13:47,1404) /usr/sbin/sshd -D
(root,4548,1332,00:00:54/38-00:13:46,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,796,00:00:00/38-00:13:46,1498) runsv redis-exporter
(root,4396,712,00:00:00/38-00:13:46,1500) runsv node-exporter
(root,4396,820,00:00:00/38-00:13:46,1501) runsv prometheus
(root,4396,824,00:00:00/38-00:13:46,1502) runsv sidekiq
(root,4396,720,00:00:00/38-00:13:46,1506) runsv gitlab-exporter
(root,4396,1228,00:00:01/38-00:13:46,1507) runsv alertmanager
(root,4396,856,00:00:00/38-00:13:46,1509) runsv postgresql
(root,4396,744,00:00:00/38-00:13:46,1510) runsv postgres-exporter
(root,4396,788,00:00:00/38-00:13:46,1511) runsv grafana
(root,4396,780,00:00:00/38-00:13:46,1512) runsv gitlab-workhorse
(root,4396,1248,00:00:01/38-00:13:46,1513) runsv logrotate
(root,4396,856,00:00:00/38-00:13:46,1514) runsv puma
(root,4396,744,00:00:00/38-00:13:46,1515) runsv nginx
(root,4396,740,00:00:00/38-00:13:46,1516) runsv gitaly
(root,4396,860,00:00:00/38-00:13:46,1517) runsv redis
(root,4396,760,00:00:00/38-00:13:46,1519) runsv registry
(root,4540,864,00:00:00/38-00:13:46,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1540,00:00:00/38-00:13:46,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,804,00:00:00/38-00:13:46,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1312,00:06:49/38-00:13:46,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1408,00:09:41/38-00:13:46,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,728,00:00:00/38-00:13:46,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,812,00:00:00/38-00:13:46,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,796,00:00:00/38-00:13:46,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,752,00:00:00/38-00:13:46,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1332,00:00:00/38-00:13:46,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,812,00:00:00/38-00:13:46,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1428,00:01:25/38-00:13:46,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1316,00:01:07/38-00:13:46,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1464,00:00:00/38-00:13:46,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1508,00:00:06/38-00:13:46,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,1508,00:00:00/38-00:13:46,1558) svlogd -tt /var/log/gitlab/postgresql
(root,0,0,00:00:00/44:47,1608) [kworker/1:0]
(gitlab-psql,8307280,49984,00:00:00/44:34,1707) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/40:44,2276) [kworker/0:1]
(root,0,0,00:00:00/39:44,2440) [kworker/4:0]
(gitlab-psql,8307272,50544,00:00:00/39:26,2522) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:31/9-05:49:49,3162) [kworker/3:0]
(gitlab-psql,8309528,53760,00:00:00/33:32,3448) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307268,47304,00:00:00/30:25,3925) postgres: gitlab gitlabhq_production [local] idle
(root,4628,804,00:00:00/21:50,5228) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8307124,47924,00:00:00/19:53,5533) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307128,46388,00:00:00/17:10,5972) postgres: gitlab gitlabhq_production [local] idle
(root,4532,808,00:00:00/11:49,6837) sleep 3000
(root,0,0,00:00:00/11:45,6842) [kworker/u16:1]
(gitlab-psql,8309760,51520,00:00:00/06:24,7702) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/06:24,7703) [kworker/u16:2]
(gitlab-psql,8306272,43864,00:00:00/05:55,7755) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305208,38216,00:00:00/03:17,8184) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307128,46280,00:00:00/01:16,8493) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/00:36,8563) [kworker/u16:0]
(root,20180,3696,00:00:00/00:00,8737) /bin/bash /usr/bin/check_mk_agent
(root,36700,3056,00:00:00/00:00,8755) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1120,00:00:00/00:00,8756) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/09:22:34,11031) [kworker/5:1]
(root,0,0,00:00:07/2-00:45:08,12497) [kworker/5:0]
(root,0,0,00:00:00/18:43:18,16915) [kworker/7:0]
(systemd-resolve,70628,4864,00:00:00/05:21:23,18246) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/05:21:23,18253) [kworker/6:1]
(root,0,0,00:02:24/14-00:46:14,20077) [kworker/6:0]
(root,0,0,00:00:00/18:23:33,20101) [kworker/3:2]
(root,0,0,00:02:46/19-23:03:06,21249) [kworker/0:0]
(root,0,0,00:00:59/17-05:52:44,21917) [kworker/2:1]
(root,0,0,00:00:11/1-23:44:55,22334) [kworker/7:2]
(root,0,0,00:00:00/1-00:39:56,23902) [kworker/2:2]
(git,1593560,887332,00:00:27/04:46:26,24025) puma: cluster worker 5: 31231 [gitlab-puma-worker]
(git,1642712,934584,00:00:28/04:45:26,24199) puma: cluster worker 0: 31231 [gitlab-puma-worker]
(git,1702104,993996,00:00:27/04:44:26,24369) puma: cluster worker 2: 31231 [gitlab-puma-worker]
(git,1591512,889504,00:00:26/04:43:26,24541) puma: cluster worker 7: 31231 [gitlab-puma-worker]
(git,1638616,928104,00:00:30/04:42:26,24705) puma: cluster worker 4: 31231 [gitlab-puma-worker]
(git,1604824,898684,00:00:29/04:41:26,24872) puma: cluster worker 6: 31231 [gitlab-puma-worker]
(git,1712344,1001892,00:00:28/04:40:26,25042) puma: cluster worker 3: 31231 [gitlab-puma-worker]
(git,1591512,885428,00:00:28/04:39:26,25204) puma: cluster worker 1: 31231 [gitlab-puma-worker]
(root,0,0,00:00:30/9-00:44:38,27812) [kworker/1:1]
(gitlab-psql,8311952,52740,00:00:00/53:41,28713) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307600,56060,00:00:00/50:40,29183) postgres: gitlab gitlabhq_production [local] idle
(gitlab-prometheus,1795516,18288,01:17:35/37-09:23:02,31089) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392472,744,00:14:07/37-09:23:01,31101) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2103684,127128,06:05:24/37-09:23:01,31107) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,301832,45540,13:43:29/37-09:23:00,31122) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2111964,34708,05:08:50/37-09:22:59,31128) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1765776,35488,00:29:23/37-09:22:59,31141) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6620,00:00:00/37-09:22:58,31164) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,65396,18228,01:07:02/37-09:22:58,31165) nginx: worker process
(gitlab-www,63816,7464,00:00:00/37-09:22:58,31166) nginx: worker process
(gitlab-www,63816,7456,00:00:00/37-09:22:58,31167) nginx: worker process
(gitlab-www,64988,17488,00:00:15/37-09:22:58,31168) nginx: worker process
(gitlab-www,63816,7464,00:00:00/37-09:22:58,31169) nginx: worker process
(gitlab-www,64260,14588,00:00:00/37-09:22:58,31170) nginx: worker process
(gitlab-www,63816,7464,00:00:00/37-09:22:58,31171) nginx: worker process
(gitlab-www,63960,12012,00:00:00/37-09:22:58,31172) nginx: worker process
(gitlab-www,59784,3752,00:00:24/37-09:22:58,31173) nginx: cache manager process
(gitlab-prometheus,719468,14652,04:55:29/37-09:22:58,31177) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,16184,04:42:33/37-09:22:57,31184) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201780,00:02:48/37-09:22:57,31199) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(git,2882088,85592,03:06:01/37-09:22:57,31200) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093212,100208,03:05:51/37-09:22:57,31202) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(gitlab-psql,8294864,195268,00:02:33/37-09:22:57,31206) postgres: checkpointer   
(gitlab-psql,8294660,65740,00:00:59/37-09:22:57,31207) postgres: background writer   
(gitlab-psql,8294660,21464,00:01:11/37-09:22:57,31208) postgres: walwriter   
(gitlab-psql,8295360,8044,00:02:49/37-09:22:57,31209) postgres: autovacuum launcher   
(gitlab-psql,35788,5624,00:34:33/37-09:22:57,31210) postgres: stats collector   
(gitlab-psql,8295200,6708,00:00:03/37-09:22:57,31211) postgres: logical replication launcher   
(gitlab-prometheus,3094676,157752,08:56:26/37-09:22:56,31213) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(git,1458876,838748,00:30:55/37-09:22:55,31231) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15324,1-15:43:24/37-09:22:55,31236) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,18452,01:32:26/37-09:22:55,31291) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1805676,18396,00:07:57/37-09:22:54,31338) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20968,00:02:02/37-09:22:50,31352) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4546204,1096732,4-08:44:40/37-09:22:49,31357) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332492,69296,05:13:29/37-09:22:48,31361) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309804,71212,09:44:04/37-09:22:36,31380) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306216,33624,00:03:53/37-09:21:49,31627) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306972,46084,00:00:00/37-09:21:48,31634) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-04-14 00:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde91232a35e87

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225552,8468,00:00:30/8-08:19:02,1) /sbin/init
(root,0,0,00:00:00/8-08:19:02,2) [kthreadd]
(root,0,0,00:00:00/8-08:19:02,4) [kworker/0:0H]
(root,0,0,00:00:00/8-08:19:02,6) [mm_percpu_wq]
(root,0,0,00:00:06/8-08:19:02,7) [ksoftirqd/0]
(root,0,0,00:15:33/8-08:19:02,8) [rcu_sched]
(root,0,0,00:00:00/8-08:19:02,9) [rcu_bh]
(root,0,0,00:00:00/8-08:19:02,10) [migration/0]
(root,0,0,00:00:02/8-08:19:02,11) [watchdog/0]
(root,0,0,00:00:00/8-08:19:02,12) [cpuhp/0]
(root,0,0,00:00:00/8-08:19:02,13) [cpuhp/1]
(root,0,0,00:00:02/8-08:19:02,14) [watchdog/1]
(root,0,0,00:00:00/8-08:19:02,15) [migration/1]
(root,0,0,00:00:04/8-08:19:02,16) [ksoftirqd/1]
(root,0,0,00:00:00/8-08:19:02,18) [kworker/1:0H]
(root,0,0,00:00:00/8-08:19:02,19) [cpuhp/2]
(root,0,0,00:00:02/8-08:19:02,20) [watchdog/2]
(root,0,0,00:00:00/8-08:19:02,21) [migration/2]
(root,0,0,00:00:03/8-08:19:02,22) [ksoftirqd/2]
(root,0,0,00:00:00/8-08:19:02,24) [kworker/2:0H]
(root,0,0,00:00:00/8-08:19:02,25) [cpuhp/3]
(root,0,0,00:00:02/8-08:19:02,26) [watchdog/3]
(root,0,0,00:00:00/8-08:19:02,27) [migration/3]
(root,0,0,00:00:02/8-08:19:02,28) [ksoftirqd/3]
(root,0,0,00:00:00/8-08:19:02,30) [kworker/3:0H]
(root,0,0,00:00:00/8-08:19:02,31) [cpuhp/4]
(root,0,0,00:00:02/8-08:19:02,32) [watchdog/4]
(root,0,0,00:00:00/8-08:19:02,33) [migration/4]
(root,0,0,00:00:04/8-08:19:02,34) [ksoftirqd/4]
(root,0,0,00:00:00/8-08:19:02,36) [kworker/4:0H]
(root,0,0,00:00:00/8-08:19:02,37) [cpuhp/5]
(root,0,0,00:00:02/8-08:19:02,38) [watchdog/5]
(root,0,0,00:00:00/8-08:19:02,39) [migration/5]
(root,0,0,00:00:04/8-08:19:02,40) [ksoftirqd/5]
(root,0,0,00:00:00/8-08:19:02,42) [kworker/5:0H]
(root,0,0,00:00:00/8-08:19:02,43) [cpuhp/6]
(root,0,0,00:00:02/8-08:19:02,44) [watchdog/6]
(root,0,0,00:00:00/8-08:19:02,45) [migration/6]
(root,0,0,00:00:02/8-08:19:02,46) [ksoftirqd/6]
(root,0,0,00:00:00/8-08:19:02,48) [kworker/6:0H]
(root,0,0,00:00:00/8-08:19:02,49) [cpuhp/7]
(root,0,0,00:00:02/8-08:19:02,50) [watchdog/7]
(root,0,0,00:00:00/8-08:19:02,51) [migration/7]
(root,0,0,00:00:02/8-08:19:02,52) [ksoftirqd/7]
(root,0,0,00:00:00/8-08:19:02,54) [kworker/7:0H]
(root,0,0,00:00:00/8-08:19:02,55) [kdevtmpfs]
(root,0,0,00:00:00/8-08:19:02,56) [netns]
(root,0,0,00:00:00/8-08:19:02,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/8-08:19:02,58) [kauditd]
(root,0,0,00:00:01/8-08:19:02,62) [khungtaskd]
(root,0,0,00:00:00/8-08:19:02,63) [oom_reaper]
(root,0,0,00:00:00/8-08:19:02,64) [writeback]
(root,0,0,00:00:00/8-08:19:02,65) [kcompactd0]
(root,0,0,00:00:00/8-08:19:02,66) [ksmd]
(root,0,0,00:00:05/8-08:19:02,67) [khugepaged]
(root,0,0,00:00:00/8-08:19:02,68) [crypto]
(root,0,0,00:00:00/8-08:19:02,69) [kintegrityd]
(root,0,0,00:00:00/8-08:19:02,70) [kblockd]
(root,0,0,00:00:00/8-08:19:02,71) [ata_sff]
(root,0,0,00:00:00/8-08:19:02,72) [md]
(root,0,0,00:00:00/8-08:19:02,73) [edac-poller]
(root,0,0,00:00:00/8-08:19:02,74) [devfreq_wq]
(root,0,0,00:00:00/8-08:19:02,75) [watchdogd]
(root,0,0,00:00:58/8-08:19:02,79) [kswapd0]
(root,0,0,00:00:00/8-08:19:02,80) [kworker/u17:0]
(root,0,0,00:00:00/8-08:19:02,81) [ecryptfs-kthrea]
(root,0,0,00:00:00/8-08:19:02,123) [kthrotld]
(root,0,0,00:00:00/8-08:19:02,124) [acpi_thermal_pm]
(root,0,0,00:00:28/8-08:19:02,125) [kworker/2:1]
(root,0,0,00:00:28/8-08:19:02,126) [kworker/4:1]
(root,0,0,00:00:45/8-08:19:02,127) [kworker/7:1]
(root,0,0,00:00:00/8-08:19:02,130) [scsi_eh_0]
(root,0,0,00:00:00/8-08:19:02,131) [scsi_tmf_0]
(root,0,0,00:00:00/8-08:19:02,132) [scsi_eh_1]
(root,0,0,00:00:00/8-08:19:02,133) [scsi_tmf_1]
(root,0,0,00:00:00/8-08:19:01,139) [ipv6_addrconf]
(root,0,0,00:00:00/8-08:19:01,148) [kstrp]
(root,0,0,00:00:00/8-08:19:01,166) [charger_manager]
(root,0,0,00:00:00/8-08:19:01,223) [scsi_eh_2]
(root,0,0,00:00:00/8-08:19:01,224) [scsi_tmf_2]
(root,0,0,00:00:02/8-08:19:00,267) [kworker/7:1H]
(root,0,0,00:00:28/8-08:18:56,268) [kworker/4:1H]
(root,0,0,00:00:00/8-08:18:56,275) [kworker/1:1H]
(root,0,0,00:00:00/8-08:18:55,335) [kworker/2:1H]
(root,0,0,00:00:00/8-08:18:54,342) [raid5wq]
(root,0,0,00:00:53/8-08:18:54,392) [jbd2/sda1-8]
(root,0,0,00:00:00/8-08:18:54,393) [ext4-rsv-conver]
(root,0,0,00:00:00/8-08:18:54,395) [kworker/3:1H]
(root,0,0,00:00:02/8-08:18:54,398) [kworker/5:1H]
(root,0,0,00:00:00/05:44,428) [kworker/7:0]
(root,0,0,00:00:03/8-08:18:54,431) [kworker/6:1H]
(root,0,0,00:00:01/8-08:18:54,464) [kworker/0:1H]
(root,216608,89836,00:01:21/8-08:18:53,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/8-08:18:53,476) [iscsi_eh]
(root,0,0,00:00:00/8-08:18:53,485) [ib-comp-wq]
(root,0,0,00:00:00/8-08:18:53,486) [ib_mcast]
(root,0,0,00:00:00/8-08:18:53,487) [ib_nl_sa_wq]
(root,0,0,00:00:00/8-08:18:53,494) [rdma_cm]
(root,97708,1644,00:00:00/8-08:18:53,498) /sbin/lvmetad -f
(root,43436,4020,00:00:04/8-08:18:53,508) /lib/systemd/systemd-udevd
(root,0,0,00:00:10/3-01:40:40,703) [kworker/3:0]
(systemd-timesync,141928,2940,00:00:02/8-08:18:53,713) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:28/8-08:18:51,925) [kworker/1:2]
(root,25992,3444,00:00:00/8-08:18:51,978) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,110516,3428,00:01:01/8-08:18:48,1244) /usr/sbin/irqbalance --foreground
(root,235532,2040,00:00:13/8-08:18:48,1247) /usr/bin/lxcfs /var/lib/lxcfs/
(syslog,263036,4600,00:00:29/8-08:18:48,1251) /usr/sbin/rsyslogd -n
(clamav,306772,29724,00:00:08/8-08:18:48,1257) /usr/bin/freshclam -d --foreground=true
(messagebus,50500,3832,00:01:05/8-08:18:48,1260) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,30028,2856,00:00:01/8-08:18:48,1289) /usr/sbin/cron -f
(root,286252,6428,00:00:32/8-08:18:48,1292) /usr/lib/accountsservice/accounts-daemon
(root,70648,5712,00:00:03/8-08:18:48,1297) /lib/systemd/systemd-logind
(daemon,28332,2084,00:00:00/8-08:18:48,1300) /usr/sbin/atd -f
(root,169100,13580,00:00:00/8-08:18:48,1305) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(root,4628,856,00:00:00/8-08:18:48,1317) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,569992,60304,00:00:11/8-08:18:48,1318) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,81900,3280,00:00:07/8-08:18:48,1319) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1680,00:00:07/8-08:18:48,1325) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,185940,16240,00:00:00/8-08:18:48,1354) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,288880,5984,00:00:37/8-08:18:48,1359) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,216,00:09:38/8-08:18:48,1360) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,24188,2436,00:00:06/8-08:18:48,1369) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,141112,2724,00:00:00/8-08:18:48,1377) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(root,14664,1984,00:00:00/8-08:18:48,1378) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(www-data,143788,5548,00:00:01/8-08:18:48,1379) nginx: worker process
(www-data,143788,5480,00:00:00/8-08:18:48,1380) nginx: worker process
(www-data,143788,5472,00:00:00/8-08:18:48,1381) nginx: worker process
(www-data,143788,5484,00:00:00/8-08:18:48,1382) nginx: worker process
(www-data,143788,5600,00:00:00/8-08:18:48,1383) nginx: worker process
(www-data,143788,5600,00:00:00/8-08:18:48,1384) nginx: worker process
(www-data,143788,5600,00:00:00/8-08:18:48,1386) nginx: worker process
(www-data,143788,5600,00:00:00/8-08:18:48,1388) nginx: worker process
(root,14888,1756,00:00:00/8-08:18:48,1401) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,72296,5992,00:00:22/8-08:18:48,1404) /usr/sbin/sshd -D
(root,0,0,00:00:00/00:27,1419) [kworker/u16:1]
(root,4548,1332,00:00:11/8-08:18:47,1488) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,800,00:00:00/8-08:18:47,1498) runsv redis-exporter
(root,4396,716,00:00:00/8-08:18:47,1500) runsv node-exporter
(root,4396,824,00:00:00/8-08:18:47,1501) runsv prometheus
(root,4396,828,00:00:00/8-08:18:47,1502) runsv sidekiq
(root,4396,724,00:00:00/8-08:18:47,1506) runsv gitlab-exporter
(root,4396,1232,00:00:00/8-08:18:47,1507) runsv alertmanager
(root,4396,860,00:00:00/8-08:18:47,1509) runsv postgresql
(root,4396,748,00:00:00/8-08:18:47,1510) runsv postgres-exporter
(root,4396,792,00:00:00/8-08:18:47,1511) runsv grafana
(root,4396,784,00:00:00/8-08:18:47,1512) runsv gitlab-workhorse
(root,4396,1252,00:00:00/8-08:18:47,1513) runsv logrotate
(root,4396,860,00:00:00/8-08:18:47,1514) runsv puma
(root,4396,748,00:00:00/8-08:18:47,1515) runsv nginx
(root,4396,744,00:00:00/8-08:18:47,1516) runsv gitaly
(root,4396,864,00:00:00/8-08:18:47,1517) runsv redis
(root,4396,764,00:00:00/8-08:18:47,1519) runsv registry
(root,4540,868,00:00:00/8-08:18:47,1521) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1544,00:00:00/8-08:18:47,1524) svlogd -tt /var/log/gitlab/prometheus
(root,4540,808,00:00:00/8-08:18:47,1525) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1316,00:01:31/8-08:18:47,1529) svlogd /var/log/gitlab/sidekiq
(root,4540,1412,00:01:59/8-08:18:47,1530) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,732,00:00:00/8-08:18:47,1533) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,816,00:00:00/8-08:18:47,1535) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,800,00:00:00/8-08:18:47,1538) svlogd -tt /var/log/gitlab/grafana
(root,4540,756,00:00:00/8-08:18:47,1539) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1336,00:00:00/8-08:18:47,1540) svlogd -tt /var/log/gitlab/nginx
(root,4540,816,00:00:00/8-08:18:47,1546) svlogd -tt /var/log/gitlab/puma
(root,4540,1432,00:00:18/8-08:18:47,1547) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1320,00:00:15/8-08:18:47,1548) svlogd /var/log/gitlab/gitaly
(root,4540,1468,00:00:00/8-08:18:47,1549) svlogd -tt /var/log/gitlab/registry
(root,4540,1512,00:00:01/8-08:18:47,1552) svlogd -tt /var/log/gitlab/redis
(root,4540,740,00:00:00/8-08:18:47,1558) svlogd -tt /var/log/gitlab/postgresql
(root,20180,3468,00:00:00/00:00,1594) /bin/bash /usr/bin/check_mk_agent
(root,36700,3132,00:00:00/00:00,1612) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1108,00:00:00/00:00,1613) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/09:16:58,3284) [kworker/4:0]
(systemd-resolve,70628,5188,00:00:00/06:13:38,5736) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/06:13:38,5749) [kworker/3:2]
(root,0,0,00:00:00/02:35:48,8071) [kworker/2:0]
(root,0,0,00:01:05/6-13:40:54,8932) [kworker/6:1]
(root,0,0,00:00:00/08:51:15,11132) [kworker/1:0]
(root,0,0,00:00:00/07:56:54,21306) [kworker/5:1]
(root,0,0,00:00:00/07:56:54,21307) [kworker/6:2]
(gitlab-psql,8307272,49920,00:00:00/01:03:56,23228) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/07:40:38,23962) [kworker/0:1]
(gitlab-psql,8307124,47048,00:00:00/51:40,25202) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311744,52796,00:00:00/49:37,25538) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310428,51260,00:00:00/45:00,26285) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307272,46040,00:00:00/39:53,27073) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307272,46328,00:00:00/39:50,27081) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/10:00:38,27102) [kworker/5:0]
(gitlab-psql,8306736,47112,00:00:00/39:05,27214) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:03/09:56:58,28014) [kworker/0:2]
(root,4628,860,00:00:00/27:45,28966) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(git,1597656,891744,00:00:34/07:02:19,30100) puma: cluster worker 5: 31231 [gitlab-puma-worker]
(git,1736920,1014668,00:00:33/07:01:19,30269) puma: cluster worker 6: 31231 [gitlab-puma-worker]
(git,1749208,1018752,00:00:33/07:00:19,30433) puma: cluster worker 2: 31231 [gitlab-puma-worker]
(git,1700056,1000344,00:00:32/06:59:19,30599) puma: cluster worker 1: 31231 [gitlab-puma-worker]
(root,4532,768,00:00:00/17:45,30612) sleep 3000
(gitlab-psql,8306656,47392,00:00:00/17:37,30628) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307256,48868,00:00:00/17:01,30742) postgres: gitlab gitlabhq_production [local] idle
(git,1724632,1011808,00:00:31/06:58:19,30767) puma: cluster worker 7: 31231 [gitlab-puma-worker]
(git,1604824,876936,00:00:28/06:57:19,30936) puma: cluster worker 0: 31231 [gitlab-puma-worker]
(gitlab-prometheus,1795516,16700,00:15:55/7-17:28:03,31089) /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml --cluster.advertise-address=127.0.0.1:9093
(git,1392472,1908,00:02:54/7-17:28:02,31101) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2102340,126588,01:20:30/7-17:28:02,31107) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,301832,45716,02:48:02/7-17:28:01,31122) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,1884624,34400,01:02:07/7-17:28:00,31128) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1765220,33760,00:05:49/7-17:28:00,31141) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(git,1712344,996440,00:00:31/06:56:19,31157) puma: cluster worker 4: 31231 [gitlab-puma-worker]
(root,55184,6640,00:00:00/7-17:27:59,31164) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,64876,16404,00:13:41/7-17:27:59,31165) nginx: worker process
(gitlab-www,63816,7476,00:00:00/7-17:27:59,31166) nginx: worker process
(gitlab-www,63816,7468,00:00:00/7-17:27:59,31167) nginx: worker process
(gitlab-www,64516,15876,00:00:01/7-17:27:59,31168) nginx: worker process
(gitlab-www,63816,7476,00:00:00/7-17:27:59,31169) nginx: worker process
(gitlab-www,64260,11652,00:00:00/7-17:27:59,31170) nginx: worker process
(gitlab-www,63816,7476,00:00:00/7-17:27:59,31171) nginx: worker process
(gitlab-www,63960,9300,00:00:00/7-17:27:59,31172) nginx: worker process
(gitlab-www,59784,3764,00:00:05/7-17:27:59,31173) nginx: cache manager process
(gitlab-prometheus,719468,15272,01:01:08/7-17:27:59,31177) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1564184,14204,00:57:36/7-17:27:58,31184) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201812,00:00:34/7-17:27:58,31199) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(git,2882088,86648,00:38:33/7-17:27:58,31200) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,2958036,99884,00:38:55/7-17:27:58,31202) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 31107 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(gitlab-psql,8294864,149040,00:00:40/7-17:27:58,31206) postgres: checkpointer   
(gitlab-psql,8294660,65740,00:00:12/7-17:27:58,31207) postgres: background writer   
(gitlab-psql,8294660,21464,00:00:16/7-17:27:58,31208) postgres: walwriter   
(gitlab-psql,8295360,8044,00:00:34/7-17:27:58,31209) postgres: autovacuum launcher   
(gitlab-psql,35788,5624,00:07:04/7-17:27:58,31210) postgres: stats collector   
(gitlab-psql,8295200,6708,00:00:00/7-17:27:58,31211) postgres: logical replication launcher   
(gitlab-prometheus,3022236,146936,01:45:31/7-17:27:57,31213) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(git,1458876,840104,00:06:59/7-17:27:56,31231) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,16260,08:00:37/7-17:27:56,31236) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1556732,17756,00:18:39/7-17:27:56,31291) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1729640,13840,00:01:24/7-17:27:55,31338) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20972,00:00:25/7-17:27:51,31352) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4277916,1156984,21:06:34/7-17:27:50,31357) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332492,69476,01:03:44/7-17:27:49,31361) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309804,63332,01:58:11/7-17:27:37,31380) postgres: gitlab gitlabhq_production [local] idle
(git,1724632,1016280,00:00:33/06:55:19,31493) puma: cluster worker 3: 31231 [gitlab-puma-worker]
(gitlab-psql,8307124,46256,00:00:00/13:46,31539) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/13:42,31547) [kworker/u16:2]
(gitlab-psql,8306216,33704,00:00:46/7-17:26:50,31627) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306972,46168,00:00:00/7-17:26:49,31634) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306240,42616,00:00:00/10:44,32076) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/08:30,32475) [kworker/u16:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-03-15 08:53

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9126b979393

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8176,00:28:04/476-09:22:24,1) /sbin/init
(root,0,0,00:01:21/476-09:22:24,2) [kthreadd]
(root,0,0,00:00:00/476-09:22:24,4) [kworker/0:0H]
(root,0,0,00:00:00/476-09:22:24,6) [mm_percpu_wq]
(root,0,0,00:07:04/476-09:22:24,7) [ksoftirqd/0]
(root,0,0,16:08:56/476-09:22:24,8) [rcu_sched]
(root,0,0,00:00:00/476-09:22:24,9) [rcu_bh]
(root,0,0,00:02:36/476-09:22:24,10) [migration/0]
(root,0,0,00:02:37/476-09:22:24,11) [watchdog/0]
(root,0,0,00:00:00/476-09:22:24,12) [cpuhp/0]
(root,0,0,00:00:00/476-09:22:24,13) [cpuhp/1]
(root,0,0,00:02:43/476-09:22:24,14) [watchdog/1]
(root,0,0,00:02:41/476-09:22:24,15) [migration/1]
(root,0,0,00:04:51/476-09:22:24,16) [ksoftirqd/1]
(root,0,0,00:00:00/476-09:22:24,18) [kworker/1:0H]
(root,0,0,00:00:00/476-09:22:24,19) [cpuhp/2]
(root,0,0,00:02:43/476-09:22:24,20) [watchdog/2]
(root,0,0,00:02:42/476-09:22:24,21) [migration/2]
(root,0,0,00:03:37/476-09:22:24,22) [ksoftirqd/2]
(root,0,0,00:00:00/476-09:22:24,24) [kworker/2:0H]
(root,0,0,00:00:00/476-09:22:24,25) [cpuhp/3]
(root,0,0,00:02:50/476-09:22:24,26) [watchdog/3]
(root,0,0,00:02:38/476-09:22:24,27) [migration/3]
(root,0,0,00:03:02/476-09:22:24,28) [ksoftirqd/3]
(root,0,0,00:00:00/476-09:22:24,30) [kworker/3:0H]
(root,0,0,00:00:00/476-09:22:24,31) [cpuhp/4]
(root,0,0,00:02:56/476-09:22:24,32) [watchdog/4]
(root,0,0,00:02:11/476-09:22:24,33) [migration/4]
(root,0,0,00:04:46/476-09:22:24,34) [ksoftirqd/4]
(root,0,0,00:00:00/476-09:22:24,36) [kworker/4:0H]
(root,0,0,00:00:00/476-09:22:24,37) [cpuhp/5]
(root,0,0,00:02:59/476-09:22:24,38) [watchdog/5]
(root,0,0,00:02:26/476-09:22:24,39) [migration/5]
(root,0,0,00:04:48/476-09:22:24,40) [ksoftirqd/5]
(root,0,0,00:00:00/476-09:22:24,42) [kworker/5:0H]
(root,0,0,00:00:00/476-09:22:24,43) [cpuhp/6]
(root,0,0,00:02:53/476-09:22:24,44) [watchdog/6]
(root,0,0,00:02:34/476-09:22:24,45) [migration/6]
(root,0,0,00:03:12/476-09:22:24,46) [ksoftirqd/6]
(root,0,0,00:00:00/476-09:22:24,48) [kworker/6:0H]
(root,0,0,00:00:00/476-09:22:24,49) [cpuhp/7]
(root,0,0,00:03:07/476-09:22:24,50) [watchdog/7]
(root,0,0,00:02:33/476-09:22:24,51) [migration/7]
(root,0,0,00:03:40/476-09:22:24,52) [ksoftirqd/7]
(root,0,0,00:00:00/476-09:22:24,54) [kworker/7:0H]
(root,0,0,00:00:00/476-09:22:24,55) [kdevtmpfs]
(root,0,0,00:00:00/476-09:22:24,56) [netns]
(root,0,0,00:00:00/476-09:22:24,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/476-09:22:24,58) [kauditd]
(root,0,0,00:01:13/476-09:22:24,62) [khungtaskd]
(root,0,0,00:00:00/476-09:22:24,63) [oom_reaper]
(root,0,0,00:00:00/476-09:22:24,64) [writeback]
(root,0,0,00:00:02/476-09:22:24,65) [kcompactd0]
(root,0,0,00:00:00/476-09:22:24,66) [ksmd]
(root,0,0,00:07:01/476-09:22:24,67) [khugepaged]
(root,0,0,00:00:00/476-09:22:24,68) [crypto]
(root,0,0,00:00:00/476-09:22:24,69) [kintegrityd]
(root,0,0,00:00:00/476-09:22:24,70) [kblockd]
(root,0,0,00:00:00/476-09:22:24,71) [ata_sff]
(root,0,0,00:00:00/476-09:22:24,72) [md]
(root,0,0,00:00:00/476-09:22:24,73) [edac-poller]
(root,0,0,00:00:00/476-09:22:24,74) [devfreq_wq]
(root,0,0,00:00:00/476-09:22:24,75) [watchdogd]
(root,0,0,00:51:15/476-09:22:24,80) [kswapd0]
(root,0,0,00:00:00/476-09:22:24,81) [kworker/u17:0]
(root,0,0,00:00:00/476-09:22:24,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/476-09:22:23,125) [kthrotld]
(root,0,0,00:00:00/476-09:22:23,126) [acpi_thermal_pm]
(root,0,0,00:00:00/476-09:22:23,128) [scsi_eh_0]
(root,0,0,00:00:00/476-09:22:23,129) [scsi_tmf_0]
(root,0,0,00:00:00/476-09:22:23,130) [scsi_eh_1]
(root,0,0,00:00:00/476-09:22:23,131) [scsi_tmf_1]
(root,0,0,00:00:00/476-09:22:23,137) [ipv6_addrconf]
(root,0,0,00:00:00/476-09:22:23,147) [kstrp]
(root,0,0,00:00:00/476-09:22:23,164) [charger_manager]
(root,0,0,00:00:00/476-09:22:22,214) [scsi_eh_2]
(root,0,0,00:00:00/476-09:22:22,215) [scsi_tmf_2]
(root,0,0,00:03:20/476-09:22:22,267) [kworker/7:1H]
(root,0,0,00:37:34/476-09:22:18,268) [kworker/4:1H]
(root,0,0,00:00:39/476-09:22:18,275) [kworker/3:1H]
(root,0,0,00:00:45/476-09:22:17,335) [kworker/1:1H]
(root,0,0,00:00:00/476-09:22:16,342) [raid5wq]
(root,0,0,00:01:12/476-09:22:16,393) [kworker/0:1H]
(root,0,0,01:20:22/476-09:22:16,394) [jbd2/sda1-8]
(root,0,0,00:00:00/476-09:22:16,395) [ext4-rsv-conver]
(root,0,0,00:04:19/476-09:22:16,399) [kworker/5:1H]
(root,0,0,00:00:38/476-09:22:15,423) [kworker/2:1H]
(root,0,0,00:03:36/476-09:22:15,441) [kworker/6:1H]
(root,245620,96440,01:09:18/476-09:22:15,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/476-09:22:15,486) [iscsi_eh]
(root,0,0,00:00:00/476-09:22:15,498) [ib-comp-wq]
(root,0,0,00:00:00/476-09:22:15,499) [ib_mcast]
(root,0,0,00:00:00/476-09:22:15,500) [ib_nl_sa_wq]
(root,97708,1604,00:00:00/476-09:22:15,503) /sbin/lvmetad -f
(root,0,0,00:00:00/476-09:22:15,506) [rdma_cm]
(root,43168,3584,00:03:51/476-09:22:15,514) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2832,00:02:19/476-09:22:14,728) /lib/systemd/systemd-timesyncd
(gitlab-psql,8310696,56240,00:00:00/36:38,892) postgres: gitlab gitlabhq_production [local] idle
(root,25992,3424,00:00:03/476-09:22:12,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(git,1642712,957348,00:00:28/06:01:28,1177) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(root,383268,2316,00:13:55/476-09:22:09,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,01:00:06/476-09:22:09,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4180,00:45:02/476-09:22:09,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5552,00:05:55/476-09:22:09,1298) /lib/systemd/systemd-logind
(root,30028,2792,00:01:53/476-09:22:09,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:19:50/476-09:22:09,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:28:02/476-09:22:09,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13296,00:00:00/476-09:22:09,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15784,00:10:56/476-09:22:09,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2140,00:00:02/476-09:22:09,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/476-09:22:09,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,694320,26592,00:09:19/476-09:22:09,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87724,8816,00:45:47/476-09:22:09,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:05:11/476-09:22:09,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:24:40/476-09:22:09,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:50:53/476-09:22:09,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16324,00:00:00/476-09:22:09,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:06:58/476-09:22:09,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:14:40/476-09:22:09,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/476-09:22:09,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/476-09:22:09,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5428,00:01:59/476-09:22:09,1420) nginx: worker process
(www-data,143788,4496,00:00:00/476-09:22:09,1424) nginx: worker process
(www-data,143788,4652,00:00:00/476-09:22:09,1428) nginx: worker process
(www-data,143788,4648,00:00:00/476-09:22:09,1429) nginx: worker process
(root,14888,1684,00:00:00/476-09:22:09,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4776,00:00:00/476-09:22:09,1431) nginx: worker process
(www-data,143788,4648,00:00:00/476-09:22:09,1432) nginx: worker process
(www-data,143788,4652,00:00:00/476-09:22:09,1433) nginx: worker process
(www-data,143788,4776,00:00:00/476-09:22:09,1434) nginx: worker process
(root,4548,1356,00:11:38/476-09:22:09,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:09/476-09:22:09,1534) runsv redis-exporter
(root,4396,768,00:00:10/476-09:22:09,1536) runsv node-exporter
(root,4396,720,00:00:08/476-09:22:09,1537) runsv prometheus
(root,4396,736,00:00:09/476-09:22:09,1538) runsv sidekiq
(root,4396,828,00:00:08/476-09:22:09,1539) runsv gitlab-exporter
(root,4396,1240,15:01:30/476-09:22:09,1540) runsv alertmanager
(root,4396,828,00:00:08/476-09:22:09,1541) runsv postgresql
(root,4396,720,00:00:09/476-09:22:09,1542) runsv postgres-exporter
(root,4396,748,00:00:08/476-09:22:09,1543) runsv grafana
(root,4396,764,00:00:08/476-09:22:09,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:25/476-09:22:09,1545) runsv logrotate
(root,4396,728,00:00:09/476-09:22:09,1546) runsv puma
(root,4396,860,00:00:08/476-09:22:09,1547) runsv nginx
(root,4396,724,00:00:09/476-09:22:09,1548) runsv gitaly
(root,4396,792,00:00:09/476-09:22:09,1549) runsv redis
(root,4396,740,00:00:09/476-09:22:09,1550) runsv registry
(root,4540,1384,03:52:13/476-09:22:09,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:07/476-09:22:09,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:27:04/476-09:22:09,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:23:25/476-09:22:09,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:08/476-09:22:09,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:01:00/476-09:22:09,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:27/476-09:22:09,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:14:00/476-09:22:09,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:08/476-09:22:09,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:10/476-09:22:09,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:08/476-09:22:09,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:08/476-09:22:09,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:08/476-09:22:09,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:18:41/476-09:22:09,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:12/476-09:22:09,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:08/476-09:22:09,1590) svlogd -tt /var/log/gitlab/puma
(root,0,0,00:00:00/02:13:08,1663) [kworker/2:1]
(root,0,0,00:00:06/18:42:59,1908) [kworker/0:1]
(gitlab-psql,8307124,48444,00:00:00/04:16,2019) postgres: gitlab gitlabhq_production [local] idle
(git,1642712,950620,00:00:26/06:00:28,2256) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8307064,48832,00:00:00/35:05,2509) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/11:57:47,2614) [kworker/6:0]
(root,0,0,00:00:03/19:42:57,2622) [kworker/5:0]
(gitlab-psql,8307124,48668,00:00:00/34:04,3529) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:37/9-07:01:09,4275) [kworker/1:2]
(gitlab-psql,8303976,30288,00:00:00/01:31,4715) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305208,42732,00:00:00/01:30,4733) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:13,4993) [kworker/u16:1]
(root,105684,6708,00:00:00/00:03,6192) sshd: root [priv]
(sshd,72296,2892,00:00:00/00:03,6194) sshd: root [net]
(root,20180,3476,00:00:00/00:00,6341) /bin/bash /usr/bin/check_mk_agent
(root,36700,3192,00:00:00/00:00,6361) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1176,00:00:00/00:00,6362) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(gitlab-psql,8307076,54252,00:00:00/01:01:36,7699) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310392,55752,00:00:00/01:00:32,8732) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/28:36,8839) [kworker/u16:0]
(systemd-resolve,70756,5880,00:00:00/04:15:01,9992) /lib/systemd/systemd-resolved
(gitlab-psql,8307024,52844,00:00:00/26:15,11112) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309660,56964,00:00:00/26:15,11113) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:54/13-10:51:44,12373) [kworker/4:2]
(root,0,0,00:00:00/12:19:40,12802) [kworker/1:1]
(root,0,0,00:00:02/12:17:47,14744) [kworker/4:0]
(root,0,0,00:00:00/12:17:47,14745) [kworker/5:2]
(gitlab-psql,8307020,52016,00:00:00/22:16,15108) postgres: gitlab gitlabhq_production [local] idle
(root,4628,744,00:00:00/19:51,17833) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:28/4-10:16:59,21183) [kworker/7:1]
(gitlab-psql,8307880,48908,00:00:00/14:02,24381) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:08/19:22:58,24650) [kworker/6:1]
(root,0,0,00:00:00/43:51,25856) [kworker/0:2]
(root,0,0,00:00:00/11:54,26590) [kworker/u16:2]
(git,1642712,955312,00:00:28/06:07:28,27362) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(git,1392472,880,02:31:26/390-09:32:56,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2183240,138264,2-17:48:32/390-09:32:56,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,46068,5-20:16:20/390-09:32:55,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340328,39572,2-00:35:30/390-09:32:55,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,57048,06:50:55/390-09:32:55,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/390-09:32:54,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,64308,18088,00:00:00/390-09:32:54,27510) nginx: worker process
(gitlab-www,63960,14544,00:00:00/390-09:32:54,27511) nginx: worker process
(gitlab-www,64680,21156,00:01:00/390-09:32:54,27512) nginx: worker process
(gitlab-www,64304,20224,00:00:00/390-09:32:54,27513) nginx: worker process
(gitlab-www,63960,17420,00:00:00/390-09:32:54,27514) nginx: worker process
(gitlab-www,64608,20628,00:00:04/390-09:32:54,27515) nginx: worker process
(gitlab-www,65596,21752,09:24:25/390-09:32:54,27516) nginx: worker process
(gitlab-www,63960,14472,00:00:00/390-09:32:54,27517) nginx: worker process
(gitlab-www,59784,3980,00:04:40/390-09:32:54,27518) nginx: cache manager process
(gitlab-prometheus,719532,16000,2-01:30:20/390-09:32:54,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,14852,1-23:04:52/390-09:32:53,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:32:43/390-09:32:53,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3194336,174916,4-04:31:54/390-09:32:52,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,375856,00:45:17/390-09:32:52,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:11:02/390-09:32:52,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:14:05/390-09:32:52,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:31:14/390-09:32:52,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,06:16:28/390-09:32:52,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:51/390-09:32:52,27581) postgres: logical replication launcher   
(git,2882320,90808,1-06:40:26/390-09:32:51,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,110856,1-07:30:09/390-09:32:51,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,907248,06:47:05/390-09:32:51,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15652,16-17:12:06/390-09:32:51,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,16636,16:31:22/390-09:32:51,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,19708,01:32:03/390-09:32:50,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:16:31/390-09:32:46,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1201860,45-05:23:17/390-09:32:46,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,72244,2-05:06:49/390-09:32:41,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,123696,4-01:29:48/390-09:32:29,28040) postgres: gitlab gitlabhq_production [local] idle
(git,1652952,971568,00:00:30/06:06:28,28561) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(root,4532,732,00:00:00/09:51,28890) sleep 3000
(gitlab-psql,8306188,34460,00:40:50/390-09:31:40,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/390-09:31:40,28929) postgres: gitlab gitlabhq_production [local] idle
(git,1642712,950688,00:00:27/06:05:28,29617) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(root,0,0,00:00:03/18:17:21,29658) [kworker/3:0]
(root,0,0,00:01:33/23-12:19:43,30048) [kworker/2:2]
(root,0,0,00:00:00/12:02:19,30337) [kworker/7:2]
(root,0,0,00:00:00/12:02:04,30643) [kworker/3:1]
(git,1642712,961776,00:00:29/06:04:27,30655) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(gitlab-psql,8307124,48932,00:00:00/01:10:32,31287) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307064,48480,00:00:00/07:21,31367) postgres: gitlab gitlabhq_production [local] idle
(git,1642712,953516,00:00:28/06:03:28,31638) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(git,1650904,980216,00:00:27/06:02:28,32620) puma: cluster worker 4: 27613 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-03-01 12:22

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912741a555a

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8180,00:27:33/463-06:03:57,1) /sbin/init
(root,0,0,00:01:21/463-06:03:57,2) [kthreadd]
(root,0,0,00:00:00/463-06:03:57,4) [kworker/0:0H]
(root,0,0,00:00:00/463-06:03:57,6) [mm_percpu_wq]
(root,0,0,00:06:51/463-06:03:57,7) [ksoftirqd/0]
(root,0,0,15:40:14/463-06:03:57,8) [rcu_sched]
(root,0,0,00:00:00/463-06:03:57,9) [rcu_bh]
(root,0,0,00:02:32/463-06:03:57,10) [migration/0]
(root,0,0,00:02:33/463-06:03:57,11) [watchdog/0]
(root,0,0,00:00:00/463-06:03:57,12) [cpuhp/0]
(root,0,0,00:00:00/463-06:03:57,13) [cpuhp/1]
(root,0,0,00:02:38/463-06:03:57,14) [watchdog/1]
(root,0,0,00:02:37/463-06:03:57,15) [migration/1]
(root,0,0,00:04:43/463-06:03:57,16) [ksoftirqd/1]
(root,0,0,00:00:00/463-06:03:57,18) [kworker/1:0H]
(root,0,0,00:00:00/463-06:03:57,19) [cpuhp/2]
(root,0,0,00:02:38/463-06:03:57,20) [watchdog/2]
(root,0,0,00:02:38/463-06:03:57,21) [migration/2]
(root,0,0,00:03:31/463-06:03:57,22) [ksoftirqd/2]
(root,0,0,00:00:00/463-06:03:57,24) [kworker/2:0H]
(root,0,0,00:00:00/463-06:03:57,25) [cpuhp/3]
(root,0,0,00:02:45/463-06:03:57,26) [watchdog/3]
(root,0,0,00:02:34/463-06:03:57,27) [migration/3]
(root,0,0,00:02:58/463-06:03:57,28) [ksoftirqd/3]
(root,0,0,00:00:00/463-06:03:57,30) [kworker/3:0H]
(root,0,0,00:00:00/463-06:03:57,31) [cpuhp/4]
(root,0,0,00:02:51/463-06:03:57,32) [watchdog/4]
(root,0,0,00:02:07/463-06:03:57,33) [migration/4]
(root,0,0,00:04:36/463-06:03:57,34) [ksoftirqd/4]
(root,0,0,00:00:00/463-06:03:57,36) [kworker/4:0H]
(root,0,0,00:00:00/463-06:03:57,37) [cpuhp/5]
(root,0,0,00:02:54/463-06:03:57,38) [watchdog/5]
(root,0,0,00:02:22/463-06:03:57,39) [migration/5]
(root,0,0,00:04:39/463-06:03:57,40) [ksoftirqd/5]
(root,0,0,00:00:00/463-06:03:57,42) [kworker/5:0H]
(root,0,0,00:00:00/463-06:03:57,43) [cpuhp/6]
(root,0,0,00:02:48/463-06:03:57,44) [watchdog/6]
(root,0,0,00:02:30/463-06:03:57,45) [migration/6]
(root,0,0,00:03:07/463-06:03:57,46) [ksoftirqd/6]
(root,0,0,00:00:00/463-06:03:57,48) [kworker/6:0H]
(root,0,0,00:00:00/463-06:03:57,49) [cpuhp/7]
(root,0,0,00:03:01/463-06:03:57,50) [watchdog/7]
(root,0,0,00:02:28/463-06:03:57,51) [migration/7]
(root,0,0,00:03:34/463-06:03:57,52) [ksoftirqd/7]
(root,0,0,00:00:00/463-06:03:57,54) [kworker/7:0H]
(root,0,0,00:00:00/463-06:03:57,55) [kdevtmpfs]
(root,0,0,00:00:00/463-06:03:57,56) [netns]
(root,0,0,00:00:00/463-06:03:57,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/463-06:03:57,58) [kauditd]
(root,0,0,00:01:12/463-06:03:57,62) [khungtaskd]
(root,0,0,00:00:00/463-06:03:57,63) [oom_reaper]
(root,0,0,00:00:00/463-06:03:57,64) [writeback]
(root,0,0,00:00:02/463-06:03:57,65) [kcompactd0]
(root,0,0,00:00:00/463-06:03:57,66) [ksmd]
(root,0,0,00:06:51/463-06:03:57,67) [khugepaged]
(root,0,0,00:00:00/463-06:03:57,68) [crypto]
(root,0,0,00:00:00/463-06:03:57,69) [kintegrityd]
(root,0,0,00:00:00/463-06:03:57,70) [kblockd]
(root,0,0,00:00:00/463-06:03:57,71) [ata_sff]
(root,0,0,00:00:00/463-06:03:57,72) [md]
(root,0,0,00:00:00/463-06:03:57,73) [edac-poller]
(root,0,0,00:00:00/463-06:03:57,74) [devfreq_wq]
(root,0,0,00:00:00/463-06:03:57,75) [watchdogd]
(root,0,0,00:49:31/463-06:03:57,80) [kswapd0]
(root,0,0,00:00:00/463-06:03:57,81) [kworker/u17:0]
(root,0,0,00:00:00/463-06:03:57,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/463-06:03:56,125) [kthrotld]
(root,0,0,00:00:00/463-06:03:56,126) [acpi_thermal_pm]
(root,0,0,00:00:00/463-06:03:56,128) [scsi_eh_0]
(root,0,0,00:00:00/463-06:03:56,129) [scsi_tmf_0]
(root,0,0,00:00:00/463-06:03:56,130) [scsi_eh_1]
(root,0,0,00:00:00/463-06:03:56,131) [scsi_tmf_1]
(root,0,0,00:00:00/463-06:03:56,137) [ipv6_addrconf]
(root,0,0,00:00:00/463-06:03:56,147) [kstrp]
(root,0,0,00:00:00/463-06:03:56,164) [charger_manager]
(root,0,0,00:00:00/463-06:03:55,214) [scsi_eh_2]
(root,0,0,00:00:00/463-06:03:55,215) [scsi_tmf_2]
(root,0,0,00:03:15/463-06:03:55,267) [kworker/7:1H]
(root,0,0,00:36:29/463-06:03:51,268) [kworker/4:1H]
(root,0,0,00:00:38/463-06:03:51,275) [kworker/3:1H]
(root,0,0,00:00:43/463-06:03:50,335) [kworker/1:1H]
(root,0,0,00:00:00/463-06:03:49,342) [raid5wq]
(gitlab-psql,8306744,51908,00:00:00/08:09,361) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:10/463-06:03:49,393) [kworker/0:1H]
(root,0,0,01:18:22/463-06:03:49,394) [jbd2/sda1-8]
(root,0,0,00:00:00/463-06:03:49,395) [ext4-rsv-conver]
(root,0,0,00:04:12/463-06:03:49,399) [kworker/5:1H]
(root,0,0,00:00:37/463-06:03:48,423) [kworker/2:1H]
(root,0,0,00:03:30/463-06:03:48,441) [kworker/6:1H]
(root,171840,48864,01:07:51/463-06:03:48,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/463-06:03:48,486) [iscsi_eh]
(root,0,0,00:00:00/463-06:03:48,498) [ib-comp-wq]
(root,0,0,00:00:00/463-06:03:48,499) [ib_mcast]
(root,0,0,00:00:00/463-06:03:48,500) [ib_nl_sa_wq]
(root,97708,1604,00:00:00/463-06:03:48,503) /sbin/lvmetad -f
(root,0,0,00:00:00/463-06:03:48,506) [rdma_cm]
(root,43168,3584,00:03:45/463-06:03:48,514) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2852,00:02:16/463-06:03:47,728) /lib/systemd/systemd-timesyncd
(root,25992,3424,00:00:03/463-06:03:45,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383268,2352,00:13:33/463-06:03:42,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:58:28/463-06:03:42,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4180,00:44:00/463-06:03:42,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5572,00:05:51/463-06:03:42,1298) /lib/systemd/systemd-logind
(root,30028,2792,00:01:51/463-06:03:42,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:19:22/463-06:03:42,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:27:20/463-06:03:42,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13296,00:00:00/463-06:03:42,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15816,00:10:42/463-06:03:42,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2140,00:00:02/463-06:03:42,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/463-06:03:42,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,645276,18144,00:09:08/463-06:03:42,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87476,8568,00:43:22/463-06:03:42,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:05:04/463-06:03:42,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:24:05/463-06:03:42,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:35:27/463-06:03:42,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16324,00:00:00/463-06:03:42,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:06:48/463-06:03:42,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:14:18/463-06:03:42,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/463-06:03:42,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/463-06:03:42,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5428,00:01:56/463-06:03:42,1420) nginx: worker process
(www-data,143788,4496,00:00:00/463-06:03:42,1424) nginx: worker process
(www-data,143788,4652,00:00:00/463-06:03:42,1428) nginx: worker process
(www-data,143788,4648,00:00:00/463-06:03:42,1429) nginx: worker process
(root,14888,1684,00:00:00/463-06:03:42,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4776,00:00:00/463-06:03:42,1431) nginx: worker process
(www-data,143788,4648,00:00:00/463-06:03:42,1432) nginx: worker process
(www-data,143788,4652,00:00:00/463-06:03:42,1433) nginx: worker process
(www-data,143788,4776,00:00:00/463-06:03:42,1434) nginx: worker process
(root,4548,1356,00:11:19/463-06:03:42,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:09/463-06:03:42,1534) runsv redis-exporter
(root,4396,768,00:00:10/463-06:03:42,1536) runsv node-exporter
(root,4396,720,00:00:08/463-06:03:42,1537) runsv prometheus
(root,4396,736,00:00:08/463-06:03:42,1538) runsv sidekiq
(root,4396,828,00:00:08/463-06:03:42,1539) runsv gitlab-exporter
(root,4396,1240,14:37:13/463-06:03:42,1540) runsv alertmanager
(root,4396,828,00:00:08/463-06:03:42,1541) runsv postgresql
(root,4396,720,00:00:09/463-06:03:42,1542) runsv postgres-exporter
(root,4396,748,00:00:08/463-06:03:42,1543) runsv grafana
(root,4396,764,00:00:08/463-06:03:42,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:25/463-06:03:42,1545) runsv logrotate
(root,4396,728,00:00:09/463-06:03:42,1546) runsv puma
(root,4396,860,00:00:08/463-06:03:42,1547) runsv nginx
(root,4396,724,00:00:09/463-06:03:42,1548) runsv gitaly
(root,4396,792,00:00:09/463-06:03:42,1549) runsv redis
(root,4396,740,00:00:09/463-06:03:42,1550) runsv registry
(root,4540,1384,03:45:49/463-06:03:42,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:07/463-06:03:42,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:24:44/463-06:03:42,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:20:04/463-06:03:42,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:08/463-06:03:42,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:58/463-06:03:42,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:25/463-06:03:42,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:13:37/463-06:03:42,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:08/463-06:03:42,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:09/463-06:03:42,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:07/463-06:03:42,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:08/463-06:03:42,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:08/463-06:03:42,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:18:11/463-06:03:42,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:12/463-06:03:42,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:08/463-06:03:42,1590) svlogd -tt /var/log/gitlab/puma
(root,0,0,00:00:01/39:30,1719) [kworker/u16:2]
(gitlab-psql,8307124,48204,00:00:00/04:55,3616) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/07:41:24,3833) [kworker/1:1]
(git,1661144,950856,00:00:33/07:09:10,3967) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(gitlab-psql,8306272,49064,00:00:00/36:12,4917) postgres: gitlab gitlabhq_production [local] idle
(git,1650904,951908,00:00:33/07:08:10,4969) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(git,1650904,960608,00:00:34/07:07:09,5980) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(gitlab-psql,8307124,49284,00:00:00/34:44,6358) postgres: gitlab gitlabhq_production [local] idle
(root,4628,780,00:00:00/01:48,6700) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,792,00:00:00/01:48,6704) sleep 600
(git,1661144,954116,00:00:34/07:06:10,6947) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/01:04,7469) [kworker/u16:1]
(gitlab-psql,8311084,59928,00:00:00/01:05:53,7861) postgres: gitlab gitlabhq_production [local] idle
(git,1661144,963472,00:00:35/07:05:10,7930) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(root,108000,7160,00:00:00/00:02,8470) sshd: unknown [priv]
(sshd,72296,2956,00:00:00/00:02,8485) sshd: unknown [net]
(root,20180,3656,00:00:00/00:00,8568) /bin/bash /usr/bin/check_mk_agent
(root,36700,3124,00:00:00/00:00,8586) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1124,00:00:00/00:00,8587) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1650904,947424,00:00:30/07:04:10,8923) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(gitlab-psql,8306892,50772,00:00:00/01:03:58,9776) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:27/2-14:10:29,9803) [kworker/6:0]
(git,1661144,958776,00:00:31/07:03:10,9923) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/02:41:26,10299) [kworker/3:1]
(git,1650904,947080,00:00:31/07:02:10,10926) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8310392,55728,00:00:00/28:42,12325) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/07:33:17,12373) [kworker/4:2]
(root,0,0,00:00:00/03:44:04,13012) [kworker/0:0]
(root,0,0,00:00:00/05:21:41,13326) [kworker/5:1]
(gitlab-psql,8307124,48208,00:00:00/27:28,13587) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:23/6-08:58:15,14665) [kworker/1:0]
(gitlab-psql,8306764,53944,00:00:00/25:07,15868) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:49/17-09:02:01,15999) [kworker/7:2]
(root,0,0,00:02:12/15-13:52:02,18338) [kworker/0:1]
(systemd-resolve,70628,5036,00:00:00/03:37:49,19124) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/03:37:49,19129) [kworker/2:1]
(root,0,0,00:00:00/07:51:24,22443) [kworker/7:0]
(root,0,0,00:00:00/08:16:20,26006) [kworker/6:2]
(gitlab-psql,8307064,48368,00:00:00/46:58,26479) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/13:42,27067) [kworker/u16:0]
(git,1392472,880,02:26:24/377-06:14:29,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2183240,137156,2-15:36:52/377-06:14:29,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45916,5-15:34:19/377-06:14:28,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340328,36904,1-22:37:27/377-06:14:28,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,53152,06:34:45/377-06:14:28,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/377-06:14:27,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,64308,18156,00:00:00/377-06:14:27,27510) nginx: worker process
(gitlab-www,63960,14544,00:00:00/377-06:14:27,27511) nginx: worker process
(gitlab-www,64680,21156,00:00:56/377-06:14:27,27512) nginx: worker process
(gitlab-www,64304,20224,00:00:00/377-06:14:27,27513) nginx: worker process
(gitlab-www,63960,17420,00:00:00/377-06:14:27,27514) nginx: worker process
(gitlab-www,64608,20628,00:00:04/377-06:14:27,27515) nginx: worker process
(gitlab-www,65596,21752,09:01:01/377-06:14:27,27516) nginx: worker process
(gitlab-www,63960,14472,00:00:00/377-06:14:27,27517) nginx: worker process
(gitlab-www,59784,3980,00:04:31/377-06:14:27,27518) nginx: cache manager process
(gitlab-prometheus,719532,15652,1-23:48:53/377-06:14:27,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,15300,1-21:25:07/377-06:14:26,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:31:46/377-06:14:26,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3178596,173288,4-01:09:33/377-06:14:25,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,373272,00:44:25/377-06:14:25,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:10:40/377-06:14:25,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:13:39/377-06:14:25,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:30:11/377-06:14:25,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,06:04:09/377-06:14:25,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:49/377-06:14:25,27581) postgres: logical replication launcher   
(git,2882320,90808,1-05:39:14/377-06:14:24,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,110900,1-06:28:34/377-06:14:24,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,908112,06:36:27/377-06:14:24,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15872,16-03:24:46/377-06:14:24,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,15064,15:58:14/377-06:14:24,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,21388,01:29:22/377-06:14:23,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:16:08/377-06:14:19,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1145652,43-17:21:10/377-06:14:19,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,72244,2-03:17:49/377-06:14:14,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,122656,3-22:02:31/377-06:14:02,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307272,48588,00:00:00/44:55,28739) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:39:33/377-06:13:13,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/377-06:13:13,28929) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:04/1-08:58:19,29359) [kworker/4:0]
(root,0,0,00:00:01/07:46:24,29467) [kworker/5:0]
(root,0,0,00:00:40/10-09:01:16,30048) [kworker/2:2]
(gitlab-psql,8307044,51300,00:00:00/43:07,30512) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311068,57440,00:00:00/42:52,30767) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:06/1-14:14:10,31210) [kworker/3:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-16 09:04

