Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
| Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
| proxmox [05/03/2024 - 10:52] – Externe Bearbeitung 127.0.0.1 | proxmox [30/10/2024 - 13:12] (aktuell) – [Alle VMs auf einmal runter fahren] thommie4 | ||
|---|---|---|---|
| Zeile 10: | Zeile 10: | ||
| ===== Verzeichnisstruktur ===== | ===== Verzeichnisstruktur ===== | ||
| - | ^Was ^Wo ^Anmerkung | | + | ^Was^Wo^Anmerkung| |
| - | |kvm VM images |/ | + | |kvm VM images|/ |
| - | |kvm VM configs |/ | + | |kvm VM configs|/ |
| - | |LXC images |/ | + | |LXC images|/ |
| - | |LXC configs |/ | + | |LXC configs|/ |
| ===== PVE Server Backup ===== | ===== PVE Server Backup ===== | ||
| - | https:// | + | [[https:// |
| ===== User Management ===== | ===== User Management ===== | ||
| User in PVE erstellen (entspricht dem shell User). Erst dann ist die Administration per Web GUI möglich. | User in PVE erstellen (entspricht dem shell User). Erst dann ist die Administration per Web GUI möglich. | ||
| + | < | ||
| + | |||
| + | pveum user add [user@pam] | ||
| - | < | ||
| </ | </ | ||
| Gruppe erstellen: | Gruppe erstellen: | ||
| - | < | + | < |
| - | </ | + | pveum groupadd admin -comment " |
| + | |||
| + | </ | ||
| Rechte zuweisen: | Rechte zuweisen: | ||
| - | < | + | < |
| - | </ | + | pveum aclmod / -group admin -role Administrator |
| + | |||
| + | </ | ||
| Benutzer der Gruppe zuweisen: | Benutzer der Gruppe zuweisen: | ||
| - | < | + | < |
| - | </ | + | pveum user modify testuser@pam -group admin |
| + | |||
| + | </ | ||
| User auflisten | User auflisten | ||
| Zeile 55: | Zeile 63: | ||
| │ thommie@pam │ | │ thommie@pam │ | ||
| └─────────────┴─────────┴─────────────────────┴────────┴────────┴───────────┴────────┴──────┴──────────┴────────────┴────────┘ | └─────────────┴─────────┴─────────────────────┴────────┴────────┴───────────┴────────┴──────┴──────────┴────────────┴────────┘ | ||
| + | |||
| </ | </ | ||
| Zeile 61: | Zeile 70: | ||
| < | < | ||
| pveum user modify root@pam -enable 0 | pveum user modify root@pam -enable 0 | ||
| + | |||
| </ | </ | ||
| Zeile 67: | Zeile 77: | ||
| < | < | ||
| pveum user modify admin@pam -email admin@netzwissen.de | pveum user modify admin@pam -email admin@netzwissen.de | ||
| + | |||
| </ | </ | ||
| Zeile 78: | Zeile 89: | ||
| │ admin │ System Administrators │ alex@pam, | │ admin │ System Administrators │ alex@pam, | ||
| └─────────┴───────────────────────┴──────────────────────┘ | └─────────┴───────────────────────┴──────────────────────┘ | ||
| + | |||
| </ | </ | ||
| 2FA löschen: über gleichberechtigten User, dann Löschen von " | 2FA löschen: über gleichberechtigten User, dann Löschen von " | ||
| - | ===== Command Line ===== | + | ===== Command Line ===== |
| **qm** | **qm** | ||
| Zeile 92: | Zeile 104: | ||
| < | < | ||
| pvenode stopall | pvenode stopall | ||
| + | |||
| </ | </ | ||
| Zeile 98: | Zeile 111: | ||
| < | < | ||
| qm destroy 105 | qm destroy 105 | ||
| + | |||
| </ | </ | ||
| Zeile 104: | Zeile 118: | ||
| < | < | ||
| pct mount 108 mounted CT 108 in '/ | pct mount 108 mounted CT 108 in '/ | ||
