Latest activity
-
jklocker replied to the thread Maximal Workers/bulk-action default (4) appears to behave like 1..That's a good observation. Turns out I was looking at the wrong bulk action -- the endpoints, and therefore code executed, is different if you use the `Bulk Actions` on the Datacenter level (Datacenter->Bulk Action) or the node level... -
UdoB reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
Then you are still vulnerable due to the known and unknown security issues in PVE8 (which is EOL) and Debian Bookworm. The fix is to upgrade to the latest supported version of PVE aka PVE9 with every updated installed. Everything else is just... -
Vvaschthestampede replied to the thread Unexpected backup failures.The local controller is a Dell HBA330 Mini. The hardware isn't showing any signs of suffering. I think it's a big problem that the software can't take advantage of the hardware it has available, don't you think? I created it, and everything is...
-
DDetV reacted to mr.mjcummins's post in the thread [GUIDE] Installing NVIDIA 580.178.04 Drivers on PVE 9 (Kernel 7.x) for Legacy Pascal GPUs (Quadro P620) with Like.
Hey everyone, I wanted to share a working procedure for installing NVIDIA drivers on Proxmox VE 9.2.10 with Kernel 7.0.x when using legacy Pascal-architecture GPUs (specifically the Quadro P620). I spent hours fighting and researching, and I'm...
-
DDetV replied to the thread [GUIDE] Installing NVIDIA 580.178.04 Drivers on PVE 9 (Kernel 7.x) for Legacy Pascal GPUs (Quadro P620).Under Proxmox 9.2 the header is now proxmox-headers and I had success when I changed this line to: apt install -y build-essential dkms proxmox-headers-$(uname -r)
-
Llug-pm posted the thread Move Tape Library Hardware from one PBS to another, best practice? in Proxmox Backup: Installation and configuration.Hi everyone, I plan to replace the hardware on a Proxmox Backup Server because the hardware is outdated. However, a tape library is also connected to this PBS, which will not be replaced but is supposed to be moved from the old server to the new...
-
VictorSTS posted the thread Official status of support for multiple backup solutions in Proxmox Backup: Installation and configuration.Which is the official support status of doing PVE QEMU backups with PBS and other backup solutions? Specifically, would like to know the support status from Proxmox PBS for: Veeam Hornetsecurity (Altaro) Nakivo There are a few use cases that... -
JJohannes S reacted to gfngfn256's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
At least we now know, why you "can't" release any details currently.
-
JJohannes S replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Then you are still vulnerable due to the known and unknown security issues in PVE8 (which is EOL) and Debian Bookworm. The fix is to upgrade to the latest supported version of PVE aka PVE9 with every updated installed. Everything else is just...
-
cwt replied to the thread Best practices for VM NUMA and socket configuration.I think the recommendation to match the number of VM sockets to the number of host NUMA nodes is a bit too easy to misinterpret. Personally, I would use 1 socket as the default and only expose multiple vNUMA nodes to a guest if the VM is... -
Wwaynej replied to the thread KVM NX huge page recovery burns a core per guest on kernel 7.0.x.Anything after 6.19 is affected. 6.17.13-21 has the same CPU vulnerability mitigations as 7.0.14, as opposed to 6.14.x kernels which are missing some mitigations that 6.17.x and 7.0.x cover.
-
fossaaen replied to the thread Best practices for VM NUMA and socket configuration.Thank you for your reply. Just to clarify, its not apt upgrade on pve's that is struggling, its the apt upgrades with unattended upgrades inside the ubuntu VMs. Yes,this is the setup we have used for many years (If the NUMA option is used, it... -
jklocker replied to the thread Maximal Workers/bulk-action default (4) appears to behave like 1..I couldn't reproduce this. On my side, with 4 containers (no Start/Shutdown order set) and max-workers at the default of 4, all four kick off at once and finish in a couple of seconds - no serial behavior. I also printed the worker count in the...
-
jsterr replied to the thread Best practices for VM NUMA and socket configuration.According to the docs: "If the NUMA option is used, it is recommended to set the number of sockets tothe number of nodes of the host system." Have you tried that and checked how it changes your situation/problem... -
Hhmprox reacted to pve7bug's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Thanks to the Proxmox team for reviewing my report. At least they took it seriously, unlike the users on this forum who think that a Debian 11 installation is hacked simply because it's EOL (and no, the OpenSSH bug doesn't affect Debian 11; it's...
-
fossaaen posted the thread Best practices for VM NUMA and socket configuration in Proxmox VE: Installation and configuration.Hi all, We have a question regarding best practices and recommended settings for NUMA and the number of CPU sockets assigned to a VM. We need to support memory hot-plug, which means we are currently running these VMs with NUMA=1. Our...
-
TTheMrg reacted to asdpiasdjoi's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Found it. It is a complete compromise of the web interface. No pre-requisites, just a vulnerable proxmox version. There was a bug patched in pve-access-control (potentially by accident) in 2023. I will submit it to MITRE so a CVE can be issued...
-
UdoB reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
I disagree. I think it's more toxic to have EOL systems (like PVE7) on the Internet. It makes the world for all a worse place. I also think it's toxic to register accounts to cry about about an "Proxmox security issue" which quite obviouvsly...
-
UdoB reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Systems without current system updates can be hacked, nothing is "new" or "urgent" on this. And PVE7 and PVE8 won't get any security updates any more so it's somehow expected that they get owned. Even if you don't connect them directly to the...
-
UdoB reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
The usual use of the zero-day term is for vulnerabilities that are being exploited while there is no fix yet (for a supported/current version). That is something the administrator cannot do much about. This vulnerability is probably already fixed...