Skip to content

Instantly share code, notes, and snippets.

View free-pmx's full-sized avatar

free-pmx

View GitHub Profile

Proxmox and code reviews

TL;DR How to corrupt cluster configuration without doing anything. When a data consistency related bug goes undiscovered for well over a decade, it’s time for a second look at code review practices.


ORIGINAL POST Proxmox and code reviews

The pitfalls of some post-install scripts

TL;DR Be aware of security implications that come with third-party setup tools, such those supplied by the wider community.


ORIGINAL POST The pitfalls of some post-install scripts

@free-pmx
free-pmx / blank.free-pmx.rst
Last active October 8, 2025 20:58

Intentionally left blank.

Visit free-pmx website for full-text search of all posts.

Proxmox VE Live System build

TL;DR Build a live system that boots the same kernel and provides necessary compatible tooling as a regular install - with a compact footprint. Use it as a rescue system, custom installer springboard and much more - including running full PVE node disk-less.


ORIGINAL POST Proxmox VE Live System build

Turning a cluster member into a standalone node

TL;DR Making a node that was once part of a cluster standalone again can be counter-intuitive compared to simply removing nodes from list of cluster members.


ORIGINAL POST Turning a cluster member into a standalone node

Fragile Proxmox cluster management

TL;DR Proxmox Cluster filesystem builds on Corosync, but there are oddities in the PVE configuration. The support for cluster management is imperfect and can bring inexplicable situations which deserve a better user approach.


ORIGINAL POST Fragile Proxmox cluster management

@free-pmx
free-pmx / blank.free-pmx.rst
Last active October 8, 2025 20:57

Intentionally left blank.

Visit free-pmx website for full-text search of all posts.

@free-pmx
free-pmx / ssh-pki.free-pmx.rst
Last active October 8, 2025 21:00

Public Key Infrastructure with Secure Shell

TL;DR Secure your SSH infrastructure from the very first boot. Rotate keys and never trust a previously unknown machine. Never pass through a key-not-known prompt and do not get used to the identification-changed warning with a remote host.


ORIGINAL POST Public Key Infrastructure with Secure Shell

SSH certificates setup

TL;DR PKI SSH setups for complex clusters or virtual guests should be a norm, one which improves security, but also manageability. With a scripted setup, automated key rotations come as a bonus.


ORIGINAL POST SSH certificates setup

@free-pmx
free-pmx / blank.free-pmx.rst
Last active October 8, 2025 20:57

Intentionally left blank.

Visit free-pmx website for full-text search of all posts.