| + | |||
| </ | </ | ||
| - | |||
| Gemeinsames Guest Share (smb) | Gemeinsames Guest Share (smb) | ||
| Zeile 111: | Zeile 125: | ||
| < | < | ||
| mount.cifs \\\\10.10.10.1\\guests /mnt/guests | mount.cifs \\\\10.10.10.1\\guests /mnt/guests | ||
| + | |||
| </ | </ | ||
| Zeile 117: | Zeile 132: | ||
| < | < | ||
| du -a /home | sort -n -r | head -n 5 find / -type f -size +100M | du -a /home | sort -n -r | head -n 5 find / -type f -size +100M | ||
| + | |||
| </ | </ | ||
| Container umbenennen | Container umbenennen | ||
| - | |||
| < | < | ||
| + | |||
| pct set < | pct set < | ||
| + | |||
| </ | </ | ||
| Zeile 129: | Zeile 146: | ||
| < | < | ||
| pct enter < | pct enter < | ||
| + | |||
| </ | </ | ||
| Zeile 137: | Zeile 155: | ||
| < | < | ||
| pct push < | pct push < | ||
| + | |||
| </ | </ | ||
| Zeile 143: | Zeile 162: | ||
| < | < | ||
| pct pull < | pct pull < | ||
| + | |||
| </ | </ | ||
| ===== Backups manuell ===== | ===== Backups manuell ===== | ||
| - | < | + | < |
| + | vzdump 102 118 122 --compress zstd --mode stop --prune-backups ' | ||
| </ | </ | ||
| Zeile 154: | Zeile 176: | ||
| < | < | ||
| pvesh create / | pvesh create / | ||
| + | |||
| + | </ | ||
| + | |||
| + | Doku: [[https:// | ||
| + | |||
| + | ===== Auto Start der VMs temporär abschalten ===== | ||
| + | |||
| + | < | ||
| + | systemctl disable pve-guests.service. | ||
| + | </ | ||
| + | |||
| + | Wieder einschalten | ||
| + | |||
| + | < | ||
| + | | ||
| </ | </ | ||
| - | Doku: https:// | ||
| ===== PVE Templates ===== | ===== PVE Templates ===== | ||
| Erreichbare Templates auflisten | Erreichbare Templates auflisten | ||
| - | |||
| < | < | ||
| + | |||
| pveam update | pveam update | ||
| pveam available | pveam available | ||
| + | |||
| </ | </ | ||
| Zeile 172: | Zeile 209: | ||
| < | < | ||
| pveam download local debian-10.0-standard_10.0-1_amd64.tar.gz | pveam download local debian-10.0-standard_10.0-1_amd64.tar.gz | ||
| + | |||
| </ | </ | ||
| Zeile 189: | Zeile 227: | ||
| | | ||
| + | |||
| </ | </ | ||
| - | **Wenn die Firewall den Host blockiert: | + | **Wenn die Firewall den Host blockiert: |
| < | < | ||
| Zeile 213: | Zeile 252: | ||
| </ | </ | ||
| + | ===== Meckermails von CERT-BUND wegen RPC ===== | ||
| + | |||
| + | Portt 11 ist normalerweise offen, wird aber nicht gebraucht, Zitat Proxmox Staff | ||
| + | |||
| + | //regarding port 111 - it should work to just remove `rpcbind, nfs-common` if you don't need it \\ We might consider doing so in a future version, but since it's expected to deploy PMG behind a firewall (or configure iptables/ | ||
| + | |||
| + | Service abschalten mit | ||
| + | |||
| + | < | ||
| + | root@kakariki ~ # systemctl stop rpcbind | ||
| + | Warning: Stopping rpcbind.service, | ||
| + | rpcbind.socket | ||
| + | root@kakariki ~ # systemctl stop rpcbind.socket | ||
| + | root@kakariki ~ # systemctl stop rpcbind | ||
| + | root@kakariki ~ # systemctl disable rpcbind | ||
| + | Synchronizing state of rpcbind.service with SysV service script with / | ||
| + | Executing: / | ||
| + | Removed "/ | ||
| + | Removed "/ | ||
| + | |||
| + | </ | ||
