How do I get rid of Netdata?

[puterfixer]

Okay, I am seriously pissed. The appearance of netdata on my server was not announced, it exposes publicly internal server configuration details (such as user accounts) without requiring any authentication on the web frontend, and who knows what other issues it has - like, predefined account password?

I want it out of my server. Right. NOW.

But, after uninstalling it manually, it was re-added overnight automatically.

How do I f*ing get this piece of s* out of my system and keep it out? I mean, who's in control of my server, me or CWP?

[Igor S.]

Hi,

To uninstall netdata please use this command, it will require some confirmation

Code Select Expand

/usr/local/src/netdata/packaging/installer/netdata-uninstaller.sh --yes

[puterfixer]

I did that already, Netdata was installed again overnight by CWP's update script.

At the moment I turned off the service and removed it from autostarting, then edited the configuration file and set all "enabled = no" and limited access to localhost.

But I should be able to choose if I want this even to exist on the server, not to have it forcefully installed every time I uninstall it.

[studio4host]

cwp is not installing netdata automatically so it must be some other script from netdata which is installing it.

[puterfixer]

Netdata appeared on the server by itself a couple of weeks ago. After I uninstalled it manually, it reappeared overnight.

I'm the only admin on this server, and I did not install Netdata manually. From automated scripts point of view, only root has 4 cron jobs, which are custom defined for wordpress instances, no other users have cron jobs.

There is also the daily script which came with CWP, which checks latest CWP version and updates LFD and runs backups and all that. This is the only cause for Netdata to have been installed. After all, a new menu entry appeared in CWP for Netdata, with the marking "New", so the CWP admin interface was also updated automatically to add this feature.

Sorry, but I do not believe one second your statement that "cwp is not installing netdata automatically". It has installed the package, it has added the new entry in the CWP admin panel, and it is enforcing its installed status every night without my control.

So we get back to the big question - how come CWP determined that it can install stuff on my server without asking me, especially stuff which creates publicly accessible services with no authentication.

If CWP thinks it has full authority on my server and can install anything it wants on it, then I no longer have any trust in this software. You guys could install crypto mining software on my server overnight for all I know, just because you can. Or anything else for that matter, completely without visibility or control from the actual server owner.

[Netino]

Netdata apeared in my server just by clicking on CWP -> Graphs -> Netdata.
I did not installed.
Check if this was not your case.

Regards,
Netino

[puterfixer]

Correct.

1) Why did it install without asking me if I want it installed or not.

2) How can I get it out completely without Anacron daily job reinstalling it as part of the automated update of server packages.

[hugaagogo]

- do you sell our datas or other things to netdata, why you automatically install this shit to my server?

- after this, how can i be sure you dont install any other applications to my server (botnet? cyrpto miners?)

I do not trust you and cwp anymore, i sure that i will delete cwp from my server.

[xelavalle]

I confirm that Netdata was installed automatically without asking for confirmation of any kind when clicking just for curiosity in the menu CWP -> Graphs -> Netdata. And it does not show any option to uninstall it.
The worst thing is that it is showing ALL users of the server, folders, permissions, routes, resources, EVERYTHING through the URL http: // IP-SERVER: 19999 /
Since the server was installed this heavier, slower, and NetData consumes more resources than everything else on the server, now I understand, I must have all the hackers and robberies of the world stuck on port 19999 stealing my information  .
It is URGENT that they disable NetData until they place more security and it is a service only accessible by the administrator of the server, and REPORT first and ask for confirmation for its installation. 

----------------------------------------------------------------------------------------------

Confirmo que Netdata  se instaló automáticamente sin pedir confirmación de ningún tipo al dar clic  por mera curiosidad en el menú  CWP -> Graphs -> Netdata. Y  no muestra ninguna opción para desinstalarlo.
Lo peor es que está mostrando a TODO EL MUNDO  de forma totalmente abierta los usuarios del servidor, las carpetas, los permisos, las rutas, los recursos, TODO a través de la url http://IP-SERVER:19999/
Desde que se instaló el servidor esta más pesado, más lento, y NetData consume más recursos que todo lo demás del servidor, ahora entiendo, debo tener a todos los hacker y robos del mundo pegado en el puerto 19999 robándose mi información  .
Es URGENTE que desabiliten NetData hasta que le coloquen más seguridad y sea un servicio solo accesible por el administrador del servidor, e INFORMEN primero y pidan confirmación para su instalación. 

[puterfixer]

So? Any official reply on this?

Meanwhile I looked at other impact of Netdata on my system, during the 2 weeks period in which it was running.

• Context switches per second: from an average of 300 to about 1800.
  CPU utilization: from 0,2-0,4% to 3-6%.
  System load averages over 15 minutes: from 0,18-0,25 to 0,5-0,9. This one used to rarely exceed 0,6 peaks (during nightly backups); after Netdata

was installed, peaks would occur multiple times per day, in the range of 1,3-2,3.

So why tf would anyone be running such a resource-intensive monitoring app, especially without being told that it is being enforced on their systems?

[studio4host]

it's installed only when you click on it so nobody is forcing netdata to be installed, also you have uninstaller which was mentioned several times in other topics.

[adamjedgar]

What about just closing the port?

I have port 19999 closed from my vps service peovider network firewall (outside cwp control) and netdata is not able to be reached from outside on thus port even if it was installed.

From what I read on security vulnerabilities websites, I think you are overreacting to this btw.

[puterfixer]

it's installed only when you click on it so nobody is forcing netdata to be installed, also you have uninstaller which was mentioned several times in other topics.

#1: it doesn't say anywhere that, by clicking the link, a package will be installed.

#2: the uninstaller removes it, but then the nightly CRON job which updates CWP packages installs it again. Am I supposed to make a CRON job to uninstall it every day?

Please don't bother answering if you can't provide a meaningful, valuable information which addresses the topic.

[adamjedgar]

Just close port 1999 at your vps service provider network firewall.

Cwp can't interact with that firewall and netdata external access is then blocked.

I gave you a meaningful workaround and you ignored it...Just close the damn port!

[ejsolutions]

I have to agree with others here.

It IS a violation of the VPS to have this surreptitious script-kiddie software installed on ANY VPS.
It is utter crap and has no place on a secured server.

Netdata, once "removed" shouldn't even be shown on the GUI.
Explain how the database password isn't even set during install. I've had to remove the db user manually.
30+ years in IT and seen some crazy stuff and this is up there with them.

Let's have an integrated munin solution instead - there's no sneaky connections to external sites whatsoever; the admin is in control.