eplord eplord

Arch Linux ARM 64 on Raspberry Pi 3 B+ With Full Disk Encryption And SSH Unlock: 2018 Edition

There are multiple ways to get a full disk encrypted arch linux system on raspberry. In this tutorial, we will install a 64-bit arch linux armv8 system, using dropbear as ssh server for remote pre-boot unlocking of the root filesystem. However, it will still be possible to unlock and use the pi as usual, with a keyboard and monitor. We will also create an unencrypted partition in the installation process, usable as a rescue system.

Differences to the 32-bit arch linux arm version:

probably better performance
can run 64-bit software
comes without the proprietary video-driver blobs

Proxmox PVE Host Config Backup Script

This script can be used to backup essential configuration files from the Proxmox Virtual Enivronment (PVE) host.

The script will create backups using tar with specified backup prefix and date and time stamp in the file name. Script will also delete backups that are older then number of days specified.

Create backup script file

To create backup script that will be executed every day we can create backup script in /etc/cron.daily/ folder. We need to make it writeable by root (creator) only, but readable and executable by everyone:

touch /etc/cron.daily/pvehost-backup

Ultimate Beginner's Guide to Proxmox GPU Passthrough

mirror of The Ultimate Beginner's Guide to GPU Passthrough (Proxmox, Windows 10) by /u/cjalas

>Welcome all, to the first installment of my Idiot Friendly tutorial series! I'll be guiding you through the process of configuring GPU Passthrough for your Proxmox Virtual Machine Guests. This guide is aimed at beginners to virtualization, particularly for Proxmox users. It is intended as an overall guide for passing through a GPU (or multiple GPUs) to your Virtual Machine(s). It is not intended as an all-exhaustive how-to guide; however, I will do my best to provide you with all the necessary resources and sources for the passthrough process, from start to finish. If something doesn't work properly, please check /r/Proxmox, /r/Homelab, /r/VFIO, or

On the host

Ensure these modules are loaded

cat /proc/sys/net/bridge/bridge-nf-call-iptables

Disable swap

sysctl vm.swappiness=0
swapoff -a

Proxmox - Email Alerts Setup (gmail)

SSH into proxmox node and become root user. Run the following commands to download extra software dependencies we'll need.
```
apt update
apt install -y libsasl2-modules mailutils
```
Enable 2FA for the gmail account that will be used by going to security settings

	#!/bin/zsh
	# expects https://github.com/ahmetb/kubectl-aliases
	# implements lots of https://kubernetes.io/docs/reference/kubectl/cheatsheet/

	alias kgpos='kgpo --sort-by=.metadata.creationTimestamp'
	alias kgpoy='kgpo -o yaml'

	### config view

	alias kcv='k config'

	#!/bin/sh

	alias dm='docker-machine'
	alias dmx='docker-machine ssh'
	alias dk='docker'
	alias dki='docker images'
	alias dks='docker service'
	alias dkrm='docker rm'
	alias dkl='docker logs'
	alias dklf='docker logs -f'

	### Basic ###
	# The directory to store the downloaded file.
	dir=${HOME}/Downloads
	# Downloads the URIs listed in FILE.
	input-file=${HOME}/.aria2/aria2.session
	# Save error/unfinished downloads to FILE on exit.
	save-session=${HOME}/.aria2/aria2.session
	# Save error/unfinished downloads to a file specified by --save-session option every SEC seconds. If 0 is given, file will be saved only when aria2 exits. Default: 0
	save-session-interval=60
	# Set the maximum number of parallel downloads for every queue item. See also the --split option. Default: 5

	###
	# Proxmox or other server kernel params cheap tune and secure.
	# Try it if you have heavy load on server - network or memory / disk.
	# No harm assumed but keep your eyes open.
	#
	# @updated: 2020-02-06 - more params used, adjust some params values, more comments on params
	#

	### NETWORK ###

	#!/bin/sh

	#######################################################
	#
	# Edits the proxmox Subscription file to make it
	# think that it has a Subscription.
	#
	# Will disable the annoying login message about
	# missing subscription.
	#