Recent content by cwoelkers

This was solved by two changes, a different SPICE client and moving the VM from one of my hypervisors to another. The different client, a freshly compiled version of virt-viewer, did the most by actually connecting when Remmina would not but the VM still gave a poor user experience. So I...

I am attempting to set up Windows 11 Enterprise 24H2, with all the latest updates, as a guest on Proxmox 8.4.11. I want Windows to make use of SPICE for USB redirection from the remote client, specifically for Yubikey usage. I have gotten Windows installed and running by following the Windows 11...

I'm starting to play around with the Proxmox firewall in the web GUI, and after enabling it with no rules which locked me out of the GUI and then disabling the firewall via my KVM, I have started adding rules at the datacenter level for all of the various Proxmox services before I enable it...

I have an internal vnet with systems that needed access to the Internet. With the newer proxmox-firewall I was able to create a new table with the necessary rules and save the changes to /etc/nftables.conf but the rules are not loaded at boot. The documentation says this on custom rules: "If you...

I know it's been a bit since you first posted this but I had to do the same thing you do and here are the configuration lines I added to /etc/nftables.conf to do so. table inet nat { chain prerouting { type nat hook prerouting priority dstnat; policy accept; } chain...

I do have a cluster and have defined a separate network interface for corosync to handle that traffic which exists on our management VLAN(not VLAN 1). As I wanted access to the web interface on that VLAN I needed to add the interface's IP address to the SSL cert before everything worked.

I figured it out. The certs I generated initially did not have the cluster interface IP defined as a Subject Alternative Name, just the main IP and the hostname. Once I added it everything worked fine.

Funny, I am also a Chris. Guess we really are everywhere. Anyways... The root certificate is valid through 2025 so no worries there. I installed the certificate using the web GUI by under System > Certificates for each host using the "Upload Custom Certificate" button. Here is the requested...

I'm running a cluster of four Proxmox community servers, Proxmox 7.3-3 on Debian 11, in a cluster. I was getting tired of the SSL warnings from the self-signed certificate so created a CSR on each and signed them on my local CA server, I'm aware of ACME but did not want to use an external...

Thank you for posting this. I would make one change in leaving the restart button available. Even if you accidentally hit it, and then blindly click through the affirmation, then at least the system will only reboot. That said these buttons should be removable via an option. SSH, KVM, and...

I admin a four node cluster that has recently been upgraded from Debian Stretch, and Proxmox 5.x, to Debian Buster and Proxmox 6.x. The latest updates are installed on all nodes. After upgrading the cluster I moved my focus to the LXC containers and QEMU virtual machines. The VMs had no issues...

That's kinda what I thought it would take. I'll try it today when I can.

The target storage is a local LVM "drive" of at least 200GB of available storage, different hypervisors. The overall storage space of the VM should be no more than 180GB, the total size of the VM's drive. I could see the issue of the source archive being corrupted. That's why I tried backing up...

I am attempting to replace one of our hypervisors. It is not part of the cluster, though the new one will be. I was able to get all but one of the VMs that was running on it transferred to the other hypervisors via the backup, transfer, and restore method. But one of them is being problematic...

Also thought of something and checked the cookies stored in my browser, after clearing them all and logging into the web interfaces four proxmox servers we have. Three of the servers leave a cookie, the fourth, vhost2 the one that I added to the cluster, does not. This is probably part of the...