A newly discovered 0-day CVE-2021-44228 vulnerability in the widely used Java logging library Log4j has taken the Internet by storm. It’s a vulnerability in a third-party logging framework that enables a remote user to gain privileged access to the host (read more here).
Many of our users are aware of the fact that Foreman leverages Java for several of its applications. We wanted to go on record and let our users know that we do not leverage Log4j, nor are any of our systems vulnerable to this exploit. We will not be releasing an update to any of our agents as a result of this CVE.
Why Wasn’t Foreman Affected?
Rather than using Log4j, we integrate with Java logging via the SLF4J (Simple Logging Facade for Java) API. Rather than an implementation of a logger, SLF4J is more of a specification for a contract that needs to be held between a developer that wants to log and the concrete implementation of how those logs are written.
Our applications are modern and they leverage logback as the backend logging implementation (not Log4j). logback doesn’t use log4j-core, nor does it offer a JNDI look-up mechanism, so it does not suffer from CVE-2021-44228.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | March 22, 2021
User Management, Hash Board Detection, Discord Notifications
Foreman has been updated with the following new features and improvements:
New Features
Dashboard Sharing and User Management
To promote collaboration among teams, in addition to the ability to share a dashboard, users can now create custom roles and permissions to limit the actions that each member can perform. These settings can be found under the ‘My Company’ page top-right:
User access and permissions.
Enter the user’s email that you wish to invite and click “Send”. If they already have an account on Foreman, they’ll be able to switch between their private dashboard and the shared Company dashboard. If they don’t have an account, they’ll receive an invite containing a link for them to use to register.
The following permissions can be added to a custom role:
Add Miners: restricts who can add miners to Foreman
Assign Miner Static IP: restricts who can assign/update a miner’s static IP
Change Miner Passwords: restricts who can change miner admin passwords
Change Pools: restricts who can change the stratums that are configured
Change Power Mode: restricts who can change miner power consumption (sleep vs. normal)
Edit Company Settings: restricts who can edit company-wide settings in Foreman, which includes the ability to invite users and edit their permissions
Edit Miners: restricts who can edit miner settings and alerting conditions
Edit Site Map: restricts who can edit the Site Map configuration and where miners are physically located
Edit Triggers: restricts who can edit the custom rules, alerting, and actions that are defined
Factory Reset Miners: restricts who can factory reset miners via Foreman
Reboot Miners: restricts who can reboot miners
Setup Reports: restricts who can configure daily/weekly reports
View Financials: restricts who can view earnings, profit reports, and financial-related information
View Security: restricts who can view the farm’s overall security profile
View Worker Names: restricts who can view the miner’s currently configured worker names
The following illustration captures how these permissions could be structured for a day-to-day site operator (allow maintenance, but can’t configure pools or view financials):
A sample “Operator” role that could be applied to a site operator.
Missing Hash Board Detection
Rather than only being notified when there’s a hash rate dip, users will now also get notified when the reduction in hash rate was due to a failing hash board. Our metrics agent has been further refined, and it will now record the hash rate on a per-board basis. This enables users to see when a chip has failed and when a board has been lost.
This feature has been backported to all ASICs that are supported by our platform. That list includes:
Aixin
Antminer
AvalonMiner
Baikal
Bitfury
BlackMiner
CheetahMiner
Dayun
DragonMint
FutureBit
HonorKnight
HyperBit
Innosilicon
Miner-Va
MultMiner
Obelisk
Spondoolies
StrongU
Whatsminer
Discord Notifications
In addition to receiving alerts via Email and Telegram, users can now modify their Triggers to send notifications to Discord.
Send notifications to Discord.
Once you’ve configured a Trigger to send a Discord alert, join our Discord and introduce yourself to Todd, our bot (private message him fm!help to get started). Then he’ll keep you in the loop.
“Miner rebooted” Discord notification.
Improvements
Miner Multi-Select
Shift+click can now be used to mass-select miners on the Miners table. To perform this action, select the first check box that starts the range. While holding shift, then select the last miner in the range:
Shift+click selecting a subset of the miners.
Miner-Va Support
Support has been added for Miner-Va ASICs. This includes the Miner-Va MV8. Initially, this capability is limited to monitoring, but this will soon be expanded to include changing pools, rebooting, etc.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | January 9, 2021
Site Map, Static IP Assigning, New ASIC Support, CDN Assets
Foreman has been updated with the following new features and improvements:
New Features
Site Map
Users are now able to construct a floor plan directly in Foreman, providing them with a heat map to track hot and cold locations, while also enabling users to physically locate a miner by name, IP, or MAC address.
