node-exporter pprof漏洞处理(ansible批量修复)

pprof漏洞

访问node-exporter, IP:9100/debug/pprof

node-exporter版本,1.8.2

出现下边的页面就说明有漏洞

重新编译生成可执行文件

Bash 复制代码
git clone [https://github.com/prometheus/node_exporter.git](https://github.com/prometheus/node_exporter.git)
cd node_exporter
git checkout v1.8.2
vim node_exporter.go

make build

替换

然后会在当前目录下生成 node_exporter,替换原先二进制文件,再重启服务即可

ansible批量替换

复制代码
[root@deye-ops-monitor-test-001 node-exporter]# tree .
.
├── deploy.yml
└── file
    ├── node-exporter
    └── node-exporter.service
bash 复制代码
# deploy.yml
- name: Deploy node-exporter
  hosts: "*:!win"
  tasks:
    - name: Copy node-exporter binary
      copy:
        src: ./file/node-exporter
        dest: /opt/node-exporter
        mode: 0755
    - name: Copy node-exporter service file
      copy:
        src: ./file/node-exporter.service
        dest: /usr/lib/systemd/system/node-exporter.service
    - name: Reload systemd daemon
      shell: systemctl daemon-reload
    - name: Start and enable node-exporter service
      service:
        name: node-exporter
        state: restarted
        enabled: yes
bash 复制代码
# vim file/node-exporter.service 
[Unit]
Description=Node Exporter
Wants=network-online.target
After=network-online.target

[Service]
Type=simple
ExecReload=/bin/kill -HUP $MAINPID
ExecStart=/opt/node-exporter --web.listen-address=:9100 --collector.supervisord --collector.supervisord.url=unix:///var/run/supervisor/supervisor.sock
KillMode=process
Restart=on-failure
RestartSec=5s

[Install]
WantedBy=multi-user.target

file/node-exporter 就是放到新编译的,然后执行即可

bash 复制代码
ansible-playbook deploy.yml

恢复

相关推荐
遇见火星13 天前
如何使用Ansible一键部署MinIO集群?
ansible
粥周粥13 天前
ANSIBLE
ansible
码农101号13 天前
Linux中ansible模块补充和playbook讲解
linux·运维·ansible
码农101号13 天前
Linux的Ansible软件基础使用讲解和ssh远程连接
ansible
烟雨书信14 天前
ANSIBLE运维自动化管理端部署
运维·自动化·ansible
碎碎-li14 天前
ANSIBLE(运维自动化)
运维·自动化·ansible
@donshu@17 天前
Linux运维-ansible-python开发-获取inventroy信息
linux·运维·ansible
Kendra91920 天前
Ansible
ansible
꧁༺朝花夕逝༻꧂23 天前
Ansible小试牛刀
ansible
꧁༺朝花夕逝༻꧂23 天前
Ansible+Zabbix-agent2快速实现对多主机监控
运维·ansible