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912ff3e1870

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8332,00:27:27/461-14:55:32,1) /sbin/init
(root,0,0,00:01:21/461-14:55:32,2) [kthreadd]
(root,0,0,00:00:00/461-14:55:32,4) [kworker/0:0H]
(root,0,0,00:00:00/461-14:55:32,6) [mm_percpu_wq]
(root,0,0,00:06:49/461-14:55:32,7) [ksoftirqd/0]
(root,0,0,15:36:41/461-14:55:32,8) [rcu_sched]
(root,0,0,00:00:00/461-14:55:32,9) [rcu_bh]
(root,0,0,00:02:31/461-14:55:32,10) [migration/0]
(root,0,0,00:02:32/461-14:55:32,11) [watchdog/0]
(root,0,0,00:00:00/461-14:55:32,12) [cpuhp/0]
(root,0,0,00:00:00/461-14:55:32,13) [cpuhp/1]
(root,0,0,00:02:38/461-14:55:32,14) [watchdog/1]
(root,0,0,00:02:36/461-14:55:32,15) [migration/1]
(root,0,0,00:04:42/461-14:55:32,16) [ksoftirqd/1]
(root,0,0,00:00:00/461-14:55:32,18) [kworker/1:0H]
(root,0,0,00:00:00/461-14:55:32,19) [cpuhp/2]
(root,0,0,00:02:37/461-14:55:32,20) [watchdog/2]
(root,0,0,00:02:37/461-14:55:32,21) [migration/2]
(root,0,0,00:03:30/461-14:55:32,22) [ksoftirqd/2]
(root,0,0,00:00:00/461-14:55:32,24) [kworker/2:0H]
(root,0,0,00:00:00/461-14:55:32,25) [cpuhp/3]
(root,0,0,00:02:44/461-14:55:32,26) [watchdog/3]
(root,0,0,00:02:33/461-14:55:32,27) [migration/3]
(root,0,0,00:02:57/461-14:55:32,28) [ksoftirqd/3]
(root,0,0,00:00:00/461-14:55:32,30) [kworker/3:0H]
(root,0,0,00:00:00/461-14:55:32,31) [cpuhp/4]
(root,0,0,00:02:50/461-14:55:32,32) [watchdog/4]
(root,0,0,00:02:06/461-14:55:32,33) [migration/4]
(root,0,0,00:04:35/461-14:55:32,34) [ksoftirqd/4]
(root,0,0,00:00:00/461-14:55:32,36) [kworker/4:0H]
(root,0,0,00:00:00/461-14:55:32,37) [cpuhp/5]
(root,0,0,00:02:53/461-14:55:32,38) [watchdog/5]
(root,0,0,00:02:21/461-14:55:32,39) [migration/5]
(root,0,0,00:04:38/461-14:55:32,40) [ksoftirqd/5]
(root,0,0,00:00:00/461-14:55:32,42) [kworker/5:0H]
(root,0,0,00:00:00/461-14:55:32,43) [cpuhp/6]
(root,0,0,00:02:48/461-14:55:32,44) [watchdog/6]
(root,0,0,00:02:29/461-14:55:32,45) [migration/6]
(root,0,0,00:03:06/461-14:55:32,46) [ksoftirqd/6]
(root,0,0,00:00:00/461-14:55:32,48) [kworker/6:0H]
(root,0,0,00:00:00/461-14:55:32,49) [cpuhp/7]
(root,0,0,00:03:01/461-14:55:32,50) [watchdog/7]
(root,0,0,00:02:28/461-14:55:32,51) [migration/7]
(root,0,0,00:03:34/461-14:55:32,52) [ksoftirqd/7]
(root,0,0,00:00:00/461-14:55:32,54) [kworker/7:0H]
(root,0,0,00:00:00/461-14:55:32,55) [kdevtmpfs]
(root,0,0,00:00:00/461-14:55:32,56) [netns]
(root,0,0,00:00:00/461-14:55:32,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/461-14:55:32,58) [kauditd]
(root,0,0,00:01:11/461-14:55:32,62) [khungtaskd]
(root,0,0,00:00:00/461-14:55:32,63) [oom_reaper]
(root,0,0,00:00:00/461-14:55:32,64) [writeback]
(root,0,0,00:00:02/461-14:55:32,65) [kcompactd0]
(root,0,0,00:00:00/461-14:55:32,66) [ksmd]
(root,0,0,00:06:50/461-14:55:32,67) [khugepaged]
(root,0,0,00:00:00/461-14:55:32,68) [crypto]
(root,0,0,00:00:00/461-14:55:32,69) [kintegrityd]
(root,0,0,00:00:00/461-14:55:32,70) [kblockd]
(root,0,0,00:00:00/461-14:55:32,71) [ata_sff]
(root,0,0,00:00:00/461-14:55:32,72) [md]
(root,0,0,00:00:00/461-14:55:32,73) [edac-poller]
(root,0,0,00:00:00/461-14:55:32,74) [devfreq_wq]
(root,0,0,00:00:00/461-14:55:32,75) [watchdogd]
(root,0,0,00:49:14/461-14:55:32,80) [kswapd0]
(root,0,0,00:00:00/461-14:55:32,81) [kworker/u17:0]
(root,0,0,00:00:00/461-14:55:32,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/461-14:55:31,125) [kthrotld]
(root,0,0,00:00:00/461-14:55:31,126) [acpi_thermal_pm]
(root,0,0,00:00:00/461-14:55:31,128) [scsi_eh_0]
(root,0,0,00:00:00/461-14:55:31,129) [scsi_tmf_0]
(root,0,0,00:00:00/461-14:55:31,130) [scsi_eh_1]
(root,0,0,00:00:00/461-14:55:31,131) [scsi_tmf_1]
(root,0,0,00:00:00/461-14:55:31,137) [ipv6_addrconf]
(root,0,0,00:00:00/461-14:55:31,147) [kstrp]
(root,0,0,00:00:00/461-14:55:31,164) [charger_manager]
(root,0,0,00:00:00/461-14:55:30,214) [scsi_eh_2]
(root,0,0,00:00:00/461-14:55:30,215) [scsi_tmf_2]
(root,0,0,00:03:14/461-14:55:30,267) [kworker/7:1H]
(root,0,0,00:36:21/461-14:55:26,268) [kworker/4:1H]
(root,0,0,00:00:38/461-14:55:26,275) [kworker/3:1H]
(root,0,0,00:00:43/461-14:55:25,335) [kworker/1:1H]
(root,0,0,00:00:00/461-14:55:24,342) [raid5wq]
(root,0,0,00:01:10/461-14:55:24,393) [kworker/0:1H]
(root,0,0,01:18:07/461-14:55:24,394) [jbd2/sda1-8]
(root,0,0,00:00:00/461-14:55:24,395) [ext4-rsv-conver]
(root,0,0,00:04:11/461-14:55:24,399) [kworker/5:1H]
(root,0,0,00:00:37/461-14:55:23,423) [kworker/2:1H]
(root,0,0,00:03:30/461-14:55:23,441) [kworker/6:1H]
(root,139072,33040,01:07:42/461-14:55:23,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/461-14:55:23,486) [iscsi_eh]
(root,0,0,00:00:00/461-14:55:23,498) [ib-comp-wq]
(root,0,0,00:00:00/461-14:55:23,499) [ib_mcast]
(root,0,0,00:00:00/461-14:55:23,500) [ib_nl_sa_wq]
(root,97708,1604,00:00:00/461-14:55:23,503) /sbin/lvmetad -f
(root,0,0,00:00:00/461-14:55:23,506) [rdma_cm]
(root,43168,3584,00:03:44/461-14:55:23,514) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2852,00:02:16/461-14:55:22,728) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/02:39:01,892) [kworker/3:1]
(root,0,0,00:00:00/01:40:23,926) [kworker/4:0]
(root,25992,3424,00:00:03/461-14:55:20,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383268,2300,00:13:30/461-14:55:17,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:58:17/461-14:55:17,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4180,00:43:52/461-14:55:17,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(git,1763568,1010400,00:01:00/05:53:22,1293) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(root,70700,5572,00:05:49/461-14:55:17,1298) /lib/systemd/systemd-logind
(root,30028,2792,00:01:50/461-14:55:17,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:19:19/461-14:55:17,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:27:15/461-14:55:17,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13296,00:00:00/461-14:55:17,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15820,00:10:41/461-14:55:17,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2140,00:00:02/461-14:55:17,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/461-14:55:17,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,645092,9036,00:09:07/461-14:55:17,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87476,8568,00:43:06/461-14:55:17,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:05:03/461-14:55:17,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:24:01/461-14:55:17,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:33:33/461-14:55:17,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16324,00:00:00/461-14:55:17,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:06:47/461-14:55:17,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:14:16/461-14:55:17,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/461-14:55:17,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/461-14:55:17,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5428,00:01:56/461-14:55:17,1420) nginx: worker process
(www-data,143788,4496,00:00:00/461-14:55:17,1424) nginx: worker process
(www-data,143788,4652,00:00:00/461-14:55:17,1428) nginx: worker process
(www-data,143788,4648,00:00:00/461-14:55:17,1429) nginx: worker process
(root,14888,1684,00:00:00/461-14:55:17,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4776,00:00:00/461-14:55:17,1431) nginx: worker process
(www-data,143788,4648,00:00:00/461-14:55:17,1432) nginx: worker process
(www-data,143788,4652,00:00:00/461-14:55:17,1433) nginx: worker process
(www-data,143788,4776,00:00:00/461-14:55:17,1434) nginx: worker process
(root,4548,1356,00:11:17/461-14:55:17,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:09/461-14:55:17,1534) runsv redis-exporter
(root,4396,768,00:00:09/461-14:55:17,1536) runsv node-exporter
(root,4396,720,00:00:08/461-14:55:17,1537) runsv prometheus
(root,4396,736,00:00:08/461-14:55:17,1538) runsv sidekiq
(root,4396,828,00:00:08/461-14:55:17,1539) runsv gitlab-exporter
(root,4396,1240,14:34:13/461-14:55:17,1540) runsv alertmanager
(root,4396,828,00:00:08/461-14:55:17,1541) runsv postgresql
(root,4396,720,00:00:09/461-14:55:17,1542) runsv postgres-exporter
(root,4396,748,00:00:08/461-14:55:17,1543) runsv grafana
(root,4396,764,00:00:08/461-14:55:17,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:25/461-14:55:17,1545) runsv logrotate
(root,4396,728,00:00:09/461-14:55:17,1546) runsv puma
(root,4396,860,00:00:08/461-14:55:17,1547) runsv nginx
(root,4396,724,00:00:09/461-14:55:17,1548) runsv gitaly
(root,4396,792,00:00:09/461-14:55:17,1549) runsv redis
(root,4396,740,00:00:09/461-14:55:17,1550) runsv registry
(root,4540,1384,03:45:02/461-14:55:17,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:07/461-14:55:17,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:24:26/461-14:55:17,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:19:39/461-14:55:17,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:08/461-14:55:17,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:58/461-14:55:17,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:25/461-14:55:17,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:13:34/461-14:55:17,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:08/461-14:55:17,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:09/461-14:55:17,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:07/461-14:55:17,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:08/461-14:55:17,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:08/461-14:55:17,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:18:08/461-14:55:17,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:12/461-14:55:17,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:08/461-14:55:17,1590) svlogd -tt /var/log/gitlab/puma
(git,1773920,992228,00:00:53/05:52:22,2502) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(systemd-resolve,70628,5236,00:00:00/05:52:20,2558) /lib/systemd/systemd-resolved
(root,0,0,00:00:44/10-17:53:22,2930) [kworker/5:1]
(git,1775856,1030480,00:00:53/05:51:22,3672) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/01:56,5896) [kworker/5:0]
(gitlab-psql,8311568,62844,00:00:00/00:58,7644) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306972,50172,00:00:00/00:33,8399) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8309664,61088,00:00:00/00:33,8400) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/00:22,8755) [kworker/6:2]
(root,0,0,00:00:00/00:22,8756) [kworker/1:2]
(root,0,0,00:00:00/01:00:22,8763) [kworker/6:1]
(git,20656,1364,00:00:00/00:07,9045) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1360,00:00:00/00:07,9046) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(root,20180,3720,00:00:00/00:00,9316) /bin/bash /usr/bin/check_mk_agent
(gitlab-psql,8315248,78552,00:00:00/27:31,9317) postgres: gitlab gitlabhq_production [local] idle
(root,36700,3132,00:00:00/00:00,9335) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1108,00:00:00/00:00,9336) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:09/23:02:04,9803) [kworker/6:0]
(root,0,0,00:00:00/24:01,12789) [kworker/u16:1]
(root,0,0,00:00:18/4-17:49:50,14665) [kworker/1:0]
(gitlab-psql,8312560,87012,00:00:01/21:57,14791) postgres: gitlab gitlabhq_production [local] idle
(root,4628,776,00:00:00/53:27,15527) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:01:39/15-17:53:36,15999) [kworker/7:2]
(root,0,0,00:00:00/20:21,16474) [kworker/u16:2]
(root,0,0,00:00:00/20:21,16479) [kworker/5:2]
(gitlab-psql,8313748,93596,00:00:02/19:23,17430) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312664,88572,00:00:01/18:53,17959) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:58/13-22:43:37,18338) [kworker/0:1]
(gitlab-psql,8311600,85696,00:00:02/48:17,20537) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/14:58,21763) [kworker/u16:0]
(root,0,0,00:01:31/21-22:02:11,21826) [kworker/4:1]
(root,0,0,00:00:00/01:47:43,24374) [kworker/7:1]
(gitlab-psql,8314716,88344,00:00:01/44:16,24539) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:23/5-17:54:20,25023) [kworker/3:2]
(root,0,0,00:00:00/11:45,25094) [kworker/2:1]
(gitlab-psql,8312112,75320,00:00:00/11:43,25122) postgres: gitlab gitlabhq_production [local] idle
(root,4532,756,00:00:00/43:27,25300) sleep 3000
(gitlab-psql,8313456,66572,00:00:00/11:04,25931) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314224,87608,00:00:01/11:04,25932) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313972,79344,00:00:01/11:04,25941) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8316944,86804,00:00:01/11:04,25942) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313752,70732,00:00:01/11:04,25943) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313676,74192,00:00:01/11:03,25958) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314392,79308,00:00:01/10:37,26814) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314164,80420,00:00:01/10:37,26815) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313224,86720,00:00:01/10:36,26821) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312500,69536,00:00:00/10:36,26822) postgres: gitlab gitlabhq_production [local] idle
(git,1392472,880,02:25:47/375-15:06:04,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2183240,180424,2-15:20:48/375-15:06:04,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45992,5-14:59:11/375-15:06:03,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340328,40152,1-22:22:38/375-15:06:03,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,57884,06:32:45/375-15:06:03,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/375-15:06:02,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,64308,18156,00:00:00/375-15:06:02,27510) nginx: worker process
(gitlab-www,63960,14544,00:00:00/375-15:06:02,27511) nginx: worker process
(gitlab-www,64680,21156,00:00:55/375-15:06:02,27512) nginx: worker process
(gitlab-www,64304,20224,00:00:00/375-15:06:02,27513) nginx: worker process
(gitlab-www,63960,17420,00:00:00/375-15:06:02,27514) nginx: worker process
(gitlab-www,64608,20628,00:00:04/375-15:06:02,27515) nginx: worker process
(gitlab-www,65596,21752,08:58:05/375-15:06:02,27516) nginx: worker process
(gitlab-www,63960,14472,00:00:00/375-15:06:02,27517) nginx: worker process
(gitlab-www,59784,3980,00:04:30/375-15:06:02,27518) nginx: cache manager process
(gitlab-prometheus,719532,15908,1-23:36:19/375-15:06:02,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,15068,1-21:12:51/375-15:06:01,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:31:39/375-15:06:01,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3168352,173004,4-00:44:26/375-15:06:00,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,371196,00:44:16/375-15:06:00,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:10:38/375-15:06:00,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:13:36/375-15:06:00,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:30:03/375-15:06:00,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,06:02:36/375-15:06:00,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:49/375-15:06:00,27581) postgres: logical replication launcher   
(git,2882320,90808,1-05:31:41/375-15:05:59,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,110904,1-06:20:59/375-15:05:59,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,908308,06:35:04/375-15:05:59,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,16120,16-01:42:01/375-15:05:59,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,16560,15:54:08/375-15:05:59,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,20512,01:29:01/375-15:05:58,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:16:05/375-15:05:54,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4704020,1163972,43-12:53:57/375-15:05:54,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,72244,2-03:04:17/375-15:05:49,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,122656,3-21:36:55/375-15:05:37,28040) postgres: gitlab gitlabhq_production [local] idle
(git,1786096,985312,00:01:01/05:58:22,28325) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/40:22,28914) [kworker/0:0]
(gitlab-psql,8306188,34460,00:39:23/375-15:04:48,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/375-15:04:48,28929) postgres: gitlab gitlabhq_production [local] idle
(git,1749232,980060,00:00:57/05:57:22,29371) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(root,0,0,00:00:33/8-17:52:51,30048) [kworker/2:2]
(root,0,0,00:00:00/08:18,30382) [kworker/1:1]
(git,1811296,1023480,00:01:01/05:56:22,30385) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8320900,97092,00:00:02/38:52,30448) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312272,81496,00:00:01/08:01,30737) postgres: gitlab gitlabhq_production [local] idle
(git,1786096,997100,00:00:57/05:55:22,31444) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(git,1766240,997536,00:00:55/05:54:22,32561) puma: cluster worker 1: 27613 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-14 17:55

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912b7a797f3

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8100,00:27:03/449-21:48:14,1) /sbin/init
(root,0,0,00:01:20/449-21:48:14,2) [kthreadd]
(root,0,0,00:00:00/449-21:48:14,4) [kworker/0:0H]
(root,0,0,00:00:00/449-21:48:14,6) [mm_percpu_wq]
(root,0,0,00:06:39/449-21:48:14,7) [ksoftirqd/0]
(root,0,0,15:11:50/449-21:48:14,8) [rcu_sched]
(root,0,0,00:00:00/449-21:48:14,9) [rcu_bh]
(root,0,0,00:02:28/449-21:48:14,10) [migration/0]
(root,0,0,00:02:29/449-21:48:14,11) [watchdog/0]
(root,0,0,00:00:00/449-21:48:14,12) [cpuhp/0]
(root,0,0,00:00:00/449-21:48:14,13) [cpuhp/1]
(root,0,0,00:02:34/449-21:48:14,14) [watchdog/1]
(root,0,0,00:02:33/449-21:48:14,15) [migration/1]
(root,0,0,00:04:35/449-21:48:14,16) [ksoftirqd/1]
(root,0,0,00:00:00/449-21:48:14,18) [kworker/1:0H]
(root,0,0,00:00:00/449-21:48:14,19) [cpuhp/2]
(root,0,0,00:02:33/449-21:48:14,20) [watchdog/2]
(root,0,0,00:02:33/449-21:48:14,21) [migration/2]
(root,0,0,00:03:25/449-21:48:14,22) [ksoftirqd/2]
(root,0,0,00:00:00/449-21:48:14,24) [kworker/2:0H]
(root,0,0,00:00:00/449-21:48:14,25) [cpuhp/3]
(root,0,0,00:02:40/449-21:48:14,26) [watchdog/3]
(root,0,0,00:02:29/449-21:48:14,27) [migration/3]
(root,0,0,00:02:53/449-21:48:14,28) [ksoftirqd/3]
(root,0,0,00:00:00/449-21:48:14,30) [kworker/3:0H]
(root,0,0,00:00:00/449-21:48:14,31) [cpuhp/4]
(root,0,0,00:02:46/449-21:48:14,32) [watchdog/4]
(root,0,0,00:02:03/449-21:48:14,33) [migration/4]
(root,0,0,00:04:27/449-21:48:14,34) [ksoftirqd/4]
(root,0,0,00:00:00/449-21:48:14,36) [kworker/4:0H]
(root,0,0,00:00:00/449-21:48:14,37) [cpuhp/5]
(root,0,0,00:02:49/449-21:48:14,38) [watchdog/5]
(root,0,0,00:02:17/449-21:48:14,39) [migration/5]
(root,0,0,00:04:31/449-21:48:14,40) [ksoftirqd/5]
(root,0,0,00:00:00/449-21:48:14,42) [kworker/5:0H]
(root,0,0,00:00:00/449-21:48:14,43) [cpuhp/6]
(root,0,0,00:02:43/449-21:48:14,44) [watchdog/6]
(root,0,0,00:02:26/449-21:48:14,45) [migration/6]
(root,0,0,00:03:02/449-21:48:14,46) [ksoftirqd/6]
(root,0,0,00:00:00/449-21:48:14,48) [kworker/6:0H]
(root,0,0,00:00:00/449-21:48:14,49) [cpuhp/7]
(root,0,0,00:02:56/449-21:48:14,50) [watchdog/7]
(root,0,0,00:02:24/449-21:48:14,51) [migration/7]
(root,0,0,00:03:29/449-21:48:14,52) [ksoftirqd/7]
(root,0,0,00:00:00/449-21:48:14,54) [kworker/7:0H]
(root,0,0,00:00:00/449-21:48:14,55) [kdevtmpfs]
(root,0,0,00:00:00/449-21:48:14,56) [netns]
(root,0,0,00:00:00/449-21:48:14,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/449-21:48:14,58) [kauditd]
(root,0,0,00:01:10/449-21:48:14,62) [khungtaskd]
(root,0,0,00:00:00/449-21:48:14,63) [oom_reaper]
(root,0,0,00:00:00/449-21:48:14,64) [writeback]
(root,0,0,00:00:02/449-21:48:14,65) [kcompactd0]
(root,0,0,00:00:00/449-21:48:14,66) [ksmd]
(root,0,0,00:06:41/449-21:48:14,67) [khugepaged]
(root,0,0,00:00:00/449-21:48:14,68) [crypto]
(root,0,0,00:00:00/449-21:48:14,69) [kintegrityd]
(root,0,0,00:00:00/449-21:48:14,70) [kblockd]
(root,0,0,00:00:00/449-21:48:14,71) [ata_sff]
(root,0,0,00:00:00/449-21:48:14,72) [md]
(root,0,0,00:00:00/449-21:48:14,73) [edac-poller]
(root,0,0,00:00:00/449-21:48:14,74) [devfreq_wq]
(root,0,0,00:00:00/449-21:48:14,75) [watchdogd]
(root,0,0,00:47:48/449-21:48:14,80) [kswapd0]
(root,0,0,00:00:00/449-21:48:14,81) [kworker/u17:0]
(root,0,0,00:00:00/449-21:48:14,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/449-21:48:13,125) [kthrotld]
(root,0,0,00:00:00/449-21:48:13,126) [acpi_thermal_pm]
(root,0,0,00:00:00/449-21:48:13,128) [scsi_eh_0]
(root,0,0,00:00:00/449-21:48:13,129) [scsi_tmf_0]
(root,0,0,00:00:00/449-21:48:13,130) [scsi_eh_1]
(root,0,0,00:00:00/449-21:48:13,131) [scsi_tmf_1]
(root,0,0,00:00:00/449-21:48:13,137) [ipv6_addrconf]
(root,0,0,00:00:00/449-21:48:13,147) [kstrp]
(root,0,0,00:00:00/449-21:48:13,164) [charger_manager]
(root,0,0,00:00:00/449-21:48:12,214) [scsi_eh_2]
(root,0,0,00:00:00/449-21:48:12,215) [scsi_tmf_2]
(root,0,0,00:03:09/449-21:48:12,267) [kworker/7:1H]
(root,0,0,00:35:24/449-21:48:08,268) [kworker/4:1H]
(root,0,0,00:00:37/449-21:48:08,275) [kworker/3:1H]
(root,0,0,00:00:42/449-21:48:07,335) [kworker/1:1H]
(root,0,0,00:00:00/449-21:48:06,342) [raid5wq]
(root,0,0,00:01:08/449-21:48:06,393) [kworker/0:1H]
(root,0,0,01:16:25/449-21:48:06,394) [jbd2/sda1-8]
(root,0,0,00:00:00/449-21:48:06,395) [ext4-rsv-conver]
(root,0,0,00:04:05/449-21:48:06,399) [kworker/5:1H]
(root,0,0,00:00:36/449-21:48:05,423) [kworker/2:1H]
(root,0,0,00:03:25/449-21:48:05,441) [kworker/6:1H]
(gitlab-psql,8311600,73092,00:00:00/23:18,450) postgres: gitlab gitlabhq_production [local] idle
(root,307156,114832,01:06:32/449-21:48:05,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/449-21:48:05,486) [iscsi_eh]
(root,0,0,00:00:00/449-21:48:05,498) [ib-comp-wq]
(root,0,0,00:00:00/449-21:48:05,499) [ib_mcast]
(root,0,0,00:00:00/449-21:48:05,500) [ib_nl_sa_wq]
(root,97708,1616,00:00:00/449-21:48:05,503) /sbin/lvmetad -f
(root,0,0,00:00:00/449-21:48:05,506) [rdma_cm]
(root,43168,3600,00:03:40/449-21:48:05,514) /lib/systemd/systemd-udevd
(systemd-resolve,70628,4740,00:00:00/08:21:21,567) /lib/systemd/systemd-resolved
(systemd-timesync,141928,2868,00:02:13/449-21:48:04,728) /lib/systemd/systemd-timesyncd
(root,25992,3424,00:00:03/449-21:48:02,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383060,2348,00:13:12/449-21:47:59,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:56:51/449-21:47:59,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4180,00:43:06/449-21:47:59,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5604,00:05:46/449-21:47:59,1298) /lib/systemd/systemd-logind
(root,30028,2796,00:01:48/449-21:47:59,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:18:58/449-21:47:59,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:26:39/449-21:47:59,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13312,00:00:00/449-21:47:59,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15844,00:10:29/449-21:47:59,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:02/449-21:47:59,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/449-21:47:59,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,743424,34896,00:08:58/449-21:47:59,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87352,8444,00:41:08/449-21:47:59,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:04:56/449-21:47:59,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:23:34/449-21:47:59,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:20:06/449-21:47:59,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16340,00:00:00/449-21:47:59,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:06:38/449-21:47:59,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:14:00/449-21:47:59,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/449-21:47:59,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/449-21:47:59,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5432,00:01:54/449-21:47:59,1420) nginx: worker process
(www-data,143788,4500,00:00:00/449-21:47:59,1424) nginx: worker process
(www-data,143788,4656,00:00:00/449-21:47:59,1428) nginx: worker process
(www-data,143788,4652,00:00:00/449-21:47:59,1429) nginx: worker process
(root,14888,1684,00:00:00/449-21:47:59,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4780,00:00:00/449-21:47:59,1431) nginx: worker process
(www-data,143788,4652,00:00:00/449-21:47:59,1432) nginx: worker process
(www-data,143788,4656,00:00:00/449-21:47:59,1433) nginx: worker process
(www-data,143788,4780,00:00:00/449-21:47:59,1434) nginx: worker process
(root,4548,1356,00:11:00/449-21:47:59,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:09/449-21:47:59,1534) runsv redis-exporter
(root,4396,768,00:00:09/449-21:47:59,1536) runsv node-exporter
(root,4396,720,00:00:08/449-21:47:59,1537) runsv prometheus
(root,4396,736,00:00:08/449-21:47:59,1538) runsv sidekiq
(root,4396,828,00:00:08/449-21:47:59,1539) runsv gitlab-exporter
(root,4396,1240,14:13:06/449-21:47:59,1540) runsv alertmanager
(root,4396,828,00:00:08/449-21:47:59,1541) runsv postgresql
(root,4396,720,00:00:08/449-21:47:59,1542) runsv postgres-exporter
(root,4396,748,00:00:08/449-21:47:59,1543) runsv grafana
(root,4396,764,00:00:08/449-21:47:59,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:24/449-21:47:59,1545) runsv logrotate
(root,4396,728,00:00:09/449-21:47:59,1546) runsv puma
(root,4396,860,00:00:08/449-21:47:59,1547) runsv nginx
(root,4396,724,00:00:09/449-21:47:59,1548) runsv gitaly
(root,4396,792,00:00:08/449-21:47:59,1549) runsv redis
(root,4396,740,00:00:08/449-21:47:59,1550) runsv registry
(root,4540,1384,03:39:29/449-21:47:59,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:07/449-21:47:59,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:22:26/449-21:47:59,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:16:44/449-21:47:59,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:08/449-21:47:59,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:57/449-21:47:59,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:23/449-21:47:59,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:13:15/449-21:47:59,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:07/449-21:47:59,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:09/449-21:47:59,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:07/449-21:47:59,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:08/449-21:47:59,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:08/449-21:47:59,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:17:42/449-21:47:59,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:12/449-21:47:59,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:08/449-21:47:59,1590) svlogd -tt /var/log/gitlab/puma
(root,0,0,00:01:02/5-23:33:09,2278) [kworker/6:1]
(root,0,0,00:00:00/20:41,3427) [kworker/5:1]
(root,0,0,00:00:00/20:33,3797) [kworker/4:2]
(root,0,0,00:00:00/18:17,6162) [kworker/0:0]
(root,0,0,00:00:05/1-02:56:32,9022) [kworker/5:0]
(root,0,0,00:00:00/15:36,9132) [kworker/7:0]
(root,4628,916,00:00:00/46:30,9181) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8314436,80592,00:00:02/45:33,10286) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:13/3-06:33:10,10611) [kworker/1:1]
(root,0,0,00:00:00/14:13,10740) [kworker/6:2]
(gitlab-psql,8313892,78404,00:00:00/14:08,10855) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/14:01,11128) [kworker/2:2]
(root,0,0,00:00:00/14:00,11250) [kworker/u16:2]
(gitlab-psql,8313788,72252,00:00:00/11:39,13659) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/09:48,15621) [kworker/3:0]
(root,0,0,00:00:25/4-00:46:18,15999) [kworker/7:2]
(root,0,0,00:00:09/2-06:37:10,16527) [kworker/2:1]
(root,0,0,00:00:19/2-05:36:19,18338) [kworker/0:1]
(git,1760100,1001328,00:00:40/03:13:36,19011) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(root,4532,756,00:00:00/36:29,19254) sleep 3000
(gitlab-psql,8306236,44884,00:00:00/06:04,19280) postgres: gitlab gitlabhq_production [local] idle
(git,1722608,992276,00:00:40/03:12:36,20243) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/04:09,21185) [kworker/u16:0]
(gitlab-psql,8312136,72980,00:00:00/34:25,21303) postgres: gitlab gitlabhq_production [local] idle
(git,1760496,1019680,00:00:38/03:11:36,21325) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(gitlab-psql,8306192,46288,00:00:00/03:33,21819) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:42/10-04:54:53,21826) [kworker/4:1]
(git,1716576,1003660,00:00:31/03:10:36,22308) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(root,0,0,00:00:01/33:07,22563) [kworker/u16:1]
(gitlab-psql,8312420,66504,00:00:00/02:44,22635) postgres: gitlab gitlabhq_production [local] idle
(git,1728756,1001376,00:00:36/03:09:36,23301) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8321260,88620,00:00:02/59:27,24291) postgres: gitlab gitlabhq_production [local] idle
(git,1717600,973160,00:00:36/03:08:36,24301) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(git,21440,4644,00:00:00/00:10,25173) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/5e/74/5e74cb2ad4e2c9e2d3f59a1e6c8a5d4999df48e5dd69871d2798e0a146b91ee9.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1332,00:00:00/00:10,25174) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/5e/74/5e74cb2ad4e2c9e2d3f59a1e6c8a5d4999df48e5dd69871d2798e0a146b91ee9.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,1743712,1002304,00:00:31/03:07:36,25295) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(root,20180,3472,00:00:00/00:00,25419) /bin/bash /usr/bin/check_mk_agent
(root,36700,3132,00:00:00/00:00,25437) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1176,00:00:00/00:00,25438) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(gitlab-psql,8318708,87980,00:00:02/30:10,25690) postgres: gitlab gitlabhq_production [local] idle
(git,1765616,1002420,00:00:33/03:06:36,26290) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(git,1392472,880,02:21:26/363-21:58:46,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2183240,142760,2-13:30:35/363-21:58:46,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(root,0,0,00:00:13/3-05:14:51,27439) [kworker/3:1]
(git,314124,45860,5-10:50:28/363-21:58:45,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340328,37880,1-20:40:10/363-21:58:45,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,53228,06:18:44/363-21:58:45,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/363-21:58:44,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,18156,00:00:00/363-21:58:44,27510) nginx: worker process
(gitlab-www,63960,14544,00:00:00/363-21:58:44,27511) nginx: worker process
(gitlab-www,64680,21156,00:00:52/363-21:58:44,27512) nginx: worker process
(gitlab-www,64304,20232,00:00:00/363-21:58:44,27513) nginx: worker process
(gitlab-www,63960,17420,00:00:00/363-21:58:44,27514) nginx: worker process
(gitlab-www,64608,20628,00:00:04/363-21:58:44,27515) nginx: worker process
(gitlab-www,65596,21752,08:37:46/363-21:58:44,27516) nginx: worker process
(gitlab-www,63960,14472,00:00:00/363-21:58:44,27517) nginx: worker process
(gitlab-www,59784,3980,00:04:22/363-21:58:44,27518) nginx: cache manager process
(gitlab-prometheus,719532,14160,1-22:09:07/363-21:58:44,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,16428,1-19:47:22/363-21:58:43,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:30:49/363-21:58:43,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3184572,164932,3-21:47:13/363-21:58:42,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,369112,00:43:32/363-21:58:42,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:10:19/363-21:58:42,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:13:15/363-21:58:42,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:29:09/363-21:58:42,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,05:51:58/363-21:58:42,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:48/363-21:58:42,27581) postgres: logical replication launcher   
(git,2882320,90544,1-04:38:43/363-21:58:41,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,111276,1-05:27:27/363-21:58:41,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,911192,06:25:46/363-21:58:41,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,16064,15-13:41:23/363-21:58:41,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,16592,15:25:49/363-21:58:41,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,20380,01:26:42/363-21:58:40,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:15:45/363-21:58:36,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4753660,1171932,42-05:33:45/363-21:58:36,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,72244,2-01:28:09/363-21:58:31,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,121108,3-18:31:21/363-21:58:19,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8317348,84120,00:00:02/27:29,28727) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:38:15/363-21:57:30,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/363-21:57:30,28929) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/54:20,29957) [kworker/1:2]
(gitlab-psql,8321232,88696,00:00:02/52:44,31565) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-03 00:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912c0204b9d

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8132,00:25:57/429-01:15:10,1) /sbin/init
(root,0,0,00:01:19/429-01:15:10,2) [kthreadd]
(root,0,0,00:00:00/429-01:15:10,4) [kworker/0:0H]
(root,0,0,00:00:00/429-01:15:10,6) [mm_percpu_wq]
(root,0,0,00:06:18/429-01:15:10,7) [ksoftirqd/0]
(root,0,0,14:27:21/429-01:15:10,8) [rcu_sched]
(root,0,0,00:00:00/429-01:15:10,9) [rcu_bh]
(root,0,0,00:02:21/429-01:15:10,10) [migration/0]
(root,0,0,00:02:21/429-01:15:10,11) [watchdog/0]
(root,0,0,00:00:00/429-01:15:10,12) [cpuhp/0]
(root,0,0,00:00:00/429-01:15:10,13) [cpuhp/1]
(root,0,0,00:02:27/429-01:15:10,14) [watchdog/1]
(root,0,0,00:02:26/429-01:15:10,15) [migration/1]
(root,0,0,00:04:21/429-01:15:10,16) [ksoftirqd/1]
(root,0,0,00:00:00/429-01:15:10,18) [kworker/1:0H]
(root,0,0,00:00:00/429-01:15:10,19) [cpuhp/2]
(root,0,0,00:02:26/429-01:15:10,20) [watchdog/2]
(root,0,0,00:02:26/429-01:15:10,21) [migration/2]
(root,0,0,00:03:15/429-01:15:10,22) [ksoftirqd/2]
(root,0,0,00:00:00/429-01:15:10,24) [kworker/2:0H]
(root,0,0,00:00:00/429-01:15:10,25) [cpuhp/3]
(root,0,0,00:02:33/429-01:15:10,26) [watchdog/3]
(root,0,0,00:02:22/429-01:15:10,27) [migration/3]
(root,0,0,00:02:44/429-01:15:10,28) [ksoftirqd/3]
(root,0,0,00:00:00/429-01:15:10,30) [kworker/3:0H]
(root,0,0,00:00:00/429-01:15:10,31) [cpuhp/4]
(root,0,0,00:02:38/429-01:15:10,32) [watchdog/4]
(root,0,0,00:01:57/429-01:15:10,33) [migration/4]
(root,0,0,00:04:11/429-01:15:10,34) [ksoftirqd/4]
(root,0,0,00:00:00/429-01:15:10,36) [kworker/4:0H]
(root,0,0,00:00:00/429-01:15:10,37) [cpuhp/5]
(root,0,0,00:02:41/429-01:15:10,38) [watchdog/5]
(root,0,0,00:02:11/429-01:15:10,39) [migration/5]
(root,0,0,00:04:16/429-01:15:10,40) [ksoftirqd/5]
(root,0,0,00:00:00/429-01:15:10,42) [kworker/5:0H]
(root,0,0,00:00:00/429-01:15:10,43) [cpuhp/6]
(root,0,0,00:02:36/429-01:15:10,44) [watchdog/6]
(root,0,0,00:02:19/429-01:15:10,45) [migration/6]
(root,0,0,00:02:53/429-01:15:10,46) [ksoftirqd/6]
(root,0,0,00:00:00/429-01:15:10,48) [kworker/6:0H]
(root,0,0,00:00:00/429-01:15:10,49) [cpuhp/7]
(root,0,0,00:02:48/429-01:15:10,50) [watchdog/7]
(root,0,0,00:02:17/429-01:15:10,51) [migration/7]
(root,0,0,00:03:19/429-01:15:10,52) [ksoftirqd/7]
(root,0,0,00:00:00/429-01:15:10,54) [kworker/7:0H]
(root,0,0,00:00:00/429-01:15:10,55) [kdevtmpfs]
(root,0,0,00:00:00/429-01:15:10,56) [netns]
(root,0,0,00:00:00/429-01:15:10,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/429-01:15:10,58) [kauditd]
(root,0,0,00:01:07/429-01:15:10,62) [khungtaskd]
(root,0,0,00:00:00/429-01:15:10,63) [oom_reaper]
(root,0,0,00:00:00/429-01:15:10,64) [writeback]
(root,0,0,00:00:01/429-01:15:10,65) [kcompactd0]
(root,0,0,00:00:00/429-01:15:10,66) [ksmd]
(root,0,0,00:06:24/429-01:15:10,67) [khugepaged]
(root,0,0,00:00:00/429-01:15:10,68) [crypto]
(root,0,0,00:00:00/429-01:15:10,69) [kintegrityd]
(root,0,0,00:00:00/429-01:15:10,70) [kblockd]
(root,0,0,00:00:00/429-01:15:10,71) [ata_sff]
(root,0,0,00:00:00/429-01:15:10,72) [md]
(root,0,0,00:00:00/429-01:15:10,73) [edac-poller]
(root,0,0,00:00:00/429-01:15:10,74) [devfreq_wq]
(root,0,0,00:00:00/429-01:15:10,75) [watchdogd]
(root,0,0,00:44:51/429-01:15:10,80) [kswapd0]
(root,0,0,00:00:00/429-01:15:10,81) [kworker/u17:0]
(root,0,0,00:00:00/429-01:15:10,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/429-01:15:09,125) [kthrotld]
(root,0,0,00:00:00/429-01:15:09,126) [acpi_thermal_pm]
(root,0,0,00:00:00/429-01:15:09,128) [scsi_eh_0]
(root,0,0,00:00:00/429-01:15:09,129) [scsi_tmf_0]
(root,0,0,00:00:00/429-01:15:09,130) [scsi_eh_1]
(root,0,0,00:00:00/429-01:15:09,131) [scsi_tmf_1]
(root,0,0,00:00:00/429-01:15:09,137) [ipv6_addrconf]
(root,0,0,00:00:00/429-01:15:09,147) [kstrp]
(root,0,0,00:00:00/429-01:15:09,164) [charger_manager]
(root,0,0,00:00:00/429-01:15:08,214) [scsi_eh_2]
(root,0,0,00:00:00/429-01:15:08,215) [scsi_tmf_2]
(root,0,0,00:03:00/429-01:15:08,267) [kworker/7:1H]
(root,0,0,00:33:40/429-01:15:04,268) [kworker/4:1H]
(root,0,0,00:00:35/429-01:15:04,275) [kworker/3:1H]
(root,0,0,00:00:40/429-01:15:03,335) [kworker/1:1H]
(root,0,0,00:00:00/429-01:15:02,342) [raid5wq]
(root,0,0,00:01:05/429-01:15:02,393) [kworker/0:1H]
(root,0,0,01:13:09/429-01:15:02,394) [jbd2/sda1-8]
(root,0,0,00:00:00/429-01:15:02,395) [ext4-rsv-conver]
(root,0,0,00:03:54/429-01:15:02,399) [kworker/5:1H]
(root,0,0,00:00:34/429-01:15:01,423) [kworker/2:1H]
(root,0,0,00:03:15/429-01:15:01,441) [kworker/6:1H]
(root,216952,76776,01:03:47/429-01:15:01,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/429-01:15:01,486) [iscsi_eh]
(root,0,0,00:00:00/429-01:15:01,498) [ib-comp-wq]
(root,0,0,00:00:00/429-01:15:01,499) [ib_mcast]
(root,0,0,00:00:00/429-01:15:01,500) [ib_nl_sa_wq]
(root,97708,1616,00:00:00/429-01:15:01,503) /sbin/lvmetad -f
(root,0,0,00:00:00/429-01:15:01,506) [rdma_cm]
(root,43168,3600,00:03:30/429-01:15:01,514) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2868,00:02:08/429-01:15:00,728) /lib/systemd/systemd-timesyncd
(root,0,0,00:01:17/8-08:09:23,790) [kworker/0:2]
(root,25992,3424,00:00:03/429-01:14:58,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,382908,2196,00:12:38/429-01:14:55,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:54:15/429-01:14:55,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4180,00:41:08/429-01:14:55,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5604,00:05:32/429-01:14:55,1298) /lib/systemd/systemd-logind
(root,30028,2796,00:01:44/429-01:14:55,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:18:08/429-01:14:55,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:25:26/429-01:14:55,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13312,00:00:00/429-01:14:55,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15904,00:10:08/429-01:14:55,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:02/429-01:14:55,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/429-01:14:55,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,686244,10176,00:08:37/429-01:14:55,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,87104,8196,00:37:42/429-01:14:55,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:04:45/429-01:14:55,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:22:29/429-01:14:55,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/429-01:14:55,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16340,00:00:00/429-01:14:55,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:06:21/429-01:14:55,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:13:25/429-01:14:55,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/429-01:14:55,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/429-01:14:55,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5436,00:01:50/429-01:14:55,1420) nginx: worker process
(www-data,143788,4504,00:00:00/429-01:14:55,1424) nginx: worker process
(www-data,143788,4660,00:00:00/429-01:14:55,1428) nginx: worker process
(www-data,143788,4656,00:00:00/429-01:14:55,1429) nginx: worker process
(root,14888,1684,00:00:00/429-01:14:55,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4784,00:00:00/429-01:14:55,1431) nginx: worker process
(www-data,143788,4656,00:00:00/429-01:14:55,1432) nginx: worker process
(www-data,143788,4660,00:00:00/429-01:14:55,1433) nginx: worker process
(www-data,143788,4784,00:00:00/429-01:14:55,1434) nginx: worker process
(root,4548,1356,00:10:31/429-01:14:55,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:08/429-01:14:55,1534) runsv redis-exporter
(root,4396,768,00:00:09/429-01:14:55,1536) runsv node-exporter
(root,4396,720,00:00:08/429-01:14:55,1537) runsv prometheus
(root,4396,736,00:00:08/429-01:14:55,1538) runsv sidekiq
(root,4396,828,00:00:08/429-01:14:55,1539) runsv gitlab-exporter
(root,4396,1240,13:34:25/429-01:14:55,1540) runsv alertmanager
(root,4396,828,00:00:08/429-01:14:55,1541) runsv postgresql
(root,4396,720,00:00:08/429-01:14:55,1542) runsv postgres-exporter
(root,4396,748,00:00:08/429-01:14:55,1543) runsv grafana
(root,4396,764,00:00:08/429-01:14:55,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:23/429-01:14:55,1545) runsv logrotate
(root,4396,728,00:00:08/429-01:14:55,1546) runsv puma
(root,4396,860,00:00:08/429-01:14:55,1547) runsv nginx
(root,4396,724,00:00:08/429-01:14:55,1548) runsv gitaly
(root,4396,792,00:00:08/429-01:14:55,1549) runsv redis
(root,4396,740,00:00:08/429-01:14:55,1550) runsv registry
(root,4540,1384,03:29:20/429-01:14:55,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:07/429-01:14:55,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:18:36/429-01:14:55,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:11:20/429-01:14:55,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:08/429-01:14:55,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:55/429-01:14:55,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:20/429-01:14:55,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:12:34/429-01:14:55,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:07/429-01:14:55,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:09/429-01:14:55,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:07/429-01:14:55,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:08/429-01:14:55,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:08/429-01:14:55,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:16:54/429-01:14:55,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:11/429-01:14:55,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:07/429-01:14:55,1590) svlogd -tt /var/log/gitlab/puma
(gitlab-psql,8307124,48536,00:00:00/22:33,2176) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/22:12,2488) [kworker/u16:1]
(root,0,0,00:00:11/2-18:14:47,3814) [kworker/2:2]
(root,0,0,00:00:00/04:07:28,3938) [kworker/6:0]
(git,1796848,1046952,00:01:39/08:48:45,4278) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(gitlab-psql,8307124,48532,00:00:00/18:26,6205) postgres: gitlab gitlabhq_production [local] idle
(git,1862496,1038532,00:01:31/08:46:46,6247) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8307400,50372,00:00:00/50:54,6560) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:32/7-04:13:19,7830) [kworker/3:0]
(root,0,0,00:00:00/16:43,7896) [kworker/u16:2]
(git,1757540,1008092,00:01:37/08:44:46,8223) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/02:59:56,8289) [kworker/0:1]
(gitlab-psql,8306216,47052,00:00:00/15:16,9310) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:29:48,9736) [kworker/1:1]
(gitlab-psql,8307272,48696,00:00:00/14:43,9882) postgres: gitlab gitlabhq_production [local] idle
(root,4628,828,00:00:00/14:08,10470) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(git,1600728,986764,00:00:18/02:57:52,10662) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(root,0,0,00:00:34/3-04:22:01,10851) [kworker/6:2]
(gitlab-psql,8307004,51156,00:00:00/12:21,12185) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:05/1-07:51:10,12208) [kworker/1:0]
(root,0,0,00:00:00/03:27:28,12421) [kworker/3:1]
(root,0,0,00:02:09/29-05:02:08,12781) [kworker/4:0]
(gitlab-psql,8307064,48400,00:00:00/11:16,13238) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,5292,00:00:00/02:54:31,13919) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/02:54:31,13930) [kworker/2:1]
(git,1736436,978032,00:00:29/03:25:32,14298) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(git,1523416,914768,00:00:01/08:30,15925) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(root,0,0,00:00:30/6-10:43:55,18624) [kworker/5:0]
(gitlab-psql,8307264,53628,00:00:00/05:40,18701) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307200,54632,00:00:00/38:11,18993) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/04:40,19678) [kworker/u16:0]
(root,4532,812,00:00:00/04:08,20219) sleep 3000
(git,1762544,1032036,00:00:39/03:49:12,21905) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(gitlab-psql,8305208,43140,00:00:00/01:02,23228) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:47:27,23734) [kworker/5:1]
(root,20180,3712,00:00:00/00:00,24283) /bin/bash /usr/bin/check_mk_agent
(root,36700,3152,00:00:00/00:00,24301) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1180,00:00:00/00:00,24302) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(git,1392472,880,02:13:26/343-01:25:42,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2183240,139908,2-09:42:56/343-01:25:42,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,46008,5-03:25:32/343-01:25:41,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340072,40124,1-17:28:08/343-01:25:41,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,56196,05:53:20/343-01:25:41,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/343-01:25:40,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,18156,00:00:00/343-01:25:40,27510) nginx: worker process
(gitlab-www,63960,14544,00:00:00/343-01:25:40,27511) nginx: worker process
(gitlab-www,64680,20504,00:00:47/343-01:25:40,27512) nginx: worker process
(gitlab-www,64092,20356,00:00:00/343-01:25:40,27513) nginx: worker process
(gitlab-www,63960,17420,00:00:00/343-01:25:40,27514) nginx: worker process
(gitlab-www,64608,20636,00:00:04/343-01:25:40,27515) nginx: worker process
(gitlab-www,65596,21784,07:59:16/343-01:25:40,27516) nginx: worker process
(gitlab-www,63960,12144,00:00:00/343-01:25:40,27517) nginx: worker process
(gitlab-www,59784,3980,00:04:08/343-01:25:40,27518) nginx: cache manager process
(gitlab-prometheus,719532,14048,1-19:28:31/343-01:25:40,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,14812,1-17:11:52/343-01:25:39,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:29:15/343-01:25:39,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3230964,170120,3-16:20:38/343-01:25:38,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,357152,00:41:25/343-01:25:38,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:09:45/343-01:25:38,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:12:28/343-01:25:38,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:27:30/343-01:25:38,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,05:31:54/343-01:25:38,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:46/343-01:25:38,27581) postgres: logical replication launcher   
(git,2882320,90280,1-03:04:09/343-01:25:37,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,111704,1-03:48:39/343-01:25:37,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910956,06:07:08/343-01:25:37,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15936,14-15:45:29/343-01:25:37,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,16312,14:33:12/343-01:25:37,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,17792,01:22:23/343-01:25:36,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:15:08/343-01:25:32,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1103712,39-19:46:00/343-01:25:32,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,70924,1-22:36:24/343-01:25:27,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,117664,3-13:10:47/343-01:25:15,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310388,56712,00:00:00/28:41,28453) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:36:10/343-01:24:26,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/343-01:24:26,28929) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/04:13:55,29017) [kworker/4:1]
(gitlab-psql,8310700,56752,00:00:00/01:00:57,29061) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:28/4-04:15:16,29980) [kworker/7:2]
(git,1729264,1000496,00:00:39/03:41:32,30117) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(gitlab-psql,8306744,52804,00:00:00/26:06,31112) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:07:27,32410) [kworker/7:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-01-13 04:15

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912618776e6

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8044,00:25:31/422-03:39:19,1) /sbin/init
(root,0,0,00:01:18/422-03:39:19,2) [kthreadd]
(root,0,0,00:00:00/422-03:39:19,4) [kworker/0:0H]
(root,0,0,00:00:00/422-03:39:19,6) [mm_percpu_wq]
(root,0,0,00:06:10/422-03:39:19,7) [ksoftirqd/0]
(root,0,0,14:12:08/422-03:39:19,8) [rcu_sched]
(root,0,0,00:00:00/422-03:39:19,9) [rcu_bh]
(root,0,0,00:02:18/422-03:39:19,10) [migration/0]
(root,0,0,00:02:19/422-03:39:19,11) [watchdog/0]
(root,0,0,00:00:00/422-03:39:19,12) [cpuhp/0]
(root,0,0,00:00:00/422-03:39:19,13) [cpuhp/1]
(root,0,0,00:02:24/422-03:39:19,14) [watchdog/1]
(root,0,0,00:02:23/422-03:39:19,15) [migration/1]
(root,0,0,00:04:16/422-03:39:19,16) [ksoftirqd/1]
(root,0,0,00:00:00/422-03:39:19,18) [kworker/1:0H]
(root,0,0,00:00:00/422-03:39:19,19) [cpuhp/2]
(root,0,0,00:02:24/422-03:39:19,20) [watchdog/2]
(root,0,0,00:02:24/422-03:39:19,21) [migration/2]
(root,0,0,00:03:11/422-03:39:19,22) [ksoftirqd/2]
(root,0,0,00:00:00/422-03:39:19,24) [kworker/2:0H]
(root,0,0,00:00:00/422-03:39:19,25) [cpuhp/3]
(root,0,0,00:02:30/422-03:39:19,26) [watchdog/3]
(root,0,0,00:02:20/422-03:39:19,27) [migration/3]
(root,0,0,00:02:41/422-03:39:19,28) [ksoftirqd/3]
(root,0,0,00:00:00/422-03:39:19,30) [kworker/3:0H]
(root,0,0,00:00:00/422-03:39:19,31) [cpuhp/4]
(root,0,0,00:02:35/422-03:39:19,32) [watchdog/4]
(root,0,0,00:01:55/422-03:39:19,33) [migration/4]
(root,0,0,00:04:05/422-03:39:19,34) [ksoftirqd/4]
(root,0,0,00:00:00/422-03:39:19,36) [kworker/4:0H]
(root,0,0,00:00:00/422-03:39:19,37) [cpuhp/5]
(root,0,0,00:02:38/422-03:39:19,38) [watchdog/5]
(root,0,0,00:02:09/422-03:39:19,39) [migration/5]
(root,0,0,00:04:10/422-03:39:19,40) [ksoftirqd/5]
(root,0,0,00:00:00/422-03:39:19,42) [kworker/5:0H]
(root,0,0,00:00:00/422-03:39:19,43) [cpuhp/6]
(root,0,0,00:02:33/422-03:39:19,44) [watchdog/6]
(root,0,0,00:02:17/422-03:39:19,45) [migration/6]
(root,0,0,00:02:50/422-03:39:19,46) [ksoftirqd/6]
(root,0,0,00:00:00/422-03:39:19,48) [kworker/6:0H]
(root,0,0,00:00:00/422-03:39:19,49) [cpuhp/7]
(root,0,0,00:02:45/422-03:39:19,50) [watchdog/7]
(root,0,0,00:02:15/422-03:39:19,51) [migration/7]
(root,0,0,00:03:15/422-03:39:19,52) [ksoftirqd/7]
(root,0,0,00:00:00/422-03:39:19,54) [kworker/7:0H]
(root,0,0,00:00:00/422-03:39:19,55) [kdevtmpfs]
(root,0,0,00:00:00/422-03:39:19,56) [netns]
(root,0,0,00:00:00/422-03:39:19,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/422-03:39:19,58) [kauditd]
(root,0,0,00:01:06/422-03:39:19,62) [khungtaskd]
(root,0,0,00:00:00/422-03:39:19,63) [oom_reaper]
(root,0,0,00:00:00/422-03:39:19,64) [writeback]
(root,0,0,00:00:01/422-03:39:19,65) [kcompactd0]
(root,0,0,00:00:00/422-03:39:19,66) [ksmd]
(root,0,0,00:06:17/422-03:39:19,67) [khugepaged]
(root,0,0,00:00:00/422-03:39:19,68) [crypto]
(root,0,0,00:00:00/422-03:39:19,69) [kintegrityd]
(root,0,0,00:00:00/422-03:39:19,70) [kblockd]
(root,0,0,00:00:00/422-03:39:19,71) [ata_sff]
(root,0,0,00:00:00/422-03:39:19,72) [md]
(root,0,0,00:00:00/422-03:39:19,73) [edac-poller]
(root,0,0,00:00:00/422-03:39:19,74) [devfreq_wq]
(root,0,0,00:00:00/422-03:39:19,75) [watchdogd]
(root,0,0,00:43:37/422-03:39:19,80) [kswapd0]
(root,0,0,00:00:00/422-03:39:19,81) [kworker/u17:0]
(root,0,0,00:00:00/422-03:39:19,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/422-03:39:18,125) [kthrotld]
(root,0,0,00:00:00/422-03:39:18,126) [acpi_thermal_pm]
(root,0,0,00:00:00/422-03:39:18,128) [scsi_eh_0]
(root,0,0,00:00:00/422-03:39:18,129) [scsi_tmf_0]
(root,0,0,00:00:00/422-03:39:18,130) [scsi_eh_1]
(root,0,0,00:00:00/422-03:39:18,131) [scsi_tmf_1]
(root,0,0,00:00:00/422-03:39:18,137) [ipv6_addrconf]
(root,0,0,00:00:00/422-03:39:18,147) [kstrp]
(root,0,0,00:00:00/422-03:39:18,164) [charger_manager]
(root,0,0,00:00:00/422-03:39:17,214) [scsi_eh_2]
(root,0,0,00:00:00/422-03:39:17,215) [scsi_tmf_2]
(root,0,0,00:02:57/422-03:39:17,267) [kworker/7:1H]
(root,0,0,00:33:04/422-03:39:13,268) [kworker/4:1H]
(root,0,0,00:00:35/422-03:39:13,275) [kworker/3:1H]
(root,0,0,00:00:39/422-03:39:12,335) [kworker/1:1H]
(root,0,0,00:00:00/422-03:39:11,342) [raid5wq]
(root,0,0,00:01:04/422-03:39:11,393) [kworker/0:1H]
(root,0,0,01:11:52/422-03:39:11,394) [jbd2/sda1-8]
(root,0,0,00:00:00/422-03:39:11,395) [ext4-rsv-conver]
(root,0,0,00:03:50/422-03:39:11,399) [kworker/5:1H]
(root,0,0,00:00:34/422-03:39:10,423) [kworker/2:1H]
(gitlab-psql,8312652,72328,00:00:01/16:05,434) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:03:12/422-03:39:10,441) [kworker/6:1H]
(root,253448,99920,01:02:51/422-03:39:10,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/422-03:39:10,486) [iscsi_eh]
(root,0,0,00:00:00/422-03:39:10,498) [ib-comp-wq]
(root,0,0,00:00:00/422-03:39:10,499) [ib_mcast]
(root,0,0,00:00:00/422-03:39:10,500) [ib_nl_sa_wq]
(root,97708,1628,00:00:00/422-03:39:10,503) /sbin/lvmetad -f
(root,0,0,00:00:00/422-03:39:10,506) [rdma_cm]
(root,43168,3600,00:03:27/422-03:39:10,514) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2892,00:02:06/422-03:39:09,728) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:12/1-10:33:32,790) [kworker/0:2]
(root,25992,3424,00:00:03/422-03:39:07,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383268,2376,00:12:25/422-03:39:04,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:53:21/422-03:39:04,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4180,00:40:31/422-03:39:04,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5636,00:05:26/422-03:39:04,1298) /lib/systemd/systemd-logind
(root,30028,2796,00:01:42/422-03:39:04,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:17:52/422-03:39:04,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:25:02/422-03:39:04,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13312,00:00:00/422-03:39:04,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15940,00:09:57/422-03:39:04,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:02/422-03:39:04,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/422-03:39:04,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,718544,34120,00:08:30/422-03:39:04,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86980,8072,00:36:31/422-03:39:04,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:04:40/422-03:39:04,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:22:09/422-03:39:04,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/422-03:39:04,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16352,00:00:00/422-03:39:04,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:06:15/422-03:39:04,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:13:13/422-03:39:04,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/422-03:39:04,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/422-03:39:04,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5436,00:01:48/422-03:39:04,1420) nginx: worker process
(www-data,143788,4504,00:00:00/422-03:39:04,1424) nginx: worker process
(www-data,143788,4660,00:00:00/422-03:39:04,1428) nginx: worker process
(www-data,143788,4656,00:00:00/422-03:39:04,1429) nginx: worker process
(root,14888,1684,00:00:00/422-03:39:04,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4784,00:00:00/422-03:39:04,1431) nginx: worker process
(www-data,143788,4656,00:00:00/422-03:39:04,1432) nginx: worker process
(www-data,143788,4660,00:00:00/422-03:39:04,1433) nginx: worker process
(www-data,143788,4784,00:00:00/422-03:39:04,1434) nginx: worker process
(root,4548,1356,00:10:20/422-03:39:04,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,0,0,00:00:00/15:06,1529) [kworker/u16:1]
(root,4396,788,00:00:08/422-03:39:04,1534) runsv redis-exporter
(root,4396,768,00:00:09/422-03:39:04,1536) runsv node-exporter
(root,4396,720,00:00:08/422-03:39:04,1537) runsv prometheus
(root,4396,736,00:00:08/422-03:39:04,1538) runsv sidekiq
(root,4396,828,00:00:08/422-03:39:04,1539) runsv gitlab-exporter
(root,4396,1240,13:20:29/422-03:39:04,1540) runsv alertmanager
(root,4396,828,00:00:07/422-03:39:04,1541) runsv postgresql
(root,4396,720,00:00:08/422-03:39:04,1542) runsv postgres-exporter
(root,4396,748,00:00:08/422-03:39:04,1543) runsv grafana
(root,4396,764,00:00:07/422-03:39:04,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:23/422-03:39:04,1545) runsv logrotate
(root,4396,728,00:00:08/422-03:39:04,1546) runsv puma
(root,4396,860,00:00:08/422-03:39:04,1547) runsv nginx
(root,4396,724,00:00:08/422-03:39:04,1548) runsv gitaly
(root,4396,792,00:00:08/422-03:39:04,1549) runsv redis
(root,4396,740,00:00:08/422-03:39:04,1550) runsv registry
(root,4540,1384,03:25:37/422-03:39:04,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:07/422-03:39:04,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:17:13/422-03:39:04,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:09:23/422-03:39:04,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:07/422-03:39:04,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:54/422-03:39:04,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:18/422-03:39:04,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:12:19/422-03:39:04,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:07/422-03:39:04,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:09/422-03:39:04,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:07/422-03:39:04,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:07/422-03:39:04,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:07/422-03:39:04,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:16:37/422-03:39:04,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:11/422-03:39:04,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:07/422-03:39:04,1590) svlogd -tt /var/log/gitlab/puma
(gitlab-psql,8307600,55540,00:00:00/11:24,5384) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/05:36:17,6999) [kworker/3:1]
(root,0,0,00:00:09/2-05:26:20,7623) [kworker/2:2]
(root,0,0,00:00:00/09:02,7740) [kworker/u16:2]
(root,0,0,00:00:01/06:37:28,7830) [kworker/3:0]
(root,0,0,00:00:00/05:35:26,7882) [kworker/6:0]
(gitlab-psql,8315628,85220,00:00:00/39:22,8743) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/06:36:15,9427) [kworker/1:2]
(root,4628,828,00:00:00/38:32,9567) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:57/13-15:12:57,10030) [kworker/1:1]
(git,1798896,1050104,00:01:08/06:35:46,10098) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/06:35:22,10692) [kworker/4:1]
(root,0,0,00:00:00/06:35:14,10884) [kworker/2:1]
(root,0,0,00:00:00/06:34:28,11671) [kworker/5:0]
(root,0,0,00:00:00/04:46,11971) [kworker/0:1]
(root,0,0,00:01:39/22-07:26:17,12781) [kworker/4:0]
(gitlab-psql,8307124,48256,00:00:00/03:42,13004) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8316464,76884,00:00:00/32:54,15177) postgres: gitlab gitlabhq_production [local] idle
(git,1777396,1009188,00:01:10/06:30:45,15465) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(root,0,0,00:00:11/2-11:29:30,15609) [kworker/5:2]
(root,0,0,00:00:01/32:09,15941) [kworker/u16:0]
(git,1722608,1010488,00:00:34/04:21:44,15973) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(gitlab-psql,8318852,81972,00:00:00/31:24,16757) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313740,74244,00:00:00/31:24,16758) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3728,00:00:00/00:00,16797) /bin/bash /usr/bin/check_mk_agent
(root,36700,3056,00:00:00/00:00,16815) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1076,00:00:00/00:00,16816) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(gitlab-psql,8314664,72640,00:00:00/30:29,17758) postgres: gitlab gitlabhq_production [local] idle
(root,4532,744,00:00:00/28:32,19710) sleep 3000
(git,1713392,981932,00:00:41/05:54:25,20968) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(git,1749232,996760,00:00:43/05:21:45,21270) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(root,0,0,00:00:14/1-08:02:49,21276) [kworker/6:1]
(gitlab-psql,8313164,77132,00:00:01/57:00,23635) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:16/2-10:49:15,25395) [kworker/7:1]
(systemd-resolve,70628,4860,00:00:00/06:45:40,26246) /lib/systemd/systemd-resolved
(git,1392472,868,02:10:32/336-03:49:51,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2183240,139708,2-08:23:22/336-03:49:51,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45924,5-00:50:38/336-03:49:50,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340072,38052,1-16:18:19/336-03:49:50,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,52288,05:44:25/336-03:49:50,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(git,1829728,1036612,00:01:23/06:44:46,27486) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(root,55184,6880,00:00:00/336-03:49:49,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,18156,00:00:00/336-03:49:49,27510) nginx: worker process
(gitlab-www,63960,14544,00:00:00/336-03:49:49,27511) nginx: worker process
(gitlab-www,64680,20512,00:00:46/336-03:49:49,27512) nginx: worker process
(gitlab-www,64092,20356,00:00:00/336-03:49:49,27513) nginx: worker process
(gitlab-www,63960,17420,00:00:00/336-03:49:49,27514) nginx: worker process
(gitlab-www,64608,20636,00:00:04/336-03:49:49,27515) nginx: worker process
(gitlab-www,65596,21792,07:45:05/336-03:49:49,27516) nginx: worker process
(gitlab-www,63960,12144,00:00:00/336-03:49:49,27517) nginx: worker process
(gitlab-www,59784,3980,00:04:03/336-03:49:49,27518) nginx: cache manager process
(gitlab-prometheus,719532,15472,1-18:30:15/336-03:49:49,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,16572,1-16:16:27/336-03:49:48,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:28:37/336-03:49:48,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3217088,163700,3-14:23:04/336-03:49:47,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,352152,00:40:13/336-03:49:47,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:09:32/336-03:49:47,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:12:10/336-03:49:47,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:26:54/336-03:49:47,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,05:24:29/336-03:49:47,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:45/336-03:49:47,27581) postgres: logical replication launcher   
(git,2882320,90280,1-02:29:48/336-03:49:46,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,111924,1-03:12:11/336-03:49:46,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910800,05:59:00/336-03:49:46,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15796,14-07:52:01/336-03:49:46,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,14964,14:13:41/336-03:49:46,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,19788,01:20:46/336-03:49:45,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:14:54/336-03:49:41,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703908,1169588,38-23:12:35/336-03:49:41,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,70924,1-21:37:15/336-03:49:36,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,116272,3-11:24:49/336-03:49:24,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:35:25/336-03:48:35,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/336-03:48:35,28929) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/06:42:56,29954) [kworker/7:0]
(root,0,0,00:00:00/06:16:16,30989) [kworker/0:0]
(gitlab-psql,8315308,80576,00:00:01/49:17,31457) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313596,67836,00:00:00/16:35,32271) postgres: gitlab gitlabhq_production [local] idle
(git,1753332,999396,00:00:54/06:15:05,32430) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(git,1652468,957644,00:00:05/16:22,32535) puma: cluster worker 7: 27613 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-01-06 06:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912e91f9ffd

