isolation

hi I plan to install some internet facing services on LXC, and I 'm reviewing the security. The scenario is the worst case: the attacker has RCE with root privileges on the LXC. will he be contained there? The LXC is of course unprivileged. I'm not considering any 0days of the kernel/OS...

I want to create a Linux Bridge where all members will be isolated from each other, and can only reach the gateway. As far as I've read Proxmox SDN aims to achieve the inverse; however Linux bridges support isolation natively; I have just ran the following commands and observed this leads to...

Hello there! I was wondering if someone could possibly assist me with a little something. You see, I'm quite new to promox ve and I have this goal of hosting my very own web server and setting it up as a DMZ. Additionally, I have a few other VM's that I need to run on the machine and I would...

This post is going to be pretty long too long to fit in a single post, but it represents a summary and lessons learned over ~3 weeks of experiments. This post is a half-tutorial and half-RFC so maybe PVE can be improved, as well as a half-tutorial how to actually achieve good results. This...

Hey everyone, I want to isolate virtual machines from communicating with each other without getting out on the local network. I realised a test with a my laptop connected to the server where i managed to ping a vm from another so even if i need any connection between the VMs I want it to happen...

Hi, We use Hostbill to auto provision Proxmox customer VM. In our use case we wish to assign a range of isolated internal/private network to each customer either by default or manually from client area. Is this possible?

Hi! I put syslog errno 1 line into the /usr/share/lxc/config/common.seccomp file and it does perfect job preventing containers to see what's in dmesg: # dmesg dmesg: read kernel buffer failed: Operation not permitted but i had recently found, that the kernel messages are getting to syslog, so...