TL;DR Be aware of security implications that come with third-party setup tools. Compare Debian-backed approach with innocuously looking scripts and learn what actually makes the difference.
ORIGINAL POST A neater Proxmox no subscription setup
TL;DR Be aware of security implications that come with third-party setup tools. Compare Debian-backed approach with innocuously looking scripts and learn what actually makes the difference.
ORIGINAL POST A neater Proxmox no subscription setup
TL;DR Auditing a Debian package is not difficult, especially when it contains no compiled code and everything lies out there in the open. A pre/post installation/removal scripts are very transparent if well-written.
ORIGINAL POST How to audit a Debian package
TL;DR Build a live system that boots the same kernel and provides necessary compatible tooling as a regular install - with a compact footprint. Use it as a rescue system, custom installer springboard and much more - including running full PVE node disk-less.
ORIGINAL POST Proxmox VE Live System build
TL;DR Proxmox Cluster filesystem builds on Corosync, but there are oddities in the PVE configuration. The support for cluster management is imperfect and can bring inexplicable situations which deserve a better user approach.
ORIGINAL POST Fragile Proxmox cluster management
Intentionally left blank.
Visit free-pmx website for full-text search of all posts.
TL;DR Secure your SSH infrastructure from the very first boot. Rotate keys and never trust a previously unknown machine. Never pass through a key-not-known prompt and do not get used to the identification-changed warning with a remote host.
ORIGINAL POST Public Key Infrastructure with Secure Shell
TL;DR PKI SSH setups for complex clusters or virtual guests should be a norm, one which improves security, but also manageability. With a scripted setup, automated key rotations come as a bonus.
ORIGINAL POST SSH certificates setup
Intentionally left blank.
Visit free-pmx website for full-text search of all posts.
TL;DR A complete feature-set bootloader for ZFS on root install. It allows booting off multiple datasets, selecting kernels, creating snapshots and clones, rollbacks and much more - as much as a rescue system would.
ORIGINAL POST ZFSBootMenu setup for Proxmox VE
TL;DR A look at limited support of ZFS by Proxmox VE stock install. A primer on ZFS basics insofar ZFS as a root filesystem setups - snapshots and clones, with examples. Preparation for ZFS bootloader install with offline backups all-in-one guide.
ORIGINAL POST Taking advantage of ZFS on root