You are not logged in.
After update (Xorg was updated) I cannot boot to Arch.
On the boot console last lines is
systemd-fsck: /dev/... clean....
After this the system freeze.
I have switched to another console (Alt+F3) and tried to strart X:
>> startx
Error while loading shared libraries: libudev.so.1: wrong ELF class: ELFCLASS32
How can I fix it?
Last edited by adem1252 (2015-04-14 16:53:49)
Offline
What is the output of
uname -a
It sounds like you have a 64-bit machine with only a 32-bit library on it. Have you messed with your pacman settings?
Matt
"It is very difficult to educate the educated."
Offline
I was downgraded systemd to 218-2 (I had testing version) and it helps me.
Last edited by adem1252 (2015-04-14 16:54:54)
Offline
Please provide the output of
uname -a
grep Architecture /etc/pacman.conf
Offline
~ uname -a
Linux localhost 3.19.3-3-ARCH #1 SMP PREEMPT Wed Apr 8 14:10:00 CEST 2015 x86_64 GNU/Linux
~ grep Architecture /etc/pacman.conf
Architecture = auto
Offline
Hello, I encountered the same problem and reinstall libsystemd solve it.
But this is the dirty solution.
After that I started to check files on my hard drive with "pacman-disowned" found on "https://wiki.archlinux.org/index.php/Pacman_tips".
I found new executable file of 10 random caracters of size 612K (strange), so I checked my sshd log and I saw successful log in as root from china IP.
Now I have disable root login from sshd and I try to find which executables are modified.
So, if you experiment the "Error while loading shared libraries: libudev.so.1: wrong ELF class: ELFCLASS32", it can be the same problem.
Offline
@corossig
Did you see any failed login attempts from that IP?
If it was successful on the very first try, you might have a very obvious root password (#1 on the crack list), or, more likely, the attacker got your root password using some other means (maybe you use it on some online service as well?).
Either way, take care! :-)
Last edited by ackalker (2015-05-15 18:02:20)
Offline
It wasn't an obvious password (8 caracters with upper case, lower case, numeric characters and special characters) but I use this password on many website (bad practice).
A "journalctl -u sshd | grep "Accepted password for root"" shows 10 successful connections for 4 differents IPs since the 8th may and I remember that for each connection the libudev.so.1 has been modified.
List of IPs : 182.100.67.114 175.126.82.235 43.229.52.181 104.143.5.76
Offline