Search results

  1. M

    nodes behind independent NATs

    I want to run two PMG nodes (in a cluster) physically placed in two separate locations, both behind NATs. Is it enough to open and redirect ports: 465 (smtps) and 22 (ssh) on both firewalls for the cluster to flawless communicate/synchronize? Of course I can set up VPN and use private IP range...
  2. M

    bandwidth limits

    bwlimit: [clone=<LIMIT>] [,default=<LIMIT>] [,migration=<LIMIT>] [,move=<LIMIT>] [,restore=<LIMIT>] Set I/O bandwidth limit for various operations (in KiB/s). clone=<LIMIT> bandwidth limit in KiB/s for cloning disks default=<LIMIT> default bandwidth limit in KiB/s migration=<LIMIT> bandwidth...
  3. M

    ChromeOS guest

    Has anyone succeed with installation of ChromeOS Flex (or FydeOS) in VM? I downloaded installation images from Google/Fyde, but I am not able to boot them up in VM. Both bios/efi boot method do not work. Efi is able to find efi partition and some files on it, but still does not boot. Fyde goes...
  4. M

    trim container filesystem on lvm-thin

    What is the "correct" way to automatically trim filesystems residing in lvm-thin pool? I can see there is "pct fstrim" command and I can run it manually (and it works!), but... it seems strange that such important functionality have to be done manually. Is there any "standard way" of doing it...
  5. M

    exclude filesystem from snapshot

    I have a container with a couple of ZFS mount points. One of them contains plenty of fast changing temporary data and I generally do not want to keep them in snapshots. (The problem: the dataset has <100GB, but a month of daily snapshots effectively uses 1TB of disk. because the temporary data...
  6. M

    CT live restore? [feature request?]

    I just had to restore large container and it took a lot of time. Have you thought about live restore feature? It works great with VMs. In theory it shoud be possible. My thoughts: - pbs client have "mount" feature, so it is possible to mount the backup and have all data available immediately -...
  7. M

    normal?

    Hi, I need your thoughts... I have small local server that receives 20 or maybe 50 legitimate mails a day. I has been so for years and worked perfect. And it still works perfect, but my tracking center looks so: PMG does its job excellent - all these mails are spam and indeed should be...
  8. M

    qcow2/replication chicken-and-egg

    In order to have replication and immediate migration - zfs storage is a must. In order to have "real" unrestricted snapshots and vm cloning feature - qcow2 storage is necessary. Did I miss something? Are there any plans to combine these features?
  9. M

    oom-kill

    I have problem with borg backup while trying to back up ~550.000 of small files: [1576137.653081] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=ns,mems_allowed=0,oom_memcg=/lxc/5011,task_memcg=/lxc/5011/ns/system.slice/cron.service,task=borg,pid=2284332,uid=0 [1576137.653138]...
  10. M

    ext4 strange messages

    I have root filesystem in lvm: /dev/mapper/pve-root on / type ext4 (rw,relatime,errors=remount-ro) From time to time I get this in dmesg: [27141.449117] EXT4-fs (dm-4): orphan cleanup on readonly fs [27141.454531] EXT4-fs (dm-4): 1 orphan inode deleted [27141.454539] EXT4-fs (dm-4): recovery...
  11. M

    encrypted storage

    Is it possible to encrypt content of a container filesystem? For example I want to use remote storage like cifs/nfs. If the remote system gets compromised (or if I don't trust admin...) - all container data might be read, copied and taken over by "bad people". On the other hand - if the data...
  12. M

    external datastore

    Has anyone tried to set up datastore located somewhere at online storage provider? Like this or this or this. Will it work? What protocol would work best - smb, sftp? (And what about s3fs or s3ql?) I suppose it should work, but I am afraid datastore verification would need to read the whole...
  13. M

    one-time boot node without pve

    Sometimes (for example after hardware update) I want to boot up PVE node without actually starting all containers/vm's. (Then I'd do some tests, necessary config updates etc., and finally reboot.) What is the "correct way" to do it? Usually I manually add "init=/bin/bash" in grub boot menu, but...
  14. M

    fallback relay

    I want to designate one node to take care of sending mails in case of temporary problems. So I added this to main.cf template: [% IF dns.fqdn == 'my.other.node.com' -%] smtp_fallback_relay = [node.responsible.for.sending.of.deferred.mails.com]:26 [%- END %] The goal is: The 1st node tries to...
  15. M

    LVM backup script

    I have just wrote a script that helps with backups of LVM volumes - automatically creates snapshot, uploads to PBS and removes snapshot: https://github.com/michabbs/lvm2pbs Have fun! :)
  16. M

    "reverse" who object

    How can I set up such mail filter rule? Action: BCC To: NOT one of a given list
  17. M

    limits inside lxc container

    I have 2 stand-alone pve nodes. On each of them I created Ubuntu 22.04 container from tremplate. One shows this: # ulimit -a real-time non-blocking time (microseconds, -R) unlimited core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling...
  18. M

    LMTP encryption?

    My PMG delivers mails to my another host via smtp, where Postfix forwards them to Dovecot via LMTP. Actually that Postfix seems to be not necessary - PMG should be able to transport directly to Dovecot via LMTP. (Right?) But - as far as I understand - mails will be transported in cleartext. Is...
  19. M

    vlan-awareness

    I am trying to convert from traditional vlan config to the new "vlan aware" one. What is wrong here? iface enp5s0 inet manual auto vmbr1 iface vmbr1 inet static address 10.13.145.13/24 gateway 10.13.145.1 bridge-ports enp5s0 bridge-stp off bridge-fd 0 bridge-vlan-aware...
  20. M

    Where really is /etc/pve?

    In order to have self-consistent backups I always use snapshots feature of zfs/lvm. I made a backup of the whole rootfs of pve node this way: - created snapshot of / (which in my case is on lvm, but could as well be on zfs) - archived the whole filesystem from snapshot - removed the snapshot I...