Search results

Hello, Unfortunately I haven't and I've moved on from using the firewall in PVE.

Hello, @techtomic no, I'm not running corosync nor ceph. @fiona The VM just got stuck. It seems that it's doing this when I migrate it to different hosts (I updated the cluster this morning, set the hosts - one at a time - into maintenance mode, so the VM migrated off the host and back on)...

Hello, I am running a 3 node Proxmox VE cluster, with a shared storage (iSCSI) and I've got an issue with two of the VMs: they completely freeze. The thing is, I've got clones of these VM which work just fine. So I don't think it's the OS running inside the VM. When it freezes, I can open the...

It is, 100%. I just checked it again: I don't know, I guess I'll try a reboot of the VM and of the hosts at the next maintenance window and see if that fixes it... The funny thing: firewall works properly on this machine (it would have on the other too, if I would have enabled the firewall at...

I completely forgot that it also needs to be enabled on the NIC! You're right! I just enabled the firewall on the NIC and it works, and this also has logs on it. The other VM's still not logging anything :(

# iptables-save -c # Generated by iptables-save v1.8.9 on Mon May 27 10:32:59 2024 *raw :PREROUTING ACCEPT [4648464025:6981497490610] :OUTPUT ACCEPT [1357978564:5659521142023] COMMIT # Completed on Mon May 27 10:32:59 2024 # Generated by iptables-save v1.8.9 on Mon May 27 10:32:59 2024 *filter...

@shanreich I'm pinging an IP (any IP) and it shouldn't work, but it does. I just tried to ping 1.1.1.1, 8.8.8.8, test.com, whatever. Everything work.... :(

It seems I was talking too early. VMs that had the firewall enabled are obeying the rules but I just enabled the firewall on a VM and for some reason, it's not working. [OPTIONS] ndp: 0 enable: 1 policy_in: DROP policy_out: DROP log_level_out: debug macfilter: 0 log_level_in: debug [RULES]...

@shanreich # systemctl status pvefw-logger pve-firewall ● pvefw-logger.service - Proxmox VE firewall logger Loaded: loaded (/lib/systemd/system/pvefw-logger.service; enabled; preset: enabled) Active: active (running) since Thu 2024-05-23 09:35:34 CEST; 1h 4min ago Process: 1403294...

Hello, I am running a PVE 8.2.2 cluster on three nodes. I've enabled the firewall at the datacenter level, on each host and at VM level. The rules seems to be working fine. The only thing that I'm not seeing is any logs. I have even tried to enable the log_level_in and log_level_out to debug...

Copy that. What about the first question? A list of non-covered HA VMs? P.S. leaving this here for further refferrence - is someone comes across this post: https://bugzilla.proxmox.com/show_bug.cgi?id=5260

Hello, I searched the web for this but was unable to find anything related. What I am interested in is a way to view which VMs are not covered by HA. Is there such a list present anywhere / can we somehow put that together? Also, in our setup, we got multiple hosts running Proxmox and we have...

I specified since the beginning that I'm using Proxmox Backup Server. The retention is set to "keep all backups" for now so I'm sure that's not the issue. Also, I'm not giving small bits of info: We got a 3 node cluster using PVE We got a VM running PBS We backup on that PBS The backups are...

The rules target individual pools. Each rule is targeting a different pool. I'm sorry, I didn't get this. I am already using Proxmox Backup Server. The problem is when a job is running for a longer time and another job starts in the meantime. The new job is blocked, until the first one...

Hello, We just setup a new 3 node cluster and, obviously, we wanted to take backups of the VMs. All was well until a few days ago, when we started to get an error: ERROR: can't acquire lock '/var/run/vzdump.lock' - got timeout I know that this happens because another backup is already underway...

Ermmm.... I don't know, when I'm trying to update, it says that the SPs will update, one at a time, but it requires a reboot at the end of the process.....?

1. I was using the GUI, so maybe using the CLI works... can't say for sure, but I'll try to test it. 2. Nope, I never said I'm using Blockbridge. I'm using EMCs, IBM, and Pure Storage. None of them, at least from what I know, can be updated without a reboot. Besides this, we're having NFS and...

I was definitely not. I'm running Proxmox 8.1.3 on all the nodes, no updates available... Well, I don't feel like that's an edge case. I mean, how do you perform maintenance on the shared storages? When updating the NAS, for example, reboots are required => I need to move all VMs from that...

Hello, I saw that the Move disk is unavailable for the cloud-init drive. After doing some reading, I found out that the CI disk is being regenerated at VM startup, so it can be removed and then created to the new storage. The only issue is that if you've got a running VM, in a production env...

Hello, As the subject states, I'm trying to create a firewall rule that would allow the traffic to flow from a VM to the "outside world", but nothing else. This is what I've done so far (and it didn't work): 1. Set the firewall online 2. Set the VM Firewall Options to drop, for both INPUT and...