Recent content by monkfish

  1. M

    PDM install notes slightly askew

    Hi Dominik, I should have perhaps phrased that better or logged a ticket before. My bad. Its specifically PBS installed on top of Debian that yields secure boot issues. Pretty much, if you perform a Debian install with custom partitioning with a nod to hardening compliance on partitions then...
  2. M

    PDM install notes slightly askew

    Said it was minor - workaround is as per other installs - after configuring repos and updating boot shims from proxmox repo, we don't reboot until PDM install complete including kernel. This allows my machine to remain with secure boot enabled. Still a discrepancy over proxmox kernel installing...
  3. M

    PDM install notes slightly askew

    I usually do all my Proxmox installs on top of a Debian deployment, that way I can customise disk partitioning etc. I am happy this works for me. Sometimes I'm keeping the default kernel to work around secure boot issues (PBS in particular - wholly operational with default Debian kernel and...
  4. M

    LXC Container Creation Failing: DSA SSH Key Generation Error

    Gem of an answer thanking you indeed! Lost a previously deployed LXC for reasons of I am stupid, went to deploy new one hit exact issue. At time of writing a few months after the above, this fix appears to be the only current permanent solution and also of time of writing Proxmox itself does...
  5. M

    Use EC cert for web interface

    Hi Fabian, thank you for your reply Same as you - prime256v1 with ecDSA however pleased to report now working, may have been spurious line space or similar particularly when constructing .pem file. Will do thanks for confirming it fails. So I went back through manual copy steps, with .key and...
  6. M

    Use EC cert for web interface

    Hello Proxmox gurus can I give this one a bump for consideration please. Am I doing something wrong trying to use an EC-based certifcate or can we only use RSA at this moment in time. Grateful for thoughts Kindest regards monk
  7. M

    Use EC cert for web interface

    Hello, Can I ask if its possible to use an EC cert rather than RSA for the web interface? The private key contains BEGIN and END EC PARAMETERS directives which the web interface rejects, so -----BEGIN EC PARAMETERS----- <parameters redacted> -----END EC PARAMETERS----- -----BEGIN EC PRIVATE...
  8. M

    After Backup: boot failed: not a bootable disk

    Hello, What's in your host logs, eg /var/log/messages in between when it was working and when it crashed? Anything relating to underlying disk issues, access issues, extended wait times, i/o freeze? Do you have anything like a weekly RAID check that could be scheduled to fire off the same time...
  9. M

    I would like to see virtual appliances for Nexpose and OpenVAS

    Hello, I'll cast my vote to see virtual appliances for both Nexpose and OpenVAS. Willing to bet somebody could do a better job than mine which I've just spent the day downloading, converting and deploying the community versions of both the above. Bboth are supplied as OVF templates for vmware...
  10. M

    Proxmox 4 Hetzner extra subnet configuration

    Petrogazz is right - with separate ip's and not a subnet and attempting to use a bridged configuration, separate MACs must be used otherwise the Hetzner network drops the traffic. I got some [possibly outdated?] info here when first setting mine up http://wiki.hetzner.de/index.php/Proxmox_VE/en...
  11. M

    VM BIOS question

    Hello, can anybody answer a quick question for me, Currently with Proxmox VE 4.0 and 4.1 and getting right annoyed with F12 to select BIOS boot - if you don't hit it as exactly the right time, Firefox appears to intercept the F12 keypress and bring up its code debugger. I notice that 4.1 is...
  12. M

    Proxmox 4 Hetzner extra subnet configuration

    Hey, you're welcome. One thing that threw me was the firewalling inside Proxmox and several times I managed to lock myself out. It was because I had set connections to drop without explicitly allowing traffic to the management address on tcp/22 or tcp/8006. If you have problems and lock...
  13. M

    Hetzner IP + /28 Subnet

    As I wrote, I don't believe you need any route beyond what you have. If you have created a bridge with an ip address from your subnet and you can ping that from the internet, simply use the other addresses on a vm connected to that same bridge and use the ip as gateway. try that