Live data from Hacker News

You might want to stop running atop

rachelbythebay.com

81–90 of 155 posts

Re: You might want to stop running atop

#81
post #35
post #33

Luckily I use a much better *top, btop.

This. Not only that, I don't know of a single person (IRL or online) who used atop, like, ever. In fact, this is the first time I'm even hearing of atop. IIRC, most folks went from top -> htop -> glances -> various btop variants (bashtop, bpytop, btop++ etc)

atop can record to a file and then be replayed in the future. Sometimes a node is so FUBARed that it won’t even emit metrics so atop can sometimes save your ass when it records metrics to disk.

Re: You might want to stop running atop

#83
post #50

Is there a mechanism where this sort of advice can flow through security teams to everyone (assuming it is about security) without dropping the details. How are zero days dealt with?

For non-public zero-days on packages in linux/BSD distros - https://oss-security.openwall.org/wiki/mailing-lists/distros

For public issues - https://oss-security.openwall.org/wiki/mailing-lists/oss-sec...

For vague-posting about unconfirmed CVEs and zero days - twitter.com and/or mastodon and/or your friend on signal

Re: You might want to stop running atop

#85
post #20

There's a lot of speculation about why, with the answer almost certainly security / exploitable (or backdoor), and I'll just throw an extra little tidbit in: atop seems to run persistently as root, which may be the reason for preventing it from running/uninstalling. the netatop part of atop installs a persistent kernel module, netatop.ko, as part of its installation. The module hooks netfilter to be able to monitor a…

How severe it would be would depend on how exploitable it was in likely configurations.

Re: You might want to stop running atop

#86
post #24
post #20

There's a lot of speculation about why, with the answer almost certainly security / exploitable (or backdoor), and I'll just throw an extra little tidbit in: atop seems to run persistently as root, which may be the reason for preventing it from running/uninstalling. the netatop part of atop installs a persistent kernel module, netatop.ko, as part of its installation. The module hooks netfilter to be able to monitor a…

I'm not familiar with atop but the website mentions netatop is optional and what I've found suggests you have to manually install it. Do you know if any distributions/packages install this by default alongside the atop install?

I don’t think netatop is installed in Ubuntu packages either.

Re: You might want to stop running atop

#87
post #46

Is atop included in any distributions? Is there even a tool to search what is pre-installed in each major distribution(s)?

"Ubuntu, Debian, Red Hat Enterprise Linux, Fedora, Linux Mint, SUSE Linux Enterprise, CentOS, Manjaro, elementary OS, Gentoo, Oracle Linux, and Pop!_OS" ~--Google's AI. I am not aware of any that install it by default.

Ubuntu 24.04 doesn't come with atop, but it's in the repos. The only package that depends on it is hollywood[0], which would be a damn shame to lose.

0. https://www.youtube.com/watch?v=rVMn3xk5mcY

Yes, it comes with that music.

Re: You might want to stop running atop

#89
post #46

Is atop included in any distributions? Is there even a tool to search what is pre-installed in each major distribution(s)?

I typed 'atop' in my Linux Mint 22.1 laptop/desktop, says it's not found but can be installed. So I think Linux Mint is in the clear, I tried my Ubuntu 24.04 server and same thing there as well as my proxmox home lab instance. I checked that Repology link and I did see Ubuntu, but I guess that is for Ubuntu desktop but not sever edition? ps. If I said anything wrong, please correct me. I'm a linux newb who jumped fro…

No, that sounds about right.

Re: You might want to stop running atop

#90

Earlier quoted context omitted.

I would disagree and still say that this is bad vagueposting. It doesn't matter how reputable the source is: if you say "don't do X" but don't give a reason why, I'm not inclined to listen. Granted I don't use atop anyways, but I don't think a vague blog post - even one from a respected person - is sufficient justification to change what software one uses.

> It doesn't matter how reputable the source is: It does though. "Don't go down 6th street now" means very different things depending on whether it comes from your buddy, or the bomb squad. > if you say "don't do X" but don't give a reason why, I'm not inclined to listen. I hear ya, but, there are sometimes valid reasons people can't say things; and this may well be one of those times. You have every right to do as y…

“Boys, keep off the moors. Stick to the roads, and the best of luck.”
Post reply on HN