jsterr's latest activity
-
jsterr reacted to Th.Naumann's post in the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon with
Like.
Hi, you can run the helper script "/usr/share/pve-manager/migrations/pve-cephx-rotate-service-keys" without options to check what remains. -
jsterr reacted to Johannes S's post in the thread Ist eine "Rewind"-Funktion über ZFS-Snapshots in Proxmox praktikabel? with Like.
Kann ich nichts zu sagen, für mein Homelab wäre Ceph hoffnungslos überdimensioniert und mein Arbeitgeber ist leider aus diversen Gründen nach wie vor auf vmware unterwegs. Grundsätzlich müsste (ähnlich wie zfs-Replikation) auch die Replikation...
-
jsterr replied to the thread Ist eine "Rewind"-Funktion über ZFS-Snapshots in Proxmox praktikabel?.Wird man denke ich aber auch merken, wenn man z.B. im Ceph alle 5-10 Minuten einen Snapshot macht und alte ggf. aufräumt? Schonmal mit Ceph kombiniert?
-
jsterr replied to the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon.How can I manually rotate keys like keys for rbd-mirror? root@pve-3:~# /usr/share/pve-manager/migrations/pve-cephx-rotate-service-keys --rotate-all-storage-keys --rotate-admin-key INFO: This is a dry run. No Ceph key, cipher setting, or daemon...
-
jsterr reacted to div.Autumn's post in the thread Ist eine "Rewind"-Funktion über ZFS-Snapshots in Proxmox praktikabel? with Like.
Hallo zusammen, ich plane aktuell ein neues Proxmox-Cluster für einen Kunden und evaluiere verschiedene Ansätze zum Schutz vor Ransomware und Bedienfehlern. Dabei bin ich auf folgendes Konzept gestoßen: Ein System soll im laufenden Betrieb...
-
jsterr reacted to alain's post in the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon with Like.
I had a look at the documention for this rotation inside the Proxmox PVE reference. I would prefer a separate documentation, as the one to upgrade from Squid (19.x) to tentacle (20.x), with detailed and clear steps. With the documentation inside...
-
jsterr reacted to Falk R.'s post in the thread [TUTORIAL] Kleiner Gamechanger bei der Windows Migration zu Proxmox with Like.
Es gibt ja die virtio 0.1.302 und ich habe nicht schlechtes bisher gehört. Also gibt es die Version auch mit meinem Mod. virtio-mod Weiterhin enthält diese Version ein Tool, welches die IP Konfiguration exportiert und nach den nächsten Boot...
-
jsterr replied to the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future.Edit: Just in case. This was a fresh 20.2.4 install, no migration-script was used. Nope, having all nodes on the same version (pve-no-subscription) and using ceph wizard to install ceph. it also happend on a fresh 3 node install. all nodes, same...
-
jsterr replied to the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future.not sure if this is related, but since the change of the new keys when you do a fresh ceph install (for example when adding a new ceph node), ceph pool status (via pvestatd) (server-view storage-pool) is showing a "?" which only disappears after...
-
jsterr replied to the thread Redhat VirtIO developers would like to coordinate with Proxmox devs re: "[vioscsi] Reset to device ... system unresponsive".VirtIO Block != VirtioSCSI - afaik VirtioSCSI has better performance and is recommended choice.
-
jsterr reacted to t.lamprecht's post in the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon with Like.
Recent security findings and fixes in Ceph make it necessary to upgrade ceph and migrate authentication keys from the aes to the aes256k cipher. This is to address weaknesses in the old Cephx authentication method, especially if your Ceph service...
-
jsterr reacted to complexplaster27's post in the thread Redhat VirtIO developers would like to coordinate with Proxmox devs re: "[vioscsi] Reset to device ... system unresponsive" with Like.
Hello I've have installed this new driver on our Test servers and have done the following in terms of multi-day testing: Boot-volume operation on vioscsi 0.1.302 Multiple reboots and device checks Five active VirtIO SCSI controllers Overnight...
-
jsterr reacted to fossaaen's post in the thread Best practices for VM NUMA and socket configuration with Like.
Thank you for your reply. Just to clarify, its not apt upgrade on pve's that is struggling, its the apt upgrades with unattended upgrades inside the ubuntu VMs. Yes,this is the setup we have used for many years (If the NUMA option is used, it...
-
jsterr replied to the thread Best practices for VM NUMA and socket configuration.According to the docs: "If the NUMA option is used, it is recommended to set the number of sockets tothe number of nodes of the host system." Have you tried that and checked how it changes your situation/problem...
-
https://pve.proxmox.com/wiki/Windows_VirtIO_Drivers#virtio-win_Releases Schau hier in der nächsten Zeit ob sich die Empfehlung ändert, wenn du nicht experimentierfreudig bist. Wir beobachten die Lage und testen selber.
-
jsterr reacted to iss-integration's post in the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future with Like.
--rotate-lockbox-keys worked well on our 3 node 12-OSD test cluster. The warnings are now gone. We'll be testing further with other clusters and report any issues.
-
jsterr replied to the thread PVE 9.2 + Ceph Tentacle 20.2.4: RBD operations fail because pve-storage passes removed --auth_supported option.Fix is up and worked well on my side: https://forum.proxmox.com/threads/ceph-cves-–-keyring-rotation-strongly-advised-probably-required-in-the-future.185863/#post-867260
-
jsterr replied to the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future.Hello Thomas! @t.lamprecht After applying the updates in the script its green again, had to use a couple of commands though: root@training3:~# /usr/share/pve-manager/migrations/pve-cephx-rotate-service-keys root@training3:~#...
-
-
jsterr replied to the thread Proxmox VE Ceph Benchmark 2023/12 - Fast SSDs and network speeds in a Proxmox VE Ceph Reef cluster.how did it help you exactly? ;-) I personally would like to make some testing about: * testing with 32 PGs vs 512 PGs (min/max) and how it affects performance * testing with erasure coded pools (fastec/non-fast-ec) * testing with krbd/non-krbd
-
jsterr replied to the thread Questions about the dynamic CRS.Yeah the container has failback disabled, this seems to be the reason why the container can be moved to a different host, even though the other host has a lower priority.
