Sure but I think we can agree, that the situation get's much worse (due to a larger scale) as soon as script kiddies gets envolved ;) And at least that impact would be avoided by actually not running EOL systems and not exposing hypervisors to...
Purely theoretically, we don't know how long this bug has been exploited since it was possible to do anything, including clearing logs. Only now have script kiddies gotten their hands on it.
Here’s another problem we hit bringing PVE arm64 up on the GX10. The first was the black screen after initrd (thread here). Posting this one since the symptom is a show stopper.
Hardware
ASUS Ascent GX10
NVIDIA GB10, 20 cores, 3.9 GHz
128 GB...
I'm looking at moving our backup targets around on PBS to make better use of namespace specific pruning jobs, and I'm curious before I make any changes if there's a best practice for moving the files so that when the backup jobs are retargetted...
In my case, setting up AppArmor inside containers helped.
pct enter <id>
echo "/run/systemd/journal/dev-log rw," >> /etc/apparmor.d/local/usr.sbin.rsyslogd
apparmor_parser -r /etc/apparmor.d/usr.sbin.rsyslogd
reboot
This is probably what fiona...
Thanks for the feedback. bpftrace would not work on 6.17 as possible_nx_huge_pages structure is different. On 6.19+ it's an array of per-MMU-type structs. On 6.17 its a list of pointers.
Interesting that you are seeing the thread spikes on...
I'm also running PVE 9 with the 7.0 kernels on Dell R720, R720xd, R730, R730xd, R740, R750 systems. I've not seen this behaviour. I'd have to check and see what the mix of network interfaces are across all the systems, but it's a mix of onboard...
Yes, my view is indeed quite limited: The Internet would be in a better state if people would not run EOL systems on it.
But you are missing my actual point: It's pointless to clean an infected system since you might have missed an unknown...
We are pleased to share two major milestones that will help us better serve our customers and partners worldwide.
Global 24/7 enterprise support
Starting October 19, 2026, Proxmox Enterprise Support will be available around the clock, 365 days a...
Purely theoretically, we don't know how long this bug has been exploited since it was possible to do anything, including clearing logs. Only now have script kiddies gotten their hands on it.
Obviously this is possible, since anyone can compile the kernel as he sees fit.
However, I do not believe that Proxmox VE or their community needs to invest time nor resources to maintain (extreme) EOL systems.
I also believe Johannes S is...
Purely theoretically, we don't know how long this bug has been exploited since it was possible to do anything, including clearing logs. Only now have script kiddies gotten their hands on it.
There is now a newer pve-manager with version 9.2.12 available on the pve-test repo and a backport of that as 8.4.22 for PVE 8's pvetest repo, matching our respective test repo of the ceph-squid and ceph-tentacle releases.
There is some better...