Recent content by NPK

  1. N

    Restrict PermitRootLogin to PVE

    I was talking about prohibit-password, not no. Of course "no" is impossible with PVE.
  2. N

    PVE with antivirus

    I am not convinced of the supreme benefit of adding an antivirus to a hypervisor; it is really more a question of ticking a box, yes. It can be F-Secure, ClamAV, or another one. I haven't seen any official statement from Proxmox on this subject, that's why I'm asking here - and I don't have...
  3. N

    Restrict PermitRootLogin to PVE

    It's a solution, thanks. But modifying PermitRootLogin is OK for PVE health ?
  4. N

    Restrict PermitRootLogin to PVE

    Thanks @sumanraic001 but I already have my users (with PVE authentication serveur or AD). The question is to deny root connection by SSH but let users still connect with their own accounts ; I can do it but my question is if PVE can have some troubles with it.
  5. N

    Restrict PermitRootLogin to PVE

    It's private IP, my bad. Nodes are on a different VLAN than users workstations (for example : 1.2.3.0/24 for nodes and 10.10.10.0/24 for workstations). Of course I can't block it with firewall rules, but... my users need to connect on nodes with SSH. Simply, I want to be sure that they can't...
  6. N

    Restrict PermitRootLogin to PVE

    Thanks. I understand that PVE uses root access for a lot of things. But, why PVE can't be working safely if I just restrict root SSH connection from outside the cluster ? The main goal is to deny users to connect with root SSH on cluster from their workstations (they will log in with another...
  7. N

    PVE with antivirus

    It's my opinion too, but I have to provide objective evidence to justify not installing antivirus. A clear statement from Proxmox would be ideal, but perhaps they don't see any real technical drawbacks.
  8. N

    PVE with antivirus

    I need to install antivirus software on PVE unless I can provide evidence that it's not possible or recommended. Sorry I can't be more specific.
  9. N

    PVE with antivirus

    WIth license, I meant "subscription support" ;-) The question is about any antivirus, not a specific one.
  10. N

    Restrict PermitRootLogin to PVE

    Hi, Is it OK to restrict SSH PermitRootLogin to only PVE IP? Would this have an impact on how PVE works? The goal is to prevent direct root connection via SSH from the rest of the network. Match User root Address 1.2.3.* PermitRootLogin yes Match all
  11. N

    PVE with antivirus

    Hi, Is there an official statement from Proxmox regarding the installation of antivirus software on PVE? Does this installation affect the license and support provided? Thanks!
  12. N

    Lost VGs for LUN after upgrade

    I tried with different kernels - in case of kernel cause. No differences. pvscan : "No matching physical volumes found" lsblk : only local disks (from sda to sdp) multipath -ll : nothing. But I found some error messages before reboot, and 'multipath -ll' on some nodes was saying ""failed...
  13. N

    Lost VGs for LUN after upgrade

    Hi, Thanks for replying. Storage : dir: local path /var/lib/vz content images,iso,backup,vztmpl shared 0 lvmthin: local-lvm disable thinpool data vgname pve content rootdir,images nodes pve-mgt-01 lvm: LUN_01 vgname...
  14. N

    Lost VGs for LUN after upgrade

    Hi, I upgraded a pve7 cluster to pve8. It's a cluster with SAN storage. Since upgrade, I can't access to LUN storage, and I can see VGs disappeared from GUI configuration. The command "pvs" returns nothing. What is wrong? What can I do? Thanks.
  15. N

    Proxmox Offline Mirror released!

    I use a directory "latest" with symbolic links to last snapshot, and it seems to be OK : lrwxrwxrwx 1 root root 75 Nov 21 06:00 pve_bookworm -> /var/lib/proxmox-offline-mirror/mirrors//pve_bookworm/2024-11-21T05:00:02Z/ So, it's linked to the last snapshot, freshly updated.