文件操作 - managed_installation.log
返回文件管理
返回主菜单
删除本文件
文件: /var/log/managed_installation.log
编辑文件内容
[2026-05-21 01:12:21] [INFO] ===== Puppet Agent Installation Started ===== [2026-05-21 01:12:21] [INFO] Detected OS : almalinux [2026-05-21 01:12:21] [INFO] Major version: 8 [2026-05-21 01:12:21] [INFO] Control panel: cPanel [2026-05-21 01:12:21] [INFO] Installing Puppet 8 for AlmaLinux 8 [2026-05-21 01:12:21] [INFO] CMD: rpm -Uvh https://yum.puppet.com/puppet8-release-el-8.noarch.rpm warning: /var/tmp/rpm-tmp.mPHN3H: Header V4 RSA/SHA512 Signature, key ID 9e61ef26: NOKEY Retrieving https://yum.puppet.com/puppet8-release-el-8.noarch.rpm Verifying... ######################################## Preparing... ######################################## Updating / installing... puppet8-release-1.0.0-10.el8 ######################################## [2026-05-21 01:12:22] [INFO] CMD: dnf install -y puppet-agent Puppet 8 Repository el 8 - x86_64 5.1 MB/s | 3.8 MB 00:00 Last metadata expiration check: 0:00:01 ago on Thu 21 May 2026 01:12:23 AM +08. Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ================================================================================ Installing: puppet-agent x86_64 8.10.0-1.el8 puppet8 27 M Transaction Summary ================================================================================ Install 1 Package Total download size: 27 M Installed size: 113 M Downloading Packages: puppet-agent-8.10.0-1.el8.x86_64.rpm 44 MB/s | 27 MB 00:00 -------------------------------------------------------------------------------- Total 44 MB/s | 27 MB 00:00 Puppet 8 Repository el 8 - x86_64 3.0 MB/s | 3.1 kB 00:00 Importing GPG key 0x9E61EF26: Userid : "Puppet, Inc. Release Key (Puppet, Inc. Release Key) <release@puppet.com>" Fingerprint: D681 1ED3 ADEE B844 1AF5 AA8F 4528 B6CD 9E61 EF26 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-puppet8-release Key imported successfully Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: puppet-agent-8.10.0-1.el8.x86_64 1/1 Installing : puppet-agent-8.10.0-1.el8.x86_64 1/1 Running scriptlet: puppet-agent-8.10.0-1.el8.x86_64 1/1 Verifying : puppet-agent-8.10.0-1.el8.x86_64 1/1 Installed: puppet-agent-8.10.0-1.el8.x86_64 Complete! [2026-05-21 01:12:42] [INFO] CMD: systemctl enable --now puppet Created symlink /etc/systemd/system/multi-user.target.wants/puppet.service → /usr/lib/systemd/system/puppet.service. [2026-05-21 01:12:42] [INFO] puppet-agent installation complete. [2026-05-21 01:12:42] [INFO] Configuring /etc/puppetlabs/puppet/puppet.conf [2026-05-21 01:12:42] [INFO] CMD: echo -e '\n[agent]\nserver = puppet.mschosting.cloud\nruninterval = 30m\nenvironment = production' | tee -a /etc/puppetlabs/puppet/puppet.conf [agent] server = puppet.mschosting.cloud runinterval = 30m environment = production [2026-05-21 01:12:42] [INFO] puppet.conf updated. [2026-05-21 01:12:42] [INFO] Writing custom Facter facts to /etc/puppetlabs/facter/facts.d/server.txt [2026-05-21 01:12:42] [INFO] CMD: mkdir -p /etc/puppetlabs/facter/facts.d [2026-05-21 01:12:42] [INFO] Facts written: [2026-05-21 01:12:42] [INFO] server_role = pro_management [2026-05-21 01:12:42] [INFO] control_panel = cPanel [2026-05-21 01:12:42] [INFO] locality = Malaysia [2026-05-21 01:12:42] [INFO] CSF firewall detected. Checking TCP_OUT for port 8140. [2026-05-21 01:12:42] [INFO] Adding port 8140 to TCP_OUT in /etc/csf/csf.conf [2026-05-21 01:12:42] [INFO] CMD: sed -i 's/^\(TCP_OUT\s*=\s*"[^"]*\)"/\1,8140"/' /etc/csf/csf.conf [2026-05-21 01:12:42] [INFO] TCP_OUT updated. Restarting CSF (csf -ra). [2026-05-21 01:12:42] [INFO] CMD: csf -ra Flushing chain `INPUT' Flushing chain `FORWARD' Flushing chain `OUTPUT' Flushing chain `LOGDROPIN' Flushing chain `LOGDROPOUT' Flushing chain `DENYIN' Flushing chain `DENYOUT' Flushing chain `ALLOWIN' Flushing chain `ALLOWOUT' Flushing chain `LOCALINPUT' Flushing chain `LOCALOUTPUT' Flushing chain `INVDROP' Flushing chain `INVALID' Deleting chain `LOGDROPIN' Deleting chain `LOGDROPOUT' Deleting chain `DENYIN' Deleting chain `DENYOUT' Deleting chain `ALLOWIN' Deleting chain `ALLOWOUT' Deleting chain `LOCALINPUT' Deleting chain `LOCALOUTPUT' Deleting chain `INVDROP' Deleting chain `INVALID' Flushing chain `PREROUTING' Flushing chain `INPUT' Flushing chain `POSTROUTING' Flushing chain `OUTPUT' Flushing chain `PREROUTING' Flushing chain `OUTPUT' Flushing chain `PREROUTING' Flushing chain `INPUT' Flushing chain `FORWARD' Flushing chain `OUTPUT' Flushing chain `POSTROUTING' Flushing chain `INPUT' Flushing chain `FORWARD' Flushing chain `OUTPUT' Flushing chain `LOGDROPIN' Flushing chain `LOGDROPOUT' Flushing chain `DENYIN' Flushing chain `DENYOUT' Flushing chain `ALLOWIN' Flushing chain `ALLOWOUT' Flushing chain `LOCALINPUT' Flushing chain `LOCALOUTPUT' Flushing chain `INVDROP' Flushing chain `INVALID' Deleting chain `LOGDROPIN' Deleting chain `LOGDROPOUT' Deleting chain `DENYIN' Deleting chain `DENYOUT' Deleting chain `ALLOWIN' Deleting chain `ALLOWOUT' Deleting chain `LOCALINPUT' Deleting chain `LOCALOUTPUT' Deleting chain `INVDROP' Deleting chain `INVALID' Flushing chain `PREROUTING' Flushing chain `INPUT' Flushing chain `POSTROUTING' Flushing chain `OUTPUT' Flushing chain `PREROUTING' Flushing chain `OUTPUT' Flushing chain `PREROUTING' Flushing chain `INPUT' Flushing chain `FORWARD' Flushing chain `OUTPUT' Flushing chain `POSTROUTING' csf: FASTSTART loading DROP no logging (IPv4) csf: FASTSTART loading DROP no logging (IPv6) LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *TCP_IN Blocked* " LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *TCP_OUT Blocked* " LOG udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *UDP_IN Blocked* " LOG udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *UDP_OUT Blocked* " LOG icmp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *ICMP_IN Blocked* " LOG icmp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *ICMP_OUT Blocked* " LOG tcp opt in * out * ::/0 -> ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *TCP6IN Blocked* " LOG tcp opt in * out * ::/0 -> ::/0 tcp flags:0x17/0x02 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *TCP6OUT Blocked* " LOG udp opt in * out * ::/0 -> ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *UDP6IN Blocked* " LOG udp opt in * out * ::/0 -> ::/0 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *UDP6OUT Blocked* " LOG ipv6-icmp opt in * out * ::/0 -> ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *ICMP6IN Blocked* " LOG ipv6-icmp opt in * out * ::/0 -> ::/0 