Alex Negulescu alecs

The Proxmox Corosync fallacy

Distinguish the role of Corosync in Proxmox clusters from the rest of the stack and appreciate the actual reasons behind unexpected reboots or failed quorums.

See maintained post: https://free-pmx.org/insights/corosync-fallacy/

NOTE No tracking on the site. Full and current reStructuredText version linked from within.

Generate key

brew install ykman yubico-piv-tool

# Generate key
ykman piv keys generate -aRSA2048 --pin-policy ONCE --touch-policy CACHED 9a public.pem


# Generate self signed key
ykman piv certificates generate -s "CN=yubi-1 ssh" -aSHA256 9a public.pem

	#!/bin/bash

	# Read the ID from the first argument
	id="$1"

	MODE="stop"
	STORAGE_LOCAL="backups3"
	STORAGE_LOCAL_PATH="/storage3/pve-backup"

	REMOTE_HOST="outbound"

	esphome:
	name: esp32-mic-speaker
	friendly_name: esp32-mic-speaker
	on_boot:
	- priority: -100
	then:
	- wait_until: api.connected
	- delay: 1s
	- if:
	condition:

	#!/usr/bin/awk -f
	#
	# Author: Matt Pascoe - [email protected]
	#
	# This awk script is used to extract relevant information from a bind zone
	# file and build the appropriate fields for passing into
	# a dcm.pl module. This can be used to bootstrap a new database from existing
	# site data.
	#
	# You can simply cat a file and pipe it to this script

	## Only permit acme-challenge requests that match the ACME spec,
	## return 403 for everything else
	## RFC8555 specifies a base64url token (no "=")
	## with at least 128 bits of entropy (ie 22 chars minimum)
	## root matches the "webroot" directory used in the certbot configuration

	location ~ "^/.well-known/acme-challenge/([A-Za-z0-9_-]{22,})$" {
	default_type "text/plain";
	root /var/www/acme/;
	}

	# feb/11/2022 11:00:55 by RouterOS 7.2rc3
	# software id = 9QK9-C798
	#
	# model = RB5009UG+S+
	# serial number = XXXXXXXXXX

	/ip settings set allow-fast-path=no

	/interface bridge add admin-mac=FF:FF:FF:FF:FF:FF auto-mac=no name=bridge

	version: '2.4'

	services:
	#prom:
	# image: prom/prometheus:latest
	# container_name: prom
	# restart: unless-stopped
	# volumes:
	# - ./conf/prometheus.yml:/etc/prometheus/prometheus.yml:ro
	# - ./conf/alerts:/etc/prometheus/alerts

	#!/usr/bin/env bash

	if [[ $EUID -ne 0 ]]; then
	echo "You must be root to run this script"
	exit 1
	fi


	BR_ADDR="10.10.0.1"
	BR_DEV="br0"

	loki-install:
	sh ./variables.sh
	sh ./setup-loki-fluentbit.sh