virtualization:proxmox [NetGeekery]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== PROXMOX ======

===== INSTALLATION =====
  ## DNS settings: make sure it is in the correct subnet; connect to internet before installation

==== IMAGE/TEMPLATE ====
  ## download image or template
  proxmox:~$ pveam available --section system
    # system  alpine-*-amd64.tar.xz
    # system  debian-*-amd64.tar.gz
  proxmox:~$ pveam download local debian*.gz

  custom:
    - from_web:
      proxmox:~$ wget https://${weblink}.isp
      proxmox:~$ sudo mv *.iso /var/lib/vz/template/cache
    - from_usb:
      ## find the USB
      proxmox:~$ lsblk
        # NAME           SIZE       RO      TYPE     MOUNTPOINT
        # sda            10G        0       disk
        # |_ sda1        9.6G       0       part     /
        # |_ sda2        1K         0       part
        # |_ sda3        466M       0       part     [SWAP]

      ## insert USB
      proxmox:~$ lsblk
        # NAME           SIZE       RO      TYPE     MOUNTPOINT
        # sda            10G        0       disk
        # |_ sda1        9.6G       0       part     /
        # |_ sda2        1K         0       part
        # |_ sda3        466M       0       part     [SWAP]
        # sdc           1024M       0       disk     /media/USB
      proxmox:~$ dd if=proxmox-ve*.iso of=/dev/sdc bs=1M

==== SETUP ====
  network:
    ## network: bridged adapter
    ## in the lxc container, set up eth0 interface
    $ nano /etc/networking/interfaces
    < /etc/networking/interfaces >
      # configure eth0 manually
      auto eth0
      iface eth0 inet static
        address 192.168.35.176
        netmask 255.255.255.0
        gateway 192.168.35.1
    $ /etc/init.d/networking restart

    ## update dns if necessary (use pihole address: 192.168.35.30)
    System > DNS > DNS server 1

    lxc:
      Network/eth0
      Edit:Network Device (veth)
      IPv4: Static
        IPv4/CIDR: 192.168.35.26/24
        Gateway(IPv4): 192.168.35.1

    ## changing subnet ip
      ## -- prev_ip: 192.168.1.235
      ## -- new_ip: 192.168.35.235
      ## -- prev_gateway: 192.168.1.235
      ## -- new_gateway: 192.168.35.235
      ## -- host: pve.somedomain.com
      $ nano /etc/hosts
        < /etc/hosts >
          127.0.0.1 localhost.localdomain localhost
          # ${prev_ip} ${host} pve pvelocalhost
          ${new_ip} ${host} pve pvelocalhost
      $ nano /etc/resolv.conf
        < /etc/resolv.conf >
          Search somedomain.com
          # nameserver ${prev_gateway}
          nameserver ${new_gateway}

      ## go to web console
      https://${new_ip}:8006
      Datacenter > pve > System > Network
        Name: vmbr0
        Type: Linux Bridge
        Active: Yes
        Autostart: Yes
        Ports/Slaves: enp0s31f6
        IP Address: ${new_ip}
        Subnet mask: 255.255.255.0
        Gateway: ${new_gateway}
    ## assigning IPs to network device
    # Name         Type             VLAN aware    Ports/Slaves         CIDR                 Gateway
    # enp6s0f1     Network Device   No            --                   --                   --
    # enp7s0f0     Network Device   No            --                   192.168.35.201/24    --
    # enp7s0f1     Network Device   No            --                   192.168.35.202/24    --
    # vmbr0        Linux Bridge     No            enp6s0f1             192.168.35.235/24    192.168.35.1

  repositories:
    ## add repository
    See < Notes/Server/misc.notes >
      packages:
        repo: download.com/proxmox.com/debian/pve
        distro: stretch
        component: pve-no-subscription

  firewall:
    See < Notes/Server/networking.notes >
      firewall:
        ## default
        ## allow
          ip: 192.168.35.0
        ## allow
          direction: in
          interface: tun0
        ## allow
          direction: out
          interface: tun0
        ## enable
        ## reload
        ## status
          # To                      Action          From
          # --                      ------          ----
          # Anywhere                ALLOW           192.168.35.0/24
          # Anywhere on tun0        ALLOW           Anywhere
          # Anywhere (v6) on tun0   ALLOW           Anywhere (v6)

          # Anywhere                ALLOW OUT       Anywhere on tun0
          # Anywhere (v6)           ALLOW OUT       Anywhere (v6) on tun0
  openvpn:
    ## install and setup
    See < /media/veracrypt2/Docs/Notes/DigitalOcean/VPN/vpn_do.notes >

    ## change the routing
    $ ip addr
      # vmbr0:
      #   inet 192.168.35.235/24 rd 192.168.35.255 scope global vmbr0

    See < Notes/Server/networking.notes >
      ## add SNAT rule
      source: 192.168.35.235
      newsource: 10.8.0.0

      ## show rules
        # Chain POSTROUTING (policy ACCEPT)
        # target     prot opt source               destination
        # SNAT  all  --  10.8.0.0/24              !10.8.0.0/24      to:192.168.35.235

  mountpoints:
    ## -- example
    ##    -- hostpath: /storage/Video
    ##    -- containerpath: /mnt/video
    $ nano /etc/pve/lxc/102.conf
      < /etc/pve/lxc/102.conf >
      mp0: ${containerpath},mp=${hostpath}

  security:
    ## allow docker
    $ nano /etc/pve/lxc/${ID}.conf
      lxc.apparmor.profile: unconfined
 
==== COMMON ISSUES ====

  Container launch failure:
  $ lxc-start -n ${ID} -F -l DEBUG -o /tmp/lxc.log
  
  # if output contains `unsupported debian version 'xx.x'`
  # update /usr/share/perl5/PVE/LXC/Setup/Debian.pm
  - if !($version >= 4 && $version <= 12);
  + if !($version >= 4 && $version <= 15);