Recent content by adamb

Thank you for the input fabian, that makes me feel alot better about all this.

I think I understand now. When the VM is stopped then started and this is in place "ms-cert=2023k", it does exactly what enroll-efi-key does right before it actually powers it on.

Appreciate the input! What throws me off, is the "qm enroll-efi-key vmid" seems to do a lot more than just add a tag to the vm config file. root@frontend-test:~# qm enroll-efi-keys 100 efidisk0: enrolling Microsoft UEFI CA 2023 INFO: reading raw edk2 varstore from...

Is there anyway to make the CLI option function like the GUI/API? With 1000's of VM's that is a tough one. Setting up tokens on tons of hosts to use the API would be a lot of manual work as well.

Do the VM's need to be stop/started? Or is an actual reboot enough?

Appreciate the input. When you say "eventually", how long do you suspect that will be? Trying to gauge how quickly we need to move on this.

If we have Debian linux VM's running secure boot and the older 2011 certificate. Let say Debian releases a new shim update after June and is singed by the 2023 cert, will all those VM fail to boot?

I don't pay to much attention to the documentation tbh. The other option is to have multiple target IP's and log into all of them to get multiple path's. This is all just basic linux storage knowledge per say.

I am betting you missed the messages at the end of the update telling you to do the following. apt remove systemd-boot apt install --reinstall grub-efi-amd64 grub-efi-amd64-bin grub2-common You will have to snag a proxmox9 installer and boot into rescue mode and run the above. Then you...

We have tons of DL 380 Gen9's running proxmox with no issues Proxmox will kill your SD card really fast, I wouldn't install it there. Proxmox will eat consumer grade M.2 SSD's for breakfast. Using non HP memory will cause those errors in the BIOS/iLO. However it doesn't really effect...

I would say you only have one path. If this is iscsi, you need to adjust /etc/iscsi/iscsid.conf specifically this. # For multipath configurations, you may want more than one session to be # created on each iface record. If node.session.nr_sessions is greater # than 1, performing a 'login' for...

I appreciate the quick response. The bug report shows this being back ported to version 7?

@fiona Would it be possible to clarrify this patch for us? https://lists.proxmox.com/pipermail/pve-devel/2023-December/061043.html We have a enviroment that is pushing the limits with NOFILE. root@proxhost1:~# for pid in $(pidof kvm); do prlimit -p $pid | grep NOFILE; ls -1 /proc/$pid/fd/ |...

Hey guys working on setting up Authentik for Proxmox logins and running into a issue with http vs https. If I utilize http for the issuer URL on the proxmox realm configuration everything works as expected. If I utilize https for the issuer URL on the proxmox realm configuration I get the...

I can't debate that, at this point we are talking very basic topics here. With kernel 5.15+ we started having KSM issues (KSM basically pointless), we stopped being able to live migrate between hosts with different generations etc. Proxmox took their stance on all of this and I do feel they...