Re: unexplained crash
On Fri, Nov 17, 2023 at 7:11 PM Adam Weremczuk <adamw@matrixscience.com> wrote:
>
> Yesterday SSH on my desktop PC running Ubuntu 20.04 became unresponsive.
>
> The machine was responding to ping and "telnet 22" was briefly
> connecting before connection closed.
>
> The graphical login prompt was visible, but when I tried to log in, it
> threw me to the text console. No login prompt on any virtual consoles
> and Ctrl-Alt-Del did nothing.
>
> There is no information logged in wtmp, kern.log and dmesg. Nothing
> interesting in auth.log
>
> The last 40 lines from syslog look as below:
>
> Nov 16 17:04:23 ubu20 systemd[1]: session-5089.scope: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1]: Stopping User Manager for UID 0...
> Nov 16 17:04:33 ubu20 systemd[1259208]: Stopped target Main User Target.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Stopped target Basic System.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Stopped target Paths.
> Nov 16 17:04:33 ubu20 systemd[1259208]: ubuntu-report.path: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Stopped Pending report trigger
> for Ubuntu Report.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Stopped target Sockets.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Stopped target Timers.
> Nov 16 17:04:33 ubu20 systemd[1259208]: dbus.socket: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed D-Bus User Message Bus
> Socket.
> Nov 16 17:04:33 ubu20 systemd[1259208]: dirmngr.socket: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed GnuPG network certificate
> management daemon.
> Nov 16 17:04:33 ubu20 systemd[1259208]: gpg-agent-browser.socket: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed GnuPG cryptographic agent
> and passphrase cache (access for web browsers).
> Nov 16 17:04:33 ubu20 systemd[1259208]: gpg-agent-extra.socket: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed GnuPG cryptographic agent
> and passphrase cache (restricted).
> Nov 16 17:04:33 ubu20 systemd[1259208]: gpg-agent-ssh.socket: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed GnuPG cryptographic agent
> (ssh-agent emulation).
> Nov 16 17:04:33 ubu20 systemd[1259208]: gpg-agent.socket: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed GnuPG cryptographic agent
> and passphrase cache.
> Nov 16 17:04:33 ubu20 systemd[1259208]: pk-debconf-helper.socket: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed debconf communication socket.
> Nov 16 17:04:33 ubu20 systemd[1259208]: snapd.session-agent.socket:
> Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Closed REST API socket for snapd
> user session agent.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Reached target Shutdown.
> Nov 16 17:04:33 ubu20 systemd[1259208]: systemd-exit.service: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Finished Exit the Session.
> Nov 16 17:04:33 ubu20 systemd[1259208]: Reached target Exit the Session.
> Nov 16 17:04:33 ubu20 systemd[1]: user@0.service: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1]: Stopped User Manager for UID 0.
> Nov 16 17:04:33 ubu20 systemd[1]: Stopping User Runtime Directory
> /run/user/0...
> Nov 16 17:04:33 ubu20 systemd[2567]: run-user-0.mount: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1294]: run-user-0.mount: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1]: run-user-0.mount: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1]: user-runtime-dir@0.service: Succeeded.
> Nov 16 17:04:33 ubu20 systemd[1]: Stopped User Runtime Directory
> /run/user/0.
> Nov 16 17:04:33 ubu20 systemd[1]: Removed slice User Slice of UID 0.
>
> Does anybody have an idea what could have happened?
Whenever I see Snap, I get suspicious. You should probably ask on the
ubuntu-users list. The list has a person that answers Snap questions.
<ubuntu-users@lists.ubuntu.com>.
You should also show the SSH connection log for the client and server.
I think that's 'ssh -vvv' for the client, and 'journalctl -u ssh' for
the server.
Jeff
Reply to: