gurubert's latest activity
-
gurubert reacted to Johannes S's post in the thread cetrafs — Open-source shared-disk filesystem for Proxmox VE with
Like.
That's a nice idea if you happen to develop video games, a office suite or CAD software (aka any software, where new features are the most important thing). It's not so nice if we are talking about a file system which you want to be able to trust... -
gurubert reacted to LnxBil's post in the thread cetrafs — Open-source shared-disk filesystem for Proxmox VE with Like.
Nice to see that you put effort (or tokens) into this and I really appreciate it, but I have to say, I would NEVER use this in production at the current stage without proper support. Both are nice projects and I often wanted to write something...
-
Hi @loste87, The PVE API calls that initiate these type of tasks are asynchronous. They return a task ID, but that only confirms the task was started, not that it completed successfully. You need to monitor the task and verify its final status...
-
gurubert reacted to Johannes S's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
Welcome to the new normal. In this age waiting multiple weeks just isn't feasible anymore. And even the idea of "first testing updates in a test environment" (e.g. a virtual PVE cluster inside your production cluster) doesn't really work since...
-
gurubert reacted to proxuser77's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
Just FYI: Multiple KVM escape vulnerabilities have been found this year alone. So, even if you completely air-gap your Proxmox VE hosts, an attacker could still escape from a compromised VM and gain access to the host systems this way. But you...
-
gurubert reacted to Johannes S's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
How does this relate to ProxmoxVE? So you shouldn't update systems with known security issues due to a "server is not a phone"? Thanks for making the world easier for hackers and thus worse for everybody else.
-
gurubert reacted to meyergru's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
Apart from the fact that some of these updates are necessary security fixes, what exactly is the problem? If you're running critical VMs, your infrastructure should already be designed to allow host maintenance without downtime. Simply...
-
gurubert reacted to Johannes S's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
This is neither feasible nor desirable in the age of ai-assisted hacking.
-
gurubert reacted to Johannes S's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
The actual elephant in the room is propably that in "enterprise"-environments in regulated areas neglecting updates is seen as a virtue instead of af the gross neglect it is: Nowadays the same moronic compilance requirements expect you to apply...
-
gurubert reacted to uberarchiver's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
I don't see a problem in the updates being published. We are in a changing landscape. The system administrator needs to know what is running on the system and how those workloads are accessed. On that knowledge you should base the decision on...
-
gurubert reacted to EllerholdAG's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
In a proper HA setup kernel updates and restarts can be applied live. I'd rather have more Bugfixes and security enhancement than not. It's rather concerning that other platforms don't have this much updates. Doesn't ESXi have the same security...
-
gurubert reacted to Neobin's post in the thread Proxmox VE: Are we getting too many kernel updates for an enterprise virtualization platform? with Like.
One complains about too much updates and the next one would complain about bugs and especially vulnerabilities if they were not patched asap. It is obviously way better to have the updates available; if and when you are installing them and reboot...
-
gurubert replied to the thread Ceph network setup for Wan rbd replication.AFAIK RBD mirroring needs access to the public networks of both Ceph clusters.
-
gurubert reacted to AndrwHmmr's post in the thread Was mache ich jetzt nach dem Update auf Ceph 20.2.4 with Like.
Wenn er das cephFS in die VMs mounted mit dem Kernel Client hat das sehr wohl was mit den VMs zu tun. Wenn der Kernel der VMs aes256k nicht unterstützt kann die insecure aes auth method nicht deaktivert werden. Das geht aus dem OP nicht ganz...
-
gurubert reacted to jtru's post in the thread Was mache ich jetzt nach dem Update auf Ceph 20.2.4 with Like.
Ist dir bewusst, dass du das durch die Nutzung/Installation des trixie-backports kernel-image-amd64-Pakets relativ aufwandsarm erreichen koenntest? -> https://packages.debian.org/trixie-backports/linux-image-amd64
-
gurubert reacted to Johannes S's post in the thread Grundsatzfrage Umstellung ESXi -> Proxmox mit vorhandener SAN Struktur / Wie geht ihr damit um? with Like.
Warum sollte es? ProxmoxVE ist nichts anderes als ein sehr spezielles Linux, da läuft selbstverständlich auch SAN mit. Die eigentliche Frage ist, ob man damit klar kommt, dass die Sachen anders als unter Vmware funktionieren und man nicht...
-
gurubert reacted to VictorSTS's post in the thread Ceph OSDs not being able to be configured in fully routed Environment with Like.
What we do is simply edit ceph.conf once the first MON has been provisioned to move both Public and Cluster networks from /32 to /24 (sed -i 's/\/32$/\/24/g' /etc/pve/ceph.conf), then you can keep provisioning Ceph as usual. Edit: forgot to...
-
gurubert replied to the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon.No, as the kernel is too old. BTW: i would not recommend mounting CephFS directly on workstations where users have physical access. It is too easy for them to impersonate another user. Use SMB in such a scenario.
-
gurubert reacted to Francois Baillargeon's post in the thread ceph public MTU from 1500 to 9000 with Like.
Honestly, it's more trouble than worth, we had zillions of times when "Configured correctly " did not pass pass the ping -M do -s 8972 [destinationIP]test All moderns switch ASICS can do line speed with regular frames, and most NICs have...
-
gurubert replied to the thread Ceph OSDs not being able to be configured in fully routed Environment.Is 192.168.99.1/32, 192.168.99.2/32, 192.168.99.3/32" the content of your public_network setting? You should change that to maybe 192.168.99.0/24.