Search results

https://pve.proxmox.com/pve-docs/pve-admin-guide.html#_ct_change_detection_mode In our tests it was a fraction of the old option. E.g. ~10min -> ~3min on one of my personal hosts. In other situations, the gain might be even more.

If Corosync had all three networks configured as links, chances are low, that all became unusable. But you can check the journal for the Corosync logs to see what happened. journalctl -u corosync It will log when it loses the connection to another host on a link.

There will be a rebalance. If your cluster is already running at its performance limit, this might push it over to the point where you see performance issues. But if you are at that point, then it is high time to upgrade the cluster or reduce load, as it should be able to handle such situations...

I never had any experience with HDDs. With SSDs one definitely wants to use the cache of the disk if they have PLP. Then they can ACK the sync writes a lot faster. I remember watching a talk about the experience gained by CERN running Ceph, and they do mention, to enable the cache of the disk...

Was this after Ceph was installed or during? Do you use HA? If so, which network(s) are configured for the Proxmox VE cluster (Corosync)?

Can you please post the zfs list output in Blocks? The editor has buttons for that as well. Otherwise it is barely readable as the spacing is all messed up. Did you enable "Thin provision" in the storage config? The output of zpool status could also be of use.

Könnt ihr von Hand einer VM auf dem Storage mal eine Disk anlegen? Ich weiß gerade nicht, wie gut das qm disk import damit umgeht, wenn das Zielstorage evtl. in einem komischen Zustand ist.

Die alten Server haben keine OSDs oder? Dann sollten diese Nodes mit dem Netzwerk auch entsprechend konfiguriert sein, dass sie schnell am Ceph Public Netzwerk hängen. Ansonsten ja, installieren, dem Proxmox VE Cluster beitreten und idealerweise die Ceph Pakete installieren. Dann können diese...

Well, changing the SSH port will break more than just access to the host shell via the web UI. Live migrations are one such thing I can think of. Can you work around that in some situations and override the default port to connect to? Probably yes. Will it be supported from our side if you run...

Change it back to the expected default? Changing the port to a non-default one is not the great addition to security. Not exposing it to the wide internet would be the better approach if that was the reason you changed it in the first place.

You might want to enable the disk cache for better performance. https://storage.toshiba.com/enterprise-hdd/cloud-scale-capacity/mg08-series https://docs.ceph.com/en/reef/start/hardware-recommendations/#write-caches

iLO should also support the Redfish API. This way, you can interact with the servers in an automated way. Ansible has a community plugin for Redfish as well: https://docs.ansible.com/ansible/latest/collections/community/general/redfish_command_module.html I am not sure how well it works, but...

I am not aware of any way to disable them in the web UI. By making the OIDC one the default, it will at least be the one selected by default.

For certain actions you will have to use the root@pam user. the `user.cfg` file will be created once needed. If you define a Realm as "Default" it should be the default one in the login window.

Will be in the next release: https://git.proxmox.com/?p=pve-manager.git;a=commit;h=993d05abc6a2ed17ed1c0f31b517a39fca5e9881

Another barrier (changing the SSH port is not that useful, as scanning the full port range of a host is not much effort), is to use the firewall to limit the source IP addresses from which SSH access is allowed. This only works if your source IP address is static. So if your ISP is changing your...

Wie gut Netz über Thunderbolt geht ist die Frage. Ich habe keine persönliche Erfahrung, aber was man die letzten Monate so gelesen hat, war das eher so meh. Die Kisten haben auch 2x 10G via SFP slots oder? Mit 3 günsten und wahrscheinlich kurzen DAC Kabeln, sollte sich da leicht ein Full-Mesh...

Check what the iLO/iDrac/IPMI of the servers offers in automation. As @cheiss mentioned, they usually have APIs and some might also allow access via SSH. But that depends heavily on the actual server hardware and the type of out of band mgmt that is integrated. Set up some infrastructure around...

Can they still ping each other? Is the VLAN still working? It isn't unheard of to forget to save a switch config in the startup/boot config and then a sudden switch reboot will make the switch lose the running config.

Hast du danach versucht dich über das Webinterface anzumelden? Für den root User sollte die TFA Abfrage nicht mehr kommen.