encryption

  1. DerDanilo

    PMG Backup to PBS

    It is very nice that it's possible to backup the PMG config to a PBS. Even the DKIM private key is included in the backup. Two things are missing at the moment: - Encryption (which is implemented for PVE already) - Backup of custom templates (at least I couldn't find them in the backup TAR...
  2. L

    Single disk proxmox setup, how to encrypt and share a larger chunk of the disk with multiple VMs and other devices on the network?

    I acquired a Tiny/Mini/Micro PC to be my starter homelab, nothing fancy just a 4-core i5 from 2012 and 16gb non-ecc ddr3 with a 1TB SATA SSD (The SSD cost almost as much as the PC itself). Goal is for this to be various things including PiHole, backup of other devices, log collection and...
  3. D

    PBS and Let's Encrypt

    Hello, i noticed that the command "proxmox-backup-manager cert info | grep Fingerprint" and "openssl x509 -noout -in /etc/proxmox-backup/proxy.pem -fingerprint -sha256" gives me the same fingerprint. If i now update this certificate and key with one from Let's Encrypt i get certificate...
  4. A

    Encryption in Nested Virtualization in VMs the run Proxmox

    is it possible to install Proxmox and enable Nested Virtualization, and on the Nested Virtualization and have 2 Proxmox(Installation Debian Buster) VMs That both are encrypted, ---+Proxmox (on the server - (I prefer the Debian Buster installation)) [installed on Hardware] - -| - -+Proxmox...
  5. D

    [SOLVED] Installing on encrypted ZFS

    Hi, With ZFSonLinux 0.8.4 the encryption performance is finally decent. I'd like to install a new Proxmox host - but the latest release has 'only' 0.8.3 - will this be an issue ?
  6. O

    Custom hook script specific for just a container

    Hi. I'm using Proxmox 6.1 with Debian buster as host (and as guest while this is possible). I use several containers and in one I need to have a crypted mount point (it could even be the whole container). So, I use a lvmthin for just the system and a non-lvmthin for the data, and this is what...
  7. Y

    Bug bei replizieren

    Hi, ich habe testweise 2 Proxmox zu einem Cluster zusammengeschlossen. Beide sind mittels nativer ZFS-Encryption verschlüsselt. Wenn ich jetzt von Node A eine VM auf Node B Replizieren (in GUI Konfiguriert) möchte kommt im Log die Meldung: cannot send...
  8. B

    [SOLVED] OSD Encryption

    Hi guys I notice that OSD encryption is available under create OSD. Is there any mechanism to show which OSDs are encrypted in the UI or command line? I made some encrypted and some non-encrypted to gauge performance but unable to differentiate which are which.
  9. P

    PVE6 - How to setup encrypted ZFS

    Hi @ll, i'm installing my new Proxmox Server. My Plan is to have a fully encrypted System (i had similar Setups before with Debian 6-10 & Xen & Encrypted LVM). Proxmox 6 is already running with encrypted lvm on a 3ware Raid 1 with SSD's (similar partition scheme as the default Installer does...
  10. Y

    [SOLVED] Native encryption of zfs root possible?

    Hi, for various reasons I prefer my data to be encrypted on disks. Until now I used a zfs on luks setup. Which worked pretty good, but had its quirks and some other drawbacks. So I was really happy to see zfs native encryption and its support with Proxmox 6 (Thanks for that!). To have my VMs...
  11. T

    Managing the size of a FDE VM

    So I made a full VM and installed Debian 9.3 using full-disk encryption. Now, Proxmox uses LVM-Thin to store VM drives, which is smart, because LVM-Thin only allocates data when it is actually written. However, when using FDE, Proxmox can't tell what is written and what is not (at installation...
  12. H

    ZFS 0.8 new features in proxmox

    ZFS 0.8 has two interesting features that can be beneficial to proxmox. 1.) Quotas to limit number of inodes ("zfs dnode accounting") per dataset (i think it's already in ZFS 0.7 tree, but not sure) operations on large quantity of small files can cause one container to affect another container...
  13. onlime

    Install Proxmox VE / ZFS on a LUKS encrypted volume

    AFAIK there is no easy solution to install Proxmox VE on ZFS on top of a LUKS encrypted volume. For us, both ZFS and encryption are strong requirements and we would prefer to use the Proxmox VE installer to get this up and running as fast as possible. Installing Proxmox VE on top of a plain...
  14. C

    Removing a node from a cluster (rebuilding it with full-disk encryption)

    Group, I have a two-node Proxmox cluster. I want to remove a node from the cluster, and then rebuild it. The goal is to build a completely encrypted server physical volume so the physical drive is encrypted if it gets in the wrong hands. My understanding is the right way to do this is do a...
  15. C

    Proxmox Encryption

    I'm trying to discover what types of encryption options are available in Proxmox 4.2.x. I have it setup, and I am wondering what options for encrypting volumes are available. If I've already done the base install can I encrypt the data volume after the fact? I also noticed that the setup...
  16. I

    Proxmox VE 4.2 Ceph Encryption

    Hi, I have an environment in which I need data at rest encryption, and while there isn't anything built into Proxmox, there is dm-crypt built into ceph. I have anywhere between 4-12 nodes, each with 2 OSDs (1TB HDD). I've solved the encryption of Proxmox, but haven't figured out if there is...
  17. hakim

    ZFS and encryption

    Hi, In the page Storage: ZFS, you are listing "encryption" as one of the "General Advantages of ZFS", but there is nothing about how to use it. Could you give some example to enable this feature ? Thanks, Hakim
  18. 9

    Securing VM data at rest with TPM Passthrough or other options

    Greetings all. I have a Windows 10 VM running on a Proxmox workstation, and have the following requirements: I must secure the data at rest in case the physical host machine is stolen The VM should be able to boot without user interaction due to using GPU passthrough and not having access to...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!