Interactive Site Map.
The Site Map revolves around 3 core concepts:
Grid
The Site Map is structured as a grid, with each rack positioned by [row,column] coordinates. As you move from left-to-right, the column increases. As you move from top-to-bottom, the row increases.
Rack
Racks are added to the Site Map grid and are positioned at indexes. The top-left rack would be position [0,0], read as row 0, column 0.
Location
A location represents a miner’s location within a rack. Locations are structured similar to how the grid is structured: the top-left miner position would be position [0,0], read as row 0, index 0.
Example: if there are 30 miners in a Rack, 5 on each shelf, and the rack is named “000”, their locations would be:
[000, 0, 0]: Rack 000, row 0, index 0
[000, 0, 1]: Rack 000, row 0, index 1
[000, 0, 2]: Rack 000, row 0, index 2
…
[000, 1, 0]: Rack 000, row 1, index 0
[000, 1, 1]: Rack 000, row 1, index 1
[000, 1, 2]: Rack 000, row 1, index 2
…
[000, 2, 0]: Rack 000, row 2, index 0
[000, 2, 1]: Rack 000, row 2, index 1
[000, 2, 2]: Rack 000, row 2, index 2
…
The following will be constructed within Site Map, with the rack showing the highest temperature and most critical status of all miners present. It’s expandable to show each physical miner:
Collapsed rack 000.Expanded rack 000.
Static IP Assigning
We’ve added the ability to assign static IPs to miners. Users can now let their miners obtain an IP initially via DHCP, scan them into Foreman, and then mass assign static IPs to keep things from changing.
Note: Foreman does not require static IP addresses. However, management of a farm is typically easier when IP addresses do not change over time.
This feature is supported for the following ASIC manufacturers:
Aixin
Antminer
Avalon
Blackminer
CheetahMiner
Dragonmint
HonorKnight
Innosilicon
Obelisk
StrongU
Whatsminer
Configuring Many Miners
A bulk operation can be performed from the miners table. Select the miners that will be assigned a static IP address, click ‘Edit’, select ‘Assign Static IP’, and complete the dialog.
If the miners are to be statically configured to take their existing DHCP IP, complete the prompt, using variables as applicable:
Mass assign static IPs via the web form.
If the IPs to be assigned do not follow a convention, a CSV can be provided containing a mapping of each miner to their new configuration. The prompt contains a link to download a template with placeholders for every miner that was selected in the table:
Mass assign static IPs via a CSV.
Configuring a Single Miner
Configure a single miner for a static IP.
New ASIC Support
Full management support for the following ASIC manufacturers has been added:
Aixin
Aixin A1
CheetahMiner
CheetahMiner F1
CheetahMiner F3
CheetahMiner F5
CheetahMiner F5I
CheetahMiner F5M
CheetahMiner F7S
HonorKnight
HonorKnight K2
HonorKnight K2.1
HonorKnight K3
HonorKnight K5
Additionally, the following new models have been officially added for other currently-supported manufacturers:
Antminer S17 Pro
Antminer T17+
Antminer T17e
Antminer T19
Antminer S19j Pro
Antminer G2
Avalon 1246
Whatsminer Factory Reset
Users can now perform a factory reset on Whatsminer ASICs directly from the dashboard.
Dev Fee Labeling
Whenever a miner utilizes a known dev pool and the miner makes it aware, Foreman will now tag the pool as ‘Dev Fee’.
Foreman does not charge a dev fee. These fees are often imposed by custom ASIC firmware or GPU mining software.
The following illustrations show BraiinsOS submitting shares to a dev pool:
BraiinsOS Dev Fee.BraiinsOS Dev Fee.
Improvements
Assets are now served via a CDN
To reduce loading times globally, static Foreman assets are now distributed via a CDN. These assets include images, icons, libraries, etc.
MAC Addresses Obtained during Initial Scan
MAC addresses are now fetched during the initial bulk import of ASICs. This gets the miner tagged with the MAC address as soon as it’s added to the platform, enabling users to leverage the MAC when performing bulk configurations via Foreman.
Go To Miner
A quick-access link has been added to each ASIC, enabling users to access the management consoles quickly when connected to the same network.
Go to miner link.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | December 9, 2020
Enhanced Miners Table, ASIC Hostnames, Bug Fixes
Foreman has been updated with the following new features, improvements, and bug fixes:
New Features
Miner Table Overhaul
The miner table has been compressed, enabling users to view more miners in the same amount of vertical space:
Condensed miners table.
Additionally, fan speeds have been added as a column, with all fan speeds and temperatures available in hoverables:
Fans and temps.
Identifying miner information has been moved into a hoverable over the miner’s name, further reducing noise, while maintaining the ability to quickly identify a miner when needed (available information: miner IP and MAC address).
Also, the table will now automatically refresh every 60 seconds, providing users with a way to observe up-to-date information while eliminating the need to refresh and lose page index, filtering, or sorting.
ASIC Hostname Usage
When desired, ASIC miner hostnames will now be used for miner names when performing a bulk ASIC import (currently only available for Antminers). Users have an option to enable this when initiating the Pickaxe Scan.
Use hostname for miner name (if available).
Mskminer Firmware Support
Mskminer-based Firmwares are now fully supported. This includes metrics collection, as well as providing the ability to perform remote reboots and pool changes.
Bug Fixes
New Srbminer-multi API Support
The srbminer-multi integration has been improved to gracefully handle parsing of the miner’s new API responses. Additionally, CPU mining is now supported.
Corrected T-rex HiveOS Integration
The t-rex telnet API is now properly invoked when the HTTP API is disabled, as observed in HiveOS.
Lolminer Hash Rates Fixed
The units are now respected, when provided, in newer versions of lolminer. This addresses an issue where Ethash and Etchash hash rates were reported in Hs rather than MHs.
Ethminer API Password Fixed
Ethminer will now successfully be queried when no API password is provided.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | November 17, 2020
Two Factor, Factory Resets, and MAC Addresses
Foreman has been updated with the following new features, improvements, and bug fixes:
New Features
Two Factor Authentication
Two Factor Authentication has been added to Foreman, providing users with an additional mechanism to further secure their accounts. The settings to enable this can be found here:
Two Factor Authentication.
Clients can enable this for their company, requiring that all users on the shared dashboard enable Two Factor Authentication for access. This can be found under Company Settings.
Factory Reset
The Factory Reset operation has been added to the dashboard, which will revert selected ASICs back to their manufacturer settings and then automatically change pools to the user-defined configuration.
ASIC Factory Reset.
This can be performed directly on a single miner, as a bulk operation, or via a trigger. As of November 2020, it can be performed against the following manufacturers, but this list will continue to be expanded:
Antminer
Blackminer
DragonMint
Innosilicon
Obelisk
StrongU
MAC Addresses
When available, the MAC address for an ASIC will be presented on the Foreman dashboard, providing users with an additional method to identify their miners.
Avalon 1047 MAC Addresses.
What’s New Notifications
Curious what’s new? See it directly from the dashboard, and get notified when things change:
What’s New notifications.
Whatsminer Firmware Support
Support has been added for the new Whatsminer ASIC firmwares, enabling users to perform reboots and pool changes directly from the Foreman dashboard!
Vnish-based Firmware Support
Official support has been added for vnish-based ASIC firmware, including the Nicehash and AsicDip forks.
Minute of Day Trigger
A new trigger has been created that enables users to trigger an action at a specific time of day (example: change pools to 2miners at midnight, and then change pools to ethermine at 10 AM).
Improvements
Google Cloud Storage
Foreman applications are now distributed via Google Cloud Storage, which will reduce metrics downtime when updates are being applied.
Caching
The backend caching mechanism has been drastically redesigned, greatly reducing API and page loading times.
Bug Fixes
Gracefully Handle ‘nan’ Avalon Responses
Avalon ASICs that are not hashing and returning ‘nan’ for their current hash rate will now successfully be patched to ‘0’, enabling metrics to continue being published to the dashboard.
Automatically Cancel Stuck Commands
Pickaxe remote commands that take more than 60 minutes to complete will now automatically be aborted and marked as failed.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | October 19, 2020
Active Pools and Performance Improvements
Foreman has been updated with the following new features and improvements:
New Features
Active Pools
Foreman now provides users with multiple ways to identify which pool is actively being used. Here’s a quick demonstration covering a few of the ways they can be found:
Filtering by Active Pool.
Account Modifications
The ability to change email addresses and passwords has been added to the My Account section:
Changing email address and password.
Improvements
ASIC Querying
ASIC connection timeouts have been lowered from 1 second to 100 milliseconds, greatly reducing the time that it takes to perform a Miner Scan. Additionally, metrics are now batched when sending them to the dashboard (batch size: 100), enabling Pickaxe to push metrics quickly to keep dashboards in sync.
The cgminer connection logic has also been re-written, enabling Pickaxe to query thousands of ASIC miners in several seconds.
Baikal Integration
The Baikal integration has been modified to return empty metrics when the device is online, but cgminer has been stopped (paused mining). This will allow Baikal devices to be configurable by Foreman even when metrics cannot be obtained.
