AIDE File Integrity Monitoring on Anubiz VPS
AIDE (Advanced Intrusion Detection Environment) builds a database of cryptographic hashes for files you care about and reports any change against the baseline. On an Anubiz VPS it catches binary replacement attacks that bypass live monitoring. Trick is storing the DB off-host so a successful compromise cannot tamper with it. This guide is the practical AIDE setup with weekly diff and off-host DB storage.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Step 1: Install
apt install aide aide-common.
Step 2: Initial Baseline
aideinit. Takes 5-30 min depending on disk. Output at /var/lib/aide/aide.db.new. Move to /var/lib/aide/aide.db.
Step 3: Off-Host the DB
Copy aide.db to another Anubiz VPS or your laptop. If the VPS gets owned the local DB is suspect. Re-fetch from off-host before diff runs.
Step 4: Weekly Cron
/etc/cron.weekly/aide-check: pull DB from off-host, run aide --check, email diff to admin. After legitimate upgrade, rebuild and push new DB.
Step 5: Tune the Scope
/etc/aide/aide.conf includes /etc, /bin, /sbin, /usr/bin, /usr/sbin, /boot, /lib. Exclude /var/log noise.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.