Skip to content

Instantly share code, notes, and snippets.

View free-pmx's full-sized avatar

Insights on Proxmox free-pmx

View GitHub Profile

Upgrades and repositories

TL;DR Set up necessary APT repositories upon fresh Proxmox VE install without any subscription license. Explainer on apt, apt-get, upgrade, dist-upgrade and full-upgrade.


ORIGINAL POST Upgrades and repositories

Public Key Infrastructure with Secure Shell

TL;DR Secure your SSH infrastructure from the very first boot. Rotate keys and never trust a previously unknown machine. Never pass through a key-not-known prompt and do not get used to the identification-changed warning with a remote host.


ORIGINAL POST Public Key Infrastructure with Secure Shell

SSH certificates setup

TL;DR PKI SSH setups for complex clusters or virtual guests should be a norm, one which improves security, but also manageability. With a scripted setup, automated key rotations come as a bonus.


ORIGINAL POST SSH certificates setup

The pmxcfs mountpoint of /etc/pve

TL;DR Understand the setup of virtual filesystem that holds cluster-wide configurations and has a not-so-usual behaviour - unlike any other regular filesystem.


ORIGINAL POST The pmxcfs mountpoint of /etc/pve

Proxmox VE nag removal, scripted

TL;DR Automate subscription notice suppression to avoid manually intervention during periods of active UI development. No risky scripts with obscure regular expressions that might corrupt the system in the future.


ORIGINAL POST Proxmox VE nag removal, scripted

The Proxmox cluster filesystem build

TL;DR The bespoke filesystem that is the heart of Proxmox stack compiles from its sources in C. Necessary when changing hardcoded defaults or debugging unexplained quirks.


ORIGINAL POST The Proxmox cluster filesystem build

Container shell with no password

TL;DR Do not set passwords on container users, get shell with native LXC tooling taking advantage of the host authentication. Reduce attack surfaces of exposed services.


ORIGINAL POST Container shell with no password

The ‘no-subscription’ repository

TL;DR What exactly do you get from the non-subscriber and freely available package repository? And what are the differences to the one meant for public testing only. Almost none.


ORIGINAL POST The ‘no-subscription’ repository

Making sense of Proxmox bootloaders

TL;DR What is the bootloader setup determined by and why? What is the role of the Proxmox boot tool? Explore the quirks behind the approach of supporting everything.


ORIGINAL POST Making sense of Proxmox bootloaders

Restore entire host from backup

TL;DR Restore a full root filesystem of a backed up Proxmox node - use case with ZFS as an example, but can be appropriately adjusted for other systems. Approach without obscure tools. Simple tar, sgdisk and chroot. A follow-up to the previous post on backing up the entire root filesystem offline from a rescue boot.


ORIGINAL POST Restore entire host from backup