Hello,
please read openzfs encryption too.
on the net are many references about this.
Our is:
# https://openzfs.org/wiki/ZFS-Native_Encryption
And see the result of a search:
# https://openzfs.org/w/index.php?search=Encryption
I use outside...
Originally I really wanted to use SDN for this but that seems to not be possible -
We have a cluster of 3 machines running ceph and on it I have a bunch of VMs running a kubernetes cluster.
I want the kubernetes cluster to provision storage...
I am using ZFS exclusively, so I can not (and should not) say much about the other storage solutions.
Encrypting a disk from the inside of a VM? Sounds wrong to me as it adds additional attack vectors and key management problems. From my...
@daanw I know I can have mail alerts, my point is that a pve/pbs node that has a degraded pool or smart errors for that matter should not be showing "all green/OK" in the summary or PDM dashboards, the system is NOT ok and may be teetering on a...
@daanw I know I can have mail alerts, my point is that a pve/pbs node that has a degraded pool or smart errors for that matter should not be showing "all green/OK" in the summary or PDM dashboards, the system is NOT ok and may be teetering on a...
I had the same issue after an update from PVE 8.x to 9.x (ended up being 9.2.3). I tried to rollback to 9.1 by forcing the packages but it didn't solve it.
I narrowed down the problem to a network communication problem between kubelet, but I...
Yes, I tested restoring the VM multiple times too without issues to make sure LUKS did not create a problem.
For the follow up it was more for providing my findings in case anyone else was wondering the same.
Also for my testing I just tested...
The tar: Cannot mkdir: No space left on device error during a Proxmox LXC restore means the newly allocated root disk size is smaller than the uncompressed data inside your backup file. This commonly happens if the container originally used ZFS...
okay thank you
I have another question, how about leaving the new disk unencrypted and choosing "LVM-thin" option, then encrypting from each VM where it is used? Do you think it is safe?
This is a problematic area. While there are theoretically multiple mechanism to implement it, the only reference I know of is: https://pve.proxmox.com/pve-docs/pve-admin-guide.html#zfs_encryption
Yes, I tested restoring the VM multiple times too without issues to make sure LUKS did not create a problem.
For the follow up it was more for providing my findings in case anyone else was wondering the same.
Also for my testing I just tested...
After some more fiddling, I would say this is some kind of regression related to SeaBIOS and Windows Server 2025 or generally newer Windows versions which still don't use UEFI (just as reference, UEFI is still not an official requirement for...
I have an odd problem since upgrading my Proxmox cluster from PVE 9.1 to PVE 9.2.3. It consists of three physical proxmox nodes joined together in a cluster. On proxmox I host 3 talos linux control planes and 3 workers. After the update I'm no...
This is a problematic area. While there are theoretically multiple mechanism to implement it, the only reference I know of is: https://pve.proxmox.com/pve-docs/pve-admin-guide.html#zfs_encryption
If you want to avoid the complexity of PCI passthrough, there’s a simpler method that works very well.
You can set up the NVMe drive as an LVM-Thin storage directly in Proxmox and then assign a virtual disk to your VM that uses this storage...
So far I have plugged in the new disk, but I'm wondering how to encrypt it in the PVE? Is this possible?
I have been trying to search forums and internet for the answer but I have not been able to find any
Or should I encrypt it in another...