proxmox
Table of Contents
Setup
Some notes on setting up a new Proxmox server:
- Install on ZFS root (set advanced options
ashiftto either 9 for 512-byte sector ssds, or 12 for 4k sectors)- (Check what sector sizes an SSD supports with
nvme id-ns -H /dev/nvme0n1 | grep “Relative Performance”
- Run community post-pve-install to enable open-source repos, update and disable nag screen
- Join node into cluster (datacenter→clusters grab join info from existing cluster, join cluster on new node)
Hardware-specific quirks
- NUC with e1000e interface drops offline after a few hours/days: nic-offloading-fix
Using trusted SSL certificates
ACME setup for DNS RFC2136
- Copy the tsig key to
/usr/local/share/nsupdate.key - Navigate to ACME plugins and create a new one:
- ID: FreeIPA
- Type: RFC2136
- Key: /usr/local/share/nsupdate.key
- Server: ares.jellybean.sihnon.net
- Create the ACME account via webui
- Create the certificate request using DNS type and FreeIPA plugin
- Order the new certificate
Using IPtables to redirect the web interface to port 443
Network Interfaces
- Edit
vmbr0, remove physical nic and IP address - Create OVSBridge
ovsbr0 - Create OVSIntPort
mgmtattached toovsbr0and add the management IP back onto this - Create OVSBond
bond0attached toovsbr0and add all physical nics to this, with modebalance-tcp - Apply changes
- Update switch configuration to enable LACP
- Confirm connectivity
- Datacenter→SDN→Apply to setup vlans
OpenVSwitch
apt-get install openvswitch-switch
SDN
- Install dependencies:
apt install frr-pythontools systemctl enable --now frr.service
Datacenter→SDN→Zones- Create
lanzone of typevlanbound toovsbr0
Datacenter→SDN-VNets- Create one vnet for each vlan, setting the zone to
lanand entering the vlan id intagfield. - When creating VMs, select this vnet to assign to the vlan without needing to re-enter the vlan id.
VM Tweaks
Unique disk serial numbers
TrueNAS SCALE demands unique serial numbers on each VM disk for stable imports. Proxmox doesn't have UI for this, but it can be done by editing the VM config files.
- Generate a unique serial number with:
uuidgen | sed -E "s|-||g" | cut -c 1-20
- Edit the VM definition at
/etc/pve/qemu-server/${VMID}.confto addserial=XXXto the end of thescsiline(s)
proxmox.txt · Last modified: by ben
