note that Debian is currently preparing the changes for their first shim update signed with both old and new microsoft keys, and that includes checking which keys are currently enrolled and refusing the update if there is no overlap. that means...
I think I understand now.
When the VM is stopped then started and this is in place "ms-cert=2023k", it does exactly what enroll-efi-key does right before it actually powers it on.
Appreciate the input!
What throws me off, is the "qm enroll-efi-key vmid" seems to do a lot more than just add a tag to the vm config file.
root@frontend-test:~# qm enroll-efi-keys 100
efidisk0: enrolling Microsoft UEFI CA 2023
INFO: reading...
Is there anyway to make the CLI option function like the GUI/API? With 1000's of VM's that is a tough one. Setting up tokens on tons of hosts to use the API would be a lot of manual work as well.
If we have Debian linux VM's running secure boot and the older 2011 certificate.
Let say Debian releases a new shim update after June and is singed by the 2023 cert, will all those VM fail to boot?
I don't pay to much attention to the documentation tbh.
The other option is to have multiple target IP's and log into all of them to get multiple path's.
This is all just basic linux storage knowledge per say.
I am betting you missed the messages at the end of the update telling you to do the following.
apt remove systemd-boot
apt install --reinstall grub-efi-amd64 grub-efi-amd64-bin grub2-common
You will have to snag a proxmox9 installer and boot...
We have tons of DL 380 Gen9's running proxmox with no issues
Proxmox will kill your SD card really fast, I wouldn't install it there. Proxmox will eat consumer grade M.2 SSD's for breakfast.
Using non HP memory will cause those errors in...
I would say you only have one path.
If this is iscsi, you need to adjust /etc/iscsi/iscsid.conf specifically this.
# For multipath configurations, you may want more than one session to be
# created on each iface record. If...