Skip to content

Instantly share code, notes, and snippets.

@samsulmaarif
Forked from sutlxwhx/README.md
Created April 27, 2019 14:55
Show Gist options
  • Save samsulmaarif/b96f26a0622051d7ffbb51391cb0d4f0 to your computer and use it in GitHub Desktop.
Save samsulmaarif/b96f26a0622051d7ffbb51391cb0d4f0 to your computer and use it in GitHub Desktop.
Installation of Proxmox 5 on Debian 9

Introduction

This tutorial will help you install Proxmox 5 on a freshly installed Debian 9.
It was tested on a dedicated server at hetzner.

Installation

Fisrt things first. Create a custom repository to pickup Proxmox related packages:

echo "deb http://download.proxmox.com/debian/pve stretch pve-no-subscription" > /etc/apt/sources.list.d/pve-install-repo.list
wget http://download.proxmox.com/debian/proxmox-ve-release-5.x.gpg -O /etc/apt/trusted.gpg.d/proxmox-ve-release-5.x.gpg

Update the list of the available packages and update them:

apt update -y
apt dist-upgrade -y

Install the neccessary packages for Proxmox 5 and delete obsolete:

apt install proxmox-ve postfix open-iscsi -y
apt remove os-prober -y

Update Debian kernel and grub for it to be able to reboot OS properly:

apt remove linux-image-amd64 linux-image-4.9.0-3-amd64 -y
update-grub

Completly remove and disable the rcpbind service that is often used as a vulnerability:

apt-get remove rpcbind
iptables -A INPUT -p udp -s 192.168.0.0/24 --dport 111 -j ACCEPT
iptables -A INPUT -p udp -s 127.0.0.1 --dport 111 -j ACCEPT
iptables -A INPUT -p udp --dport 111 -j DROP
echo -e "rpcbind: ALL" >> /etc/hosts.deny
systemctl disable rpcbind.service
service rpcbind stop

Reboot your server for it to abe able to pickup new kernel with Proxmox support:

reboot

After that you can download your .iso files to the /var/lib/vz/template/iso folder where Proxmox will be able to pickup them.

Future Reading

If you want to setup RDP for your virtual machines you can read this tutorial.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment