node-exporter pprof漏洞处理(ansible批量修复)

pprof漏洞

访问node-exporter, IP:9100/debug/pprof

node-exporter版本,1.8.2

出现下边的页面就说明有漏洞

重新编译生成可执行文件

Bash 复制代码
git clone [https://github.com/prometheus/node_exporter.git](https://github.com/prometheus/node_exporter.git)
cd node_exporter
git checkout v1.8.2
vim node_exporter.go

make build

替换

然后会在当前目录下生成 node_exporter,替换原先二进制文件,再重启服务即可

ansible批量替换

复制代码
[root@deye-ops-monitor-test-001 node-exporter]# tree .
.
├── deploy.yml
└── file
    ├── node-exporter
    └── node-exporter.service
bash 复制代码
# deploy.yml
- name: Deploy node-exporter
  hosts: "*:!win"
  tasks:
    - name: Copy node-exporter binary
      copy:
        src: ./file/node-exporter
        dest: /opt/node-exporter
        mode: 0755
    - name: Copy node-exporter service file
      copy:
        src: ./file/node-exporter.service
        dest: /usr/lib/systemd/system/node-exporter.service
    - name: Reload systemd daemon
      shell: systemctl daemon-reload
    - name: Start and enable node-exporter service
      service:
        name: node-exporter
        state: restarted
        enabled: yes
bash 复制代码
# vim file/node-exporter.service 
[Unit]
Description=Node Exporter
Wants=network-online.target
After=network-online.target

[Service]
Type=simple
ExecReload=/bin/kill -HUP $MAINPID
ExecStart=/opt/node-exporter --web.listen-address=:9100 --collector.supervisord --collector.supervisord.url=unix:///var/run/supervisor/supervisor.sock
KillMode=process
Restart=on-failure
RestartSec=5s

[Install]
WantedBy=multi-user.target

file/node-exporter 就是放到新编译的,然后执行即可

bash 复制代码
ansible-playbook deploy.yml

恢复

相关推荐
C-20022 天前
初探 ansible 部署 devops 持续集成持续交付
ci/cd·ansible·devops
东窗西篱梦3 天前
Ansible自动化运维:从入门到实战,告别重复劳动!
运维·自动化·ansible
weixin_507847954 天前
Ansible
ansible
小白不想白a4 天前
【ansible/K8s】K8s的自动化部署源码分享
kubernetes·自动化·ansible
三坛海会大神5555 天前
Ansible详解(一)Ansible简介和基础命令及操作
运维·ansible
東雪蓮☆5 天前
Ansible Playbook 编写与模块详解
linux·运维·网络·ansible
苦逼IT运维5 天前
Windows 作为 Ansible 节点的完整部署流程(含 Docker 部署 Ansible)
windows·docker·ansible
Freed&7 天前
Ansible 生产级自动化指南:Playbook、Handlers、Jinja2 全解析
运维·自动化·ansible
m0_464608267 天前
Ansible实现自动化运维
运维·自动化·ansible
✎﹏赤子·墨筱晗♪7 天前
Ansible Playbook 入门指南:从基础到实战
linux·服务器·ansible