Search results

  1. W

    How to gracefully handle cert renewal?

    ohhhh, ok didn't understand that. I actually see the "required for self signed certificates" after clearing the fingerprint. Well that's easy enough then thank you.
  2. W

    How to gracefully handle cert renewal?

    I use a Let' s Encrypt cert on both my PVE and PBS servers. This morning I woke up to a bunch of email alerts of failed backups and datastore connection failures. After some messing about I found that the cert on my PBS server had renewed so the fingerprints no longer matched. Was an easy fix...
  3. W

    Best method to migrate OS disks for standalone node

    Thinking maybe backup with Clonezilla setup new disks and raid, then clonezilla restore to new disks?
  4. W

    Best method to migrate OS disks for standalone node

    Currently have proxmox running as a single node on a Dell R730xd. I use the rear 2.5" drive bays above the PSUs for my OS disks. They are setup as a RAID 1 using the onboard RAID controller. I'm using spinning disks and they live right at their temp limit in those slots. I'm worried about...
  5. W

    VLAN best practice

    I've been using vlans for a long time in Proxmox. I've always created a single bridge per physical nic on the host, made it vlan aware and then just tagged each virtual nic on the vm/ct. However I recently read somewhere (that I can't seem to dig out), where it mentioned setting up a bridge...
  6. W

    [SOLVED] Can't enable secure boot on windows VM, option greyed out

    OK the solution is way easier than I thought. Just power down, delete EFI disk, recreate it with pre-enrolled keys checked, then boot the VM. Finally found this in the manual under "10.2.11. BIOS and UEF" section.
  7. W

    [SOLVED] Can't enable secure boot on windows VM, option greyed out

    These look like guides for adding a TPM, I have a TPM attached to the VM already that part seemed to work, but secure boot isn't enabled.
  8. W

    [SOLVED] Can't enable secure boot on windows VM, option greyed out

    Probably not, this VM is very old at this point and I didn't anticipate the need for secure boot and a TPM at the time of creation. Do you have an information or a guide on manual enrolling of keys? Any downside to doing it in this way?
  9. W

    New ZFS setup on new install feels "off" somehow

    I don't know what caused some of the service issues I had post migration, still fighting some of that..., however, I think I found why things felt slow notably the PVE UI. I mentioned swap was maxed out all the time, apparently by default swappiness is set to 60 of system ram, so set that to 10...
  10. W

    [SOLVED] Can't enable secure boot on windows VM, option greyed out

    I'm trying to enable secure boot on a windows VM in preparation of the dreaded upgrade to Win11. However for some reason the option is greyed out in the VM bios (see screenshot). Not sure why or what needs to be changed. Config below if that helps. agent: 1 args: -cpu...
  11. W

    New ZFS setup on new install feels "off" somehow

    Here are my results Random r/w sync;fio --randrepeat=1 --ioengine=libaio --direct=1 --gtod_reduce=1 --name=test --filename=test --bs=4k --iodepth=64 --size=4G --readwrite=randwrite --ramp_time=4 write: IOPS=14.8k, BW=57.7MiB/s (60.5MB/s)(3875MiB/67188msec); 0 zone resets sync;fio...
  12. W

    New ZFS setup on new install feels "off" somehow

    Also here is my arc_summary if that helps anything, I don't fully understand a lot of this or how to decipher what might be good/bad etc. Had to post as txt file as direct post exceeds post character count...
  13. W

    New ZFS setup on new install feels "off" somehow

    I haven't done any testing, I didn't have anything to compare to, my other server is down now, I'd have to spin it up to get some sort of comparative test. Thoughts on a good way to test, I mean I could get data on my current config if nothing else. Getting a bad feeling I should have just...
  14. W

    New ZFS setup on new install feels "off" somehow

    Current system - CPU is a Xeon E5-2697 v4 384 GB of memory x6 Seagate st8000nm0075 8TB drives connected in HBA mode through Dell PERC H730P Just spun up and migrated over to this "new to me" server. Was running a hardware RAID 10 for many years previously with x4 of the 8TB Seagate drives...
  15. W

    Update version OpenSSH | current vulnerable version

    I found this https://www.reddit.com/r/debian/comments/17s0q57/fix_openssh_vulnerability_cve202328531/ apparently debian deemed it lower risk and hasn't patched it yet for whatever reason...
  16. W

    Update version OpenSSH | current vulnerable version

    @yrestrepo did you resolve this, I also have the correct repositories, but also show ssh version "OpenSSH_9.2p1" instead of the latest 9.6. Nessus is unhappy with my proxmox node currently. Proxmox is updated to 8.1.10 and shows no available updates.
  17. W

    Do I need firewall rules to secure VMs in different VLANs?

    I have multiple VLANs configured on my VE host and manged and routed in my router/firewall, the thought just crossed my mind if I needed to add inter vlan firewall rules to block traffic on the host itself. The simple question being how does internal routing/switching happen on the host? Is it...
  18. W

    [SOLVED] IPMI Tool error after v8 upgrade

    @LnxBil that seems to have done the trick. Thank you so much for your simple and complete instructions for patching that. It's very much appreciated.
  19. W

    [SOLVED] IPMI Tool error after v8 upgrade

    After the upgrade to v8 I'm getting alerts for "IANA PEN registry open failed: No such file or directory" for a IPMI script that runs on my host. I've seen a lot of talk about this bug, but I can't decipher the root cause, or a solution. If I understand correctly this has been patched, maybe...
  20. W

    vzdump script for specific backup job possible?

    That's very interesting, that should do what I need. I might need to chase some documentation on this.