On the morning of December 10th, 2021, Magma’s developer TheDevMinerTV exploited the Log4j RCE (Remote Code Execution) vulnerability known as Log4Shell. (You can read about how this affects Minecraft at this Mojang blog post. We confirmed that TheDevMinerTV was actively teaching and exploiting the Log4Shell vulnerability against public servers, while their project lead, Hexeption, watched. We have successfully confirmed that 26 servers, and a number of clients ranging from vanilla to modded, were targeted with several payloads including shutdown code. The stream in question was hosted in Magma’s very own public voice channels, which showcased the malicious consequences of TheDevMinerTV’s actions on servers and clients alike.
引用：https://pixelmonmod.com/news.php - AN ANNOUNCEMENT REGARDING MAGMA AND RCE.
This all said, I would like to note that Magma’s code is not an issue here. It is open source, readable and anyone with experience can tell you it is safe.
引用：https://pixelmonmod.com/news.php - AN ANNOUNCEMENT REGARDING MAGMA AND RCE.
This is an issue with the human factor; it took one person to take malicious steps and missteps from those around them that in the opinion of my staff and I, has irreparably damaged Magma's reputation.
引用：https://pixelmonmod.com/news.php - AN ANNOUNCEMENT REGARDING MAGMA AND RCE.
==> Next steps:
- Run these two commands in your terminal to add Homebrew to your PATH:
echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> /Users/ユーザー名/.zprofile
eval "$(/opt/homebrew/bin/brew shellenv)"
- Run brew help to get started
- Further documentation:
https://docs.brew.sh
% brew install openjdk@17
Running `brew update --auto-update`...
==> Auto-updated Homebrew!
Updated 2 taps (homebrew/core and homebrew/cask).
==> New Formulae
distrobox echidna kubesess libff libplacebo popeye
==> New Casks
orka-vm-tools reflect
You have 2 outdated formulae installed.
You can upgrade them with brew upgrade
or list them with brew outdated.
==> Downloading https://ghcr.io/v2/homebrew/core/openjdk/17/manifests/17.0.4.1
######################################################################## 100.0%
==> Downloading https://ghcr.io/v2/homebrew/core/openjdk/17/blobs/sha256:ef9bebe
==> Downloading from https://pkg-containers.githubusercontent.com/ghcr1/blobs/sh
######################################################################## 100.0%
==> Pouring openjdk@17--17.0.4.1.arm64_monterey.bottle.tar.gz
==> Caveats
For the system Java wrappers to find this JDK, symlink it with
sudo ln -sfn /opt/homebrew/opt/openjdk@17/libexec/openjdk.jdk /Library/Java/JavaVirtualMachines/openjdk-17.jdk
openjdk@17 is keg-only, which means it was not symlinked into /opt/homebrew,
because this is an alternate version of another formula.
If you need to have openjdk@17 first in your PATH, run:
echo 'export PATH="/opt/homebrew/opt/openjdk@17/bin:$PATH"' >> ~/.zshrc
For compilers to find openjdk@17 you may need to set:
export CPPFLAGS="-I/opt/homebrew/opt/openjdk@17/include"
==> Summary
🍺 /opt/homebrew/Cellar/openjdk@17/17.0.4.1: 640 files, 306.6MB
==> Running `brew cleanup openjdk@17`...
Disable this behaviour by setting HOMEBREW_NO_INSTALL_CLEANUP.
Hide these hints with HOMEBREW_NO_ENV_HINTS (see `man brew`).
brew install openjdk@17で、openjdk@17をインストールしました。
では、試しにjavaのコマンドを打ってみましょう。
% java -version
The operation couldn’t be completed. Unable to locate a Java Runtime.
Please visit http://www.java.com for information on installing Java.
%
If you need to have openjdk@17 first in your PATH, run:
echo 'export PATH="/opt/homebrew/opt/openjdk@17/bin:$PATH"' >> ~/.zshrc
For compilers to find openjdk@17 you may need to set:
export CPPFLAGS="-I/opt/homebrew/opt/openjdk@17/include"
Last login: Sat Sep 17 10:13:13 on ttys001
% java -Xms1G -Xmx4G -jar Magma-1.18.2-40.1.79-f7eceaca-server.jar
Magmaサーバーを起動させるコマンドです。
サーバー起動例
% java -Xms1G -Xmx4G -jar Magma-1.18.2-40.1.79-f7eceaca-server.jar
__ ___
/ |/ /___ _____ _____ ___ ____ _
/ /|_/ / __ `/ __ `/ __ `__ \/ __ `/
/ / / / /_/ / /_/ / / / / / / /_/ /
/_/ /_/\__,_/\__, /_/ /_/ /_/\__,_/
/____/
Copyright (c) 2022 MagmaFoundation.
--------------------------------------
Running on Java 17.0.4.1 (Homebrew)
Magma version 1.18.2-cd9baa38
Bukkit version v1_18_R2
Forge version 1.18.2-40.1.80-cd9baa3
--------------------------------------
WARNING: The new server jar is still under development and will be unstable! If you experience any issues, please report them to the developers.
