Search results

  1. M

    resize live /tmp tmpfs on unprivileged container [SOLVED]

    I have a job running on a node that i've modelled elsewhere too. To speed it up, I put it in /tmp, sync back to disk when done. However I realize through modelling that when the job finishes it will flush a bunch of data to disk into /tmp and run out of space and lose all the work. In a...
  2. M

    Age verification is identity verification - archLinux32 banned in Brazil.

    What's proxmox's stance on this? I use proxmox as my desktop because I want to live and breathe it at all times so Im aware of issues that might show up in my production environ. And it breeds familiarity and expertise. And easy to test things out.
  3. M

    Reclaim VM ext4 disk space on thin zvol

    Looked around for an answer to this but didnt quite find (except fstrim). I'm thinking that a VM's ext4fs ate a lot of disk, files subsequently deleted and the zvol remains large, despite being thin provisioned. I didnt have discard on because of oversight. Id like to get the space back...
  4. M

    can't escape PCT ENTER from wedged CT

    long time user but somehow stuck on a noob problem - how to escape PCT enter? had a container wedge, wanted my shell back on the host. this does NOT seem to be in play (no, Im not using it in screen with meta=^a) from pct(1): --escape \^?[a-z] (default = ^a) Escape sequence prefix. For...
  5. M

    ksm still high cpu usage

    I am not sure if i should care that it's using 60% of a core on a 54 core/ht box, but it still seems egregious. I can try to tune it but Im nervous Ill cause it to explode with even worse usage or otherwise hobble the box (which has a few vms and lots of ct's) I have 256GB ram, and while the...
  6. M

    lxc-ls no longer reporting ram usage in pve7.1

    #lxc-ls -fF NAME,STATE,RAM NAME STATE RAM 100 RUNNING 0.00MB 261 RUNNING 0.00MB 270 RUNNING 0.00MB proxmox-ve: 7.1-1 (running kernel: 5.13.19-4-pve) pve-manager: 7.1-10 (running version: 7.1-10/6ddebafe) pve-kernel-helper: 7.1-12 pve-kernel-5.13: 7.1-7...
  7. M

    Force LXC CT to use secondary IP for all outbound connections? (how to force scope LINK?)

    An ancient container I inherited in a /25 at location 1 with ip Q on host Z needs to be moved to location 2 on host Y and retain ip Q. We cannot move the /25, there are other hosts+vms+cts on it at 1. We can only route Q/32 to Y. The CT's software cannot be touched or reconfigured or otherwise...
  8. M

    lxc issues with proc disappearing to certain processes

    This is the second server with this issue now. I mentioned it here before: https://forum.proxmox.com/threads/pct-list-not-working.59820/#post-281223 when I 'pct enter' the lxc, there's no /proc, this causes a lot of problems. It seems a customer sshing as a user then su'ing to root also saw...
  9. M

    jitsi breaks pct list and pve web console: can't open '/sys/fs/cgroup/cpuacct/lxc/673/ns/cpuacct.stat'

    A few days ago I added some sound loopback (aloop) stuff to run jitsi in a container. I put this into the lxc/673.conf lxc.apparmor.profile: unconfined lxc.cgroup.devices.allow = c 116:2 rwm lxc.cgroup.devices.allow = c 116:4 rwm lxc.cgroup.devices.allow = c 116:3 rwm lxc.cgroup.devices.allow =...
  10. M

    can't restart service (maridadb): systemd not booted as pid 1

    Very curious situation, which occured as well on another node of mine which I've been slowly unloading to reinstall completely, but has now happened on a more recently installed node. Mariadb crashed for some reason (it is doing this much more frequently under pve 5.3 and .4 with maria 10.2 an...
  11. M

    lxc start permissions for /run

    Screen users cant start screen because '/run/screen - no such directory' But /run comes up 755 - so anything that doesnt suid cant put it's pid file or create its /run directory hierarchy. How to mitigate this? /etc/init.d/screen-cleanup is supposed to create the directory properly, and used...
  12. M

    Reinstall over existing rpool (wiping all disks)

    I've got a remote machine with remote console and want the quickest way to reinstall overtop of the old disks (losing all data, I've moved all containers elsewhere). Problem is if I dont wipe the disks, the installer barfs on rpool already existing. I am pretty sure I cant zpool export rpool...
  13. M

    PCT list not working

    Something is out of sync cant pct list: can't open '/sys/fs/cgroup/cpuacct/lxc/741/ns/cpuacct.stat' - No such file or directory how to fix? proxmox-ve: 5.4-2 (running kernel: 4.15.18-20-pve) pve-manager: 5.4-13 (running version: 5.4-13/aee6f0ec) pve-kernel-4.15: 5.4-8...
  14. M

    cpanel dovecot resource issue with apparmor

    Had a situation where constraints from apparmor were causing problems with cpanel's dovecot. The container is NOT unpriviledged and not protected. The cpanel support guy said I need lxc.aa_profile = unconfined But from what I...
  15. M

    /proc and /sys missing for pct enter container but exists for ssh session in

    Something funky with pct enter -- this just stared happening, wasnt occuring before. Something's changed (no no packages have been updated on the container that i know of... but obviously something changed while I wasnt looking...) root@arch:/etc/pve/nodes/arch/lxc# pct enter 909 website:/# ps...
  16. M

    issuing any pct commands causes setlogsock(): type='unix': path not available at /usr/share/perl5/PV

    whenever i issue a pct comand I get setlogsock(): type='unix': path not available at /usr/share/perl5/PVE/SafeSyslog.pm line 38. Is there a path missing somewhere? This was after a recent upgrade to latest.
  17. M

    Updates re CVE-2019-5736: runc / lxc container escape vulnerability

    Seems LXC is susceptible to a container-escape problem. Just wondering about updates for this issue. https://seclists.org/oss-sec/2019/q1/119 At this point in time debian has no patches yet. https://security-tracker.debian.org/tracker/CVE-2019-5736
  18. M

    How to allow Cpanel Simfs mounts in LXC CT's on PVE 5.1 with apparmor?

    Following along hints from https://unix.stackexchange.com/questions/450308/how-to-allow-specific-proxmox-lxc-containers-to-mount-nfs-shares-on-the-network and elsewhere, I've updated /etc/apparmor.d/lxc/lxc-default-with-mounting to include simfs in the list, and then in the lxc container's...
  19. M

    Devuan container creation bug

    Im using an ascii template I created (by installing a VM off the iso, then tarring up what was in the filesystem...), I've had success using it on older Pve (5.0?) or either I missed this warning or it's new on 5.2 - maybe it's ignorable. extracting archive...
  20. M

    Where is boot/grub in zfs root for grub rescue?

    Read lots of threads about grub rescue, but short of mounting a live iso to boot from (can't right now, the remote kvm is half busted), we're stuck at grub rescue> however, looking at (hd0) throught (hd7) (the max # of drives presented to bios by the JBOD controller), I can see...