How to corrupt cluster configuration without doing anything. When a data consistency related bug goes undiscovered for well over a decade, it’s time for a second look at code review practices.
See maintained post: https://free-pmx.org/insights/code-reviews/
NOTE No tracking on the site. Full and current reStructuredText version linked from within.
Be aware of security implications that come with third-party setup tools, such as those supplied by the wider community.
See maintained post: https://free-pmx.org/insights/post-install-scripts/
NOTE No tracking on the site. Full and current reStructuredText version linked from within.
Intentionally left blank.
Visit free-pmx website for full-text search of all posts.
Build a live system that boots the same kernel and provides necessary compatible tooling as a regular install - with a compact footprint. Use it as a rescue system, custom installer springboard and much more - including running full PVE node disk-less.
See maintained post: https://free-pmx.org/guides/live-build/
NOTE No tracking on the site. Full and current reStructuredText version linked from within.
Making a node that was once part of a cluster standalone again can be counter-intuitive compared to simply removing nodes from list of cluster members.
See maintained post: https://free-pmx.org/guides/node-uncluster/
NOTE No tracking on the site. Full and current reStructuredText version linked from within.
Proxmox Cluster filesystem builds on Corosync, but there are oddities in the PVE configuration. The support for cluster management is imperfect and can bring inexplicable situations which deserve a better user approach.
See maintained post: https://free-pmx.org/insights/cluster-fragile/
NOTE No tracking on the site. Full and current reStructuredText version linked from within.
Intentionally left blank.
Visit free-pmx website for full-text search of all posts.
Secure your SSH infrastructure from the very first boot. Rotate keys and never trust a previously unknown machine. Never pass through a key-not-known prompt and do not get used to the identification-changed warning with a remote host.
See maintained post: https://free-pmx.org/insights/ssh-pki/
NOTE No tracking on the site. Full and current reStructuredText version linked from within.
PKI SSH setups for complex clusters or virtual guests should be a norm, one which improves security, but also manageability. With a scripted setup, automated key rotations come as a bonus.
See maintained post: https://free-pmx.org/guides/ssh-certs/
NOTE No tracking on the site. Full and current reStructuredText version linked from within.
Intentionally left blank.
Visit free-pmx website for full-text search of all posts.