Josh McKenna ag14spirit

The Proxmox time bomb watchdog

TL;DR The unexpected reboot you have encountered might have had nothing to do with any hardware problem. Details on specific Proxmox watchdog setup missing from official documentation.

ORIGINAL POST The Proxmox time bomb watchdog

The Proxmox Corosync fallacy

TL;DR Distinguish the role of Corosync in Proxmox clusters from the rest of the stack and appreciate the actual reasons behind unexpected reboots or failed quorums.

ORIGINAL POST The Proxmox Corosync fallacy

How to disable HA for maintenance

TL;DR Avoid unexpected non-suspect node reboot during maintenance in any High Availability cluster. No need to wait for any grace periods until it becomes inactive by itself, no uncertainties.

ORIGINAL POST How to disable HA for maintenance

Improved SSH with hidden regressions

TL;DR Over 10 years old bug finally got fixed. What changes did it bring and what undocumented regressions to expect? How to check your current install and whether it is affected?

ORIGINAL POST Improved SSH with hidden regressions

Why Proxmox VE shreds your SSDs

TL;DR Quantify the idle writes of every single Proxmox node that contribute to premature failure of some SSDs despite their high declared endurance.

ORIGINAL POST Why Proxmox VE shreds your SSDs

Backup Cluster configuration - /etc/pve

TL;DR Backup cluster-wide configuration virtual filesystem in a safe manner, plan for disaster recovery for the case of corrupt database. A situation more common than anticipated.

ORIGINAL POST Backup Cluster configuration - /etc/pve

Vaultwarden Debian 11 Install

This is how I installed the Rust implementation of bitwarden into a Proxmox Debian 11 LXC Container. It should work on any Debian 11 install (virtual or metal). I dislike running docker inside LXC containers for obvious reasons, so this is how I did it.

References

Prepare Base System

$ sudo apt update

Excel formulas to calculate IP values - Works in Excel and Google Sheet.

Updated 2023-12-11: Hosts calculation updated to support CIDR or 31 and 32.

Prerequisites:

A1 contains an IP address, such as 10.0.0.2
B1 contains the number of bits in the netmask (CIDR) such as 24

The below formulas then go into C1, D1 etc. to perform the various calculations. Some calculations depends on other calculations.

SC1000 $ is not used specially and should therefore be escaped.
SC1001 This \o will be a regular 'o' in this context.
SC1003 Want to escape a single quote? echo 'This is how it'\''s done'.
SC1004 This backslash+linefeed is literal. Break outside single quotes if you just want to break the line.
SC1007 Remove space after = if trying to assign a value (or for empty string, use var='' ... ).
SC1008 This shebang was unrecognized. ShellCheck only supports sh/bash/dash/ksh. Add a 'shell' directive to specify.
SC1009 The mentioned parser error was in ...
SC1010 Use semicolo

	// Copyright 2020 Google LLC
	//
	// Licensed under the Apache License, Version 2.0 (the "License");
	// you may not use this file except in compliance with the License.
	// You may obtain a copy of the License at
	//
	// https://www.apache.org/licenses/LICENSE-2.0
	//
	// Unless required by applicable law or agreed to in writing, software
	// distributed under the License is distributed on an "AS IS" BASIS,