Reboot Graph
The Reboot Graph has been significantly refactored to reduce loading time. The graph will now automatically adjust when more than 15 different miners have rebooted over the previous 24 hours, changing from grouping by miner to grouping by miner type, keeping the graph usable as the data points increase.
Pool Graph
The Pools Graph has been modified to display whether or not each miner is currently connected to a pool. Previously, it displayed the connection status to every pool known to each miner, which led to inconsistent behavior across ASIC manufacturers (ex: Antminers being connected to all pools despite only one being used vs. Avalons only connecting to a pool when it’s needed).
Bulk Updates
The Bulk Update process has been reworked to no longer timeout when performing a mass update for over 100 miners. They will now occur immediately.
Earnings Block
We’ve improved the caching related to this block, which has drastically decreased the loading time.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | September 17, 2020
Variable Substitution, New Firmware, MRR Improvements
Foreman has been updated with the following new features and improvements:
New Features
Variable Substitution
Variables can now be leveraged in the ASIC Change Pools prompt, allowing users to perform a bulk changing of pools while keeping each device unique.
The following patterns may be used in either the URL, Username, or Password fields:
${miner.name} will insert the Foreman miner name
${miner.ip} will insert the miner IP
${miner.ip.1} will insert the first miner IP octet
${miner.ip.2} will insert the second miner IP octet
${miner.ip.3} will insert the third miner IP octet
${miner.ip.4} will insert the fourth miner IP octet
${miner.port} will insert the miner API port
${miner.type} will insert the miner type (ex: ‘Antminer S9’)
${miner.mrr_rig_id} will insert the MiningRigRentals rig id
${miner.pickaxe} will insert the pickaxe name
All spaces and periods will automatically be replaced with underscores.
Examples:
${miner.pickaxe}_${miner.ip} will produce something like site_2_10_0_1_19
${miner.name}_${miner.ip} will produce something like my_l3_10_0_1_19
${miner.pickaxe}_${miner.type} will produce something like site_2_antminer_l3
${miner.pickaxe}_${miner.mrr_rig_id} will produce something like site_2_165049
ASIC MiningRigRentals Improvements
For ASIC devices, the rig ID will now automatically be parsed and set on your miners. Integrating with MiningRigRentals for ASICs is now as simple as entering your MRR API keys into Foreman.
Foreman will automatically be updated to reflect the new rig ID if a miner is moved in MRR. No manual intervention is required.
NiceHash ASIC Firmware Support
Support for NiceHash ASIC Firmware has officially been added to Foreman. Users can now monitor and manage their ASIC devices running this custom firmware directly from Foreman.
HiveOS ASIC Firmware Support
Support for HiveOS ASIC Firmware has officially been added to Foreman. Users can now monitor and manage their ASIC devices running this custom firmware directly from your dashboard.
Bug Fixes
Plan Cost Calculation
Addressed an issue related to billing plan cost calculations when a user was granted additional trial miners over the default 250.
Metrics Caching Issue
Addressed a cache ordering issue that sometimes caused miners to alert for a low accepted hash rate despite there being no issue.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | September 5, 2020
Power Consumption and Dashboard Sharing
Foreman has been updated with the following new features and improvements:
New Features
Power Draw
Total power consumption has been added to Foreman, allowing users to see their total power draw and total power cost. For ASICs and FPGAs, these numbers are automatically computed based on the device and algorithm that’s actively being mined.
The illustration below demonstrates how these two new blocks can be used in conjunction with the daily earnings block to indicate how profitable an operation may be after power is covered.
Power Draw and Daily Earnings
The following manufacturers are fully supported (power draw is calculated automatically as soon as your device is online):
Aixin
Antminer
AvalonMiner
Baikal
Blackminer
Dayun
Dragonmint
FutureBit
HyperBit
Innosilicon
StrongU
Whatsminer
Multminer
Power consumption for rigs is supported as well, and it may be specified in each miner’s settings in Foreman.
Dashboard Sharing
Users can now add users to their dashboard/company in Foreman. This allows for multiple farm operators to monitor and manage a farm together. Here’s a tutorial covering how to add and remove users.
