Search results

  1. H

    ZFS 2.2.0 Released: ID mapping of unprivileged containers during mount

    https://github.com/openzfs/zfs/releases/tag/zfs-2.2.0 OpenZFS 2.2.0 - Lists following new features: Linux container support (#12209, #14070, #14097, #12263) - Added support for Linux-specific container interfaces such as renameat(2), support for overlayfs, idmapped mounts in a user namespace...
  2. H

    util-linux v2.39 release has support for id-mapping

    util-linux v2.39 release has support for id-mapping https://lwn.net/ml/linux-kernel/20230517112242.3rubpxvxhzsc4kt2@ws.net.home/ This might help to switch between privileged/unprivileged CT mode without having to rewrite all UIDs/GIDs in the root filesystem. I hope proxmox will make use of this...
  3. H

    VM templates? ISO repository?

    Hello, there is already user-friendly system for downloading and deployment of CT templates. Why don't we have such thing for VMs as well? I can imagine two levels of this. 1.) Some list of commonly used ISOs that proxmox would allow me to dowload without having to lookup the URL. (eg. Debian...
  4. H

    can core_pattern be modified from privileged CT?

    i've just found this: https://pwning.systems/posts/escaping-containers-for-fun/ They simply set /proc/sys/kernel/core_pattern to execute user provided binary in host context by triggering coredump inside of privileged docker container. Can this be done with privileged CTs on proxmox? Or is...
  5. H

    LXD 4.20 supports live migration of LXC containers

    https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540 LXD now has live migration. Perhaps recently the CRIUgenic technology has advanced a bit and Proxmox can start looking into this as well?
  6. H

    Linux 5.12 - ID Maping for Unprivileged CTs!

    https://kernelnewbies.org/Linux_5.12#ID_mapping_in_mounts They just released Linux 5.12, which can remap UIDs/GIDs of mountpoints. This is absolutely awesome feature which would mean that we don't really need to backup/restore or otherwise convert CT's filesystem when switching containers...
  7. H

    LXC: set memory.swappiness for individual CTs

    Hello, according to cgroupv1 docs: https://www.kernel.org/doc/Documentation/cgroup-v1/memory.txt It IS possible to set different swappiness value for each cgroup. How can i do this with proxmox CTs? Also: Can you please add GUI for this? This would greatly help me with swap issues caused by...
  8. H

    How do i start all stopped CTs that have ONBOOT=1 set over ssh?

    Hello, i often run in situation, where i have proxmox with some CTs not running (because i've stopped them). And from all these stopped CTs i want to start only those who have onboot=1 configutation while leaving the rest stopped. Is there way to do this using pct commandline?
  9. H

    Missing usefull elements in "datacenter summary" and "bulk actions"

    Hello. I have two simple improvement ideas for PVE web UI: 1.) In datacenter sumary there is list of nodes. Please add columns with kernel version and proxmox version, so i can easily see if some of the nodes need upgrade/reboot. 2.) in bulk actions (start/stop) please add column showing if...
  10. H

    PVE LXC Swap is incredibly suboptimal, causes freezing

    Hello, i have PVE server with 170GB of RAM assigned to LXC CTs. Typical CT settings look like this: 2GB RAM, 256GB Swap. But when you assign CT 2GB of RAM and 256GB of swap, it actually gets 2GB of RAM and 2.25GB of Swap. If i set the swap to 0GB, it still gets 2GB of swap. This is just...
  11. H

    Adding new node causes cluster instability for 15 minutes

    Hello, when i add new node to cluster it usualy puts whole cluster in very messy state, all nodes are becoming online, offline or unknown state at random and whole cluster goes unquorate. and this completely scary mess lasts for 10 to 20 minutes, then suddenly everything converges and whole...
  12. H

    Corosync 3.x: Multicast (for now) obsolete, use of Unicast (or knet) is reccomended

    I've been discussing this with corosync developers and they've told me this: https://github.com/corosync/corosync/issues/465 TLDR: Multicast was only reccomended for corosync 1.x, because unicast was not tested yet For corosync 2.x, they reccomend to use unicast (Proxmox currently uses...
  13. H

    ZFS Quota vs. Refquota

    Currently Proxmox VE only enables us to set QUOTA (space used including snapshots), but in many setups it also makes sense to set REFQUOTA (space used excluding snapshots). I have deployed znapzend for automatic ZFS snapshoting and replication, but these automatic snapshots are eating up...
  14. H

    Inhibit VM/CT autostart from GRUB kernel cmdline

    When i do some kind of service work on my server, sometimes i want to boot the system to do some changes, but i know that i will need reboot again few more time, so i don't want to start the CTs and VMs yet. Is there some flag that i can specify in grub to boot without autostarting VMs or CTs...
  15. H

    LVM-Thin will eat your data?

    After last reboot of proxmox machine running LVM thin, i've got into following problem: [ 15.801293] device-mapper: table: 253:11: thin: Couldn't open thin internal device [ 15.810909] device-mapper: ioctl: error adding target to table [ 15.829579] device-mapper: table: 253:11: thin...
  16. H

    Freeze upgrading to PVE 5.4

    I have troubles with upgrade to PVE 5.4, it launches /bin/systemd-tty-ask-password-agent --watch on several occasions and hangs forever. It happens when configuring pve-ha-manager and pve-manager packages. Freeze during pve-ha-manager is especially painful as it leads to unwanted reboot when HA...
  17. H

    KSM - Will it work for LXC?

    I was experimenting with KSM. I wonder if it can work on PVE with lots of LXC containers running same apps. Eg.: lots of apaches. I've enabled ksmtuned with threshold of 50%, it seems to run=1, but pages_shared:0 means it's not sharing and full_scans:0 probably means it didn't even tried to find...
  18. H

    LXC: Disabled dmesg, syslog still sees kernel messages

    Hi! I put syslog errno 1 line into the /usr/share/lxc/config/common.seccomp file and it does perfect job preventing containers to see what's in dmesg: # dmesg dmesg: read kernel buffer failed: Operation not permitted but i had recently found, that the kernel messages are getting to syslog, so...
  19. H

    Separate loadavg for individual containers

    LXCfs finaly has the per-container loadavg! https://github.com/lxc/lxcfs/pull/237 https://github.com/lxc/lxcfs/commit/b04c86523b05f7b3229953d464e6a5feb385c64a I wonder how long it will take to get to the Proxmox...
  20. H

    LXC + zSwap = possible troubles

    I had following options on kernel commandline of my proxmox ve: zswap.enabled=1 zswap.compressor=lz4 zswap.max_pool_percent=20 zswap.zpool=z3fold And i noticed that swap in LXC guests and overall memory management behaves rather weird (having guest swap bigger than i set, containers using much...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!