| ===== SMB Mount mit Containern ===== | ===== SMB Mount mit Containern ===== | ||
| - | Geht nur mit **privileged** container. Unter /Your LXC Option/ | + | Geht nur mit **privileged** |
| ===== LXC und KVM Netplan Beispielconfigs ===== | ===== LXC und KVM Netplan Beispielconfigs ===== | ||
| Zeile 245: | Zeile 305: | ||
| via: 136.243.85.129 | via: 136.243.85.129 | ||
| metric: | metric: | ||
| + | |||
| </ | </ | ||
| Zeile 256: | Zeile 317: | ||
| eth0: | eth0: | ||
| dhcp4: | dhcp4: | ||
| - | addresses: | + | addresses: |
| - 10.10.10.16/ | - 10.10.10.16/ | ||
| gateway4: | gateway4: | ||
| Zeile 266: | Zeile 327: | ||
| on-link: | on-link: | ||
| / | / | ||
| + | |||
| </ | </ | ||
| Testen: | Testen: | ||
| - | sudo netplan generate | + | sudo netplan generate |
| Testen mit automatischem zurücksetzen auf den vorherigen Stand | Testen mit automatischem zurücksetzen auf den vorherigen Stand | ||
| - | sudo netplan try -timeout 180 | + | sudo netplan try -timeout 180 |
| Anwenden | Anwenden | ||
| - | sudo netplan apply | + | sudo netplan apply |
| ===== LXC speziell ===== | ===== LXC speziell ===== | ||
| - | https:// | + | [[https:// |
| Debug Modus beim Start | Debug Modus beim Start | ||
| - | pct start 110 --debug | + | pct start 110 –debug |
| ===== Port 111 rpcbind ===== | ===== Port 111 rpcbind ===== | ||
| Zeile 303: | Zeile 365: | ||
| zst dekomprimieren | zst dekomprimieren | ||
| - | |||
| < | < | ||
| + | |||
| zstd -d vzdump-lxc-113-2022_05_14-01_30_57.tar.zst | zstd -d vzdump-lxc-113-2022_05_14-01_30_57.tar.zst | ||
| + | |||
| </ | </ | ||
| - | danach mit tar xf ...tar auspacken. | + | danach mit tar xf …tar auspacken. |
| < | < | ||
| - | |||
| lzop -x [*.lzo Datei] | lzop -x [*.lzo Datei] | ||
| Zeile 359: | Zeile 421: | ||
| </ | </ | ||
| - | Der Offset ist also **<font inherit/ | + | Der Offset ist also ** |
| + | <font inherit/ | ||
| < | < | ||
| Zeile 387: | Zeile 450: | ||
| qemu-nbd --connect=/ | qemu-nbd --connect=/ | ||
| + | |||
| </ | </ | ||
| Zeile 412: | Zeile 476: | ||
| < | < | ||
| mount /dev/nbd0p1 / | mount /dev/nbd0p1 / | ||
| + | |||
| </ | </ | ||
| Zeile 422: | Zeile 487: | ||
| rmmod nbd | rmmod nbd | ||
| + | |||
| </ | </ | ||
| Zeile 434: | Zeile 500: | ||
| < | < | ||
| < | < | ||
| - | < | + | < |
| / | / | ||
| / | / | ||
| Zeile 509: | Zeile 575: | ||
| Offen: offset? p1 ? | Offen: offset? p1 ? | ||
| - | |||
| ===== Daten-Konvertierungen ===== | ===== Daten-Konvertierungen ===== | ||
| - | https:// | + | [[https:// |
| Split disks in eine Datei umwandeln | Split disks in eine Datei umwandeln | ||
| - | |||
| < | < | ||
| + | |||
| vmware-vdiskmanager -r leapsrv.vmdk -t 0 / | vmware-vdiskmanager -r leapsrv.vmdk -t 0 / | ||
| + | |||
| </ | </ | ||
| Zeile 525: | Zeile 591: | ||
| < | < | ||
| qemu-img convert -f vmdk -O qcow2 leapsrv_combined.vmdk leapsrv_combined.vmdk.qcow2 | qemu-img convert -f vmdk -O qcow2 leapsrv_combined.vmdk leapsrv_combined.vmdk.qcow2 | ||
| + | |||
| </ | </ | ||
| Andersrum von qcow2 (kvm) nach raw (lxc): | Andersrum von qcow2 (kvm) nach raw (lxc): | ||
| - | < | + | < |
