Hi again, I've had the problem a few other times even while using the firmware above. The workaround below slipped my mind a couple weeks ago when I rebooted my miners. Within 24 hours I had an abuse report presented to me by the datacenter ops for an ip (miner) of mine participating in an NTP attack against some ip in some other datacenter.
Heres my solution:
Since the data in the antminer's /config/ directory is persistent through reboots, I ssh into the antminer and stored an .sh file there in the config directory.
vi /config/ntpconfig.sh
echo "restrict -4 default kod notrap nomodify nopeer noquery" >> /etc/ntp.conf
echo "restrict -6 default kod notrap nomodify nopeer noquery" >> /etc/ntp.conf
/etc/init.d/ntpd restart
save/exit :wq
of course you may need to add execute privilege
chmod +x /config/ntpconfig.sh
So now I can just ssh into my miner after it reboots and run the /config/ntpconfig.sh program
Of course automating it even further would be ideal and I've attempted that below. Meanwhile I'm working through terminal on a Macbook (i know shhhh you all)
You could of course set up ssh keys and use the default terminal ssh program through mac and send the command over automatically.
BUT! as soon as you reboot those ssh keys will be overwritten and the Mac ssh program doesnt allow passing the password along as an argument. sshpass works on ubuntu also
So I used
https://gist.github.com/arunoda/7790979 to install "sshpass" which will do just that.
Now I've made a .sh file on the mac that calls the sshpass program, logs into the miner, tells it to run the little config program which mods the NTPconfig and restarts NTP.
nano restartNTP.sh
sshpass -p <mypassword> ssh -o StrictHostKeyChecking=no root@<myminerIPaddress> "/config/ntpconfig.sh”
of course you may need to add execute privilege
My next task will be setting this to run as a cron job so it does this maybe 2x daily in case a miner randomly restarts!
That or I might get fancy and make a cron job that just reboot my miners daily (so they stop hogging bandwidth as they seem to do after running for a long time) and when they reboot it'll patch the NTP.
what a pain in the ass, hope this finds anyone who stumbles here well. Take care!
Show Posts
