We're running PVE 9.2.10 on a test cluster and are experimenting with the snapshot-as-volume-chain tech preview feature. Our goal is to move away from thin-provisioned volumes while keeping support for snapshots when needed.
One thing we found...
A couple updates...
- I can confirm what @tkell said, CertiNext seems to be working now. I tested on Proxmox-VE 9.2.3 and 8.4.19
- I contacted support a while ago and they have a patch in the works that will (eventually) make its way into the...
@jamesharr I opened a support case with CertiNext, and as of today it appears they have fixed this issue. The Certinext API now returns a correctly-formatted certificate and the Proxmox ACME plugin accepts it and installs it.
We're running into this issue when using CertiNext. @Foorack's patch did the trick, but I know this will be overwritten as soon as we run through an upgrade.
LetsEncrypt seems to return a cert chain formatted with a double-new-line (0x0a)...
@shanreich , I'm curious if you've had a chance to try NFTables in newer kernels and/or in PVE 9.x. I'm specifically wondering if the IPSet merge feature in NFTables isn't as broken as when you first worked on it.
Reference bug...