WARNING: If the server crashes while installing, try removing the libraries folder and launching the server again.
Loading libraries... 100% [===================================================================] 100/100 (0:00:00 / 0:00:00)
Checking for updates...
[Magma] No update found, latest version: (cd9baa38) current version: (cd9baa38)
[11:15:59] [main/INFO] [cp.mo.mo.Launcher/MODLAUNCHER]: ModLauncher running: args [--launchTarget, forgeserver, --fml.forgeVersion, 40.1.80, --fml.mcVersion, 1.18.2, --fml.forgeGroup, net.minecraftforge, --fml.mcpVersion, 20220404.173914]
:
:
:
[11:16:11] [Server thread/INFO] [minecraft/DedicatedServer]: Default game type: SURVIVAL
[11:16:11] [Server thread/INFO] [minecraft/MinecraftServer]: Generating keypair
[11:16:11] [Server thread/INFO] [minecraft/DedicatedServer]: Starting Minecraft server on *:25565
:
:
:
[11:16:17] [Server thread/INFO] [minecraft/LoggerChunkProgressListener]: Time elapsed: 6332 ms
[11:16:17] [Server thread/INFO] [minecraft/DedicatedServer]: Done (6.659s)! For help, type "help"
[11:16:17] [Server thread/INFO] [ne.mi.se.pe.PermissionAPI/]: Successfully initialized permission handler forge:default_handler
[11:16:17] [Server thread/INFO] [or.ma.ma.Magma/]: Forwarding forge permission[magma:permission] to bukkit
Magmaサーバーの起動を確認したら一旦閉じます。
また、サーバーを起動するとポート番号などの設定値が表示されます。
起動時に表示を見る癖をつけると良いでしょう。
起動時の表示にサーバー情報が出る！
[11:16:11] [Server thread/INFO] [minecraft/DedicatedServer]: Starting Minecraft server on *:25565
初回サーバー起動時はEULAに合意する
Last login: Fri Sep 16 03:55:38 on ttys000
m1_macbookair2020 (arm64):~/Downloads/Magma % java -Xms1G -Xmx4G -jar Magma-1.18.2-40.1.79-f7eceaca-server.jar
__ ___
/ |/ /___ _____ _____ ___ ____ _
/ /|_/ / __ `/ __ `/ __ `__ \/ __ `/
/ / / / /_/ / /_/ / / / / / / /_/ /
/_/ /_/\__,_/\__, /_/ /_/ /_/\__,_/
/____/
Copyright (c) 2022 MagmaFoundation.
--------------------------------------
Running on Java 17.0.4.1 (Homebrew)
Magma version 1.18.2-f7eceaca
Bukkit version v1_18_R2
Forge version 1.18.2-40.1.79-f7eceac
--------------------------------------
WARNING: The new server jar is still under development and will be unstable! If you experience any issues, please report them to the developers.
WARNING: If the server crashes while installing, try removing the libraries folder and launching the server again.
WARNING: It appears you have not agreed to the EULA.
Please read the EULA (https://account.mojang.com/documents/minecraft_eula) and type 'yes' to continue.
Do you accept? (yes/no): yes
% java -Xms1G -Xmx4G -jar Magma-1.18.2-40.1.79-f7eceaca-server.jar
__ ___
/ |/ /___ _____ _____ ___ ____ _
/ /|_/ / __ `/ __ `/ __ `__ \/ __ `/
/ / / / /_/ / /_/ / / / / / / /_/ /
/_/ /_/\__,_/\__, /_/ /_/ /_/\__,_/
/____/
Copyright (c) 2022 MagmaFoundation.
--------------------------------------
Running on Java 17.0.4.1 (Homebrew)
Magma version 1.18.2-cd9baa38
Bukkit version v1_18_R2
Forge version 1.18.2-40.1.80-cd9baa3
--------------------------------------
WARNING: The new server jar is still under development and will be unstable! If you experience any issues, please report them to the developers.
WARNING: If the server crashes while installing, try removing the libraries folder and launching the server again.
Loading libraries... 100% [===============================================================] 100/100 (0:00:00 / 0:00:00)
WARNING: It appears you have installed a new version of magma, please remove the libraries folder before continuing. The server will now shut down.
%
EULAを設定してもMagmaが起動しない場合があります。
そういう場合はプロンプトの表示を確認しましょう。何かしらヒントがあります。
WARNING: It appears you have installed a new version of magma, please remove the libraries folder before continuing. The server will now shut down.
上の文章がヒントです。
訳すと「新しいバージョンがあるので既存のライブラリフォルダーを削除してください。」ということです。
% ls
% sudo rm -r .\libraries\
Magmaディレクトリ内のlibrariesフォルダを削除します。
先ずlsを打ってMagmaディレクトリ内を表示してlibrariesフォルダがあるかを確認します。
次にsudo rm -r .\libraries\でlibrariesフォルダを削除します。
rmコマンド実行例
% java -Xms1G -Xmx4G -jar Magma-1.18.2-40.1.79-f7eceaca-server.jar
__ ___
/ |/ /___ _____ _____ ___ ____ _
/ /|_/ / __ `/ __ `/ __ `__ \/ __ `/
/ / / / /_/ / /_/ / / / / / / /_/ /
/_/ /_/\__,_/\__, /_/ /_/ /_/\__,_/
/____/
Copyright (c) 2022 MagmaFoundation.