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *ICMP6OUT Blocked* " DROP all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 REJECT all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 reject-with icmp-port-unreachable DROP all opt in * out * ::/0 -> ::/0 REJECT all opt in * out * ::/0 -> ::/0 reject-with icmp6-port-unreachable DENYOUT all opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0 DENYIN all opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 ALLOWOUT all opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0 ALLOWIN all opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 DENYOUT all opt in * out !lo ::/0 -> ::/0 DENYIN all opt in !lo out * ::/0 -> ::/0 ALLOWOUT all opt in * out !lo ::/0 -> ::/0 ALLOWIN all opt in !lo out * ::/0 -> ::/0 csf: FASTSTART loading Packet Filter (IPv4) csf: FASTSTART loading Packet Filter (IPv6) DROP all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 INVALID tcp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 INVALID tcp opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0 DROP all opt in * out * ::/0 -> ::/0 INVALID tcp opt in !lo out * ::/0 -> ::/0 INVALID tcp opt in * out !lo ::/0 -> ::/0 csf: FASTSTART loading csf.deny (IPv4) csf: FASTSTART loading csf.allow (IPv4) csf: FASTSTART loading csf.allow (IPv6) ACCEPT icmp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 icmptype 8 limit: avg 1/sec burst 5 LOGDROPIN icmp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 icmptype 8 ACCEPT icmp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 ACCEPT icmp opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0 ACCEPT ipv6-icmp opt in !lo out * ::/0 -> ::/0 ACCEPT ipv6-icmp opt in * out !lo ::/0 -> ::/0 ACCEPT all opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 ctstate RELATED,ESTABLISHED ACCEPT all opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0 ctstate RELATED,ESTABLISHED ACCEPT all opt in !lo out * ::/0 -> ::/0 ctstate RELATED,ESTABLISHED ACCEPT all opt in * out !lo ::/0 -> ::/0 ctstate RELATED,ESTABLISHED csf: FASTSTART loading TCP_IN (IPv4) csf: FASTSTART loading TCP6_IN (IPv6) csf: FASTSTART loading TCP_OUT (IPv4) csf: FASTSTART loading TCP6_OUT (IPv6) csf: FASTSTART loading UDP_IN (IPv4) csf: FASTSTART loading UDP6_IN (IPv6) csf: FASTSTART loading UDP_OUT (IPv4) csf: FASTSTART loading UDP6_OUT (IPv6) ACCEPT all opt -- in lo out * 0.0.0.0/0 -> 0.0.0.0/0 ACCEPT all opt -- in * out lo 0.0.0.0/0 -> 0.0.0.0/0 LOGDROPOUT all opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0 LOGDROPIN all opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 ACCEPT all opt in lo out * ::/0 -> ::/0 ACCEPT all opt in * out lo ::/0 -> ::/0 LOGDROPOUT all opt in * out !lo ::/0 -> ::/0 LOGDROPIN all opt in !lo out * ::/0 -> ::/0 csf: FASTSTART loading DNS (IPv4) csf: FASTSTART loading DNS (IPv6) LOCALOUTPUT all opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0 LOCALINPUT all opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0 LOCALOUTPUT all opt in * out !lo ::/0 -> ::/0 LOCALINPUT all opt in !lo out * ::/0 -> ::/0 ● lfd.service - ConfigServer Firewall & Security - lfd Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2026-05-21 01:12:46 +08; 9ms ago Process: 3397566 ExecStart=/usr/sbin/lfd (code=exited, status=0/SUCCESS) Main PID: 3397579 (lfd - starting) Tasks: 1 (limit: 202766) Memory: 29.5M CGroup: /system.slice/lfd.service └─3397579 lfd - starting May 21 01:12:46 server.jjexpress.com.my systemd[1]: Starting ConfigServer Firewall & Security - lfd... May 21 01:12:46 server.jjexpress.com.my systemd[1]: Started ConfigServer Firewall & Security - lfd. *WARNING* The option "WHM > Tweak Settings > Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak)" is incompatible with this firewall. The option must be disabled in WHM and the SMTP_BLOCK alternative in csf used instead *WARNING* RESTRICT_SYSLOG is disabled. See SECURITY WARNING in /etc/csf/csf.conf. [2026-05-21 01:12:46] [INFO] CSF restarted successfully. [2026-05-21 01:12:46] [INFO] Running: /opt/puppetlabs/bin/puppet agent -t [attempt 1] [0;32mInfo: Refreshed CRL: 15:F1:2D:A0:B5:6F:5E:E8:EE:40:01:22:94:3C:C1:75:D0:8D:C9:32:B6:D9:D6:38:AF:26:4B:19:4E:50:B8:FB[0m [0;32mInfo: Creating a new RSA SSL key for server.jjexpress.com.my[0m [0;32mInfo: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml[0m [0;32mInfo: Creating a new SSL certificate request for server.jjexpress.com.my[0m [0;32mInfo: Certificate Request fingerprint (SHA256): C6:25:52:82:8C:1F:1A:DF:86:84:8E:99:FF:F2:B2:8A:D8:01:0B:6A:16:1D:DD:87:03:7E:26:A8:C6:67:15:15[0m [0;32mInfo: Certificate for server.jjexpress.com.my has not been signed yet[0m Couldn't fetch certificate from CA server; you might still need to sign this agent's certificate (server.jjexpress.com.my). Exiting now because the waitforcert setting is set to 0. [2026-05-21 01:13:21] [INFO] Puppet agent submitted a CSR to the Puppet master. [2026-05-21 01:13:21] [INFO] ACTION REQUIRED: Sign this agent's certificate on the Puppet master: [2026-05-21 01:13:21] [INFO] puppetserver ca sign --certname server.jjexpress.com.my [2026-05-21 01:13:21] [INFO] Waiting 60 seconds before next attempt... [2026-05-21 01:14:21] [INFO] Retry attempt 2 — running: /opt/puppetlabs/bin/puppet agent -t [0;32mInfo: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml[0m [0;32mInfo: Creating a new SSL certificate request for server.jjexpress.com.my[0m [0;32mInfo: Certificate Request fingerprint (SHA256): C6:25:52:82:8C:1F:1A:DF:86:84:8E:99:FF:F2:B2:8A:D8:01:0B:6A:16:1D:DD:87:03:7E:26:A8:C6:67:15:15[0m [0;32mInfo: Downloaded certificate for server.jjexpress.com.my from https://puppet.mschosting.cloud:8140/puppet-ca/v1[0m [0;32mInfo: Using environment 'production'[0m [0;32mInfo: Retrieving pluginfacts[0m [0;32mInfo: Retrieving plugin[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter]/ensure: created[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/CVE-2026-46300.rb]/ensure: defined content as '{sha256}b98a336c019254354fb1ef7656c7ebe68f3143a56da9bcad9ff161443cbef19c'[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/CVE-2026-46300.rb_checkall]/ensure: defined content as '{sha256}af4b22611e401a044bb1b8e3f93a28e2c3793afb76169c0e2a08524a6cad4868'[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/cPanel_sec73728.rb]/ensure: defined content as '{sha256}17849a141aeea068ff7c7d12f25f2fe43ecb82f6eb213a0431eaa32747484892'[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/cpanel_version.rb]/ensure: defined content as '{sha256}10e967ddf7bfc4ce09ff6767465c14e5f5647447a2fdc5de0f9a95318781b626'[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/database_version.rb]/ensure: defined content as '{sha256}f1c31d05550731b5cc53f115e6994acb5c10bf5547f0863b2add54b0dc6abed4'[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/full_os_name.rb]/ensure: defined content as '{sha256}92a331ea7c267b9b42396119bf3815338d212e7d4ab3407f45b90844660ae3db'[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/nginx_version.rb]/ensure: defined content as '{sha256}a5050e44a992382d4a27de5d2968be2f0b222914b89bae6841b47bf2cb18cd48'[0m [mNotice: /File[/opt/puppetlabs/puppet/cache/lib/facter/plesk_version.rb]/ensure: defined content as '{sha256}33bcdf80bfb613fcc3cdbe3f8c40f35b9e4b74c62a5dae28a22f693c787629d3'[0m [0;32mInfo: Loading facts[0m [mNotice: Requesting catalog from puppet.mschosting.cloud:8140 (110.4.45.248)[0m [mNotice: Catalog compiled by puppet.mschosting.cloud[0m [0;32mInfo: Caching catalog for server.jjexpress.com.my[0m [0;32mInfo: Applying configuration version '1779297263'[0m [mNotice: /Stage[main]/Main/Node[default]/Exec[force_cpanel_system_update_NOW]/returns: executed successfully[0m [0;32mInfo: /Stage[main]/Main/Node[default]/Exec[force_cpanel_system_update_NOW]: Scheduling refresh of Exec[log_upcp_completion][0m [mNotice: /Stage[main]/Main/Node[default]/Exec[log_upcp_completion]: Triggered 'refresh' from 1 event[0m [1;33mWarning: CVE-2026-46300: ptrace_scope mitigation not detected on server.jjexpress.com.my. Applying now.[0m [1;33mWarning: /Stage[main]/Main/Node[default]/Notify[CVE-2026-46300-notice]/message: defined 'message' as 'CVE-2026-46300: ptrace_scope mitigation not detected on server.jjexpress.com.my. Applying now.'[0m [mNotice: /Stage[main]/Main/Node[default]/Exec[cve-2026-46300-sysctl-live]/returns: executed successfully[0m [mNotice: /Stage[main]/Main/Node[default]/File[/etc/sysctl.d/99-ssh-keysign-pwn.conf]/ensure: defined content as '{sha256}cf7226502b46407cc3bcadf0a72408225025d8af5a077d2e4707feb1c7957c36'[0m [0;32mInfo: /Stage[main]/Main/Node[default]/File[/etc/sysctl.d/99-ssh-keysign-pwn.conf]: Scheduling refresh of Exec[cve-2026-46300-sysctl-reload][0m [mNotice: /Stage[main]/Main/Node[default]/Exec[cve-2026-46300-sysctl-reload]: Triggered 'refresh' from 1 event[0m [0;32mInfo: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml[0m [mNotice: Applied catalog in 444.82 seconds[0m [2026-05-21 01:21:47] [INFO] Puppet agent catalog applied successfully on attempt 2 (exit code: 2). [2026-05-21 01:21:47] [INFO] ===== Puppet Agent Installation Finished ===== [2026-05-21 01:21:47] [INFO] Verifying puppet service status. [2026-05-21 01:21:47] [INFO] CMD: systemctl restart puppet [2026-05-21 01:21:47] [INFO] Puppet service restarted via systemctl. [2026-05-21 01:21:47] [INFO] CMD: systemctl status puppet --no-pager ● puppet.service - Puppet agent Loaded: loaded (/usr/lib/systemd/system/puppet.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2026-05-21 01:21:47 +08; 13ms ago Docs: man:puppet-agent(8) Main PID: 3436000 (puppet) Tasks: 1 (limit: 202766) Memory: 836.0K CGroup: /system.slice/puppet.service └─3436000 /opt/puppetlabs/puppet/bin/ruby /opt/puppetlabs/puppet/bin/puppet agent --no-daemonize May 21 01:21:47 server.jjexpress.com.my systemd[1]: Started Puppet agent.
修改文件时间
将文件时间修改为当前时间的前一年
删除文件