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,7860,00:24:13/403-06:23:59,1) /sbin/init
(root,0,0,00:01:14/403-06:23:59,2) [kthreadd]
(root,0,0,00:00:00/403-06:23:59,4) [kworker/0:0H]
(root,0,0,00:00:00/403-06:23:59,6) [mm_percpu_wq]
(root,0,0,00:05:50/403-06:23:59,7) [ksoftirqd/0]
(root,0,0,13:31:36/403-06:23:59,8) [rcu_sched]
(root,0,0,00:00:00/403-06:23:59,9) [rcu_bh]
(root,0,0,00:02:12/403-06:23:59,10) [migration/0]
(root,0,0,00:02:13/403-06:23:59,11) [watchdog/0]
(root,0,0,00:00:00/403-06:23:59,12) [cpuhp/0]
(root,0,0,00:00:00/403-06:23:59,13) [cpuhp/1]
(root,0,0,00:02:17/403-06:23:59,14) [watchdog/1]
(root,0,0,00:02:17/403-06:23:59,15) [migration/1]
(root,0,0,00:04:03/403-06:23:59,16) [ksoftirqd/1]
(root,0,0,00:00:00/403-06:23:59,18) [kworker/1:0H]
(root,0,0,00:00:00/403-06:23:59,19) [cpuhp/2]
(root,0,0,00:02:17/403-06:23:59,20) [watchdog/2]
(root,0,0,00:02:17/403-06:23:59,21) [migration/2]
(root,0,0,00:03:01/403-06:23:59,22) [ksoftirqd/2]
(root,0,0,00:00:00/403-06:23:59,24) [kworker/2:0H]
(root,0,0,00:00:00/403-06:23:59,25) [cpuhp/3]
(root,0,0,00:02:23/403-06:23:59,26) [watchdog/3]
(root,0,0,00:02:14/403-06:23:59,27) [migration/3]
(root,0,0,00:02:33/403-06:23:59,28) [ksoftirqd/3]
(root,0,0,00:00:00/403-06:23:59,30) [kworker/3:0H]
(root,0,0,00:00:00/403-06:23:59,31) [cpuhp/4]
(root,0,0,00:02:28/403-06:23:59,32) [watchdog/4]
(root,0,0,00:01:50/403-06:23:59,33) [migration/4]
(root,0,0,00:03:50/403-06:23:59,34) [ksoftirqd/4]
(root,0,0,00:00:00/403-06:23:59,36) [kworker/4:0H]
(root,0,0,00:00:00/403-06:23:59,37) [cpuhp/5]
(root,0,0,00:02:31/403-06:23:59,38) [watchdog/5]
(root,0,0,00:02:03/403-06:23:59,39) [migration/5]
(root,0,0,00:03:57/403-06:23:59,40) [ksoftirqd/5]
(root,0,0,00:00:00/403-06:23:59,42) [kworker/5:0H]
(root,0,0,00:00:00/403-06:23:59,43) [cpuhp/6]
(root,0,0,00:02:26/403-06:23:59,44) [watchdog/6]
(root,0,0,00:02:10/403-06:23:59,45) [migration/6]
(root,0,0,00:02:43/403-06:23:59,46) [ksoftirqd/6]
(root,0,0,00:00:00/403-06:23:59,48) [kworker/6:0H]
(root,0,0,00:00:00/403-06:23:59,49) [cpuhp/7]
(root,0,0,00:02:37/403-06:23:59,50) [watchdog/7]
(root,0,0,00:02:09/403-06:23:59,51) [migration/7]
(root,0,0,00:03:06/403-06:23:59,52) [ksoftirqd/7]
(root,0,0,00:00:00/403-06:23:59,54) [kworker/7:0H]
(root,0,0,00:00:00/403-06:23:59,55) [kdevtmpfs]
(root,0,0,00:00:00/403-06:23:59,56) [netns]
(root,0,0,00:00:00/403-06:23:59,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/403-06:23:59,58) [kauditd]
(root,0,0,00:01:03/403-06:23:59,62) [khungtaskd]
(root,0,0,00:00:00/403-06:23:59,63) [oom_reaper]
(root,0,0,00:00:00/403-06:23:59,64) [writeback]
(root,0,0,00:00:01/403-06:23:59,65) [kcompactd0]
(root,0,0,00:00:00/403-06:23:59,66) [ksmd]
(root,0,0,00:06:00/403-06:23:59,67) [khugepaged]
(root,0,0,00:00:00/403-06:23:59,68) [crypto]
(root,0,0,00:00:00/403-06:23:59,69) [kintegrityd]
(root,0,0,00:00:00/403-06:23:59,70) [kblockd]
(root,0,0,00:00:00/403-06:23:59,71) [ata_sff]
(root,0,0,00:00:00/403-06:23:59,72) [md]
(root,0,0,00:00:00/403-06:23:59,73) [edac-poller]
(root,0,0,00:00:00/403-06:23:59,74) [devfreq_wq]
(root,0,0,00:00:00/403-06:23:59,75) [watchdogd]
(root,0,0,00:40:24/403-06:23:59,80) [kswapd0]
(root,0,0,00:00:00/403-06:23:59,81) [kworker/u17:0]
(root,0,0,00:00:00/403-06:23:59,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/403-06:23:58,125) [kthrotld]
(root,0,0,00:00:00/403-06:23:58,126) [acpi_thermal_pm]
(root,0,0,00:00:00/403-06:23:58,128) [scsi_eh_0]
(root,0,0,00:00:00/403-06:23:58,129) [scsi_tmf_0]
(root,0,0,00:00:00/403-06:23:58,130) [scsi_eh_1]
(root,0,0,00:00:00/403-06:23:58,131) [scsi_tmf_1]
(root,0,0,00:00:00/403-06:23:58,137) [ipv6_addrconf]
(root,0,0,00:00:00/403-06:23:58,147) [kstrp]
(root,0,0,00:00:00/403-06:23:58,164) [charger_manager]
(root,0,0,00:00:00/403-06:23:57,214) [scsi_eh_2]
(root,0,0,00:00:00/403-06:23:57,215) [scsi_tmf_2]
(root,0,0,00:02:49/403-06:23:57,267) [kworker/7:1H]
(root,0,0,00:31:28/403-06:23:53,268) [kworker/4:1H]
(root,0,0,00:00:33/403-06:23:53,275) [kworker/3:1H]
(root,0,0,00:00:37/403-06:23:52,335) [kworker/1:1H]
(root,0,0,00:00:00/403-06:23:51,342) [raid5wq]
(root,0,0,00:01:00/403-06:23:51,393) [kworker/0:1H]
(root,0,0,01:08:28/403-06:23:51,394) [jbd2/sda1-8]
(root,0,0,00:00:00/403-06:23:51,395) [ext4-rsv-conver]
(root,0,0,00:03:39/403-06:23:51,399) [kworker/5:1H]
(root,0,0,00:00:32/403-06:23:50,423) [kworker/2:1H]
(root,0,0,00:03:02/403-06:23:50,441) [kworker/6:1H]
(root,212584,79420,00:59:55/403-06:23:50,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/403-06:23:50,486) [iscsi_eh]
(root,0,0,00:00:00/403-06:23:50,498) [ib-comp-wq]
(root,0,0,00:00:00/403-06:23:50,499) [ib_mcast]
(root,0,0,00:00:00/403-06:23:50,500) [ib_nl_sa_wq]
(root,97708,1632,00:00:00/403-06:23:50,503) /sbin/lvmetad -f
(root,0,0,00:00:00/403-06:23:50,506) [rdma_cm]
(root,43168,3600,00:03:17/403-06:23:50,514) /lib/systemd/systemd-udevd
(root,20180,3460,00:00:00/00:00,703) /bin/bash /usr/bin/check_mk_agent
(root,34400,2828,00:00:00/00:00,721) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1172,00:00:00/00:00,722) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(systemd-timesync,141928,2904,00:02:00/403-06:23:49,728) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:14/3-09:21:42,861) [kworker/1:2]
(root,25992,3424,00:00:03/403-06:23:47,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383268,2312,00:11:49/403-06:23:44,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:50:54/403-06:23:44,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4184,00:38:37/403-06:23:44,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5648,00:05:09/403-06:23:44,1298) /lib/systemd/systemd-logind
(root,30028,2796,00:01:37/403-06:23:44,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:17:03/403-06:23:44,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:23:49/403-06:23:44,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13312,00:00:00/403-06:23:44,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15972,00:09:28/403-06:23:44,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:02/403-06:23:44,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/403-06:23:44,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,677536,30652,00:08:08/403-06:23:44,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86856,7948,00:33:20/403-06:23:44,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:04:28/403-06:23:44,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:21:08/403-06:23:44,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/403-06:23:44,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16352,00:00:00/403-06:23:44,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:05:57/403-06:23:44,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:12:36/403-06:23:44,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/403-06:23:44,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/403-06:23:44,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5436,00:01:43/403-06:23:44,1420) nginx: worker process
(www-data,143788,4504,00:00:00/403-06:23:44,1424) nginx: worker process
(www-data,143788,4660,00:00:00/403-06:23:44,1428) nginx: worker process
(www-data,143788,4656,00:00:00/403-06:23:44,1429) nginx: worker process
(root,14888,1684,00:00:00/403-06:23:44,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4784,00:00:00/403-06:23:44,1431) nginx: worker process
(www-data,143788,4656,00:00:00/403-06:23:44,1432) nginx: worker process
(www-data,143788,4660,00:00:00/403-06:23:44,1433) nginx: worker process
(www-data,143788,4784,00:00:00/403-06:23:44,1434) nginx: worker process
(root,4548,1356,00:09:51/403-06:23:44,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:08/403-06:23:44,1534) runsv redis-exporter
(root,4396,768,00:00:08/403-06:23:44,1536) runsv node-exporter
(root,4396,720,00:00:07/403-06:23:44,1537) runsv prometheus
(root,4396,736,00:00:07/403-06:23:44,1538) runsv sidekiq
(root,4396,828,00:00:07/403-06:23:44,1539) runsv gitlab-exporter
(root,4396,1240,12:42:41/403-06:23:44,1540) runsv alertmanager
(root,4396,828,00:00:07/403-06:23:44,1541) runsv postgresql
(root,4396,720,00:00:08/403-06:23:44,1542) runsv postgres-exporter
(root,4396,748,00:00:07/403-06:23:44,1543) runsv grafana
(root,4396,764,00:00:07/403-06:23:44,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:22/403-06:23:44,1545) runsv logrotate
(root,4396,728,00:00:08/403-06:23:44,1546) runsv puma
(root,4396,860,00:00:07/403-06:23:44,1547) runsv nginx
(root,4396,724,00:00:08/403-06:23:44,1548) runsv gitaly
(root,4396,792,00:00:08/403-06:23:44,1549) runsv redis
(root,4396,740,00:00:08/403-06:23:44,1550) runsv registry
(root,4540,1384,03:15:36/403-06:23:44,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:06/403-06:23:44,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:13:40/403-06:23:44,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:04:09/403-06:23:44,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:07/403-06:23:44,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:51/403-06:23:44,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:14/403-06:23:44,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:11:43/403-06:23:44,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:07/403-06:23:44,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:08/403-06:23:44,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:07/403-06:23:44,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:07/403-06:23:44,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:07/403-06:23:44,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:15:50/403-06:23:44,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:11/403-06:23:44,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:07/403-06:23:44,1590) svlogd -tt /var/log/gitlab/puma
(root,0,0,00:00:30/4-13:52:59,1925) [kworker/7:2]
(root,0,0,00:00:00/09:16:28,2390) [kworker/4:2]
(gitlab-psql,8307164,52140,00:00:00/27:33,5749) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:19/4-06:25:16,6657) [kworker/5:0]
(gitlab-psql,8307272,48768,00:00:00/58:11,7835) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307120,49244,00:00:00/57:42,8339) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:40/9-08:16:04,8843) [kworker/2:1]
(root,4628,876,00:00:00/23:50,9460) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:45/4-06:20:16,11787) [kworker/6:2]
(root,0,0,00:00:15/3-10:10:57,12781) [kworker/4:0]
(gitlab-psql,8309664,56008,00:00:00/52:29,13392) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:23/5-08:34:11,14192) [kworker/3:1]
(root,4532,808,00:00:00/13:50,19295) sleep 3000
(root,0,0,00:00:00/12:20,20738) [kworker/u16:0]
(root,0,0,00:00:00/12:10:27,21173) [kworker/7:0]
(git,1661144,957652,00:00:59/09:58:40,21868) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(git,1642712,952572,00:00:59/09:57:40,22847) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(gitlab-psql,8306788,51724,00:00:00/41:55,23761) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307076,52892,00:00:00/41:55,23765) postgres: gitlab gitlabhq_production [local] idle
(git,1650904,953560,00:01:01/09:56:40,23832) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(gitlab-psql,8307124,48212,00:00:00/08:22,24617) postgres: gitlab gitlabhq_production [local] idle
(git,1650904,955124,00:01:00/09:55:40,24828) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(gitlab-psql,8307124,49104,00:00:00/40:01,25590) postgres: gitlab gitlabhq_production [local] idle
(git,1661144,951920,00:00:57/09:54:40,25801) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(root,0,0,00:00:01/39:47,25869) [kworker/u16:1]
(gitlab-psql,8307124,48228,00:00:00/07:01,25936) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,5132,00:00:00/07:13:50,26374) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/07:13:50,26387) [kworker/6:1]
(root,0,0,00:00:00/02:50:25,26689) [kworker/0:0]
(git,1650904,955060,00:01:00/09:53:40,26793) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(git,1392472,868,02:02:39/317-06:34:31,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182984,132804,2-05:03:30/317-06:34:31,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45856,4-17:51:44/317-06:34:30,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340072,36752,1-13:12:07/317-06:34:30,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,51432,05:20:19/317-06:34:30,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/317-06:34:29,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,18156,00:00:00/317-06:34:29,27510) nginx: worker process
(gitlab-www,63960,14548,00:00:00/317-06:34:29,27511) nginx: worker process
(gitlab-www,64680,20520,00:00:44/317-06:34:29,27512) nginx: worker process
(gitlab-www,63960,17264,00:00:00/317-06:34:29,27513) nginx: worker process
(gitlab-www,63960,17420,00:00:00/317-06:34:29,27514) nginx: worker process
(gitlab-www,64344,19380,00:00:04/317-06:34:29,27515) nginx: worker process
(gitlab-www,65596,21852,07:07:32/317-06:34:29,27516) nginx: worker process
(gitlab-www,63960,12148,00:00:00/317-06:34:29,27517) nginx: worker process
(gitlab-www,59784,3980,00:03:48/317-06:34:29,27518) nginx: cache manager process
(gitlab-prometheus,719532,14092,1-15:52:15/317-06:34:29,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,15008,1-13:47:19/317-06:34:28,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:26:53/317-06:34:28,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3203632,160544,3-09:02:19/317-06:34:27,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,347700,00:37:39/317-06:34:27,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:08:58/317-06:34:27,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:11:31/317-06:34:27,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:25:17/317-06:34:27,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,05:04:34/317-06:34:27,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:42/317-06:34:27,27581) postgres: logical replication launcher   
(git,2882320,90280,1-00:55:38/317-06:34:26,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,112076,1-01:34:45/317-06:34:26,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910732,05:37:45/317-06:34:26,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15504,13-10:44:25/317-06:34:26,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,14712,13:20:36/317-06:34:26,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,21256,01:16:11/317-06:34:25,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:14:16/317-06:34:21,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1168332,36-16:09:43/317-06:34:21,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,70924,1-18:57:17/317-06:34:16,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(git,1659096,953900,00:00:59/09:52:40,27986) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(gitlab-psql,8309408,115536,3-06:40:50/317-06:34:04,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:33:17/317-06:33:15,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/317-06:33:15,28929) postgres: gitlab gitlabhq_production [local] idle
(git,1661144,955008,00:01:00/09:51:40,29043) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/07:44:05,29259) [kworker/3:0]
(gitlab-psql,8307124,48328,00:00:00/03:22,29813) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/09:21:35,29823) [kworker/1:1]
(root,0,0,00:00:00/09:21:23,30028) [kworker/2:2]
(root,0,0,00:00:00/02:46:05,31277) [kworker/5:1]
(root,0,0,00:00:00/01:53,31301) [kworker/u16:2]
(root,0,0,00:01:09/7-09:18:22,31572) [kworker/0:2]
(gitlab-psql,8304572,36400,00:00:00/00:53,32255) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310392,55524,00:00:00/33:31,32293) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-12-18 09:24

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912d8d64c59

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8040,00:23:26/392-20:10:24,1) /sbin/init
(root,0,0,00:01:12/392-20:10:24,2) [kthreadd]
(root,0,0,00:00:00/392-20:10:24,4) [kworker/0:0H]
(root,0,0,00:00:00/392-20:10:24,6) [mm_percpu_wq]
(root,0,0,00:05:39/392-20:10:24,7) [ksoftirqd/0]
(root,0,0,13:08:46/392-20:10:24,8) [rcu_sched]
(root,0,0,00:00:00/392-20:10:24,9) [rcu_bh]
(root,0,0,00:02:09/392-20:10:24,10) [migration/0]
(root,0,0,00:02:09/392-20:10:24,11) [watchdog/0]
(root,0,0,00:00:00/392-20:10:24,12) [cpuhp/0]
(root,0,0,00:00:00/392-20:10:24,13) [cpuhp/1]
(root,0,0,00:02:13/392-20:10:24,14) [watchdog/1]
(root,0,0,00:02:13/392-20:10:24,15) [migration/1]
(root,0,0,00:03:56/392-20:10:24,16) [ksoftirqd/1]
(root,0,0,00:00:00/392-20:10:24,18) [kworker/1:0H]
(root,0,0,00:00:00/392-20:10:24,19) [cpuhp/2]
(root,0,0,00:02:13/392-20:10:24,20) [watchdog/2]
(root,0,0,00:02:13/392-20:10:24,21) [migration/2]
(root,0,0,00:02:56/392-20:10:24,22) [ksoftirqd/2]
(root,0,0,00:00:00/392-20:10:24,24) [kworker/2:0H]
(root,0,0,00:00:00/392-20:10:24,25) [cpuhp/3]
(root,0,0,00:02:19/392-20:10:24,26) [watchdog/3]
(root,0,0,00:02:10/392-20:10:24,27) [migration/3]
(root,0,0,00:02:29/392-20:10:24,28) [ksoftirqd/3]
(root,0,0,00:00:00/392-20:10:24,30) [kworker/3:0H]
(root,0,0,00:00:00/392-20:10:24,31) [cpuhp/4]
(root,0,0,00:02:24/392-20:10:24,32) [watchdog/4]
(root,0,0,00:01:47/392-20:10:24,33) [migration/4]
(root,0,0,00:03:41/392-20:10:24,34) [ksoftirqd/4]
(root,0,0,00:00:00/392-20:10:24,36) [kworker/4:0H]
(root,0,0,00:00:00/392-20:10:24,37) [cpuhp/5]
(root,0,0,00:02:27/392-20:10:24,38) [watchdog/5]
(root,0,0,00:01:59/392-20:10:24,39) [migration/5]
(root,0,0,00:03:49/392-20:10:24,40) [ksoftirqd/5]
(root,0,0,00:00:00/392-20:10:24,42) [kworker/5:0H]
(root,0,0,00:00:00/392-20:10:24,43) [cpuhp/6]
(root,0,0,00:02:22/392-20:10:24,44) [watchdog/6]
(root,0,0,00:02:07/392-20:10:24,45) [migration/6]
(root,0,0,00:02:38/392-20:10:24,46) [ksoftirqd/6]
(root,0,0,00:00:00/392-20:10:24,48) [kworker/6:0H]
(root,0,0,00:00:00/392-20:10:24,49) [cpuhp/7]
(root,0,0,00:02:33/392-20:10:24,50) [watchdog/7]
(root,0,0,00:02:06/392-20:10:24,51) [migration/7]
(root,0,0,00:03:01/392-20:10:24,52) [ksoftirqd/7]
(root,0,0,00:00:00/392-20:10:24,54) [kworker/7:0H]
(root,0,0,00:00:00/392-20:10:24,55) [kdevtmpfs]
(root,0,0,00:00:00/392-20:10:24,56) [netns]
(root,0,0,00:00:00/392-20:10:24,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/392-20:10:24,58) [kauditd]
(root,0,0,00:01:01/392-20:10:24,62) [khungtaskd]
(root,0,0,00:00:00/392-20:10:24,63) [oom_reaper]
(root,0,0,00:00:00/392-20:10:24,64) [writeback]
(root,0,0,00:00:01/392-20:10:24,65) [kcompactd0]
(root,0,0,00:00:00/392-20:10:24,66) [ksmd]
(root,0,0,00:05:50/392-20:10:24,67) [khugepaged]
(root,0,0,00:00:00/392-20:10:24,68) [crypto]
(root,0,0,00:00:00/392-20:10:24,69) [kintegrityd]
(root,0,0,00:00:00/392-20:10:24,70) [kblockd]
(root,0,0,00:00:00/392-20:10:24,71) [ata_sff]
(root,0,0,00:00:00/392-20:10:24,72) [md]
(root,0,0,00:00:00/392-20:10:24,73) [edac-poller]
(root,0,0,00:00:00/392-20:10:24,74) [devfreq_wq]
(root,0,0,00:00:00/392-20:10:24,75) [watchdogd]
(root,0,0,00:38:33/392-20:10:24,80) [kswapd0]
(root,0,0,00:00:00/392-20:10:24,81) [kworker/u17:0]
(root,0,0,00:00:00/392-20:10:24,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/392-20:10:23,125) [kthrotld]
(root,0,0,00:00:00/392-20:10:23,126) [acpi_thermal_pm]
(root,0,0,00:00:00/392-20:10:23,128) [scsi_eh_0]
(root,0,0,00:00:00/392-20:10:23,129) [scsi_tmf_0]
(root,0,0,00:00:00/392-20:10:23,130) [scsi_eh_1]
(root,0,0,00:00:00/392-20:10:23,131) [scsi_tmf_1]
(root,0,0,00:00:00/392-20:10:23,137) [ipv6_addrconf]
(root,0,0,00:00:00/392-20:10:23,147) [kstrp]
(root,0,0,00:00:00/392-20:10:23,164) [charger_manager]
(root,0,0,00:00:00/392-20:10:22,214) [scsi_eh_2]
(root,0,0,00:00:00/392-20:10:22,215) [scsi_tmf_2]
(root,0,0,00:02:44/392-20:10:22,267) [kworker/7:1H]
(root,0,0,00:30:32/392-20:10:18,268) [kworker/4:1H]
(root,0,0,00:00:31/392-20:10:18,275) [kworker/3:1H]
(root,0,0,00:00:36/392-20:10:17,335) [kworker/1:1H]
(root,0,0,00:00:00/392-20:10:16,342) [raid5wq]
(root,0,0,00:00:58/392-20:10:16,393) [kworker/0:1H]
(root,0,0,01:06:35/392-20:10:16,394) [jbd2/sda1-8]
(root,0,0,00:00:00/392-20:10:16,395) [ext4-rsv-conver]
(root,0,0,00:03:33/392-20:10:16,399) [kworker/5:1H]
(root,0,0,00:00:31/392-20:10:15,423) [kworker/2:1H]
(root,0,0,00:02:57/392-20:10:15,441) [kworker/6:1H]
(root,229108,107816,00:57:35/392-20:10:15,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/392-20:10:15,486) [iscsi_eh]
(root,0,0,00:00:00/392-20:10:15,498) [ib-comp-wq]
(root,0,0,00:00:00/392-20:10:15,499) [ib_mcast]
(root,0,0,00:00:00/392-20:10:15,500) [ib_nl_sa_wq]
(root,97708,1632,00:00:00/392-20:10:15,503) /sbin/lvmetad -f
(root,0,0,00:00:00/392-20:10:15,506) [rdma_cm]
(root,43168,3600,00:03:12/392-20:10:15,514) /lib/systemd/systemd-udevd
(systemd-timesync,141928,2948,00:01:57/392-20:10:14,728) /lib/systemd/systemd-timesyncd
(root,25992,3424,00:00:02/392-20:10:12,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383268,2372,00:11:29/392-20:10:09,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:49:32/392-20:10:09,1283) /usr/sbin/irqbalance --foreground
(messagebus,50604,4184,00:37:16/392-20:10:09,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5692,00:05:00/392-20:10:09,1298) /lib/systemd/systemd-logind
(root,30028,2796,00:01:35/392-20:10:09,1308) /usr/sbin/cron -f
(syslog,263036,4604,00:16:22/392-20:10:09,1323) /usr/sbin/rsyslogd -n
(root,286352,6516,00:23:01/392-20:10:09,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13312,00:00:00/392-20:10:09,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,16008,00:09:13/392-20:10:09,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:02/392-20:10:09,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/392-20:10:09,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,693948,23360,00:07:49/392-20:10:09,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86732,7824,00:30:38/392-20:10:09,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:04:17/392-20:10:09,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6004,00:20:24/392-20:10:09,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/392-20:10:09,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16352,00:00:00/392-20:10:09,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:05:47/392-20:10:09,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6084,00:12:04/392-20:10:09,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/392-20:10:09,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/392-20:10:09,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5436,00:01:40/392-20:10:09,1420) nginx: worker process
(www-data,143788,4504,00:00:00/392-20:10:09,1424) nginx: worker process
(www-data,143788,4660,00:00:00/392-20:10:09,1428) nginx: worker process
(www-data,143788,4656,00:00:00/392-20:10:09,1429) nginx: worker process
(root,14888,1684,00:00:00/392-20:10:09,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4784,00:00:00/392-20:10:09,1431) nginx: worker process
(www-data,143788,4656,00:00:00/392-20:10:09,1432) nginx: worker process
(www-data,143788,4660,00:00:00/392-20:10:09,1433) nginx: worker process
(www-data,143788,4784,00:00:00/392-20:10:09,1434) nginx: worker process
(root,4548,1356,00:09:35/392-20:10:09,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:08/392-20:10:09,1534) runsv redis-exporter
(root,4396,768,00:00:08/392-20:10:09,1536) runsv node-exporter
(root,4396,720,00:00:07/392-20:10:09,1537) runsv prometheus
(root,4396,736,00:00:07/392-20:10:09,1538) runsv sidekiq
(root,4396,828,00:00:07/392-20:10:09,1539) runsv gitlab-exporter
(root,4396,1240,12:21:51/392-20:10:09,1540) runsv alertmanager
(root,4396,828,00:00:07/392-20:10:09,1541) runsv postgresql
(root,4396,720,00:00:07/392-20:10:09,1542) runsv postgres-exporter
(root,4396,748,00:00:07/392-20:10:09,1543) runsv grafana
(root,4396,764,00:00:07/392-20:10:09,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:21/392-20:10:09,1545) runsv logrotate
(root,4396,728,00:00:08/392-20:10:09,1546) runsv puma
(root,4396,860,00:00:07/392-20:10:09,1547) runsv nginx
(root,4396,724,00:00:07/392-20:10:09,1548) runsv gitaly
(root,4396,792,00:00:07/392-20:10:09,1549) runsv redis
(root,4396,740,00:00:07/392-20:10:09,1550) runsv registry
(root,4540,1384,03:10:03/392-20:10:09,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:06/392-20:10:09,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:11:41/392-20:10:09,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,01:01:15/392-20:10:09,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:07/392-20:10:09,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:50/392-20:10:09,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:12/392-20:10:09,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:11:23/392-20:10:09,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:06/392-20:10:09,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:08/392-20:10:09,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:06/392-20:10:09,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:07/392-20:10:09,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:07/392-20:10:09,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:15:24/392-20:10:09,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:10/392-20:10:09,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:07/392-20:10:09,1590) svlogd -tt /var/log/gitlab/puma
(gitlab-psql,8306628,50624,00:00:00/18:41,2586) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/17:12,4188) [kworker/1:1]
(root,0,0,00:00:00/17:09,4330) [kworker/u16:3]
(root,0,0,00:00:09/1-00:10:21,5378) [kworker/0:0]
(gitlab-psql,8307124,52568,00:00:00/14:20,7114) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/06:27:09,7897) [kworker/1:0]
(root,0,0,00:00:05/1-04:15:19,8649) [kworker/2:0]
(systemd-resolve,70628,5092,00:00:00/01:45:43,9056) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/12:11,9333) [kworker/4:0]
(root,0,0,00:00:00/42:12,10414) [kworker/2:2]
(root,4628,876,00:00:00/10:36,10963) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(git,1519832,918020,00:00:01/10:00,11569) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(git,1515224,911276,00:00:01/09:00,12560) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(git,1527000,916224,00:00:01/08:00,13553) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(gitlab-psql,8307308,54304,00:00:00/07:45,13785) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:02/02:12:09,14087) [kworker/u16:2]
(root,0,0,00:00:00/07:11,14472) [kworker/7:1]
(root,0,0,00:00:00/07:08,14631) [kworker/5:2]
(git,1519320,912716,00:00:01/07:00,14760) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(gitlab-psql,8304608,38136,00:00:00/06:28,15237) postgres: gitlab gitlabhq_production [local] idle
(git,1527000,925636,00:00:01/06:00,15744) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(gitlab-psql,8307232,53980,00:00:00/05:44,15988) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307168,53372,00:00:00/05:44,15989) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307296,53708,00:00:00/05:41,16046) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306788,52568,00:00:00/36:29,16527) postgres: gitlab gitlabhq_production [local] idle
(git,1507544,901176,00:00:00/05:00,16735) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(git,1516760,911084,00:00:00/04:00,17728) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(gitlab-psql,8306656,43604,00:00:00/03:35,18110) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:01/04:12:08,18413) [kworker/7:2]
(git,1517784,909452,00:00:00/03:00,18718) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(gitlab-psql,8306892,53684,00:00:00/02:38,19065) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306876,47316,00:00:00/02:37,19067) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307272,54120,00:00:00/02:14,19473) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/02:10,19646) [kworker/6:2]
(gitlab-psql,8306972,50512,00:00:00/01:00,20866) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/32:12,20937) [kworker/0:1]
(root,0,0,00:00:12/1-02:30:21,21034) [kworker/6:1]
(root,4532,816,00:00:00/00:36,21244) sleep 3000
(root,72296,5584,00:00:00/00:01,21844) sshd: [accepted]
(sshd,72296,2968,00:00:00/00:01,21888) sshd: [net]
(root,20180,3684,00:00:00/00:01,21961) /bin/bash /usr/bin/check_mk_agent
(root,36700,3096,00:00:00/00:00,21979) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1160,00:00:00/00:00,21980) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:05/1-03:00:21,22186) [kworker/4:1]
(root,0,0,00:00:08/06:12:08,23435) [kworker/u16:1]
(root,0,0,00:00:27/6-04:06:50,26451) [kworker/3:2]
(git,1392472,868,01:58:17/306-20:20:56,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182984,136972,2-03:09:53/306-20:20:56,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,46008,4-13:58:32/306-20:20:55,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2340072,39508,1-11:28:46/306-20:20:55,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,50156,05:07:09/306-20:20:55,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/306-20:20:54,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,18156,00:00:00/306-20:20:54,27510) nginx: worker process
(gitlab-www,63960,11708,00:00:00/306-20:20:54,27511) nginx: worker process
(gitlab-www,64680,20624,00:00:42/306-20:20:54,27512) nginx: worker process
(gitlab-www,63960,17364,00:00:00/306-20:20:54,27513) nginx: worker process
(gitlab-www,63960,14780,00:00:00/306-20:20:54,27514) nginx: worker process
(gitlab-www,64344,19380,00:00:04/306-20:20:54,27515) nginx: worker process
(gitlab-www,65596,21880,06:46:28/306-20:20:54,27516) nginx: worker process
(gitlab-www,63960,12252,00:00:00/306-20:20:54,27517) nginx: worker process
(gitlab-www,59784,3980,00:03:40/306-20:20:54,27518) nginx: cache manager process
(gitlab-prometheus,719532,15700,1-14:24:14/306-20:20:54,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,15352,1-12:24:45/306-20:20:53,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:25:56/306-20:20:53,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3184628,167548,3-06:05:53/306-20:20:52,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,343752,00:36:00/306-20:20:52,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:08:39/306-20:20:52,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:11:07/306-20:20:52,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:24:22/306-20:20:52,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,04:53:33/306-20:20:52,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:41/306-20:20:52,27581) postgres: logical replication launcher   
(git,2882320,90280,1-00:03:05/306-20:20:51,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,112476,1-00:40:35/306-20:20:51,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910652,05:25:39/306-20:20:51,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15484,12-22:58:42/306-20:20:51,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,15892,12:51:02/306-20:20:51,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,19292,01:13:33/306-20:20:50,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:13:55/306-20:20:46,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1176772,35-09:39:26/306-20:20:46,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,70924,1-17:28:03/306-20:20:41,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,114800,3-04:01:44/306-20:20:29,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:32:07/306-20:19:40,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/306-20:19:40,28929) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/22:12,31468) [kworker/3:1]
(root,0,0,00:00:32/6-21:46:28,31976) [kworker/5:1]
(root,0,0,00:00:00/52:11,32476) [kworker/6:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-12-07 23:10