--------------------------------------
Running on Java 17.0.4.1 (Microsoft)
Magma version 1.18.2-7b6f805e
Bukkit version v1_18_R2
Forge version 1.18.2-40.1.79-7b6f805
--------------------------------------
WARNING: The new server jar is still under development and will be unstable! If you experience any issues, please report them to the developers.
WARNING: If the server crashes while installing, try removing the libraries folder and launching the server again.
Loading libraries... 100% [==============================================================] 100/100 (0:00:00 / 0:00:00)
WARNING: It appears you have installed a new version of magma, please remove the libraries folder before continuing. The server will now shut down.
% ls
Magma-1.18.2-40.1.79-f7eceaca-server.jar magma.yml
banned-ips.json mods/
banned-players.json ops.json
bukkit.yml permissions.yml
commands.yml plugins/
config/ server.properties
defaultconfigs/ spigot.yml
eula.txt usercache.json
help.yml whitelist.json
libraries/ world/
logs/
% sudo rm -r ./libraries
Password:
%
sudo rm -r .\libraries\でlibrariesフォルダを削除できました。
再度、Magmaサーバーを起動します。
% java -Xms1G -Xmx4G -jar Magma-1.18.2-40.1.79-f7eceaca-server.jar
__ ___
/ |/ /___ _____ _____ ___ ____ _
/ /|_/ / __ `/ __ `/ __ `__ \/ __ `/
/ / / / /_/ / /_/ / / / / / / /_/ /
/_/ /_/\__,_/\__, /_/ /_/ /_/\__,_/
/____/
Copyright (c) 2022 MagmaFoundation.
--------------------------------------
Running on Java 17.0.4.1 (Homebrew)
Magma version 1.18.2-cd9baa38
Bukkit version v1_18_R2
Forge version 1.18.2-40.1.80-cd9baa3
--------------------------------------
WARNING: The new server jar is still under development and will be unstable! If you experience any issues, please report them to the developers.
WARNING: If the server crashes while installing, try removing the libraries folder and launching the server again.
Loading libraries... 100% [======================] 100/100 (0:00:47 / 0:00:00)
Patching server... 75% [=====================> ] 6/8 (0:00:07 / 0:00:02)
% java -Xms1G -Xmx4G -jar Magma-1.18.2-40.1.79-f7eceaca-server.jar
__ ___
/ |/ /___ _____ _____ ___ ____ _
/ /|_/ / __ `/ __ `/ __ `__ \/ __ `/
/ / / / /_/ / /_/ / / / / / / /_/ /
/_/ /_/\__,_/\__, /_/ /_/ /_/\__,_/
/____/
Copyright (c) 2022 MagmaFoundation.
--------------------------------------
Running on Java 17.0.4.1 (Homebrew)
Magma version 1.18.2-cd9baa38
Bukkit version v1_18_R2
Forge version 1.18.2-40.1.80-cd9baa3
--------------------------------------
WARNING: The new server jar is still under development and will be unstable! If you experience any issues, please report them to the developers.
WARNING: If the server crashes while installing, try removing the libraries folder and launching the server again.
Loading libraries... 100% [================================================================] 100/100 (0:00:00 / 0:00:00)
Checking for updates...
[Magma] No update found, latest version: (cd9baa38) current version: (cd9baa38)
:
:
:
[11:26:13] [Server thread/INFO] [minecraft/DedicatedServer]: Default game type: SURVIVAL
[11:26:13] [Server thread/INFO] [minecraft/MinecraftServer]: Generating keypair
[11:26:13] [Server thread/INFO] [minecraft/DedicatedServer]: Starting Minecraft server on *:25565
:
:
:
[11:26:20] [Server thread/INFO] [minecraft/DedicatedServer]: Done (6.738s)! For help, type "help"
[11:26:20] [Server thread/INFO] [ne.mi.se.pe.PermissionAPI/]: Successfully initialized permission handler forge:default_handler
[11:26:20] [Server thread/INFO] [or.ma.ma.Magma/]: Forwarding forge permission[magma:permission] to bukkit
[11:44:43] [User Authenticator #1/INFO] [minecraft/ServerLoginPacketListenerImpl]: UUID of player アカウントA is 052f88f6-b100-449d-91ca-fe677962b5f6
[11:44:44] [Server thread/INFO] [ne.mi.co.AdvancementLoadFix/]: Using new advancement loading for net.minecraft.server.PlayerAdvancements@55d2ea11
[11:44:44] [Server thread/INFO] [minecraft/PlayerList]: アカウントA[/192.168.10.101:60199] logged in with entity id 121 at (-29.5, 84.0, 57.5)
>
特に、この表示に注目してください。
[11:44:44] [Server thread/INFO] [minecraft/PlayerList]: アカウントA[/192.168.10.101:60199] logged in with entity id 121 at (-29.5, 84.0, 57.5)
にほんブログ村
コメント