| + | qemu-img convert -f qcow2 -O raw vm-109-disk-1.qcow2 / | ||
| </ | </ | ||
| ====== SPICE ====== | ====== SPICE ====== | ||
| - | Doku: https:// | + | Doku: [[https:// |
| - | Hilfs-Skript in / | + | |
| < | < | ||
| + | |||
| Usage: ./spice.sh [-u < | Usage: ./spice.sh [-u < | ||
| Zeile 546: | Zeile 614: | ||
| node: Proxmox cluster node name | node: Proxmox cluster node name | ||
| proxy: DNS or IP (use < | proxy: DNS or IP (use < | ||
| + | |||
| </ | </ | ||
| - | |||
| Client: virt-viewer, | Client: virt-viewer, | ||
| - | + | ||
| ====== ZFS Installation ====== | ====== ZFS Installation ====== | ||
| Zeile 557: | Zeile 625: | ||
| apt install linux-headers-amd64 zfsutils-linux zfs-dkms zfs-zed | apt install linux-headers-amd64 zfsutils-linux zfs-dkms zfs-zed | ||
| - | [https:// | + | [[: |
| ===== Partitionieren ===== | ===== Partitionieren ===== | ||
| Zeile 565: | Zeile 633: | ||
| (Achtung: gdisk konvertiert MBR nach GPT) | (Achtung: gdisk konvertiert MBR nach GPT) | ||
| - | / | + | / |
| - | / | + | |
| - | DISK1=/ | + | DISK1=/ |
| - | DISK2=/ | + | |
| Dannach zpool anlegen. " | Dannach zpool anlegen. " | ||
| - | |||
| < | < | ||
| + | |||
| zpool create [-dfn] [-m mountpoint] [-o property=value]… [-o feature@feature=value] | zpool create [-dfn] [-m mountpoint] [-o property=value]… [-o feature@feature=value] | ||
| [-o compatibility=off|legacy|file[, | [-o compatibility=off|legacy|file[, | ||
| - | </ | ||
| + | </ | ||
| < | < | ||
| + | |||
| zpool create \ | zpool create \ | ||
| -o ashift=12 \ | -o ashift=12 \ | ||
| Zeile 605: | Zeile 672: | ||
| / | / | ||
| / | / | ||
| + | |||
| </ | </ | ||
| Zeile 623: | Zeile 691: | ||
| root@kakariki /etc/pve # pvenode acme cert order | root@kakariki /etc/pve # pvenode acme cert order | ||
| + | |||
| </ | </ | ||
| - | Loading ACME account details | + | Loading ACME account details Placing ACME order Order URL: <[[https:// |
| - | Placing ACME order | + | |
| - | Order URL: < | + | |
| - | Getting authorization details from '< | + | Getting authorization details from '<[[https:// |
| - | The validation for kakariki.netzwissen.de is pending! | + | |
| - | Setting up webserver | + | |
| - | Triggering validation | + | |
| - | Sleeping for 5 seconds | + | |
| - | Status is ' | + | |
| All domains validated! | All domains validated! | ||
| - | Creating CSR | + | Creating CSR Checking order status Order is ready, finalizing order valid! |
| - | Checking order status | + | |
| - | Order is ready, finalizing order | + | |
| - | valid! | + | |
| - | Downloading certificate | + | Downloading certificate Setting pveproxy certificate and key Restarting pveproxy Task OK |
| - | Setting pveproxy certificate and key | + | |
| - | Restarting pveproxy | + | |
| - | Task OK | + | |
| ### ACME DNS validation Hetzner DNS API | ### ACME DNS validation Hetzner DNS API | ||
| export HETZNER_Token="< | export HETZNER_Token="< | ||
| - | |||
| < | < | ||
| + | |||
| ./acme.sh --issue --dns dns_hetzner -d example.com -d *.example.com | ./acme.sh --issue --dns dns_hetzner -d example.com -d *.example.com | ||
| + | |||
| </ | </ | ||
| + | |||
| + | |||
| + | |||