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912d797b933

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8164,00:21:52/364-19:16:50,1) /sbin/init
(root,0,0,00:01:08/364-19:16:50,2) [kthreadd]
(root,0,0,00:00:00/364-19:16:50,4) [kworker/0:0H]
(root,0,0,00:00:00/364-19:16:50,6) [mm_percpu_wq]
(root,0,0,00:05:18/364-19:16:50,7) [ksoftirqd/0]
(root,0,0,12:15:12/364-19:16:50,8) [rcu_sched]
(root,0,0,00:00:00/364-19:16:50,9) [rcu_bh]
(root,0,0,00:02:01/364-19:16:50,10) [migration/0]
(root,0,0,00:02:00/364-19:16:50,11) [watchdog/0]
(root,0,0,00:00:00/364-19:16:50,12) [cpuhp/0]
(root,0,0,00:00:00/364-19:16:50,13) [cpuhp/1]
(root,0,0,00:02:05/364-19:16:50,14) [watchdog/1]
(root,0,0,00:02:05/364-19:16:50,15) [migration/1]
(root,0,0,00:03:42/364-19:16:50,16) [ksoftirqd/1]
(root,0,0,00:00:00/364-19:16:50,18) [kworker/1:0H]
(root,0,0,00:00:00/364-19:16:50,19) [cpuhp/2]
(root,0,0,00:02:05/364-19:16:50,20) [watchdog/2]
(root,0,0,00:02:05/364-19:16:50,21) [migration/2]
(root,0,0,00:02:46/364-19:16:50,22) [ksoftirqd/2]
(root,0,0,00:00:00/364-19:16:50,24) [kworker/2:0H]
(root,0,0,00:00:00/364-19:16:50,25) [cpuhp/3]
(root,0,0,00:02:10/364-19:16:50,26) [watchdog/3]
(root,0,0,00:02:02/364-19:16:50,27) [migration/3]
(root,0,0,00:02:21/364-19:16:50,28) [ksoftirqd/3]
(root,0,0,00:00:00/364-19:16:50,30) [kworker/3:0H]
(root,0,0,00:00:00/364-19:16:50,31) [cpuhp/4]
(root,0,0,00:02:15/364-19:16:50,32) [watchdog/4]
(root,0,0,00:01:40/364-19:16:50,33) [migration/4]
(root,0,0,00:03:22/364-19:16:50,34) [ksoftirqd/4]
(root,0,0,00:00:00/364-19:16:50,36) [kworker/4:0H]
(root,0,0,00:00:00/364-19:16:50,37) [cpuhp/5]
(root,0,0,00:02:17/364-19:16:50,38) [watchdog/5]
(root,0,0,00:01:52/364-19:16:50,39) [migration/5]
(root,0,0,00:03:34/364-19:16:50,40) [ksoftirqd/5]
(root,0,0,00:00:00/364-19:16:50,42) [kworker/5:0H]
(root,0,0,00:00:00/364-19:16:50,43) [cpuhp/6]
(root,0,0,00:02:13/364-19:16:50,44) [watchdog/6]
(root,0,0,00:01:59/364-19:16:50,45) [migration/6]
(root,0,0,00:02:29/364-19:16:50,46) [ksoftirqd/6]
(root,0,0,00:00:00/364-19:16:50,48) [kworker/6:0H]
(root,0,0,00:00:00/364-19:16:50,49) [cpuhp/7]
(root,0,0,00:02:23/364-19:16:50,50) [watchdog/7]
(root,0,0,00:01:58/364-19:16:50,51) [migration/7]
(root,0,0,00:02:51/364-19:16:50,52) [ksoftirqd/7]
(root,0,0,00:00:00/364-19:16:50,54) [kworker/7:0H]
(root,0,0,00:00:00/364-19:16:50,55) [kdevtmpfs]
(root,0,0,00:00:00/364-19:16:50,56) [netns]
(root,0,0,00:00:00/364-19:16:50,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/364-19:16:50,58) [kauditd]
(root,0,0,00:00:57/364-19:16:50,62) [khungtaskd]
(root,0,0,00:00:00/364-19:16:50,63) [oom_reaper]
(root,0,0,00:00:00/364-19:16:50,64) [writeback]
(root,0,0,00:00:00/364-19:16:50,65) [kcompactd0]
(root,0,0,00:00:00/364-19:16:50,66) [ksmd]
(root,0,0,00:05:26/364-19:16:50,67) [khugepaged]
(root,0,0,00:00:00/364-19:16:50,68) [crypto]
(root,0,0,00:00:00/364-19:16:50,69) [kintegrityd]
(root,0,0,00:00:00/364-19:16:50,70) [kblockd]
(root,0,0,00:00:00/364-19:16:50,71) [ata_sff]
(root,0,0,00:00:00/364-19:16:50,72) [md]
(root,0,0,00:00:00/364-19:16:50,73) [edac-poller]
(root,0,0,00:00:00/364-19:16:50,74) [devfreq_wq]
(root,0,0,00:00:00/364-19:16:50,75) [watchdogd]
(root,0,0,00:34:44/364-19:16:50,80) [kswapd0]
(root,0,0,00:00:00/364-19:16:50,81) [kworker/u17:0]
(root,0,0,00:00:00/364-19:16:50,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/364-19:16:49,125) [kthrotld]
(root,0,0,00:00:00/364-19:16:49,126) [acpi_thermal_pm]
(root,0,0,00:00:00/364-19:16:49,128) [scsi_eh_0]
(root,0,0,00:00:00/364-19:16:49,129) [scsi_tmf_0]
(root,0,0,00:00:00/364-19:16:49,130) [scsi_eh_1]
(root,0,0,00:00:00/364-19:16:49,131) [scsi_tmf_1]
(root,0,0,00:00:00/364-19:16:49,137) [ipv6_addrconf]
(root,0,0,00:00:00/364-19:16:49,147) [kstrp]
(root,0,0,00:00:00/364-19:16:49,164) [charger_manager]
(root,0,0,00:00:00/364-19:16:48,214) [scsi_eh_2]
(root,0,0,00:00:00/364-19:16:48,215) [scsi_tmf_2]
(root,0,0,00:02:32/364-19:16:48,267) [kworker/7:1H]
(root,0,0,00:28:29/364-19:16:44,268) [kworker/4:1H]
(root,0,0,00:00:29/364-19:16:44,275) [kworker/3:1H]
(root,0,0,00:00:33/364-19:16:43,335) [kworker/1:1H]
(root,0,0,00:00:00/364-19:16:42,342) [raid5wq]
(root,0,0,00:00:54/364-19:16:42,393) [kworker/0:1H]
(root,0,0,01:02:15/364-19:16:42,394) [jbd2/sda1-8]
(root,0,0,00:00:00/364-19:16:42,395) [ext4-rsv-conver]
(root,0,0,00:03:18/364-19:16:42,399) [kworker/5:1H]
(root,0,0,00:00:28/364-19:16:41,423) [kworker/2:1H]
(root,0,0,00:02:45/364-19:16:41,441) [kworker/6:1H]
(root,286416,137736,00:52:55/364-19:16:41,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/364-19:16:41,486) [iscsi_eh]
(root,0,0,00:00:00/364-19:16:41,498) [ib-comp-wq]
(root,0,0,00:00:00/364-19:16:41,499) [ib_mcast]
(root,0,0,00:00:00/364-19:16:41,500) [ib_nl_sa_wq]
(root,97708,1684,00:00:00/364-19:16:41,503) /sbin/lvmetad -f
(root,0,0,00:00:00/364-19:16:41,506) [rdma_cm]
(root,43168,3616,00:03:00/364-19:16:41,514) /lib/systemd/systemd-udevd
(root,20180,3716,00:00:00/00:00,606) /bin/bash /usr/bin/check_mk_agent
(root,34400,2784,00:00:00/00:00,624) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1132,00:00:00/00:00,625) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(systemd-timesync,141928,3000,00:01:49/364-19:16:40,728) /lib/systemd/systemd-timesyncd
(root,25992,3424,00:00:02/364-19:16:38,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383268,2424,00:10:45/364-19:16:35,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:46:27/364-19:16:35,1283) /usr/sbin/irqbalance --foreground
(messagebus,50476,4164,00:34:24/364-19:16:35,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5732,00:04:44/364-19:16:35,1298) /lib/systemd/systemd-logind
(root,30028,2796,00:01:29/364-19:16:35,1308) /usr/sbin/cron -f
(syslog,263036,4612,00:15:00/364-19:16:35,1323) /usr/sbin/rsyslogd -n
(root,286352,6532,00:21:22/364-19:16:35,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13328,00:00:00/364-19:16:35,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,16028,00:08:33/364-19:16:35,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:02/364-19:16:35,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/364-19:16:35,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,759972,43868,00:07:13/364-19:16:35,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,86112,7204,00:25:21/364-19:16:35,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:03:54/364-19:16:35,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6028,00:18:48/364-19:16:35,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/364-19:16:35,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16372,00:00:00/364-19:16:35,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:05:24/364-19:16:35,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6092,00:10:58/364-19:16:35,1407) /usr/sbin/sshd -D
(root,14664,1964,00:00:00/364-19:16:35,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/364-19:16:35,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5468,00:01:34/364-19:16:35,1420) nginx: worker process
(www-data,143788,4536,00:00:00/364-19:16:35,1424) nginx: worker process
(www-data,143788,4692,00:00:00/364-19:16:35,1428) nginx: worker process
(www-data,143788,4688,00:00:00/364-19:16:35,1429) nginx: worker process
(root,14888,1684,00:00:00/364-19:16:35,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4816,00:00:00/364-19:16:35,1431) nginx: worker process
(www-data,143788,4688,00:00:00/364-19:16:35,1432) nginx: worker process
(www-data,143788,4692,00:00:00/364-19:16:35,1433) nginx: worker process
(www-data,143788,4816,00:00:00/364-19:16:35,1434) nginx: worker process
(root,4548,1356,00:08:57/364-19:16:35,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:07/364-19:16:35,1534) runsv redis-exporter
(root,4396,768,00:00:08/364-19:16:35,1536) runsv node-exporter
(root,4396,720,00:00:07/364-19:16:35,1537) runsv prometheus
(root,4396,736,00:00:07/364-19:16:35,1538) runsv sidekiq
(root,4396,828,00:00:07/364-19:16:35,1539) runsv gitlab-exporter
(root,4396,1240,11:33:57/364-19:16:35,1540) runsv alertmanager
(root,4396,828,00:00:06/364-19:16:35,1541) runsv postgresql
(root,4396,720,00:00:07/364-19:16:35,1542) runsv postgres-exporter
(root,4396,748,00:00:07/364-19:16:35,1543) runsv grafana
(root,4396,764,00:00:06/364-19:16:35,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:20/364-19:16:35,1545) runsv logrotate
(root,4396,728,00:00:07/364-19:16:35,1546) runsv puma
(root,4396,860,00:00:07/364-19:16:35,1547) runsv nginx
(root,4396,724,00:00:07/364-19:16:35,1548) runsv gitaly
(root,4396,792,00:00:07/364-19:16:35,1549) runsv redis
(root,4396,740,00:00:07/364-19:16:35,1550) runsv registry
(root,4540,1384,02:58:07/364-19:16:35,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:06/364-19:16:35,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:07:16/364-19:16:35,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,00:54:54/364-19:16:35,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:06/364-19:16:35,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:47/364-19:16:35,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:08/364-19:16:35,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:10:40/364-19:16:35,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:06/364-19:16:35,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:08/364-19:16:35,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:06/364-19:16:35,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:06/364-19:16:35,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:06/364-19:16:35,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:14:23/364-19:16:35,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:10/364-19:16:35,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:06/364-19:16:35,1590) svlogd -tt /var/log/gitlab/puma
(gitlab-psql,8310768,61940,00:00:00/01:00:51,2328) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310472,55796,00:00:00/28:29,2331) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310788,62364,00:00:00/01:00:41,2528) postgres: gitlab gitlabhq_production [local] idle
(git,1788768,1017392,00:00:25/02:36:57,2764) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(git,1757424,971484,00:00:19/02:33:57,6027) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/05:11:08,7227) [kworker/4:1]
(gitlab-psql,8309808,60708,00:00:00/55:11,7919) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/04:06:03,8348) [kworker/3:2]
(git,1803504,981932,00:00:42/05:09:58,8453) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(root,0,0,00:00:17/2-03:41:02,10537) [kworker/0:2]
(gitlab-psql,8306908,51492,00:00:00/20:48,11208) postgres: gitlab gitlabhq_production [local] idle
(git,1719536,979172,00:00:21/02:27:17,12892) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/19:14,12953) [kworker/u16:0]
(root,0,0,00:00:49/14-05:31:31,13177) [kworker/1:2]
(git,1850608,1047204,00:00:36/02:56:57,13657) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(root,4628,876,00:00:00/17:48,14457) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(systemd-resolve,70628,5240,00:00:00/01:20:21,15028) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/01:20:21,15039) [kworker/5:0]
(gitlab-psql,8307900,50652,00:00:00/46:58,16020) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/46:57,16090) [kworker/6:1]
(git,1681648,991644,00:00:10/02:23:57,16387) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(git,1814256,1039608,00:00:30/02:53:58,16899) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(root,0,0,00:00:03/22:15:41,17046) [kworker/3:1]
(root,0,0,00:00:08/22:15:41,17050) [kworker/6:0]
(root,0,0,00:00:00/06:04:29,18499) [kworker/0:0]
(gitlab-psql,8307036,51948,00:00:00/12:06,20099) postgres: gitlab gitlabhq_production [local] idle
(git,1744624,994840,00:00:25/02:50:57,20215) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(root,0,0,00:00:18/4-22:15:37,21161) [kworker/5:2]
(gitlab-psql,8306844,46028,00:00:00/09:58,22221) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/04:55:18,23570) [kworker/2:1]
(root,0,0,00:00:06/1-22:15:54,23943) [kworker/2:0]
(root,0,0,00:00:10/1-22:15:50,24384) [kworker/7:1]
(root,4532,836,00:00:00/07:48,24494) sleep 3000
(root,0,0,00:00:00/06:56,25347) [kworker/u16:2]
(git,1392472,868,01:48:09/278-19:27:22,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182728,137544,1-22:54:03/278-19:27:22,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45928,4-04:32:00/278-19:27:21,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,39388,1-07:42:39/278-19:27:21,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,55068,04:36:49/278-19:27:21,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/278-19:27:20,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,14624,00:00:00/278-19:27:20,27510) nginx: worker process
(gitlab-www,63816,7648,00:00:00/278-19:27:20,27511) nginx: worker process
(gitlab-www,64680,20648,00:00:39/278-19:27:20,27512) nginx: worker process
(gitlab-www,63960,17364,00:00:00/278-19:27:20,27513) nginx: worker process
(gitlab-www,63960,11976,00:00:00/278-19:27:20,27514) nginx: worker process
(gitlab-www,64344,19380,00:00:04/278-19:27:20,27515) nginx: worker process
(gitlab-www,65464,21376,05:59:57/278-19:27:20,27516) nginx: worker process
(gitlab-www,63816,7648,00:00:00/278-19:27:20,27517) nginx: worker process
(gitlab-www,59784,3980,00:03:21/278-19:27:20,27518) nginx: cache manager process
(gitlab-prometheus,719532,14336,1-11:08:13/278-19:27:20,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,15684,1-09:14:33/278-19:27:19,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:23:43/278-19:27:19,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3153764,169516,2-23:20:55/278-19:27:18,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,337296,00:32:27/278-19:27:18,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:07:54/278-19:27:18,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:10:16/278-19:27:18,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:22:14/278-19:27:18,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,04:28:35/278-19:27:18,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:37/278-19:27:18,27581) postgres: logical replication launcher   
(git,2882320,90024,22:00:32/278-19:27:17,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093156,106240,22:34:08/278-19:27:17,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910460,04:58:32/278-19:27:17,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,16340,11-21:44:17/278-19:27:17,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,16432,11:45:33/278-19:27:17,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,20820,01:07:31/278-19:27:16,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:13:07/278-19:27:12,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1223488,32-10:55:02/278-19:27:12,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,70924,1-13:42:01/278-19:27:07,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309408,113148,2-21:27:19/278-19:26:55,28040) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:46:03,28395) [kworker/7:0]
(gitlab-psql,8306188,34460,00:29:29/278-19:26:06,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/278-19:26:06,28929) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306852,43588,00:00:00/01:57,30978) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314088,62300,00:00:00/31:47,31366) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313784,65176,00:00:00/31:47,31368) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:29,31484) [kworker/u16:1]
(root,0,0,00:00:48/13-05:12:00,32076) [kworker/4:0]
(root,0,0,00:00:00/03:10:17,32087) [kworker/1:0]
(gitlab-psql,8305200,41324,00:00:00/00:40,32331) postgres: gitlab gitlabhq_production [local] idle

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-11-09 22:17

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde9127fe6c0be

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8132,00:20:48/340-11:36:01,1) /sbin/init
(root,0,0,00:01:03/340-11:36:01,2) [kthreadd]
(root,0,0,00:00:00/340-11:36:01,4) [kworker/0:0H]
(root,0,0,00:00:00/340-11:36:01,6) [mm_percpu_wq]
(root,0,0,00:05:01/340-11:36:01,7) [ksoftirqd/0]
(root,0,0,11:31:45/340-11:36:01,8) [rcu_sched]
(root,0,0,00:00:00/340-11:36:01,9) [rcu_bh]
(root,0,0,00:01:54/340-11:36:01,10) [migration/0]
(root,0,0,00:01:53/340-11:36:01,11) [watchdog/0]
(root,0,0,00:00:00/340-11:36:01,12) [cpuhp/0]
(root,0,0,00:00:00/340-11:36:01,13) [cpuhp/1]
(root,0,0,00:01:57/340-11:36:01,14) [watchdog/1]
(root,0,0,00:01:58/340-11:36:01,15) [migration/1]
(root,0,0,00:03:31/340-11:36:01,16) [ksoftirqd/1]
(root,0,0,00:00:00/340-11:36:01,18) [kworker/1:0H]
(root,0,0,00:00:00/340-11:36:01,19) [cpuhp/2]
(root,0,0,00:01:57/340-11:36:01,20) [watchdog/2]
(root,0,0,00:01:59/340-11:36:01,21) [migration/2]
(root,0,0,00:02:38/340-11:36:01,22) [ksoftirqd/2]
(root,0,0,00:00:00/340-11:36:01,24) [kworker/2:0H]
(root,0,0,00:00:00/340-11:36:01,25) [cpuhp/3]
(root,0,0,00:02:03/340-11:36:01,26) [watchdog/3]
(root,0,0,00:01:56/340-11:36:01,27) [migration/3]
(root,0,0,00:02:14/340-11:36:01,28) [ksoftirqd/3]
(root,0,0,00:00:00/340-11:36:01,30) [kworker/3:0H]
(root,0,0,00:00:00/340-11:36:01,31) [cpuhp/4]
(root,0,0,00:02:07/340-11:36:01,32) [watchdog/4]
(root,0,0,00:01:35/340-11:36:01,33) [migration/4]
(root,0,0,00:03:08/340-11:36:01,34) [ksoftirqd/4]
(root,0,0,00:00:00/340-11:36:01,36) [kworker/4:0H]
(root,0,0,00:00:00/340-11:36:01,37) [cpuhp/5]
(root,0,0,00:02:09/340-11:36:01,38) [watchdog/5]
(root,0,0,00:01:46/340-11:36:01,39) [migration/5]
(root,0,0,00:03:23/340-11:36:01,40) [ksoftirqd/5]
(root,0,0,00:00:00/340-11:36:01,42) [kworker/5:0H]
(root,0,0,00:00:00/340-11:36:01,43) [cpuhp/6]
(root,0,0,00:02:05/340-11:36:01,44) [watchdog/6]
(root,0,0,00:01:53/340-11:36:01,45) [migration/6]
(root,0,0,00:02:22/340-11:36:01,46) [ksoftirqd/6]
(root,0,0,00:00:00/340-11:36:01,48) [kworker/6:0H]
(root,0,0,00:00:00/340-11:36:01,49) [cpuhp/7]
(root,0,0,00:02:15/340-11:36:01,50) [watchdog/7]
(root,0,0,00:01:51/340-11:36:01,51) [migration/7]
(root,0,0,00:02:42/340-11:36:01,52) [ksoftirqd/7]
(root,0,0,00:00:00/340-11:36:01,54) [kworker/7:0H]
(root,0,0,00:00:00/340-11:36:01,55) [kdevtmpfs]
(root,0,0,00:00:00/340-11:36:01,56) [netns]
(root,0,0,00:00:00/340-11:36:01,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/340-11:36:01,58) [kauditd]
(root,0,0,00:00:53/340-11:36:01,62) [khungtaskd]
(root,0,0,00:00:00/340-11:36:01,63) [oom_reaper]
(root,0,0,00:00:00/340-11:36:01,64) [writeback]
(root,0,0,00:00:00/340-11:36:01,65) [kcompactd0]
(root,0,0,00:00:00/340-11:36:01,66) [ksmd]
(root,0,0,00:05:07/340-11:36:01,67) [khugepaged]
(root,0,0,00:00:00/340-11:36:01,68) [crypto]
(root,0,0,00:00:00/340-11:36:01,69) [kintegrityd]
(root,0,0,00:00:00/340-11:36:01,70) [kblockd]
(root,0,0,00:00:00/340-11:36:01,71) [ata_sff]
(root,0,0,00:00:00/340-11:36:01,72) [md]
(root,0,0,00:00:00/340-11:36:01,73) [edac-poller]
(root,0,0,00:00:00/340-11:36:01,74) [devfreq_wq]
(root,0,0,00:00:00/340-11:36:01,75) [watchdogd]
(root,0,0,00:31:46/340-11:36:01,80) [kswapd0]
(root,0,0,00:00:00/340-11:36:01,81) [kworker/u17:0]
(root,0,0,00:00:00/340-11:36:01,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/340-11:36:00,125) [kthrotld]
(root,0,0,00:00:00/340-11:36:00,126) [acpi_thermal_pm]
(root,0,0,00:00:00/340-11:36:00,128) [scsi_eh_0]
(root,0,0,00:00:00/340-11:36:00,129) [scsi_tmf_0]
(root,0,0,00:00:00/340-11:36:00,130) [scsi_eh_1]
(root,0,0,00:00:00/340-11:36:00,131) [scsi_tmf_1]
(root,0,0,00:00:00/340-11:36:00,137) [ipv6_addrconf]
(root,0,0,00:00:00/340-11:36:00,147) [kstrp]
(root,0,0,00:00:00/340-11:36:00,164) [charger_manager]
(root,0,0,00:00:00/340-11:35:59,214) [scsi_eh_2]
(root,0,0,00:00:00/340-11:35:59,215) [scsi_tmf_2]
(root,0,0,00:02:23/340-11:35:59,267) [kworker/7:1H]
(root,0,0,00:26:45/340-11:35:55,268) [kworker/4:1H]
(root,0,0,00:00:27/340-11:35:55,275) [kworker/3:1H]
(root,0,0,00:00:31/340-11:35:54,335) [kworker/1:1H]
(root,0,0,00:00:00/340-11:35:53,342) [raid5wq]
(root,0,0,00:00:51/340-11:35:53,393) [kworker/0:1H]
(root,0,0,00:58:39/340-11:35:53,394) [jbd2/sda1-8]
(root,0,0,00:00:00/340-11:35:53,395) [ext4-rsv-conver]
(root,0,0,00:03:05/340-11:35:53,399) [kworker/5:1H]
(root,0,0,00:00:26/340-11:35:52,423) [kworker/2:1H]
(root,0,0,00:02:35/340-11:35:52,441) [kworker/6:1H]
(root,188224,67804,00:50:16/340-11:35:52,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/340-11:35:52,486) [iscsi_eh]
(root,0,0,00:00:00/340-11:35:52,498) [ib-comp-wq]
(root,0,0,00:00:00/340-11:35:52,499) [ib_mcast]
(root,0,0,00:00:00/340-11:35:52,500) [ib_nl_sa_wq]
(root,97708,1708,00:00:00/340-11:35:52,503) /sbin/lvmetad -f
(root,0,0,00:00:00/340-11:35:52,506) [rdma_cm]
(root,43168,3616,00:02:50/340-11:35:52,514) /lib/systemd/systemd-udevd
(git,1650904,978468,00:00:41/08:53:12,606) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(systemd-timesync,141928,3016,00:01:43/340-11:35:51,728) /lib/systemd/systemd-timesyncd
(root,25992,3424,00:00:02/340-11:35:49,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,383268,2356,00:10:09/340-11:35:46,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:43:54/340-11:35:46,1283) /usr/sbin/irqbalance --foreground
(messagebus,50476,4172,00:32:38/340-11:35:46,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5756,00:04:31/340-11:35:46,1298) /lib/systemd/systemd-logind
(root,30028,2848,00:01:24/340-11:35:46,1308) /usr/sbin/cron -f
(syslog,263036,4616,00:14:17/340-11:35:46,1323) /usr/sbin/rsyslogd -n
(root,286352,6556,00:20:15/340-11:35:46,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13328,00:00:00/340-11:35:46,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15952,00:07:58/340-11:35:46,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:01/340-11:35:46,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/340-11:35:46,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,694436,13316,00:06:54/340-11:35:46,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,85864,6956,00:23:15/340-11:35:46,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:03:43/340-11:35:46,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6032,00:17:50/340-11:35:46,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/340-11:35:46,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16412,00:00:00/340-11:35:46,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:05:06/340-11:35:46,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6096,00:10:19/340-11:35:46,1407) /usr/sbin/sshd -D
(root,14664,2012,00:00:00/340-11:35:46,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/340-11:35:46,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5512,00:01:29/340-11:35:46,1420) nginx: worker process
(www-data,143788,4580,00:00:00/340-11:35:46,1424) nginx: worker process
(www-data,143788,4736,00:00:00/340-11:35:46,1428) nginx: worker process
(www-data,143788,4732,00:00:00/340-11:35:46,1429) nginx: worker process
(root,14888,1684,00:00:00/340-11:35:46,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4860,00:00:00/340-11:35:46,1431) nginx: worker process
(www-data,143788,4732,00:00:00/340-11:35:46,1432) nginx: worker process
(www-data,143788,4736,00:00:00/340-11:35:46,1433) nginx: worker process
(www-data,143788,4860,00:00:00/340-11:35:46,1434) nginx: worker process
(root,4548,1356,00:08:25/340-11:35:46,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:07/340-11:35:46,1534) runsv redis-exporter
(root,4396,768,00:00:07/340-11:35:46,1536) runsv node-exporter
(root,4396,720,00:00:06/340-11:35:46,1537) runsv prometheus
(root,4396,736,00:00:06/340-11:35:46,1538) runsv sidekiq
(root,4396,828,00:00:06/340-11:35:46,1539) runsv gitlab-exporter
(root,4396,1240,10:54:15/340-11:35:46,1540) runsv alertmanager
(root,4396,828,00:00:06/340-11:35:46,1541) runsv postgresql
(root,4396,720,00:00:07/340-11:35:46,1542) runsv postgres-exporter
(root,4396,748,00:00:06/340-11:35:46,1543) runsv grafana
(root,4396,764,00:00:06/340-11:35:46,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:19/340-11:35:46,1545) runsv logrotate
(root,4396,728,00:00:07/340-11:35:46,1546) runsv puma
(root,4396,860,00:00:06/340-11:35:46,1547) runsv nginx
(root,4396,724,00:00:07/340-11:35:46,1548) runsv gitaly
(root,4396,792,00:00:06/340-11:35:46,1549) runsv redis
(root,4396,740,00:00:06/340-11:35:46,1550) runsv registry
(root,4540,1384,02:48:35/340-11:35:46,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:06/340-11:35:46,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,01:03:32/340-11:35:46,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,00:51:05/340-11:35:46,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:06/340-11:35:46,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:44/340-11:35:46,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:04/340-11:35:46,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:10:02/340-11:35:46,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:06/340-11:35:46,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:07/340-11:35:46,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:06/340-11:35:46,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:06/340-11:35:46,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:06/340-11:35:46,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:13:33/340-11:35:46,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:09/340-11:35:46,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:06/340-11:35:46,1590) svlogd -tt /var/log/gitlab/puma
(git,1650904,997020,00:00:39/08:52:12,1671) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(git,1650904,979932,00:00:40/08:51:12,2658) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/10:55,2923) [kworker/u16:2]
(gitlab-psql,8307124,48104,00:00:00/10:26,3375) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307124,48888,00:00:00/42:56,3402) postgres: gitlab gitlabhq_production [local] idle
(git,1642712,980632,00:00:41/08:50:12,3660) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(root,0,0,00:00:43/7-09:49:49,3788) [kworker/7:2]
(root,0,0,00:01:12/18-15:07:23,4229) [kworker/3:1]
(root,0,0,00:00:00/1-14:35:00,4362) [kworker/2:1]
(root,0,0,00:00:14/3-19:59:24,4489) [kworker/5:1]
(git,1659096,1000712,00:00:44/08:49:12,4646) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8307124,47948,00:00:00/07:23,6428) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/09:50:55,7918) [kworker/1:0]
(root,0,0,00:00:00/05:41,8122) [kworker/u16:0]
(root,4628,800,00:00:00/37:37,8621) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:05/1-15:31:44,8623) [kworker/2:0]
(root,0,0,00:00:12/1-14:31:09,9215) [kworker/0:0]
(root,0,0,00:00:55/5-17:11:29,10022) [kworker/6:0]
(gitlab-psql,8307016,47716,00:00:00/03:22,10383) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/21:42:20,10802) [kworker/3:0]
(gitlab-psql,8307124,47860,00:00:00/01:41,12041) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/1-09:03:12,13053) [kworker/7:0]
(root,20180,3740,00:00:00/00:00,13697) /bin/bash /usr/bin/check_mk_agent
(root,36700,3176,00:00:00/00:00,13715) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1152,00:00:00/00:00,13716) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/14:35:00,15603) [kworker/4:2]
(root,0,0,00:00:47/12-21:12:22,17035) [kworker/1:1]
(gitlab-psql,8307312,52960,00:00:00/28:55,17174) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307124,48096,00:00:00/28:30,17581) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,5012,00:00:00/01:33:04,18125) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/01:33:04,18137) [kworker/0:2]
(root,4532,772,00:00:00/27:37,18436) sleep 3000
(root,0,0,00:00:14/3-20:15:45,19763) [kworker/4:0]
(gitlab-psql,8306728,45748,00:00:00/25:52,20205) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/14:29:48,22091) [kworker/6:2]
(gitlab-psql,8307124,47948,00:00:00/23:28,22587) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306268,46424,00:00:00/22:04,23950) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307320,53860,00:00:00/54:02,24469) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/03:35:17,24667) [kworker/5:2]
(git,1392472,868,01:39:49/254-11:46:33,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182472,135260,1-19:18:19/254-11:46:33,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45948,3-20:45:43/254-11:46:32,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,38196,1-05:01:37/254-11:46:32,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,46428,04:12:26/254-11:46:32,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/254-11:46:31,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,14624,00:00:00/254-11:46:31,27510) nginx: worker process
(gitlab-www,63816,7648,00:00:00/254-11:46:31,27511) nginx: worker process
(gitlab-www,64680,20652,00:00:37/254-11:46:31,27512) nginx: worker process
(gitlab-www,63960,17364,00:00:00/254-11:46:31,27513) nginx: worker process
(gitlab-www,63960,12084,00:00:00/254-11:46:31,27514) nginx: worker process
(gitlab-www,64344,19380,00:00:04/254-11:46:31,27515) nginx: worker process
(gitlab-www,65464,21388,05:29:34/254-11:46:31,27516) nginx: worker process
(gitlab-www,63816,7648,00:00:00/254-11:46:31,27517) nginx: worker process
(gitlab-www,59784,3980,00:03:06/254-11:46:31,27518) nginx: cache manager process
(gitlab-prometheus,719532,16580,1-08:27:16/254-11:46:31,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,14500,1-06:41:01/254-11:46:30,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:21:54/254-11:46:30,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3173856,174044,2-17:48:26/254-11:46:29,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,330184,00:29:38/254-11:46:29,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:07:17/254-11:46:29,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:09:29/254-11:46:29,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:20:29/254-11:46:29,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,04:07:53/254-11:46:29,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:35/254-11:46:29,27581) postgres: logical replication launcher   
(git,2882320,88216,20:17:24/254-11:46:28,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,106496,20:48:26/254-11:46:28,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910328,04:35:50/254-11:46:28,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15924,11-01:39:18/254-11:46:28,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,17236,10:51:58/254-11:46:28,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881968,21076,01:02:38/254-11:46:27,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:12:26/254-11:46:23,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1205712,30-00:03:04/254-11:46:23,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332552,69564,1-10:34:43/254-11:46:18,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309400,109784,2-16:02:06/254-11:46:06,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:27:18/254-11:45:17,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/254-11:45:17,28929) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307132,48112,00:00:00/17:09,29058) postgres: gitlab gitlabhq_production [local] idle
(git,1642712,994212,00:00:37/08:56:12,30072) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(git,1650904,980020,00:00:37/08:55:12,31089) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(git,1671384,994100,00:00:45/08:54:12,32084) puma: cluster worker 7: 27613 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-10-16 14:36

