Linux
390 incident problems in Linux environments.
먼저 읽을 가이드
추천 문제
All problems (390)
SECURITY-1608A PAM RADIUS realm fix is correct and one bastion still denies usersOne bastion still denies users after a PAM RADIUS realm fix.SecurityIntermediate8 minProLINUX-1603A sudo hardening change is correct and one automation user still runs the old binaryOne automation user still invokes the wrong binary after sudo hardening.LinuxAdvanced9 minProNETWORK-1518A WireGuard tunnel handshakes and one subnet never returnsA WireGuard subnet is reachable only one way after split-egress policy routing.NetworkIntermediate10 minProNETWORK-1528A WireGuard tunnel handshakes and one subnet never returnsA WireGuard subnet is reachable only one way after split-egress routing.NetworkIntermediate10 minProNETWORK-1498A WireGuard tunnel shows handshakes and one subnet never returnsA WireGuard subnet is reachable in one direction only after policy routing is introduced for split egress.NetworkIntermediate10 minProNETWORK-1508A WireGuard tunnel shows handshakes and one subnet never returnsA WireGuard subnet is reachable only one way after policy routing is introduced for split egress.NetworkIntermediate10 minProLINUX-1376A disk-pressure alert points at journald and the actual growth comes from rootless container JSON logs under one user's runtime directory that the cleanup job never scansThe host is filling up, yet the expected journal usage remains normal because the unbounded logs are outside the cleanup path.LinuxIntermediate12 minProLINUX-1351A systemd timer writes backups fine by hand and fails overnightA systemd timer writes backups fine by hand and fails overnight focuses on execution-context and asks the reader to isolate the key signal in AWS. Scheduled jobs often fail because they inherit less context, not because the command itself is wrong.LinuxIntermediate12 minProLINUX-1349A timer-driven snapshot job works manually and misses AWS credentials at nightA timer-driven snapshot job works manually and misses AWS credentials at night focuses on execution-context and asks the reader to isolate the key signal in AWS. Successful manual CLI tests do not prove systemd timers inherit the same c...LinuxIntermediate12 minProLINUX-1388A bastion host enforces SSH certificates and one host rejects all valid...A bastion host enforces SSH certificates and one host rejects all valid... focuses on Identity And Access and asks the reader to isolate the key signal in Linux. Time-step issues can masquerade as certificate or CA failures in SSH certif...LinuxAdvanced13 minProLINUX-1396A journald remote forwarder remains active and drops burstsA journald remote forwarder remains active and drops bursts focuses on incident-response and asks the reader to isolate the key signal in Linux. Package splits can move config authority between units while leaving the main service name...LinuxAdvanced13 minProLINUX-1390A package mirror health check stays green and unattended upgrades failA package mirror health check stays green and unattended upgrades fail focuses on runtime-configuration and asks the reader to isolate the key signal in Linux. Reachability and trust are separate; package metadata can be accessi...LinuxAdvanced13 minProLINUX-1330A package reinstall restores the binary and SELinux still denies executionA recovery action reinstalls a package and afterward one service cannot execute a script or binary that used to work before the incident.LinuxIntermediate13 minProLINUX-1400A repo mirror is reachable and package installs failA repo mirror is reachable and package installs fail focuses on reverse-proxy-security and asks the reader to isolate the key signal in Linux. Package trust failures behind corporate proxies often live in the interception chain, not...LinuxAdvanced13 minProLINUX-1370A restore from backup succeeds and permissions driftA backup workflow is simplified and later disaster-recovery testing reveals restored trees have the right files but the wrong ACLs or xattrs.LinuxAdvanced13 minProLINUX-1398An SSH bastion validates host certificates and one jump path failsAn SSH bastion validates host certificates and one jump path fails focuses on Identity And Access and asks the reader to isolate the key signal in Linux. SSH failures can come from agent behavior and auth ordering long before the correct creden...LinuxAdvanced13 minProLINUX-1354An Ubuntu cloud instance keeps restoring an old routeA host seems repaired after a live network fix and later reverts to the broken route after reboot or reprovision events.LinuxAdvanced13 minProLINUX-1317A Docker bind mount looks correct and file permissions still failA Docker bind mount looks correct and file permissions still fail focuses on Identity And Access and asks the reader to isolate the key signal in Linux. Permission errors after launcher changes can be label drift, not Unix mode dr...LinuxIntermediate14 minProLINUX-1332A Fedora host joins the network and never gets production trafficA Fedora host joins the network and never gets production traffic focuses on network-segmentation and asks the reader to isolate the key signal in Linux. Stable interface names are part of the automation contract, and stale pr...LinuxAdvanced14 minProLINUX-1342A Fedora host reboots cleanly and Podman networking breaksA host update leaves containerized services online but unreachable after reboot when the networking device naming changed under Podman.LinuxAdvanced14 minPro