Search results

You mentioned you are using FreeIPA - this brings me question, it using PAM is not better idea. FreeIPA can be used with PAM - does group membership works using FreeIPA + PAM and logging into PVE using PAM instead?

On datacenter level for my AD (LDAP) group I have assigned role "Administrator" for path "/". All permissions are working except adding USB spice device (for redirection). When I try "Add usb device" -> Spice port, error 500 shows "either 'host' or 'mapping' must be set. (500)" I know for real...

My tests shows it does not work.

What else is your proxmox host running? Only this one vm? Can you post screenshot of top? I don't know what can cause this, but maybe some power management? Few usefull commands (need to install stuff of course), which I have in my notes: apt install i7z linux-cpupower x86_energy_perf_policy...

Any update on this? My AD testing shows nested groups membership is ignored. Or I am doing something wrong?

Maybe try with vmxnet3, it should support rss? Virtio-net should it support also, according to this patches https://lwn.net/Articles/880833/

OK, I will reply to myself. I was able to find this project, seems to be from digital ocean https://github.com/digitalocean/vmtop

OK, but I think it is better to manage it using AD, it is more comfortable way. Anyway we used to have vcenter where anybody can login and using groups permission on vcenter objects each department/team have own set of resources which they can use. Limiting users in ldap query makes sometimes...

Hi, when adding group permission group is only select-able from list - can not click into group field and type group name to search it. When adding user permission - search works. Can this be also fixed in group permission dialog?

Thanks for that link, at least partial success. We have multiple teams, each have own security group. That would mean, when I want to use this existing security groups for provisioning access to various resources in PVE I need to add them into new group, which I will use as filter in user query...

With corporate Active Directory (trying to replace vmware) it is easy possible to hit this 1MB limit, when PVE tries to sync all users in AD..now what?

Hi, I have found this post using "Unable to load access control list: No buffer space available". I was trying to enable Active directory auth in PVE. Seems we are missing some easy guide. I was not sure how and what to filter, so I keep it empty as in forum post. Preview showed some invalid...

Out of topic, but how is ocfs2 with qcow2 performing? And it is reliable? I can't find any benchmarks or tutorials and my past experience (10+ years) with ocfs2 is only bad (kernel panics).

I have experience with larger vmware env backed by multiple all flash storages. It works well, also dedup.

I have just found this post and also did some research how this limitation could be solved. But It needs new storage implementation qcow2@lvm https://forum.proxmox.com/threads/what-about-lvm-qcow2.138969/#post-650094

I think it is great idea! It should work and be perfect solution for SAN environment (ideal vmware replacement). Actually I have found this article which is about implementing kubernetes CSI driver on SAN using qcow2 on LVM. They mention this document about how this is implemented in ovirt/vdsm...

If you are using ZFS, do you set zfs arc cache limits? Default setting is unlimited (can take 80% of memory). If it grows, VMs can be killed with oom. https://pve.proxmox.com/wiki/ZFS_on_Linux#sysadmin_zfs_limit_memory_usage

Is it possible / or have you alredy tried to boot and test also with previous kernel?

Ah, my old blog post. I am happy it helped somebody ;)

You can not (easily) replace esxi with proxmox, if you have FC/FCoE SAN. There is nothing like "vmfs". With PVE you can have shared storage (LVM) or local storage with snapshots. But not both at same time (shared and snapshots). See wiki https://pve.proxmox.com/wiki/Storage