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912654486ff

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8136,00:19:38/317-12:20:56,1) /sbin/init
(root,0,0,00:00:59/317-12:20:56,2) [kthreadd]
(root,0,0,00:00:00/317-12:20:56,4) [kworker/0:0H]
(root,0,0,00:00:00/317-12:20:56,6) [mm_percpu_wq]
(root,0,0,00:04:42/317-12:20:56,7) [ksoftirqd/0]
(root,0,0,10:50:57/317-12:20:56,8) [rcu_sched]
(root,0,0,00:00:00/317-12:20:56,9) [rcu_bh]
(root,0,0,00:01:47/317-12:20:56,10) [migration/0]
(root,0,0,00:01:46/317-12:20:56,11) [watchdog/0]
(root,0,0,00:00:00/317-12:20:56,12) [cpuhp/0]
(root,0,0,00:00:00/317-12:20:56,13) [cpuhp/1]
(root,0,0,00:01:50/317-12:20:56,14) [watchdog/1]
(root,0,0,00:01:50/317-12:20:56,15) [migration/1]
(root,0,0,00:03:18/317-12:20:56,16) [ksoftirqd/1]
(root,0,0,00:00:00/317-12:20:56,18) [kworker/1:0H]
(root,0,0,00:00:00/317-12:20:56,19) [cpuhp/2]
(root,0,0,00:01:50/317-12:20:56,20) [watchdog/2]
(root,0,0,00:01:51/317-12:20:56,21) [migration/2]
(root,0,0,00:02:29/317-12:20:56,22) [ksoftirqd/2]
(root,0,0,00:00:00/317-12:20:56,24) [kworker/2:0H]
(root,0,0,00:00:00/317-12:20:56,25) [cpuhp/3]
(root,0,0,00:01:55/317-12:20:56,26) [watchdog/3]
(root,0,0,00:01:48/317-12:20:56,27) [migration/3]
(root,0,0,00:02:06/317-12:20:56,28) [ksoftirqd/3]
(root,0,0,00:00:00/317-12:20:56,30) [kworker/3:0H]
(root,0,0,00:00:00/317-12:20:56,31) [cpuhp/4]
(root,0,0,00:01:59/317-12:20:56,32) [watchdog/4]
(root,0,0,00:01:29/317-12:20:56,33) [migration/4]
(root,0,0,00:02:52/317-12:20:56,34) [ksoftirqd/4]
(root,0,0,00:00:00/317-12:20:56,36) [kworker/4:0H]
(root,0,0,00:00:00/317-12:20:56,37) [cpuhp/5]
(root,0,0,00:02:01/317-12:20:56,38) [watchdog/5]
(root,0,0,00:01:39/317-12:20:56,39) [migration/5]
(root,0,0,00:03:10/317-12:20:56,40) [ksoftirqd/5]
(root,0,0,00:00:00/317-12:20:56,42) [kworker/5:0H]
(root,0,0,00:00:00/317-12:20:56,43) [cpuhp/6]
(root,0,0,00:01:57/317-12:20:56,44) [watchdog/6]
(root,0,0,00:01:45/317-12:20:56,45) [migration/6]
(root,0,0,00:02:14/317-12:20:56,46) [ksoftirqd/6]
(root,0,0,00:00:00/317-12:20:56,48) [kworker/6:0H]
(root,0,0,00:00:00/317-12:20:56,49) [cpuhp/7]
(root,0,0,00:02:06/317-12:20:56,50) [watchdog/7]
(root,0,0,00:01:44/317-12:20:56,51) [migration/7]
(root,0,0,00:02:33/317-12:20:56,52) [ksoftirqd/7]
(root,0,0,00:00:00/317-12:20:56,54) [kworker/7:0H]
(root,0,0,00:00:00/317-12:20:56,55) [kdevtmpfs]
(root,0,0,00:00:00/317-12:20:56,56) [netns]
(root,0,0,00:00:00/317-12:20:56,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/317-12:20:56,58) [kauditd]
(root,0,0,00:00:50/317-12:20:56,62) [khungtaskd]
(root,0,0,00:00:00/317-12:20:56,63) [oom_reaper]
(root,0,0,00:00:00/317-12:20:56,64) [writeback]
(root,0,0,00:00:00/317-12:20:56,65) [kcompactd0]
(root,0,0,00:00:00/317-12:20:56,66) [ksmd]
(root,0,0,00:04:46/317-12:20:56,67) [khugepaged]
(root,0,0,00:00:00/317-12:20:56,68) [crypto]
(root,0,0,00:00:00/317-12:20:56,69) [kintegrityd]
(root,0,0,00:00:00/317-12:20:56,70) [kblockd]
(root,0,0,00:00:00/317-12:20:56,71) [ata_sff]
(root,0,0,00:00:00/317-12:20:56,72) [md]
(root,0,0,00:00:00/317-12:20:56,73) [edac-poller]
(root,0,0,00:00:00/317-12:20:56,74) [devfreq_wq]
(root,0,0,00:00:00/317-12:20:56,75) [watchdogd]
(root,0,0,00:28:48/317-12:20:56,80) [kswapd0]
(root,0,0,00:00:00/317-12:20:56,81) [kworker/u17:0]
(root,0,0,00:00:00/317-12:20:56,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/317-12:20:55,125) [kthrotld]
(root,0,0,00:00:00/317-12:20:55,126) [acpi_thermal_pm]
(root,0,0,00:00:00/317-12:20:55,128) [scsi_eh_0]
(root,0,0,00:00:00/317-12:20:55,129) [scsi_tmf_0]
(root,0,0,00:00:00/317-12:20:55,130) [scsi_eh_1]
(root,0,0,00:00:00/317-12:20:55,131) [scsi_tmf_1]
(root,0,0,00:00:00/317-12:20:55,137) [ipv6_addrconf]
(root,0,0,00:00:00/317-12:20:55,147) [kstrp]
(root,0,0,00:00:00/317-12:20:55,164) [charger_manager]
(root,0,0,00:00:00/317-12:20:54,214) [scsi_eh_2]
(root,0,0,00:00:00/317-12:20:54,215) [scsi_tmf_2]
(root,0,0,00:02:14/317-12:20:54,267) [kworker/7:1H]
(root,0,0,00:25:02/317-12:20:50,268) [kworker/4:1H]
(root,0,0,00:00:26/317-12:20:50,275) [kworker/3:1H]
(root,0,0,00:00:29/317-12:20:49,335) [kworker/1:1H]
(root,0,0,00:00:00/317-12:20:48,342) [raid5wq]
(root,0,0,00:00:48/317-12:20:48,393) [kworker/0:1H]
(root,0,0,00:54:58/317-12:20:48,394) [jbd2/sda1-8]
(root,0,0,00:00:00/317-12:20:48,395) [ext4-rsv-conver]
(root,0,0,00:02:52/317-12:20:48,399) [kworker/5:1H]
(root,0,0,00:00:25/317-12:20:47,423) [kworker/2:1H]
(root,0,0,00:02:24/317-12:20:47,441) [kworker/6:1H]
(root,147264,41180,00:47:47/317-12:20:47,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/317-12:20:47,486) [iscsi_eh]
(root,0,0,00:00:00/317-12:20:47,498) [ib-comp-wq]
(root,0,0,00:00:00/317-12:20:47,499) [ib_mcast]
(root,0,0,00:00:00/317-12:20:47,500) [ib_nl_sa_wq]
(root,97708,1708,00:00:00/317-12:20:47,503) /sbin/lvmetad -f
(root,0,0,00:00:00/317-12:20:47,506) [rdma_cm]
(root,43168,3616,00:02:39/317-12:20:47,514) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/03:31:00,693) [kworker/1:1]
(systemd-timesync,141928,3016,00:01:37/317-12:20:46,728) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:17/2-21:54:04,931) [kworker/7:2]
(root,25992,3424,00:00:02/317-12:20:44,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:01/48:51,1137) [kworker/u16:1]
(root,0,0,00:01:14/18-08:47:38,1252) [kworker/3:2]
(root,383268,2364,00:09:31/317-12:20:41,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:41:11/317-12:20:41,1283) /usr/sbin/irqbalance --foreground
(messagebus,50476,4172,00:30:49/317-12:20:41,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5756,00:04:16/317-12:20:41,1298) /lib/systemd/systemd-logind
(root,30028,2852,00:01:19/317-12:20:41,1308) /usr/sbin/cron -f
(syslog,263036,4616,00:13:37/317-12:20:41,1323) /usr/sbin/rsyslogd -n
(root,286352,6556,00:19:11/317-12:20:41,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13328,00:00:00/317-12:20:41,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15952,00:07:25/317-12:20:41,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:01/317-12:20:41,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/317-12:20:41,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,702624,13192,00:06:37/317-12:20:41,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,85740,6832,00:21:27/317-12:20:41,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:03:34/317-12:20:41,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6032,00:16:52/317-12:20:41,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/317-12:20:41,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16412,00:00:00/317-12:20:41,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:04:46/317-12:20:41,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6096,00:09:43/317-12:20:41,1407) /usr/sbin/sshd -D
(root,14664,2016,00:00:00/317-12:20:41,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/317-12:20:41,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5548,00:01:23/317-12:20:41,1420) nginx: worker process
(www-data,143788,4616,00:00:00/317-12:20:41,1424) nginx: worker process
(www-data,143788,4772,00:00:00/317-12:20:41,1428) nginx: worker process
(www-data,143788,4768,00:00:00/317-12:20:41,1429) nginx: worker process
(root,14888,1684,00:00:00/317-12:20:41,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4896,00:00:00/317-12:20:41,1431) nginx: worker process
(www-data,143788,4768,00:00:00/317-12:20:41,1432) nginx: worker process
(www-data,143788,4772,00:00:00/317-12:20:41,1433) nginx: worker process
(www-data,143788,4896,00:00:00/317-12:20:41,1434) nginx: worker process
(root,4548,1356,00:07:54/317-12:20:41,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:06/317-12:20:41,1534) runsv redis-exporter
(root,4396,768,00:00:07/317-12:20:41,1536) runsv node-exporter
(root,4396,720,00:00:06/317-12:20:41,1537) runsv prometheus
(root,4396,736,00:00:06/317-12:20:41,1538) runsv sidekiq
(root,4396,828,00:00:06/317-12:20:41,1539) runsv gitlab-exporter
(root,4396,1240,10:12:17/317-12:20:41,1540) runsv alertmanager
(root,4396,828,00:00:06/317-12:20:41,1541) runsv postgresql
(root,4396,720,00:00:06/317-12:20:41,1542) runsv postgres-exporter
(root,4396,748,00:00:06/317-12:20:41,1543) runsv grafana
(root,4396,764,00:00:06/317-12:20:41,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:17/317-12:20:41,1545) runsv logrotate
(root,4396,728,00:00:06/317-12:20:41,1546) runsv puma
(root,4396,860,00:00:06/317-12:20:41,1547) runsv nginx
(root,4396,724,00:00:06/317-12:20:41,1548) runsv gitaly
(root,4396,792,00:00:06/317-12:20:41,1549) runsv redis
(root,4396,740,00:00:06/317-12:20:41,1550) runsv registry
(root,4540,1384,02:38:18/317-12:20:41,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:05/317-12:20:41,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,00:59:33/317-12:20:41,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,00:47:52/317-12:20:41,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:05/317-12:20:41,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:42/317-12:20:41,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:01:00/317-12:20:41,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:09:23/317-12:20:41,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:05/317-12:20:41,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:07/317-12:20:41,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:05/317-12:20:41,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:06/317-12:20:41,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:06/317-12:20:41,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:12:42/317-12:20:41,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:08/317-12:20:41,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:05/317-12:20:41,1590) svlogd -tt /var/log/gitlab/puma
(root,0,0,00:00:32/8-15:24:58,2345) [kworker/2:0]
(root,0,0,00:00:00/14:18,3390) [kworker/0:1]
(root,4532,860,00:00:00/13:16,4396) sleep 3000
(root,0,0,00:00:23/2-19:10:26,4810) [kworker/0:0]
(root,0,0,00:00:09/21:18:41,4884) [kworker/6:2]
(gitlab-psql,8309644,57652,00:00:00/43:37,6459) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307396,54120,00:00:00/43:37,6465) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/43:36,6499) [kworker/3:1]
(root,0,0,00:00:27/6-21:50:15,6788) [kworker/4:1]
(gitlab-psql,8307252,53072,00:00:00/42:33,7509) postgres: gitlab gitlabhq_production [local] idle
(git,1668336,971436,00:00:20/01:46:58,8287) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8307136,51844,00:00:00/41:03,8967) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/08:23,9247) [kworker/u16:2]
(git,1661168,971908,00:00:23/01:45:58,9276) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(git,1592536,974848,00:00:23/01:44:58,10264) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(gitlab-psql,8307012,47796,00:00:00/07:07,10514) postgres: gitlab gitlabhq_production [local] idle
(git,1664240,976232,00:00:22/01:43:58,11258) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(gitlab-psql,8307252,52944,00:00:00/38:35,11430) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311904,60248,00:00:00/38:35,11432) postgres: gitlab gitlabhq_production [local] idle
(git,1648880,969216,00:00:21/01:42:58,12251) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(git,1686768,980460,00:00:24/01:41:58,13246) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(gitlab-psql,8307252,51920,00:00:00/36:34,13402) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/36:21,13610) [kworker/u16:0]
(root,0,0,00:00:00/22:11:57,13914) [kworker/2:1]
(git,1656048,972956,00:00:20/01:40:58,14234) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/03:25,14329) [kworker/6:1]
(git,1676640,979620,00:00:22/01:39:58,15216) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/34:17,15739) [kworker/5:1]
(root,0,0,00:00:00/08:40:50,16687) [kworker/4:0]
(gitlab-psql,8307908,50596,00:00:00/32:44,17266) postgres: gitlab gitlabhq_production [local] idle
(root,20180,3548,00:00:00/00:00,17737) /bin/bash /usr/bin/check_mk_agent
(root,36700,3052,00:00:00/00:00,17755) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1176,00:00:00/00:00,17756) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(gitlab-psql,8307076,48228,00:00:00/30:09,19736) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:10/2-18:27:23,21440) [kworker/1:2]
(root,0,0,00:00:19/2-18:54:39,23093) [kworker/6:0]
(gitlab-psql,8306712,55232,00:00:00/56:03,26035) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/23:35,26276) [kworker/7:0]
(root,4628,848,00:00:00/23:16,26579) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,0,0,00:00:04/1-01:12:13,27126) [kworker/5:2]
(git,1392472,860,01:31:28/231-12:31:28,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182216,133692,1-15:29:00/231-12:31:28,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,46008,3-12:52:36/231-12:31:27,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,38444,1-02:25:28/231-12:31:27,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,45916,03:47:54/231-12:31:27,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/231-12:31:26,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,14748,00:00:00/231-12:31:26,27510) nginx: worker process
(gitlab-www,63816,7648,00:00:00/231-12:31:26,27511) nginx: worker process
(gitlab-www,64680,19924,00:00:24/231-12:31:26,27512) nginx: worker process
(gitlab-www,63960,17364,00:00:00/231-12:31:26,27513) nginx: worker process
(gitlab-www,63960,9424,00:00:00/231-12:31:26,27514) nginx: worker process
(gitlab-www,64344,19504,00:00:00/231-12:31:26,27515) nginx: worker process
(gitlab-www,65464,20896,05:00:15/231-12:31:26,27516) nginx: worker process
(gitlab-www,63816,7648,00:00:00/231-12:31:26,27517) nginx: worker process
(gitlab-www,59784,3980,00:02:50/231-12:31:26,27518) nginx: cache manager process
(gitlab-prometheus,719532,14196,1-05:39:55/231-12:31:26,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,14972,1-04:04:13/231-12:31:25,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:20:02/231-12:31:25,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3152340,164160,2-12:03:42/231-12:31:24,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,315476,00:27:02/231-12:31:24,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:06:40/231-12:31:24,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:08:40/231-12:31:24,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:18:46/231-12:31:24,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,03:46:00/231-12:31:24,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:32/231-12:31:24,27581) postgres: logical replication launcher   
(git,2882320,88264,18:42:27/231-12:31:23,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,107308,19:07:35/231-12:31:23,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910268,04:12:47/231-12:31:23,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,16440,10-03:30:55/231-12:31:23,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,17368,09:57:05/231-12:31:23,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881712,20448,00:56:39/231-12:31:22,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:11:46/231-12:31:18,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1140588,27-10:04:52/231-12:31:18,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8332412,69564,1-07:33:25/231-12:31:13,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309400,104976,2-10:38:06/231-12:31:01,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:25:00/231-12:30:12,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/231-12:30:12,28929) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306980,50684,00:00:00/21:06,28965) postgres: gitlab gitlabhq_production [local] idle
(systemd-resolve,70628,5168,00:00:00/01:24:25,30696) /lib/systemd/systemd-resolved

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-09-23 15:21

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912b6b7950a

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8184,00:19:04/306-12:57:54,1) /sbin/init
(root,0,0,00:00:57/306-12:57:54,2) [kthreadd]
(root,0,0,00:00:00/306-12:57:54,4) [kworker/0:0H]
(root,0,0,00:00:00/306-12:57:54,6) [mm_percpu_wq]
(root,0,0,00:04:33/306-12:57:54,7) [ksoftirqd/0]
(root,0,0,10:30:57/306-12:57:54,8) [rcu_sched]
(root,0,0,00:00:00/306-12:57:54,9) [rcu_bh]
(root,0,0,00:01:43/306-12:57:54,10) [migration/0]
(root,0,0,00:01:42/306-12:57:54,11) [watchdog/0]
(root,0,0,00:00:00/306-12:57:54,12) [cpuhp/0]
(root,0,0,00:00:00/306-12:57:54,13) [cpuhp/1]
(root,0,0,00:01:47/306-12:57:54,14) [watchdog/1]
(root,0,0,00:01:47/306-12:57:54,15) [migration/1]
(root,0,0,00:03:11/306-12:57:54,16) [ksoftirqd/1]
(root,0,0,00:00:00/306-12:57:54,18) [kworker/1:0H]
(root,0,0,00:00:00/306-12:57:54,19) [cpuhp/2]
(root,0,0,00:01:47/306-12:57:54,20) [watchdog/2]
(root,0,0,00:01:47/306-12:57:54,21) [migration/2]
(root,0,0,00:02:24/306-12:57:54,22) [ksoftirqd/2]
(root,0,0,00:00:00/306-12:57:54,24) [kworker/2:0H]
(root,0,0,00:00:00/306-12:57:54,25) [cpuhp/3]
(root,0,0,00:01:52/306-12:57:54,26) [watchdog/3]
(root,0,0,00:01:44/306-12:57:54,27) [migration/3]
(root,0,0,00:02:02/306-12:57:54,28) [ksoftirqd/3]
(root,0,0,00:00:00/306-12:57:54,30) [kworker/3:0H]
(root,0,0,00:00:00/306-12:57:54,31) [cpuhp/4]
(root,0,0,00:01:55/306-12:57:54,32) [watchdog/4]
(root,0,0,00:01:26/306-12:57:54,33) [migration/4]
(root,0,0,00:02:45/306-12:57:54,34) [ksoftirqd/4]
(root,0,0,00:00:00/306-12:57:54,36) [kworker/4:0H]
(root,0,0,00:00:00/306-12:57:54,37) [cpuhp/5]
(root,0,0,00:01:57/306-12:57:54,38) [watchdog/5]
(root,0,0,00:01:36/306-12:57:54,39) [migration/5]
(root,0,0,00:03:04/306-12:57:54,40) [ksoftirqd/5]
(root,0,0,00:00:00/306-12:57:54,42) [kworker/5:0H]
(root,0,0,00:00:00/306-12:57:54,43) [cpuhp/6]
(root,0,0,00:01:54/306-12:57:54,44) [watchdog/6]
(root,0,0,00:01:42/306-12:57:54,45) [migration/6]
(root,0,0,00:02:10/306-12:57:54,46) [ksoftirqd/6]
(root,0,0,00:00:00/306-12:57:54,48) [kworker/6:0H]
(root,0,0,00:00:00/306-12:57:54,49) [cpuhp/7]
(root,0,0,00:02:02/306-12:57:54,50) [watchdog/7]
(root,0,0,00:01:41/306-12:57:54,51) [migration/7]
(root,0,0,00:02:28/306-12:57:54,52) [ksoftirqd/7]
(root,0,0,00:00:00/306-12:57:54,54) [kworker/7:0H]
(root,0,0,00:00:00/306-12:57:54,55) [kdevtmpfs]
(root,0,0,00:00:00/306-12:57:54,56) [netns]
(root,0,0,00:00:00/306-12:57:54,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/306-12:57:54,58) [kauditd]
(root,0,0,00:00:48/306-12:57:54,62) [khungtaskd]
(root,0,0,00:00:00/306-12:57:54,63) [oom_reaper]
(root,0,0,00:00:00/306-12:57:54,64) [writeback]
(root,0,0,00:00:00/306-12:57:54,65) [kcompactd0]
(root,0,0,00:00:00/306-12:57:54,66) [ksmd]
(root,0,0,00:04:36/306-12:57:54,67) [khugepaged]
(root,0,0,00:00:00/306-12:57:54,68) [crypto]
(root,0,0,00:00:00/306-12:57:54,69) [kintegrityd]
(root,0,0,00:00:00/306-12:57:54,70) [kblockd]
(root,0,0,00:00:00/306-12:57:54,71) [ata_sff]
(root,0,0,00:00:00/306-12:57:54,72) [md]
(root,0,0,00:00:00/306-12:57:54,73) [edac-poller]
(root,0,0,00:00:00/306-12:57:54,74) [devfreq_wq]
(root,0,0,00:00:00/306-12:57:54,75) [watchdogd]
(root,0,0,00:27:28/306-12:57:54,80) [kswapd0]
(root,0,0,00:00:00/306-12:57:54,81) [kworker/u17:0]
(root,0,0,00:00:00/306-12:57:54,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/306-12:57:53,125) [kthrotld]
(root,0,0,00:00:00/306-12:57:53,126) [acpi_thermal_pm]
(root,0,0,00:00:00/306-12:57:53,128) [scsi_eh_0]
(root,0,0,00:00:00/306-12:57:53,129) [scsi_tmf_0]
(root,0,0,00:00:00/306-12:57:53,130) [scsi_eh_1]
(root,0,0,00:00:00/306-12:57:53,131) [scsi_tmf_1]
(root,0,0,00:00:00/306-12:57:53,137) [ipv6_addrconf]
(root,0,0,00:00:00/306-12:57:53,147) [kstrp]
(root,0,0,00:00:00/306-12:57:53,164) [charger_manager]
(root,0,0,00:00:00/306-12:57:52,214) [scsi_eh_2]
(root,0,0,00:00:00/306-12:57:52,215) [scsi_tmf_2]
(root,0,0,00:02:09/306-12:57:52,267) [kworker/7:1H]
(root,0,0,00:24:10/306-12:57:48,268) [kworker/4:1H]
(root,0,0,00:00:25/306-12:57:48,275) [kworker/3:1H]
(root,0,0,00:00:28/306-12:57:47,335) [kworker/1:1H]
(root,0,0,00:00:00/306-12:57:46,342) [raid5wq]
(root,0,0,00:00:46/306-12:57:46,393) [kworker/0:1H]
(root,0,0,00:53:11/306-12:57:46,394) [jbd2/sda1-8]
(root,0,0,00:00:00/306-12:57:46,395) [ext4-rsv-conver]
(root,0,0,00:02:45/306-12:57:46,399) [kworker/5:1H]
(root,0,0,00:00:24/306-12:57:45,423) [kworker/2:1H]
(root,0,0,00:02:20/306-12:57:45,441) [kworker/6:1H]
(root,269952,132948,00:46:30/306-12:57:45,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/306-12:57:45,486) [iscsi_eh]
(root,0,0,00:00:00/306-12:57:45,498) [ib-comp-wq]
(root,0,0,00:00:00/306-12:57:45,499) [ib_mcast]
(root,0,0,00:00:00/306-12:57:45,500) [ib_nl_sa_wq]
(root,97708,1708,00:00:00/306-12:57:45,503) /sbin/lvmetad -f
(root,0,0,00:00:00/306-12:57:45,506) [rdma_cm]
(root,43168,3616,00:02:34/306-12:57:45,514) /lib/systemd/systemd-udevd
(systemd-timesync,141928,3016,00:01:34/306-12:57:44,728) /lib/systemd/systemd-timesyncd
(root,25992,3424,00:00:02/306-12:57:42,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,0,0,00:00:30/7-09:24:36,1252) [kworker/3:2]
(root,383268,2248,00:09:13/306-12:57:39,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:39:51/306-12:57:39,1283) /usr/sbin/irqbalance --foreground
(messagebus,50476,4172,00:29:55/306-12:57:39,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5756,00:04:09/306-12:57:39,1298) /lib/systemd/systemd-logind
(root,30028,2852,00:01:17/306-12:57:39,1308) /usr/sbin/cron -f
(syslog,263036,4616,00:13:16/306-12:57:39,1323) /usr/sbin/rsyslogd -n
(root,286352,6556,00:18:38/306-12:57:39,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13328,00:00:00/306-12:57:39,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306864,15952,00:07:10/306-12:57:39,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:01/306-12:57:39,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/306-12:57:39,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,784544,28164,00:06:29/306-12:57:39,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,85616,6708,00:20:27/306-12:57:39,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:03:29/306-12:57:39,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6032,00:16:24/306-12:57:39,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/306-12:57:39,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16412,00:00:00/306-12:57:39,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:04:37/306-12:57:39,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6096,00:09:26/306-12:57:39,1407) /usr/sbin/sshd -D
(root,14664,2016,00:00:00/306-12:57:39,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/306-12:57:39,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5572,00:01:20/306-12:57:39,1420) nginx: worker process
(www-data,143788,4640,00:00:00/306-12:57:39,1424) nginx: worker process
(www-data,143788,4796,00:00:00/306-12:57:39,1428) nginx: worker process
(www-data,143788,4792,00:00:00/306-12:57:39,1429) nginx: worker process
(root,14888,1684,00:00:00/306-12:57:39,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,4920,00:00:00/306-12:57:39,1431) nginx: worker process
(www-data,143788,4792,00:00:00/306-12:57:39,1432) nginx: worker process
(www-data,143788,4796,00:00:00/306-12:57:39,1433) nginx: worker process
(www-data,143788,4920,00:00:00/306-12:57:39,1434) nginx: worker process
(root,4548,1356,00:07:39/306-12:57:39,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:06/306-12:57:39,1534) runsv redis-exporter
(root,4396,768,00:00:06/306-12:57:39,1536) runsv node-exporter
(root,4396,720,00:00:06/306-12:57:39,1537) runsv prometheus
(root,4396,736,00:00:06/306-12:57:39,1538) runsv sidekiq
(root,4396,828,00:00:06/306-12:57:39,1539) runsv gitlab-exporter
(root,4396,1240,09:51:49/306-12:57:39,1540) runsv alertmanager
(root,4396,828,00:00:05/306-12:57:39,1541) runsv postgresql
(root,4396,720,00:00:06/306-12:57:39,1542) runsv postgres-exporter
(root,4396,748,00:00:06/306-12:57:39,1543) runsv grafana
(root,4396,764,00:00:05/306-12:57:39,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:17/306-12:57:39,1545) runsv logrotate
(root,4396,728,00:00:06/306-12:57:39,1546) runsv puma
(root,4396,860,00:00:06/306-12:57:39,1547) runsv nginx
(root,4396,724,00:00:06/306-12:57:39,1548) runsv gitaly
(root,4396,792,00:00:06/306-12:57:39,1549) runsv redis
(root,4396,740,00:00:06/306-12:57:39,1550) runsv registry
(root,4540,1384,02:33:11/306-12:57:39,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:05/306-12:57:39,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,00:57:36/306-12:57:39,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,00:46:09/306-12:57:39,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:05/306-12:57:39,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:40/306-12:57:39,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:00:58/306-12:57:39,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:09:16/306-12:57:39,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:05/306-12:57:39,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:06/306-12:57:39,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:05/306-12:57:39,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:05/306-12:57:39,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:05/306-12:57:39,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:12:17/306-12:57:39,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:08/306-12:57:39,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:05/306-12:57:39,1590) svlogd -tt /var/log/gitlab/puma
(gitlab-psql,8307112,48996,00:00:00/15:00,4451) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306268,45760,00:00:00/13:57,5474) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/45:01,5939) [kworker/1:0]
(gitlab-psql,8307076,47308,00:00:00/13:27,5992) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:16:45,6208) [kworker/6:1]
(git,1731428,968724,00:00:27/01:16:19,6665) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/44:45,6987) [kworker/4:1]
(git,1677664,990084,00:00:18/01:15:59,7069) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/08:38,10902) [kworker/u16:3]
(root,0,0,00:00:00/08:38,10904) [kworker/5:2]
(root,0,0,00:00:01/38:50,12743) [kworker/u16:1]
(root,0,0,00:00:44/10-20:58:25,12883) [kworker/4:2]
(root,0,0,00:00:37/6-02:22:30,12906) [kworker/7:1]
(root,0,0,00:01:24/10-01:40:15,13455) [kworker/0:2]
(root,0,0,00:00:41/10-17:10:04,14108) [kworker/2:1]
(root,0,0,00:00:12/3-01:33:08,15626) [kworker/5:0]
(root,0,0,00:00:00/03:29,15894) [kworker/u16:0]
(root,0,0,00:00:00/03:14:26,16692) [kworker/7:2]
(root,0,0,00:01:25/22-13:30:06,17999) [kworker/1:2]
(gitlab-psql,8307940,49888,00:00:00/33:09,18380) postgres: gitlab gitlabhq_production [local] idle
(root,4628,812,00:00:00/00:36,18725) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(root,4532,760,00:00:00/00:36,18729) sleep 600
(git,1644784,958160,00:00:08/32:39,18963) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(gitlab-psql,8309668,57864,00:00:00/32:33,19055) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/01:03:55,19250) [kworker/0:0]
(root,20180,3628,00:00:00/00:00,19399) /bin/bash /usr/bin/check_mk_agent
(root,36700,3072,00:00:00/00:00,19418) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1056,00:00:00/00:00,19419) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(gitlab-psql,8311584,65640,00:00:01/59:59,23225) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310844,62496,00:00:01/59:59,23226) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/28:33,23234) [kworker/2:0]
(gitlab-psql,8307188,52788,00:00:00/57:32,25678) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307296,53624,00:00:00/57:31,25695) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8307100,51232,00:00:00/25:52,25799) postgres: gitlab gitlabhq_production [local] idle
(git,1796448,1022464,00:01:09/04:05:16,26623) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(systemd-resolve,70760,5324,00:00:00/56:28,26730) /lib/systemd/systemd-resolved
(root,0,0,00:00:00/56:28,26741) [kworker/3:1]
(root,0,0,00:00:27/2-15:47:07,26809) [kworker/6:2]
(git,1392472,860,01:27:23/220-13:08:26,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2182216,136832,1-13:41:52/220-13:08:26,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45896,3-09:00:44/220-13:08:25,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339816,38656,1-01:12:59/220-13:08:25,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1917028,45452,03:36:08/220-13:08:25,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6880,00:00:00/220-13:08:24,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,14748,00:00:00/220-13:08:24,27510) nginx: worker process
(gitlab-www,63816,7648,00:00:00/220-13:08:24,27511) nginx: worker process
(gitlab-www,64680,19944,00:00:22/220-13:08:24,27512) nginx: worker process
(gitlab-www,63960,17364,00:00:00/220-13:08:24,27513) nginx: worker process
(gitlab-www,63816,7648,00:00:00/220-13:08:24,27514) nginx: worker process
(gitlab-www,64344,19508,00:00:00/220-13:08:24,27515) nginx: worker process
(gitlab-www,65464,20640,04:43:31/220-13:08:24,27516) nginx: worker process
(gitlab-www,63816,7648,00:00:00/220-13:08:24,27517) nginx: worker process
(gitlab-www,59784,3980,00:02:43/220-13:08:24,27518) nginx: cache manager process
(gitlab-prometheus,719532,15992,1-04:18:03/220-13:08:24,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640476,16008,1-02:46:31/220-13:08:23,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201552,00:19:08/220-13:08:23,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3160404,164008,2-09:14:52/220-13:08:22,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,308988,00:25:48/220-13:08:22,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:06:22/220-13:08:22,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:08:17/220-13:08:22,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:17:56/220-13:08:22,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,03:35:11/220-13:08:22,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:30/220-13:08:22,27581) postgres: logical replication launcher   
(git,2882320,88272,17:56:22/220-13:08:21,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,107552,18:20:10/220-13:08:21,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,910228,04:01:15/220-13:08:21,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,15724,9-16:29:41/220-13:08:21,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,14300,09:30:23/220-13:08:21,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881712,21464,00:54:13/220-13:08:20,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:11:27/220-13:08:16,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4703900,1130208,26-03:42:04/220-13:08:16,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(git,1814368,1023564,00:01:15/04:04:16,27817) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(gitlab-psql,8332412,68316,1-06:06:01/220-13:08:11,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309400,103748,2-07:59:46/220-13:07:59,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8310544,59744,00:00:00/54:51,28534) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306188,34460,00:23:51/220-13:07:10,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/220-13:07:10,28929) postgres: gitlab gitlabhq_production [local] idle
(git,1820400,1019264,00:01:09/04:02:16,29860) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(git,1904368,1019648,00:01:22/04:01:16,30855) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(gitlab-psql,8312444,65136,00:00:01/52:16,31180) postgres: gitlab gitlabhq_production [local] idle
(git,1937248,1031632,00:01:17/04:00:16,32087) puma: cluster worker 5: 27613 [gitlab-puma-worker]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-09-12 15:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbbaf2bcee19a16ad9a302b1ffc5dde912bf00343b

