gurubert's latest activity
-
gurubert reacted to UdoB's post in the thread Configure a Fibre Channel LUN as a directory in a cluster. with
Like.
In my $dayjob I have FC storage, very similar like yours (including multipath), coming from off-site. ( 3-2-1 ) I use that one as a secondary independent backup destination, as a directory storage to put vzdump-based backups on it. Limiting... -
gurubert reacted to abied-charreton's post in the thread Are Proxmox UI tags only for filtering, or do they have other functionality? with Like.
Hello, tags are purely for organization purposes, all you can do with them in the PVE UI is filter/search/organize. They are however exposed by the API (/nodes/{node}/qemu, /cluster/resources), meaning you may use them in your own scripts if...
-
gurubert reacted to bbgeek17's post in the thread Proxmox in enterprice environments with shared fc storage with Like.
@rbremer, another AI-generated driver... They've been coming in droves lately. It even modifies the PVE source files! The problem with most AI-generated integrations is that they sound convincing, are thoroughly documented, and are subtly broken...
-
gurubert replied to the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry?.What does "ceph auth ls" show? Do not post the output here but look for the mentioned keys. If not needed any more they can be deleted.
-
gurubert replied to the thread How are people handling ceph v19 osd fragmentation?.One recommendation is to increase the number of placement groups for pools with many objects. This reduces the size of each PG and makes it easier to place them on OSDs avoiding fragmentation.
-
gurubert reacted to t.lamprecht's post in the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future with Like.
There are some hints for that in https://pve.proxmox.com/pve-docs/chapter-pveceph.html#pveceph_cephx_how_it_works section, but we did not want to blow the docs up completely. But roughly, active ceph sessions authenticated with the a ceph...
-
gurubert reacted to Carlos Gomes's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Very interesting to note that most of the hosting we heard of complains (hertzner, OVH, virtualizor, Locaweb, etc) are not in the list of partners, and for the special case of the wildfire spread in Brasil was mostly for this kind of hosting that...
-
gurubert reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
What could be done to improve your feeling? Maybe switch to HyperV or VMware or Citrix and connect them directly to the internet without updating for years? I don't expect anyone to not update those for years at a time. How's Proxmox different...
-
gurubert reacted to arzhost's post in the thread 2. IP - sehe den Wald vor lauter Bäumen nicht with Like.
eth0:0 kein echtes separates Interface ist, sondern nur ein Alias für eine zusätzliche IP auf eth0. Dein aktuelles Setup fügt die IP zwar korrekt hinzu, leitet aber keinen eingehenden Traffic automatisch zu einer VM oder einem anderen Ziel...
-
gurubert replied to the thread Purpose of pve-dbus-vmstate@VMID.service?.It looks like the timeout messes things up.
-
gurubert reacted to t.lamprecht's post in the thread Purpose of pve-dbus-vmstate@VMID.service? with Like.
That service is currently used to transfer a VM’s connection-tracking state during live migration, so established connections (within the guest) continue to be recognized by stateful firewalls on the target node. The stale object should not be...
-
gurubert posted the thread Purpose of pve-dbus-vmstate@VMID.service? in Proxmox VE: Installation and configuration.Hi, what is the purpose of the pve-dbus-vmstate@.service? It starts a Perl script /usr/libexec/qemu-server/dbus-vmstate but not for every VM. We have seen it running for a few VMs and sometimes it fails: Aug 31 15:17:22 pve56 systemd[1]...
-
gurubert reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Then you are still vulnerable due to the known and unknown security issues in PVE8 (which is EOL) and Debian Bookworm. The fix is to upgrade to the latest supported version of PVE aka PVE9 with every updated installed. Everything else is just...
-
gurubert reacted to Neobin's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
So, you now got your security advisory for a vulnerability, in a over three year old version of a software component, which was at the time it would have been relevant neither internally discovered nor from anyone reported and hopefully also not...
-
gurubert reacted to Bu66as's post in the thread OT: Debian erlaubt KI-Beiträge ohne Kennzeichnungspflicht with Like.
Der Lizenz-Punkt von @Johannes S ist eigentlich der spannendere, das Codestyle-Argument erledigt sich ja mit genug Nachdruck im Review. Beim DCO unterschreibst du nicht nur "ich steh dafür grade", sondern auch dass du das Recht hast, den Code...
-
gurubert reacted to Johannes S's post in the thread OT: Debian erlaubt KI-Beiträge ohne Kennzeichnungspflicht with Like.
Du hast "Das Geschäftsmodell der AI-Codeassistenten beruht auf systematischen Verstoßen gegen Urheberrecht und opensource-Lizenzen" sehr umständlich ausgedrückt :) Weil auch wenn das Problem nicht grundsätzlich neu ist, erreicht es so doch eine...
-
gurubert reacted to Johannes S's post in the thread OT: Debian erlaubt KI-Beiträge ohne Kennzeichnungspflicht with Like.
Ich sehe ( und das als bekennender KI-Luddit!) auch nicht so das Problem. Im Grunde sagt Debian, dass „aber die ki sagt, das passt so“ keine erlaubte Ausrede ist Bullshit abzuliefern ;) OpenBSD hatte ja das Vergnügen mit einen Vibecoder, der...
-
gurubert reacted to Bu66as's post in the thread OT: Debian erlaubt KI-Beiträge ohne Kennzeichnungspflicht with Like.
Ehrlich gesagt ändert das bei Debian doch wenig, mit dem DCO lag die Verantwortung schon immer beim Einreicher. Ungeprüft zusammenkopierten Kram gab's auch vorher schon, halt von Stack Overflow statt vom LLM. Was real schützt ist der Review- und...
-
gurubert reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Systems without current system updates can be hacked, nothing is "new" or "urgent" on this. And PVE7 and PVE8 won't get any security updates any more so it's somehow expected that they get owned. Even if you don't connect them directly to the...