gurubert's latest activity
-
gurubert replied to the thread Ceph network setup for Wan rbd replication.AFAIK RBD mirroring needs access to the public networks of both Ceph clusters. -
gurubert reacted to AndrwHmmr's post in the thread Was mache ich jetzt nach dem Update auf Ceph 20.2.4 with
Like.
Wenn er das cephFS in die VMs mounted mit dem Kernel Client hat das sehr wohl was mit den VMs zu tun. Wenn der Kernel der VMs aes256k nicht unterstützt kann die insecure aes auth method nicht deaktivert werden. Das geht aus dem OP nicht ganz... -
gurubert reacted to jtru's post in the thread Was mache ich jetzt nach dem Update auf Ceph 20.2.4 with Like.
Ist dir bewusst, dass du das durch die Nutzung/Installation des trixie-backports kernel-image-amd64-Pakets relativ aufwandsarm erreichen koenntest? -> https://packages.debian.org/trixie-backports/linux-image-amd64
-
gurubert reacted to Johannes S's post in the thread Grundsatzfrage Umstellung ESXi -> Proxmox mit vorhandener SAN Struktur / Wie geht ihr damit um? with Like.
Warum sollte es? ProxmoxVE ist nichts anderes als ein sehr spezielles Linux, da läuft selbstverständlich auch SAN mit. Die eigentliche Frage ist, ob man damit klar kommt, dass die Sachen anders als unter Vmware funktionieren und man nicht...
-
gurubert reacted to VictorSTS's post in the thread Ceph OSDs not being able to be configured in fully routed Environment with Like.
What we do is simply edit ceph.conf once the first MON has been provisioned to move both Public and Cluster networks from /32 to /24 (sed -i 's/\/32$/\/24/g' /etc/pve/ceph.conf), then you can keep provisioning Ceph as usual. Edit: forgot to...
-
gurubert replied to the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon.No, as the kernel is too old. BTW: i would not recommend mounting CephFS directly on workstations where users have physical access. It is too easy for them to impersonate another user. Use SMB in such a scenario.
-
gurubert reacted to Francois Baillargeon's post in the thread ceph public MTU from 1500 to 9000 with Like.
Honestly, it's more trouble than worth, we had zillions of times when "Configured correctly " did not pass pass the ping -M do -s 8972 [destinationIP]test All moderns switch ASICS can do line speed with regular frames, and most NICs have...
-
gurubert replied to the thread Ceph OSDs not being able to be configured in fully routed Environment.Is 192.168.99.1/32, 192.168.99.2/32, 192.168.99.3/32" the content of your public_network setting? You should change that to maybe 192.168.99.0/24.
-
gurubert reacted to UdoB's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
https://forum.proxmox.com/threads/proxmox-ve-support-lifecycle.35755/
-
gurubert reacted to proxuser77's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
PVE 7 is the second-to-last version. We’re now on version 9, and I think version 8 is also nearing end of life, or has it already reached it? I’m not 100% sure. Either way, the longer you wait, the more complicated and time-consuming it’ll be to...
-
gurubert reacted to UdoB's post in the thread Configure a Fibre Channel LUN as a directory in a cluster. with Like.
In my $dayjob I have FC storage, very similar like yours (including multipath), coming from off-site. ( 3-2-1 ) I use that one as a secondary independent backup destination, as a directory storage to put vzdump-based backups on it. Limiting...
-
gurubert reacted to abied-charreton's post in the thread Are Proxmox UI tags only for filtering, or do they have other functionality? with Like.
Hello, tags are purely for organization purposes, all you can do with them in the PVE UI is filter/search/organize. They are however exposed by the API (/nodes/{node}/qemu, /cluster/resources), meaning you may use them in your own scripts if...
-
gurubert reacted to bbgeek17's post in the thread Proxmox in enterprice environments with shared fc storage with Like.
@rbremer, another AI-generated driver... They've been coming in droves lately. It even modifies the PVE source files! The problem with most AI-generated integrations is that they sound convincing, are thoroughly documented, and are subtly broken...
-
gurubert replied to the thread (SOLVED) CEHPX Disabled, CEPH Key Migration - Removing an auth entry?.What does "ceph auth ls" show? Do not post the output here but look for the mentioned keys. If not needed any more they can be deleted.
-
gurubert replied to the thread How are people handling ceph v19 osd fragmentation?.One recommendation is to increase the number of placement groups for pools with many objects. This reduces the size of each PG and makes it easier to place them on OSDs avoiding fragmentation.
-
gurubert reacted to t.lamprecht's post in the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future with Like.
There are some hints for that in https://pve.proxmox.com/pve-docs/chapter-pveceph.html#pveceph_cephx_how_it_works section, but we did not want to blow the docs up completely. But roughly, active ceph sessions authenticated with the a ceph...
-
gurubert reacted to Carlos Gomes's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Very interesting to note that most of the hosting we heard of complains (hertzner, OVH, virtualizor, Locaweb, etc) are not in the list of partners, and for the special case of the wildfire spread in Brasil was mostly for this kind of hosting that...
-
gurubert reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
What could be done to improve your feeling? Maybe switch to HyperV or VMware or Citrix and connect them directly to the internet without updating for years? I don't expect anyone to not update those for years at a time. How's Proxmox different...
-
gurubert reacted to arzhost's post in the thread 2. IP - sehe den Wald vor lauter Bäumen nicht with Like.
eth0:0 kein echtes separates Interface ist, sondern nur ein Alias für eine zusätzliche IP auf eth0. Dein aktuelles Setup fügt die IP zwar korrekt hinzu, leitet aber keinen eingehenden Traffic automatisch zu einer VM oder einem anderen Ziel...