Owner and an Administrator can access the same Dashboard
Full Blackminer Support
Full support has officially been added for all Blackminer miners. This includes:
Blackminer F1
Blackminer F1+
Blackminer F1 Mini
Blackminer F1 Mini+
Blackminer F1 Single
Blackminer F1 Ultra
Blackminer F2
Full Baikal Support
Full support has officially been added for all Baikal miners. This includes:
Baikal BK-B
Baikal BK-D
Baikal BK-G28
Baikal BK-N
Baikal BK-N+
Baikal BK-N70
Baikal BK-N240
Baikal BK-X
Baikal Cube
Baikal Giant A900
Baikal Giant+ A2000
Baikal Mini
Baikal Quad Mini
Bug Fixes
Expected Temperatures and Hash Rates Changing
A bug has been fixed that was causing expected temperatures and hash rates to change in Foreman occasionally when miners disconnect and reconnect to their pools.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | August 26, 2020
Avalon and Baikal Remote Management
Foreman has been updated with the following new features and improvements:
New Features
Avalon Support
Full remote support for all Canaan SHA-256 Avalon A10 and A11 miners has been added! This allows users to monitor, remotely reboot, and change pools directly from Foreman.
Avalon 1047 Monitoring and Management
The following miners are supported:
Avalon A1026 (30 THs, 67 J/TH, 2070W)
Avalon A1047 (37 THs, 62.5 J/TH, 2380W)
Avalon A1066 (50 THs, 63 J/TH, 3250W)
Avalon A1066 Pro (55 THs, 60 J/TH, 3300W)
Avalon A1146 (56 THs, 57 J/TH, 3192W)
Avalon A1146 Pro (63 THs, 52 J/TH, 3276W)
Avalon A1166 (68 THs, 47 J/TH, 3196W)
Avalon A1166 Pro (81 THs, 42 J/TH, 3400W)
Monitoring is fully supported for Avalon 7XX, 8XX, and 9XX models. Remote management, however, is not supported at this time (contact us if you have one of these miners and would like to have it added).
Baikal Support
Additionally, full remote support for all Baikal miners has been added!
Baikal Quad Mini (X11, X13, X14, X15, Quark, Qubit)
The algorithms for these can be configured from the dashboard as well. Depending on the miner, the following Baikal algorithms have been mapped and will be presented to the user:
blake256r8
blake256r14
decred
cryptonite
cryptonite-lite
groestl
lbry
myr-gr
nist5
pascal
quark
qubit
sia
skein
vcash
x11
x11gost
x13
x14
x15
Full Avalon and Baikal support requires Pickaxe version ≥ 3.11.0. Linux users are auto-upgraded, and Windows users are auto-upgraded if running the Windows Agent.
Bug Fixes
Fixed Missing Miner Parameters
Miner credentials are now carried through when a bulk import of ASICs is performed.
Fixed Innosilicon Scan
Corrected the ports that are used post-Innosilicon scan to use both the web and API ports.
Corrected Miner Details Page
Addressed an issue related to the miner details being displayed inaccurately when GPUs have no temperatures.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
News
Dan Lawrence | August 17, 2020
Farewell GRIN Cuckatoo31
As of block 826,560, the graph_weight of Cuckatoo31 has fallen to 0, which makes it impossible to solve blocks with C31 — it is no longer profitable to mine GRIN C31 (here was the last block).
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | August 16, 2020
Pickaxe Host Identification and Bug Fixes
Foreman has been updated with the following new features and improvements:
New Features
The hostname and IP address of the miner running Pickaxe is now displayed on the Pickaxe card. This will help identify servers running agents that are no longer needed (requires Pickaxe version ≥ 3.10.0 — Linux users are auto-upgraded, Windows users are auto-upgraded if running the Windows Agent):
Bug Fixes
Modified the pattern used for phoenixminer identification so that the miner is still recognized when mining non-ETH coins.
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.
How Foreman’s Product Suite is Shaping the Future of Bitcoin Mining
Updates
Dan Lawrence | August 15, 2020
Automated Foreman Upgrades
Foreman has been updated with the following new features and improvements:
New Features
We’ve overhauled our Windows installation process — we present to you the Foreman Windows Agent. This new agent will automatically install, configure, and upgrade Foreman for you, eliminating the need to manually download and unzip Pickaxe every time a new release is published.
New Users
Follow the guide here to get up and running. That’s it — you’re done! 🙌
Open conf\foreman.txt and enter your Client ID and API key — that information can be found on your dashboard here.
Run bin\service-start.bat. If it says it’s an unrecognized app, click More info and Run anyway. When it asks if you want to allow it to make changes on your device, select Yes.
A new Pickaxe will appear here once it’s up and running.
Move your miners from your old Pickaxe to the new one:
Grab a 🍺! Now your Foreman applications will automatically upgrade and you’ll have access to our latest features as soon as they’re released!
Subscribe to OBM’s Blog
Get the latest posts delivered right to your inbox.