Update 2 — deeper investigation, the rabbit hole goes further
More testing today revealed something unexpected that significantly refines the diagnosis.
Root cause: two independent but chained bugs.
After extensive testing across multiple kernels...
The “Relay access denied” error basically means PMG isn’t recognizing the recipient’s domain as something it’s allowed to accept and forward. Even though you added the domain to Relay Domains, something still isn’t clicking.
Try any of the...
DRBD was part of PVE for many years and support was dropped IIRC 2 versions ago. Support is provided by Linbit directly:
https://github.com/LINBIT/linstor-proxmox
Thank you for sharing.
I have a couple of follow up question and/or suggestions:
how do you manage local admin users that can use sudo? Is this all done manually?
Maybe add TOTP to local admin users, too
Restrict SSH even more, e.g. via this...
Hi y’all,
I’ve released a Proxmox hardening guide (PVE 8 / PBS 3) that extends the CIS Debian 12 benchmark with Proxmox specific tasks.
Repo: https://github.com/HomeSecExplorer/Proxmox-Hardening-Guide
A few controls are not yet validated and are...
Hello,
We recently documented and automated a basic Proxmox VE 9.1 hardening baseline
to support audit and compliance discussions.
The repository focuses on:
- Proxmox VE host-level hardening (management plane)
- Minimal and graduated controls...
Hi y’all,
I’ve updated my Proxmox hardening guide, it now includes PVE 9 and PBS 4, in addition to PVE 8 and PBS 3. It continues to extend the CIS Debian benchmark with Proxmox specific hardening tasks.
Repo...
Unfortunately, none of these worked. The 4th step, I also could not do. The switch is a USW Pro XG 8; so it runs at 10 gbe and the nic is a 5gbe
ethtool --show-eee nic0
Switch configuration
cat /etc/modprobe.d/r8126.conf
it is on by default, per the kernel module settings, but it's not required at all. You only need it to emulate an hypervisor as a VM, so that qemu can itself use KVM and the virtualization extension of the CPU. It's not even available to a VM by...
Ja kann man machen, ist dann wieder eine Kostenfrage. Das alle DataCenter bei Hetzner offline gehen ist unwahrscheinlich und dann ist halt das Backup nicht erreichbar.
I had tested it in another machine with the same results, the system was really similar so couldn't say for sure if it was bad hardware, but at this point, I'm calling it bad hardware. Thanks for the assistance.
it is on by default, per the kernel module settings, but it's not required at all. You only need it to emulate an hypervisor as a VM, so that qemu can itself use KVM and the virtualization extension of the CPU. It's not even available to a VM by...
What benefit and services do you get?
You get commercial support and help via several support channels, and guaranteed access to the Proxmox VE repositories for updates and bug fixes.
Every Open Source project needs to be financed by a strong...
Okay, that's strange. Fortunately I've never encountered such a situation.
(Ram is the only resource which should never be over-committed and there are more RAM consumers than the KVM processes and ARC - but I am sure you know that already.)
Welcome, @traumadoc2b
The easiest (though a manual one) way is to scp it to whatever sshd server you want :).
Edit: or the opposite: being at some workstation, use scp to download it to the workstation.