Yes. For Kubernetes nodes to interact with Ceph directly (via RBD or CephFS), they need to be on the Ceph public network. Without that direct line of sight, the Kubernetes workers won't be able to map the block devices or mount the filesystems...
I think I understand now.
When the VM is stopped then started and this is in place "ms-cert=2023k", it does exactly what enroll-efi-key does right before it actually powers it on.
New LTO generations are still being released, autoloaders and libraries handle the swapping, and WORM media gives you actual physical protection-not just a software flag that can be cleared. Tape is cheap per TB over its whole lifetime and, more...
a container in zombie state would do what you experience. use ps to find the process (it would be in a permanent 'D' state.)
The good news is that the rest of your containers work normally and you can use pct commands to control them. the bad...
Yes, it appears that nvme0n1 which is a WD 2tb drive is the one you referred to as "data" above.
Proxmox appears to be installed on the other (1tb, Crucial?) & it would appear that you have a "regular" ext4 installation, so non-zfs. Although it...
nvme1n1 vs nvme0n1 ----it is definitely nvme0n1 as of checking today. The original post was made late at night after staring at the screen for many hours. Sorry for the confusion. Hand transposing out of a recovery mode terminal onto the forum...
Multiple sync and backup jobs feeding the server not to mention verification jobs so there is always traffic, and the remote side does show get and download chunks, but pretty much locks up the browser as those are too verbose/long for multi-TB...
I agree with you jlauro, it would be a very useful feature to see sync status during the sync in order to see how much, how fast, etc the sync is happening.
We will re-evaluate it, but cannot make any promises.
What we also look into periodically is reducing the attack surface in general, like we started rolling out some simple but relatively effective approach to block autoloading of various niche...
Thanks for all the informations and work already done above!
I'am currently on the way to test the downgrade of pve-qemu-kvm to 10.1.2 to see if that helps. In my book, the kernel of the host is less likely the cause here (this is only a bet). I...
Is there anything noticeable (besides the segfaults) in the guest system logs starting from the boot after the upgrades were applied? Since the disk format might play a role: IO or filesystem errors?
Appreciate the input!
What throws me off, is the "qm enroll-efi-key vmid" seems to do a lot more than just add a tag to the vm config file.
root@frontend-test:~# qm enroll-efi-keys 100
efidisk0: enrolling Microsoft UEFI CA 2023
INFO: reading...
Hello,
I spoke to @PVasileff , he tested older kernel versions. That doesn't help. As far as I can tell it's related to disk creation and management.
On minihv (Qoton Q20332G9 S20) today we created 2 VMs:
- Alma 9.7, then updated - after the...
Thanks for all the informations and work already done above!
I'am currently on the way to test the downgrade of pve-qemu-kvm to 10.1.2 to see if that helps. In my book, the kernel of the host is less likely the cause here (this is only a bet). I...
Warum willst du überhaupt pushen? Für Backups gegen s3 ist das natürlich nötig, bei PBS muss dagegen der pushende PBS auf den anderen schreiben können, was der pull-sync vermeidet. Wenn du also nicht gerade unverschlüsselt Backup hast, die vor...
Da du ja für beide Standorte verschiedene Namespaces nutzt, synct er eh nur benötigte Chunks der jeweils lokalen backups und wie vor mir geschrieben wurde, werden bereits vorhandene Chunks nie noch einmal übertragen.
Hi, ja, ist genau wie du vermutest. PBS checkt vor dem Sync, welche Snapshots bereits auf dem Ziel vorhanden sind, und überspringt sie. Der Rücklauf B→A würde daher quasi leer durchlaufen.
I'm trying to create an S3-backed datastore on PBS 4.2.0-1 against AWS S3 (ca-central-1). The PBS host has no direct internet egress — all outbound HTTPS must go through a HTTP proxy. From the shell, curl through the proxy reaches S3 cleanly (TLS...