Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Proxmox VE Helper Scripts

community-scripts.github.io

Post reply on HN
Print view View original

71–80 of 90 posts

Re: Show HN: Proxmox VE Helper Scripts

#71

Post by dizhn »

brainfish wrote: post #57
sgc wrote: post #45

Earlier quoted context omitted.

I am not perfectly informed, but in my case, OPNsense would need to be the only vm with access to the incoming NIC port, and all other VMs and the router would need to use virtual network interfaces only coming from OPNsense for incoming. The router would be the only device with direct access to the outgoing NIC port. None of that seemed incredibly difficult looking into it, but still, it was the type of recipe I was…

VMs already use virtual network interfaces, which are by default bridged to `vmbr0`, a bridge that proxmox creates by default which is also bridged to the hardware NIC. For your use case, you simply want to create a second bridge, e.g. `vmbr1`, which is not bridged to the hardware NIC. You would then assign two virtual NICs to opnsense, one on each bridge (WAN and LAN, essentially) and then choose `vmbr1` as the brid…

I was looking at a proxmox/(pfsense/opnsense) tutorial the other day. They recommend binding the WAN interface to vmbr1 (or anything other than vmbr0) since VMs are created with their ethernet bridged to vmbr0 by default. This configuration is what most people want so it'll be a little less work setting up networking.

Re: Show HN: Proxmox VE Helper Scripts

#72

Post by dizhn »

eddieroger wrote: post #58
midtake wrote: post #56

What capabilties does Proxmox have that are missing from simple KVM? Just a web interface?

Clustering, migration, high availability, backups, Ceph integration, virtual networks as of recent, can do containers as well as VMs to name a few off-hand. The web interface is optional, too. You should check out their webpage for more.

re: backups, their other product "proxmox backup server" integrates really well with the backup system they have in place. It can be run in a container on the proxmox host itself.

Re: Show HN: Proxmox VE Helper Scripts

#73

Post by dizhn »

ZYbCRq22HbJ2y7 wrote: post #18
WaxProlix wrote: post #5

I decided to run proxmox on my homelab rather than having a k8s setup, and I've come to sort of regret it. LXCs are awesome, but being bound to just them or qemu VMs doesn't fit all of my needs. With Kubernetes I could just add support for lightweight VMs (Firecracker hypervisor, or unikernels or something) with a project like Kata. Proxmox is just not extensible. It's also just not amenable to automation or reproduc…

Have you tried incus? https://linuxcontainers.org/incus/

For people who might be confused, Incus is what used to be LXD. It used to be a Canonical project but people who didn't like their direction forked it an made much easier to install as well. (It was only available on Snap for a long time) I think the main developer uses opensuse so their rpm packages are pretty good.

As for LXD/Incus itself, I sincerely believe it's good software and I like their CLIs a lot more but for my own purposes i've moved to using proxmox, or lxc directly.

Re: Show HN: Proxmox VE Helper Scripts

#74

Post by IseardMi »

I have been using Proxmox VE for several years now and have most of my services running as docker containers in one VM. This always bothered me because I wanted to be able to control the individual services and their backup jobs using the Proxmox interface. After checking out these scripts I already moved a couple services (Caddy and Wireguard) over to LXC containers and am very impressed by how easy it was to do.

Basically I just wanted to say thanks to everyone involved in making these scripts, it has left me with a great first impression.

Re: Show HN: Proxmox VE Helper Scripts

#75

Post by crimsonnoodle58 »

IseardMi wrote: post #74

I have been using Proxmox VE for several years now and have most of my services running as docker containers in one VM. This always bothered me because I wanted to be able to control the individual services and their backup jobs using the Proxmox interface. After checking out these scripts I already moved a couple services (Caddy and Wireguard) over to LXC containers and am very impressed by how easy it was to do. Ba…

Careful. I too thought about this, but docker containers have the following benefits over the LXC scripts:

- Updates and automatic upgrades between major versions.

- The developer who wrote the software created the container (most of the time), this means its a supported environment. Also, as they have the insight into the application and future upgrades the environment has been setup correctly for each version.

If you want to achieve your goal, I'd suggest an LXC with your favourite Linux distro + docker + app container(s) for each app you have. It gives you the same thing, but with the benefits above.

Re: Show HN: Proxmox VE Helper Scripts

#76

Post by BonusPlay »

daqnz wrote: post #13
prettyStandard wrote: post #2

A bit of a tangent. I've been trying to manage libvirt& Unraid through terraform, but have run into issue after issue. I'm about given up, and will just manage the virtual machines manually... What's the virtualization technology on proxmox? What's the advantage to using something like this as opposed to terraform or salt stack or Ansible?