Found public CheckMk agent:
Version: 1.5.0p16
AgentOS: linux
Hostname: gitlabee
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,225540,8148,00:13:51/219-19:52:45,1) /sbin/init
(root,0,0,00:00:36/219-19:52:45,2) [kthreadd]
(root,0,0,00:00:00/219-19:52:45,4) [kworker/0:0H]
(root,0,0,00:00:00/219-19:52:45,6) [mm_percpu_wq]
(root,0,0,00:03:14/219-19:52:45,7) [ksoftirqd/0]
(root,0,0,07:45:59/219-19:52:45,8) [rcu_sched]
(root,0,0,00:00:00/219-19:52:45,9) [rcu_bh]
(root,0,0,00:01:14/219-19:52:45,10) [migration/0]
(root,0,0,00:01:14/219-19:52:45,11) [watchdog/0]
(root,0,0,00:00:00/219-19:52:45,12) [cpuhp/0]
(root,0,0,00:00:00/219-19:52:45,13) [cpuhp/1]
(root,0,0,00:01:18/219-19:52:45,14) [watchdog/1]
(root,0,0,00:01:16/219-19:52:45,15) [migration/1]
(root,0,0,00:02:19/219-19:52:45,16) [ksoftirqd/1]
(root,0,0,00:00:00/219-19:52:45,18) [kworker/1:0H]
(root,0,0,00:00:00/219-19:52:45,19) [cpuhp/2]
(root,0,0,00:01:18/219-19:52:45,20) [watchdog/2]
(root,0,0,00:01:17/219-19:52:45,21) [migration/2]
(root,0,0,00:01:46/219-19:52:45,22) [ksoftirqd/2]
(root,0,0,00:00:00/219-19:52:45,24) [kworker/2:0H]
(root,0,0,00:00:00/219-19:52:45,25) [cpuhp/3]
(root,0,0,00:01:22/219-19:52:45,26) [watchdog/3]
(root,0,0,00:01:15/219-19:52:45,27) [migration/3]
(root,0,0,00:01:31/219-19:52:45,28) [ksoftirqd/3]
(root,0,0,00:00:00/219-19:52:45,30) [kworker/3:0H]
(root,0,0,00:00:00/219-19:52:45,31) [cpuhp/4]
(root,0,0,00:01:24/219-19:52:45,32) [watchdog/4]
(root,0,0,00:01:01/219-19:52:45,33) [migration/4]
(root,0,0,00:01:50/219-19:52:45,34) [ksoftirqd/4]
(root,0,0,00:00:00/219-19:52:45,36) [kworker/4:0H]
(root,0,0,00:00:00/219-19:52:45,37) [cpuhp/5]
(root,0,0,00:01:25/219-19:52:45,38) [watchdog/5]
(root,0,0,00:01:09/219-19:52:45,39) [migration/5]
(root,0,0,00:02:14/219-19:52:45,40) [ksoftirqd/5]
(root,0,0,00:00:00/219-19:52:45,42) [kworker/5:0H]
(root,0,0,00:00:00/219-19:52:45,43) [cpuhp/6]
(root,0,0,00:01:23/219-19:52:45,44) [watchdog/6]
(root,0,0,00:01:13/219-19:52:45,45) [migration/6]
(root,0,0,00:01:36/219-19:52:45,46) [ksoftirqd/6]
(root,0,0,00:00:00/219-19:52:45,48) [kworker/6:0H]
(root,0,0,00:00:00/219-19:52:45,49) [cpuhp/7]
(root,0,0,00:01:30/219-19:52:45,50) [watchdog/7]
(root,0,0,00:01:13/219-19:52:45,51) [migration/7]
(root,0,0,00:01:50/219-19:52:45,52) [ksoftirqd/7]
(root,0,0,00:00:00/219-19:52:45,54) [kworker/7:0H]
(root,0,0,00:00:00/219-19:52:45,55) [kdevtmpfs]
(root,0,0,00:00:00/219-19:52:45,56) [netns]
(root,0,0,00:00:00/219-19:52:45,57) [rcu_tasks_kthre]
(root,0,0,00:00:00/219-19:52:45,58) [kauditd]
(root,0,0,00:00:35/219-19:52:45,62) [khungtaskd]
(root,0,0,00:00:00/219-19:52:45,63) [oom_reaper]
(root,0,0,00:00:00/219-19:52:45,64) [writeback]
(root,0,0,00:00:00/219-19:52:45,65) [kcompactd0]
(root,0,0,00:00:00/219-19:52:45,66) [ksmd]
(root,0,0,00:03:18/219-19:52:45,67) [khugepaged]
(root,0,0,00:00:00/219-19:52:45,68) [crypto]
(root,0,0,00:00:00/219-19:52:45,69) [kintegrityd]
(root,0,0,00:00:00/219-19:52:45,70) [kblockd]
(root,0,0,00:00:00/219-19:52:45,71) [ata_sff]
(root,0,0,00:00:00/219-19:52:45,72) [md]
(root,0,0,00:00:00/219-19:52:45,73) [edac-poller]
(root,0,0,00:00:00/219-19:52:45,74) [devfreq_wq]
(root,0,0,00:00:00/219-19:52:45,75) [watchdogd]
(root,0,0,00:17:06/219-19:52:45,80) [kswapd0]
(root,0,0,00:00:00/219-19:52:45,81) [kworker/u17:0]
(root,0,0,00:00:00/219-19:52:45,82) [ecryptfs-kthrea]
(root,0,0,00:00:00/219-19:52:44,125) [kthrotld]
(root,0,0,00:00:00/219-19:52:44,126) [acpi_thermal_pm]
(root,0,0,00:00:00/219-19:52:44,128) [scsi_eh_0]
(root,0,0,00:00:00/219-19:52:44,129) [scsi_tmf_0]
(root,0,0,00:00:00/219-19:52:44,130) [scsi_eh_1]
(root,0,0,00:00:00/219-19:52:44,131) [scsi_tmf_1]
(root,0,0,00:00:00/219-19:52:44,137) [ipv6_addrconf]
(root,0,0,00:00:00/219-19:52:44,147) [kstrp]
(root,0,0,00:00:00/219-19:52:44,164) [charger_manager]
(root,0,0,00:00:00/219-19:52:43,214) [scsi_eh_2]
(root,0,0,00:00:00/219-19:52:43,215) [scsi_tmf_2]
(root,0,0,00:01:34/219-19:52:43,267) [kworker/7:1H]
(root,0,0,00:17:12/219-19:52:39,268) [kworker/4:1H]
(root,0,0,00:00:18/219-19:52:39,275) [kworker/3:1H]
(root,0,0,00:00:20/219-19:52:38,335) [kworker/1:1H]
(root,0,0,00:00:00/219-19:52:37,342) [raid5wq]
(root,0,0,00:00:33/219-19:52:37,393) [kworker/0:1H]
(root,0,0,00:38:22/219-19:52:37,394) [jbd2/sda1-8]
(root,0,0,00:00:00/219-19:52:37,395) [ext4-rsv-conver]
(root,0,0,00:01:56/219-19:52:37,399) [kworker/5:1H]
(root,0,0,00:00:17/219-19:52:36,423) [kworker/2:1H]
(root,0,0,00:01:41/219-19:52:36,441) [kworker/6:1H]
(root,200476,80992,00:33:11/219-19:52:36,474) /lib/systemd/systemd-journald
(root,0,0,00:00:00/219-19:52:36,486) [iscsi_eh]
(root,0,0,00:00:00/219-19:52:36,498) [ib-comp-wq]
(root,0,0,00:00:00/219-19:52:36,499) [ib_mcast]
(root,0,0,00:00:00/219-19:52:36,500) [ib_nl_sa_wq]
(root,97708,1708,00:00:00/219-19:52:36,503) /sbin/lvmetad -f
(root,0,0,00:00:00/219-19:52:36,506) [rdma_cm]
(root,43168,3616,00:01:52/219-19:52:36,514) /lib/systemd/systemd-udevd
(root,4532,780,00:00:00/48:38,681) sleep 3000
(systemd-timesync,141928,3016,00:01:10/219-19:52:35,728) /lib/systemd/systemd-timesyncd
(root,25992,3424,00:00:01/219-19:52:33,991) /sbin/dhclient -1 -4 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
(root,309400,2260,00:06:39/219-19:52:30,1271) /usr/bin/lxcfs /var/lib/lxcfs/
(root,110516,3376,00:28:46/219-19:52:30,1283) /usr/sbin/irqbalance --foreground
(messagebus,50284,3912,00:21:17/219-19:52:30,1284) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,70700,5752,00:03:06/219-19:52:30,1298) /lib/systemd/systemd-logind
(root,30028,2852,00:00:56/219-19:52:30,1308) /usr/sbin/cron -f
(syslog,263036,4616,00:09:39/219-19:52:30,1323) /usr/sbin/rsyslogd -n
(root,286352,6556,00:13:30/219-19:52:30,1331) /usr/lib/accountsservice/accounts-daemon
(root,169100,13328,00:00:00/219-19:52:30,1336) /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
(clamav,306836,29236,00:05:11/219-19:52:30,1355) /usr/bin/freshclam -d --foreground=true
(daemon,28332,2156,00:00:01/219-19:52:30,1358) /usr/sbin/atd -f
(root,4628,848,00:00:00/219-19:52:30,1360) /bin/sh /usr/lib/sshguard/sshguard-journalctl -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,784544,14812,00:04:43/219-19:52:30,1367) /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10
(root,84748,5852,00:11:51/219-19:52:30,1368) /usr/sbin/sshguard -i /run/sshguard.pid -w /etc/sshguard/whitelist -a 40 -p 420 -s 1200
(root,4628,1704,00:02:38/219-19:52:30,1369) /bin/sh /usr/lib/x86_64-linux-gnu/sshg-fw
(root,288880,6032,00:11:42/219-19:52:30,1392) /usr/lib/policykit-1/polkitd --no-debug
(root,23060,212,00:00:00/219-19:52:30,1395) /usr/sbin/qemu-ga --daemonize -m virtio-serial -p /dev/virtio-ports/org.qemu.guest_agent.0
(root,185940,16412,00:00:00/219-19:52:30,1396) /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
(root,24188,2340,00:03:19/219-19:52:30,1404) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,72296,6096,00:06:46/219-19:52:30,1407) /usr/sbin/sshd -D
(root,14664,2016,00:00:00/219-19:52:30,1409) /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
(root,141112,2484,00:00:00/219-19:52:30,1411) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,143788,5740,00:01:00/219-19:52:30,1420) nginx: worker process
(www-data,143788,4808,00:00:00/219-19:52:30,1424) nginx: worker process
(www-data,143788,5088,00:00:00/219-19:52:30,1428) nginx: worker process
(www-data,143788,5088,00:00:00/219-19:52:30,1429) nginx: worker process
(root,14888,1684,00:00:00/219-19:52:30,1430) /sbin/agetty -o -p -- \u --noclear tty1 linux
(www-data,143788,5088,00:00:00/219-19:52:30,1431) nginx: worker process
(www-data,143788,5088,00:00:00/219-19:52:30,1432) nginx: worker process
(www-data,143788,5088,00:00:00/219-19:52:30,1433) nginx: worker process
(www-data,143788,5088,00:00:00/219-19:52:30,1434) nginx: worker process
(root,4548,1356,00:05:34/219-19:52:30,1519) runsvdir -P /opt/gitlab/service log: ...........................................................................................................................................................................................................................................................................................................................................................................................................
(root,4396,788,00:00:04/219-19:52:30,1534) runsv redis-exporter
(root,4396,768,00:00:05/219-19:52:30,1536) runsv node-exporter
(root,4396,720,00:00:04/219-19:52:30,1537) runsv prometheus
(root,4396,736,00:00:04/219-19:52:30,1538) runsv sidekiq
(root,4396,828,00:00:04/219-19:52:30,1539) runsv gitlab-exporter
(root,4396,1240,07:03:53/219-19:52:30,1540) runsv alertmanager
(root,4396,828,00:00:04/219-19:52:30,1541) runsv postgresql
(root,4396,720,00:00:04/219-19:52:30,1542) runsv postgres-exporter
(root,4396,748,00:00:04/219-19:52:30,1543) runsv grafana
(root,4396,764,00:00:04/219-19:52:30,1544) runsv gitlab-workhorse
(root,4396,1308,00:00:12/219-19:52:30,1545) runsv logrotate
(root,4396,728,00:00:04/219-19:52:30,1546) runsv puma
(root,4396,860,00:00:04/219-19:52:30,1547) runsv nginx
(root,4396,724,00:00:04/219-19:52:30,1548) runsv gitaly
(root,4396,792,00:00:04/219-19:52:30,1549) runsv redis
(root,4396,740,00:00:04/219-19:52:30,1550) runsv registry
(root,4540,1384,01:50:48/219-19:52:30,1551) svlogd -tt /var/log/gitlab/alertmanager
(root,4540,728,00:00:04/219-19:52:30,1552) svlogd -tt /var/log/gitlab/redis-exporter
(root,4540,1372,00:41:49/219-19:52:30,1555) svlogd /var/log/gitlab/sidekiq
(root,4540,1432,00:33:14/219-19:52:30,1556) svlogd /var/log/gitlab/gitlab-workhorse
(root,4540,736,00:00:04/219-19:52:30,1557) svlogd -tt /var/log/gitlab/grafana
(root,4540,1316,00:00:30/219-19:52:30,1560) svlogd -tt /var/log/gitlab/prometheus
(root,4540,1504,00:00:43/219-19:52:30,1563) svlogd -tt /var/log/gitlab/redis
(root,4540,1408,00:07:05/219-19:52:30,1566) svlogd /var/log/gitlab/gitaly
(root,4540,732,00:00:04/219-19:52:30,1567) svlogd -tt /var/log/gitlab/node-exporter
(root,4540,1328,00:00:05/219-19:52:30,1574) svlogd -tt /var/log/gitlab/nginx
(root,4540,724,00:00:03/219-19:52:30,1575) svlogd -tt /var/log/gitlab/logrotate
(root,4540,1484,00:00:04/219-19:52:30,1579) svlogd -tt /var/log/gitlab/postgresql
(root,4540,804,00:00:04/219-19:52:30,1580) svlogd -tt /var/log/gitlab/postgres-exporter
(root,4540,1504,00:08:53/219-19:52:30,1582) svlogd -tt /var/log/gitlab/gitlab-exporter
(root,4540,1340,00:00:06/219-19:52:30,1586) svlogd -tt /var/log/gitlab/registry
(root,4540,728,00:00:04/219-19:52:30,1590) svlogd -tt /var/log/gitlab/puma
(root,0,0,00:00:00/46:06,3385) [kworker/7:0]
(root,0,0,00:00:00/04:32:38,5211) [kworker/3:2]
(gitlab-psql,8312012,65460,00:00:00/10:42,7710) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314368,81516,00:00:01/10:42,7711) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/05:00:50,7772) [kworker/3:0]
(root,0,0,00:00:02/07:40:54,8199) [kworker/0:1]
(root,0,0,00:00:00/09:58,8440) [kworker/u16:1]
(root,0,0,00:00:00/02:50:32,8887) [kworker/0:0]
(root,0,0,00:00:01/40:03,9380) [kworker/u16:2]
(gitlab-psql,8311280,72420,00:00:00/08:25,9974) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313672,69828,00:00:00/08:16,10152) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8313768,68876,00:00:00/08:15,10168) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314280,81916,00:00:01/08:15,10170) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8311564,68680,00:00:00/07:56,11228) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314044,74840,00:00:00/07:56,11249) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:04/22:50:46,11997) [kworker/2:0]
(root,0,0,00:00:26/2-04:06:26,12716) [kworker/6:0]
(gitlab-psql,8307344,52412,00:00:00/06:46,13405) postgres: gitlab gitlabhq_production [local] idle
(git,1753328,1008664,00:00:37/02:12:56,13890) puma: cluster worker 1: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/04:33,15576) [kworker/u16:0]
(gitlab-psql,8312596,67548,00:00:00/04:30,15613) postgres: gitlab gitlabhq_production [local] idle
(git,1850212,1033624,00:01:41/10:47:05,16915) puma: cluster worker 4: 27613 [gitlab-puma-worker]
(git,1745248,1004304,00:00:43/03:14:57,17083) puma: cluster worker 6: 27613 [gitlab-puma-worker]
(git,1767780,1019956,00:01:15/07:00:39,17346) puma: cluster worker 5: 27613 [gitlab-puma-worker]
(git,1598304,923672,00:00:01/02:15,17852) puma: cluster worker 7: 27613 [gitlab-puma-worker]
(gitlab-psql,8307604,56168,00:00:00/02:13,17896) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:55/27-23:22:45,18105) [kworker/1:2]
(git,1794292,1020096,00:00:35/02:08:37,18406) puma: cluster worker 2: 27613 [gitlab-puma-worker]
(gitlab-psql,8316532,88760,00:00:02/30:58,18448) postgres: gitlab gitlabhq_production [local] idle
(git,1762036,1020464,00:00:40/02:40:17,18986) puma: cluster worker 3: 27613 [gitlab-puma-worker]
(root,0,0,00:00:29/4-05:10:35,19702) [kworker/7:2]
(git,21364,4280,00:00:00/00:10,19971) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1352,00:00:00/00:10,19972) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21312,4728,00:00:00/00:10,19973) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20664,4336,00:00:00/00:10,19974) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,20656,1380,00:00:00/00:09,19976) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1396,00:00:00/00:09,19977) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,20676,4488,00:00:00/00:09,19982) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,21888,5128,00:00:00/00:09,19983) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,20676,4276,00:00:00/00:09,19986) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,21888,5076,00:00:00/00:09,19987) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21364,4564,00:00:00/00:01,20143) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1352,00:00:00/00:01,20144) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21520,4688,00:00:00/00:01,20149) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,21520,4632,00:00:00/00:01,20150) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21520,4604,00:00:00/00:01,20152) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1388,00:00:00/00:01,20153) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21248,4736,00:00:00/00:01,20168) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,21992,4816,00:00:00/00:01,20169) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21364,4488,00:00:00/00:01,20183) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1396,00:00:00/00:01,20184) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21364,4532,00:00:00/00:00,20214) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1412,00:00:00/00:00,20215) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(git,21520,4644,00:00:00/00:00,20221) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1412,00:00:00/00:00,20222) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/38/8c/388c2eafe5afd475492698c0995a2daf157eb3b3be8207391d3a023c97c8c034.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(root,20180,3636,00:00:00/00:00,20334) /bin/bash /usr/bin/check_mk_agent
(git,21364,4560,00:00:00/00:00,20345) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch --end-of-options
(git,20656,1436,00:00:00/00:00,20348) /opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/@hashed/dd/8e/dd8e8c8c9dae8978f122d7bcf3d0d49f6a0e86b9fc35528f55e78f7408927bb1.git -c core.fsyncObjectFiles=true -c gc.auto=0 -c core.autocrlf=input cat-file --batch-check --end-of-options
(root,36700,3056,00:00:00/00:00,20354) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,13560,1160,00:00:00/00:00,20355) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:04/1-00:11:55,22813) [kworker/5:1]
(root,4628,776,00:00:00/58:38,22885) /bin/sh /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
(gitlab-psql,8312276,85372,00:00:02/25:19,23900) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/23:30,25875) [kworker/2:2]
(git,1392472,764,00:53:25/133-20:03:17,27415) /opt/gitlab/embedded/bin/gitaly-wrapper /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,2181448,137516,23:05:13/133-20:03:17,27421) /opt/gitlab/embedded/bin/gitaly /var/opt/gitlab/gitaly/config.toml
(git,314124,45940,2-01:51:16/133-20:03:16,27453) /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
(git,2339560,37172,15:04:01/133-20:03:16,27455) /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
(gitlab-prometheus,1916772,42076,02:04:10/133-20:03:16,27469) /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
(root,55184,6888,00:00:00/133-20:03:15,27509) nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
(gitlab-www,63960,11468,00:00:00/133-20:03:15,27510) nginx: worker process
(gitlab-www,63816,7648,00:00:00/133-20:03:15,27511) nginx: worker process
(gitlab-www,64680,18156,00:00:14/133-20:03:15,27512) nginx: worker process
(gitlab-www,63960,14684,00:00:00/133-20:03:15,27513) nginx: worker process
(gitlab-www,63816,7648,00:00:00/133-20:03:15,27514) nginx: worker process
(gitlab-www,64100,17168,00:00:00/133-20:03:15,27515) nginx: worker process
(gitlab-www,65632,19044,02:48:54/133-20:03:15,27516) nginx: worker process
(gitlab-www,63816,7648,00:00:00/133-20:03:15,27517) nginx: worker process
(gitlab-www,59784,3980,00:01:40/133-20:03:15,27518) nginx: cache manager process
(gitlab-prometheus,719532,15752,16:57:07/133-20:03:15,27521) /opt/gitlab/embedded/bin/node_exporter --web.listen-address=localhost:9100 --collector.mountstats --collector.runit --collector.runit.servicedir=/opt/gitlab/sv --collector.textfile.directory=/var/opt/gitlab/node-exporter/textfile_collector
(gitlab-psql,1640220,14500,16:08:53/133-20:03:14,27543) /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
(gitlab-psql,8294660,201560,00:11:39/133-20:03:14,27552) /opt/gitlab/embedded/bin/postgres -D /var/opt/gitlab/postgresql/data
(gitlab-prometheus,3187612,171220,1-10:09:42/133-20:03:13,27569) /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
(gitlab-psql,8294864,254168,00:15:43/133-20:03:13,27576) postgres: checkpointer   
(gitlab-psql,8294660,65636,00:03:55/133-20:03:13,27577) postgres: background writer   
(gitlab-psql,8294660,21744,00:05:06/133-20:03:13,27578) postgres: walwriter   
(gitlab-psql,8295360,8196,00:11:02/133-20:03:13,27579) postgres: autovacuum launcher   
(gitlab-psql,35788,5476,02:08:37/133-20:03:13,27580) postgres: stats collector   
(gitlab-psql,8295200,6688,00:00:19/133-20:03:13,27581) postgres: logical replication launcher   
(git,2882320,87816,11:17:44/133-20:03:12,27610) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.0
(git,3093044,103324,11:29:38/133-20:03:12,27611) ruby /opt/gitlab/embedded/service/gitaly-ruby/bin/gitaly-ruby 27421 /var/opt/gitlab/gitaly/internal_sockets/ruby.1
(git,1461948,909640,02:27:31/133-20:03:12,27613) puma 5.3.2 (unix:///var/opt/gitlab/gitlab-rails/sockets/gitlab.socket,tcp://127.0.0.1:8080) [gitlab-puma-worker]
(gitlab-redis,170736,16560,5-21:23:02/133-20:03:12,27618) /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
(gitlab-redis,1632512,17976,05:45:09/133-20:03:12,27624) /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
(registry,1881712,22236,00:33:45/133-20:03:11,27643) /opt/gitlab/embedded/bin/registry serve ./config.yml
(git,156028,20652,00:08:25/133-20:03:07,27773) ruby /opt/gitlab/embedded/service/gitlab-rails/bin/sidekiq-cluster -e production -r /opt/gitlab/embedded/service/gitlab-rails -m 50 --timeout 25 *
(git,4634396,1144860,15-21:00:31/133-20:03:07,27778) sidekiq 6.2.2 queues:authorized_project_update:authorized_project_update_project_create,authorized_project_update:authorized_project_update_project_group_link_create,authorized_project_update:authorized_project_update_project_recalculate,authorized_project_update:authorized_project_update_project_recalculate_per_user,authorized_project_update:authorized_project_update_user_refresh_from_replica,authorized_project_update:authorized_project_update_user_refresh_over_user_range,authorized_project_update:authorized_project_update_user_refresh_with_low_urgency,auto_devops:auto_devops_disable,auto_merge:auto_merge_process,chaos:chaos_cpu_spin,chaos:chaos_db_spin,chaos:chaos_kill,chaos:chaos_leak_mem,chaos:chaos_sleep,container_repository:cleanup_container_repository,container_repository:container_expiration_policies_cleanup_container_repository,container_repository:delete_container_repository,cronjob:admin_email,cronjob:analytics_usage_trends_count_job_trigger,cronjob:authorized_project_update_periodic_recalculate,c
(gitlab-psql,8313436,87892,00:00:02/21:43,27831) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8332412,67568,18:25:50/133-20:03:02,27864) postgres: gitlab-psql gitlabhq_production [local] idle
(gitlab-psql,8309400,88396,1-10:55:55/133-20:02:50,28040) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312428,83472,00:00:02/21:07,28516) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8312880,87968,00:00:02/53:06,28564) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8306220,34428,00:14:25/133-20:02:01,28927) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8305504,44420,00:00:00/133-20:02:01,28929) postgres: gitlab gitlabhq_production [local] idle
(gitlab-psql,8314064,74444,00:00:01/20:44,29027) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:01:41/23-04:38:06,29490) [kworker/4:1]
(root,0,0,00:00:00/04:40:34,29588) [kworker/5:0]
(root,0,0,00:00:00/04:40:34,29589) [kworker/6:1]
(git,1704288,983956,00:00:23/01:56:36,30723) puma: cluster worker 0: 27613 [gitlab-puma-worker]
(root,0,0,00:00:00/03:01:09,30971) [kworker/4:2]
(systemd-resolve,70760,5244,00:00:00/09:27:45,31102) /lib/systemd/systemd-resolved
(gitlab-psql,8312496,82816,00:00:01/19:12,31682) postgres: gitlab gitlabhq_production [local] idle
(root,0,0,00:00:00/18:33,32444) [kworker/1:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 96:00:00:30:f2:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-06-17 22:52

Create report

Domain summary

No record