Skip to content
Register

500 days uptime on a €4/month box

General Discussion by Fritz48 4 replies 185 views
Fritz48

Member OP

Datenschutz First

13 #1

I am pleased to share that my VPS at Contabo has reached 500 days of uptime. As far as I know, this is the longest I have maintained any single instance without intervention. To be precise, it is a 1 vCPU / 1 GB plan at approximately €4 per month, running Debian 11 with a custom-compiled kernel 5.10. I have attached a screenshot from `uptime -s` showing the boot date of 2024-08-06.

I am aware this is vanity; nonetheless, in an era of ephemeral infrastructure, there is something satisfying about stability. No emojis needed.

Neuland. Aber schnell.
GeorgeNmp

Member

AS64512

#2

Congratulations on the runtime, but I must offer a correction and a concern. Your kernel 5.10.0-23 ended support in June 2024; you are currently 14 months behind on security patches. The CVE list for that series includes local privilege escalations (CVE-2024-1086, CVE-2024-26925) and a netfilter use-after-free. Uptime as a metric is meaningless if the routing table is compromised; RPKI won't help you when the attacker is already on-box.

Schedule your maintenance window. The BGP community will wait.

iBGP, eBGP, don't care, just peer
Hel

Member

Bare Metal Purist

#3

Network okay. 500 days no patch? Perkele. Kernel old. Exploit easy. Reboot now. Uptime not worth rootkit.

liam_funky

Member

Vancouver

#4

1. I understand the pride
2. But @Fritz48 please consider:
1. Security patches exist for a reason
2. Your uptime is a liability, not asset
A) Contabo may not force reboots
B) that does not mean you should avoid them
3. Suggested actions:
1. Schedule maintenance
2. Upgrade to supported kernel
3. Document the process for next time
4. My own record:
1. 312 days
2. Then forced reboot for spectre mitigation
I) no regrets

cpanelliw780

Member

shared hosting survivor

#5

Ok so heres the thing man uptime is cool and all but I had a box at Vultr that went 600 days and it got owned in like 2 seconds when someone scanned it the hacker had root before I even knew what happened cPanel actually nags you about kernel versions for a reason so yeah schedule that maintenance your vanity metric is gonna look real bad when youre in a incident thread asking how to clean up a mining bot

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft