It works with apparmor disabled and /dev/kmsg granted via cgroup2, both not needed with proxmox 6.x
Note that this removes all protections and breakout from lxc to pve is possible.
Since k3s isolates pods this is no problem though, unless you install malicious charts.
I updated my last post...
Well I'm also running k3s in vm's since lxc just doesn't work or makes problems.
Funny since I will probably migrate to OpenStack. Proxmox is a great replacement for esxi running old school vm's but this is in the past. They don't focus on the future at all, things like cloud, IaC, kubernetes...
You are right, I had this working with 6.x something, with latest 7.1-7 it's not.
For me the problem is that k3s has no access to /dev/kmsg (operation not permitted) and quits.
The workaround isn't working anymore and disabling apparmor also has no effect.
Here are my notes this should get you going.
## k3s in lxc on proxmox
# proxmox
# enable modules
cat << 'EOF' >> /etc/modules
rbd
fuse
ip_vs
ip_vs_rr
ip_vs_wrr
ip_vs_sh
overlay
br_netfilter
iptable_nat
EOF
# enable forwarding / optimization
cat << 'EOF' > /etc/sysctl.d/k3s.conf...
I have k3s running in LXC, but if you use ZFS it's not supporting overlay2 needed by k3s.
Instead use fuse-overlayfs. Any other storage should also work out of the box.
The patch will be shipped with qemu-server_7.0-18.
I use it with ansible and terraform for IaC.
For reference:
##Bootstrap Cloud-Init Image##
A vendor config can be used to bootstrap cloud-init images.
For example to install qemu-guest-agent on debian/ubuntu distros after the vm has been...
Proxmox does support IPAM via the experimental SDN feature.
Using either netbox oder phpIPAM.
https://pve.proxmox.com/wiki/Software_Defined_Network#pvesdn_config_ipam
Static ip assignment also works via cloudinit out of the box.
Terraform/Ansible IaC is the much better approach.
You can use screen or tmux for that.
apt update && apt install screen
Create a screen session
screen -S sessionxyz
Others can join it using
screen -x sessionxyz
Afaik I tested .vma from KVM and .tar.xxx from LXC.
I migrated from duplicity to pbs a long time ago.
Also I use zfs send for offsite sync now.
Takes less then 10 minutes to complete.
After I send the patch to devel @mira told me she already send it on june 24 and it's waiting for testing.
I added an example vendor config to https://bugzilla.proxmox.com/show_bug.cgi?id=2429#c7
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.