It is also worth mentioning that Proxmox uses ZFS making snapshotting quick and Proxmox also has a very good backup system. If you want to treat your self-hosted applications as "sheep" (1) , then terraform k8s etc. is a better bet. But if you are happy to manually restore from a backup or snapshot when something goes wrong, or automatically have your LXC container shifted to different hardware if you have a cluster,…

> Proxmox uses ZFS making snapshotting quick

Proxmox only supports linear snapshots using ZFS (so no tree-like snapshots). This might be a deal-breaker for some usages.

Re: Show HN: Proxmox VE Helper Scripts

#77

Post by fazeirony »

crimsonnoodle58 wrote: post #75
IseardMi wrote: post #74

I have been using Proxmox VE for several years now and have most of my services running as docker containers in one VM. This always bothered me because I wanted to be able to control the individual services and their backup jobs using the Proxmox interface. After checking out these scripts I already moved a couple services (Caddy and Wireguard) over to LXC containers and am very impressed by how easy it was to do. Ba…

Careful. I too thought about this, but docker containers have the following benefits over the LXC scripts: - Updates and automatic upgrades between major versions. - The developer who wrote the software created the container (most of the time), this means its a supported environment. Also, as they have the insight into the application and future upgrades the environment has been setup correctly for each version. If y…

i too was looking at going the route of the poster above. is your suggestion essentially the 'same' in terms of resources as converting a docker container to a LXC (relatively speaking)? for some reason i had/have it in my head that the LXC's would somehow be more efficient (based on...nothing, hence the question!)

Re: Show HN: Proxmox VE Helper Scripts

#78

Post by BonusPlay »

whartung wrote: post #47
beardbound wrote: post #6

Earlier quoted context omitted.

proxmox is using KVM for virtualization and Linux Containers (LXC) for the containers. I agree that something like terraform and/or ansible would make more sense for an IAC (infrastructure as code) deployment. Most of the people I talk to that use proxmox for a homelab prefer to do things manually and don't bother with any IAC implementation. For work I'm a firm believer in reproducible environments and IAC. We actua…

Why is something like Proxmox a bad target for IAC?

If you want to manage VMs, then you're probably using terraform + provider. However, SDN (Software Defined Networking) is not yet supported [1], which makes any kind of deployment with network separation not feasible (using IAC only).

[1] https://github.com/bpg/terraform-provider-proxmox/issues/817

Re: Show HN: Proxmox VE Helper Scripts

#79

Post by crimsonnoodle58 »

fazeirony wrote: post #77
crimsonnoodle58 wrote: post #75

Earlier quoted context omitted.

Careful. I too thought about this, but docker containers have the following benefits over the LXC scripts: - Updates and automatic upgrades between major versions. - The developer who wrote the software created the container (most of the time), this means its a supported environment. Also, as they have the insight into the application and future upgrades the environment has been setup correctly for each version. If y…

i too was looking at going the route of the poster above. is your suggestion essentially the 'same' in terms of resources as converting a docker container to a LXC (relatively speaking)? for some reason i had/have it in my head that the LXC's would somehow be more efficient (based on...nothing, hence the question!)

Think of an LXC as a docker container but at the OS level.

An LXC running docker with an app containerised inside will basically be the same as if the app is running a level higher in the LXC itself.

Give it a try. Then open top/htop in the host OS (pve shell) and you'll see the apps running in the docker container inside the LXC as native processes.

Re: Show HN: Proxmox VE Helper Scripts

#80

Post by fazeirony »

crimsonnoodle58 wrote: post #79
fazeirony wrote: post #77

Earlier quoted context omitted.

i too was looking at going the route of the poster above. is your suggestion essentially the 'same' in terms of resources as converting a docker container to a LXC (relatively speaking)? for some reason i had/have it in my head that the LXC's would somehow be more efficient (based on...nothing, hence the question!)

Think of an LXC as a docker container but at the OS level. An LXC running docker with an app containerised inside will basically be the same as if the app is running a level higher in the LXC itself. Give it a try. Then open top/htop in the host OS (pve shell) and you'll see the apps running in the docker container inside the LXC as native processes.

tyty!

i'm setting up a new server soon and want to optimize/correct some of the things i've done on my first proxmox setup (like not running truenas in proxmox passing the RAID controller through lol).

i'll give this a shot!

Post reply on HN