Proxmox on top of Debian

[ewlesian]

Hello,

I just installed Proxmox on top of Debian following the instructions here
Everything seems ok, but haven't created any virtual machines yet.
When I installed Proxmox standalone a month back, there were more storage containers. One was called local-lvm and there was a thin one as well (I think). I don't have any of those now, so I'm not really sure where to store my ISOs and my VMs. Proxmox created all this for me last time, but now since I installed it on top of Debian they were not created. Is there a real newbie friendly guide on how to do this? I don't mind starting over, but I would like to keep Debian first because I'm doing full disk encryption.

 

[fiona]

Hi,
I'm assuming you are using file-system based encryption. Simplest thing to do is adding a directory storage with all content types selected (in Datacenter > Storage > Add. A default PVE installation uses a directory storage local with /var/lib/vz, but you can just specify any directory you like.

If you also want LVM with encryption, you'll need to use something like LUKS. The reason is that each VM image on an LVM storage is its own LV and LVs on top of a normal partition/disk won't be encrypted.

 

[ewlesian]

If I want to encrypt my virtual machines then should I start over and just install proxmox without going through Debian first? I would have to use LUKS to encrypt the LV? Which LV do I encrypt after a fresh install of Proxmox?

 

[fiona]

If I want to encrypt my virtual machines then should I start over and just install proxmox without going through Debian first? I would have to use LUKS to encrypt the LV? Which LV do I encrypt after a fresh install of Proxmox?

The point is that you need to have an encrypted block device first and only then use LVM on top of that. Like that all LVs will be encrypted. So starting over won't help as the Proxmox installer already does the LVM setup.

If you just want to encrypt the VM images, you can also use a directory storage (see my first reply) on your encrypted file system.

If you want an encrypted LVM for your VM images, you need a dedicated partition/device and create an encrypted block device out of that partition first. Here is an example of how it can be done (on Arch), of course some things might be different on Debian.