Recent content by Kurgan

Yes, I understand this is the idea, and I have configured one like this already (one raid5 virtual disk and a single physical disk) in a different scenario. What I don't really know is if this is fine or has issues with ZFS.

Thanks, I definitely don't want to lose ZFS features by using it over a raid setup. If the controller can be completely bypassed by setting it properly and not flashing it, then it would be fine. Even better if I can actually have a hardware raid 1 for the OS and then a ZFS raidz-1 for data...

In our scenario vmware would be using local storage for boot and data, like PVE would. The difference is that Vmware needs a raid controller (an approved one, too), while PVE needs mostly anything that is non-raid to work. The idea here is to buy hardware that we can run with both software...

I've been asked to consider buying a new Dell server that can work both with PVE and Vmware. Vmware requires a compatible raid controller, PVE requires NO raid controller (I want to use ZFS so I can make a ZFS replica to another identical server). I know that modern PERC controllers can be set...

Thank you very much for your answer and the time you spent researching it.

Thanks a lot. I have read quite a lot of your website articles and while I'm not a Blockbridge customer and I'll probably never be (much smaller setup here) I have appreciated your KB articles a lot. But now a question has arisen: Is LVM-Thin dangerous as QCOW2 is? I mean, does it also never...

About backup encryption abuse, see this: https://forum.proxmox.com/threads/verification-of-encryption-integrity.168204/

Of course I have offline backups, a management network that's not the same as the users network, restricted access (you need a vpn to access the management from the LAN), etc. Still I'm thinking of the issues if someone somehow becomes root on the PVE hosts. As of today I see two scenarios...

Thanks a lot for the explanation, it's very clear and I like the fact that this protects the best part of the backup chain of hardware and software. This means that if the PVE host does not corrupt data, then any further corruption, even in the moment the backup is written to PBS for the first...

I'm looking for an information I cannot find. When a backup is made to PBS, I understand that all the blocks have an hash that allows for integrity checks to be done later, and they indeed are done on the PBS host multiple times. (there is a schedule for that) But the part I miss is this: is...

Setting an alert on the PBS side is indeed a good idea. If the threat actor has compromised the PVE server (the host, I mean) but for some reason not the PBS server, then we can get an alert for this anomaly in the backup chain. While I'm sure that a good attack is IMPOSSIBLE to stop, let's at...

Sorry for picking up this thread after a long time, but I have just had the same issue. I have noticed that the "VM only" bridges, that I do not intend to be used to reach the PVE host itself, have a link local v6 address and that I can actually connect to the host (ssh for example) from any...

It seems that the HP microserver gen8 is really becoming obsolete. Max RAM is only 16 GB and every day we find more issues...

This is interesting indeed, please keep us informed. Did it run smoothly on Debian 11?

I'm happy that it worked on the first try. What's missing in the web UI (or maybe there is now but I have not found it) is a way to mount a disk with data already on it and preserve such data. If you had a completely empty disk, not formatted, not partitioned, you could have added it as a...