With the recent Proxmox 9 release, many of us have the upgrade ahead or already done. What about you, and how do you generally approach updating your services? Which other updates are you looking forward to or is it just an annoying chore?
Also the usual - let us know what you are currently working on, what problems you are encountering and what you are excited about.
As for updates, I update my machines semi-regularly with Ansible. The Proxmox 9 update was unspectacular (good thing!), I just had to change some things in my Promox-post-install automation (nag bar removal and package sources). I still plan to get a merge request based update process for my containers as mentioned here but I’m just not there yet. That guide was also posted on reddit recently and got some traction.
I also spent some time yesterday to organize my nginx logs, they basically all got their own folder in /var/log/nginx with their own access log file by adding access_log /var/log/nginx/$server_name/access.log vhost_combined; to each config. Error log file paths can’t contain variables so I kept them in the default file so far.
Recently enabled wireguard (easy setting in my FritzBox router) and stopped exposing some of my services to the internet. That process isn’t finished yet though as I’ll need to switch to wildcard certificates in order to keep valid SSL for the now local-only services.
I have never understood the hype surrounding proxmox. What makes proxmox so irreplaceable?
In the virtualisation world you have the expensive big boy who everyone now hates ESX by Broadcom (was VMware), the expensive wannabe big boy that everyone hates Hyper-V by Microsoft, and a gazillion others that use Qemu or zen as a base and puts a shiny coat of UI over it.
Proxmox is in that last category. A pretty interface over an open source underlay at a decent price (if you want to pay the subscription).
I’ve tried it a few times, never stuck. I guess it’s just convenience, it is a well integrated piece of software, especially if you use both LXC and VMs. Personally I keep using virt-manager and Cockpit.
I find VMs to be unbearably sloe compared to a container. They just feel so heavy. I get the extra security layer, is that really why people are doing it or is there some other reason?
The easy ui is good for those who aren’t living in the terminal all the time.
I used proxmox for nearly 8 years before switching to only containers. It was fine.
Extra security and full isolation with its own kernel, so you can load kernel modules and such.
Also can run Windows in a VM when needed, or MacOS.
VMs are basically just as fast as containers, and the RAM overhead from a lightweight Linux VM is very small.
VMs are not just as fast as containers.
Recently set up Headscale with Headplane as the UI. It’s all docker compose based so I stuck it in a /etc/compose sub-folder of my vps running Fedora.
Configuring OpenID login was a bit tricky because I got an error when trying to do the auth grant, but the message was vauge. Took me a while to realise the error details were in the redirect back url.
Anyways, once done it was nice to use and I migrated all my Tailscale instances over.
I’ve mostly got this working but no matter what I do I can’t get UDP and direct connections working if the embedded derp server is enabled (and the only accessible relay).
Speeds were slow at first but it’s been fine lately so I’m not sweating over it too much, but it’d be nice to get that last piece working.
Ah, I haven’t got around enabling the embedded derp server, so I wouldn’t know. Been relying on direct connections by opening port 41641, or piggybacking off Tailscale’s relays for the moment. My vps server doesn’t have great ping to my homelab (150ms), anyways. One thing I was looking into the next time I have decent free time was to manually set up a derp relay in each.
What was the reason for the migration? I used neither so far
I’m too lazy to spin up docker containers and config for stuff that would make my life a bit better, but not enough to warrant the hassle… Like for example a finance management software that can hook into my bank. Or document management with automatic email imports etc.
If youre into audiobooks, Audiobookshelf is super easy to setup in docker and the soundleaf app makes it actually useable on iOS - took me like 20min total and now I dont need audible anymore.
I just have audiobooks on my phone like a caveman.
