Stuff I use on Proxmox or have tested. My HomeLab is today full of Proxmox servers, clustered and standalone machines. I prefer used enterprise servers but I also have NUCs and self builds. I prefer HPE over Dell and TP-Link for Lever 2 and HPE for Level 3 switches.
Basics
ZFS is the new normal and replaces the RAID card generation. Why - our disks are too big and the problems with bit rot had to be addressed. After the release of the code as open source in 2001 it quickly moved into MacOS, FreeBSD and Linux. This is a guid for Proxmox users. #zfs
MyNewLab
As we have moved, I need to downsize my lab drastically. I will create a series of posts how I create my new lab. Not only will I lower the number of servers but also use smaller machines, NUCs- and SFF-machines. As I need to do a lot of travelling, this will take a long time to get ready.
Install
All servers should be protected against Brute Force Attacks. Fail2Ban may reduce the rate of incorrect authentication attempts, but it can't eliminate the risk presented by weak authentication.
Talos
Running a Kubernetes cluster using Talos on Proxmox. Talos is small, efficient and has safety by design. Adding my new favorite to my cluster to replace my K8s and K3s clusters. I will still keep the K0s cluster I have.
Proxmox
Our Proxmox lab shall be hidden away from the wife and kids. How to use Software Defined Networking SDN, VXLAN, OPNsense and a VM to run our Lab hided away from the family. Create a personal space for testing stuff. Use Pi-hole as an alternative to other DNS.
Install
How to Install and Configure the Proxmox Virtual Environment (PVE).
Install
As SSH is our mostly used tool, we need to make it safe.
Install
An SSL certificate displays important information for verifying the owner of a website and encrypting web traffic with SSL/TLS, including the public key, the issuer of the certificate, and the associated subdomains. HTTPS relies on certs.
Install
We do not want to use root for everything, actually we can't allow it. We need admin groups and administration accounts. Furthermore, we need to segregate and use other users and groups with lesser privileges on our cluster and servers.
Install
It's common practice to harden any server beyond the typical 60-70% state they are at end of installation. Fail2ban is one of the tools. As all a home lab is a prime target, we need to take extra steps to secure the servers we have, exposed and not exposed ones alike.
Build
Who hates the Proxmox nagging screen? We all do. Working on corporate systems you do not see it, but at home it's there every time you need to log in to the GUI. This is how you get rid of the Proxmox No Subscription Notice screen. How to use SSH keys.
News
Proxmox Issue SSH Host Key Certificates - How to bypass SSH known_hosts bug(s) As of PVE 8.1, there's still a bug where running `pvecm updatecerts` deletes all but the oldest (instead of newest) SSH keys from the shared cluster-wide known_hosts