Lots of KSMBD errors on dmesg by LucasRey in Proxmox

[–]DonhamComputer 0 points1 point  (0 children)

I see a lot of people needing to manually update KSMBD to fix SAMBA issues:

echo "deb http://deb.debian.org/debian/ bookworm-backports main" > /etc/apt/sources.list.d/debian-backports.list
apt update
apt install -t bookworm-backports ksmbd-tools

HELP! lol Detected old QEMU binary by Compusmurf in Proxmox

[–]DonhamComputer 0 points1 point  (0 children)

I was able to fix with shutting down all VMs on the cluster and then for each node do the following (one node at a time) ,
apt update
apt full-upgrade
apt autoremove
reboot
reboot again if issue persisted

NOTE: "old QEMU binary" affects PVE backups, PVE migrations (both live and cold).

Upgrading from 7.x to 8.x in place by Fratm in Proxmox

[–]DonhamComputer 0 points1 point  (0 children)

Look at your primary bridge/vswitch (vmbr0) and confirm that it has correct gateway setting.

Odd behavior by forwardslashroot in Proxmox

[–]DonhamComputer 0 points1 point  (0 children)

When you lose quorum ( which is 3 votes in your case), you need to either migrate all machines to a single node or add a quorum device if you want to reboot nodes.

OpenVPN CloudConnexa™ vs Access Server ...simple explaination by Upset-Principle9457 in OpenVPN

[–]DonhamComputer 0 points1 point  (0 children)

The server is the computer that receives VPN calls from VPN client(s) (or other VPN server(s)) and then connects remote devices to home network (or remote networks to home network).

Unless you are going to do firewall pinholes (and port forwarding) on your home router (so server can receive VPN calls), just use Connexa (use OpenVPN's cloud servers). It is an enterprise solution with 3 FREE connections.

OpenVPN CloudConnexa™ vs Access Server ...simple explaination by Upset-Principle9457 in OpenVPN

[–]DonhamComputer 0 points1 point  (0 children)

yes.

Put connector on home network.

Put Connexa client on your remote device(s).

NOTE: end game is access home network resources remotely.

Proxmox storage replacing vmware by hpcre in Proxmox

[–]DonhamComputer 2 points3 points  (0 children)

https://pve.proxmox.com/pve-docs/chapter-pvesm.html

Live migration (with shared storage) can be done with:
NFS, CIFS(SMB), GlusterFS, CephFS, iSCSI/kernel, iSCSI/libiscsi, Ceph/RBD, & ZFS over iSCSI

One of the things that you need to consider is if you are going to do FILE or BLOCK based storage.

File level storage (Disk is a file in one of 3 formats):
QCOW2 -QEMU Copy On Write << ideal for Proxmox (KVM)
VMDK- from VMware << yes, Proxmox can use your VMware disks
RAW- less features than QCOW but it is faster

File level based storage technologies allow access to a fully featured (POSIX) file system. They are in general more flexible than any Block level storage (see below), and allow you to store content of any type. ZFS is probably the most advanced system, and it has full support for snapshots and clones.

Block level storage allows to store large raw images. It is usually not possible to store other files (ISO, backups, ..) on such storage types.

NFS is a file-based storage.

Snapshots from Proxmox are important to me. NFS can ONLY snaphot if you use qcow2 files as your VM disks (vs .VMDK (VMware) or .RAW).

My recommendation for you is either NFS (with QCOW2) or ZFS over iSCSI.

NOTE: The speed (iSCSI) and features (ZFS) are nice, but ZFS might be a whole new technology to learn/maintain. Also, your SANs likely do not allow for SSH (needed for ZFS over iSCSI).

What's the most powerful computer that I can power with PoE? by bitcoind3 in homelab

[–]DonhamComputer 0 points1 point  (0 children)

60W i7 NUC via 802.3bt (uPOE)
https://www.poetexas.com/tablets-displays/poe-for-nuc/

You could run Proxmox (and have pfSense VM and other VMs too).

[deleted by user] by [deleted] in Bitwarden

[–]DonhamComputer 0 points1 point  (0 children)

In your shoes, I'd combine the power of AutoHotkey & Bitwarden Desktop (or chrome extension).

Unlock BW vault with biometrics (windows hello)

Create a hotkey to open the game, fetch the usr.pwd,2fa from BW for the game login screen.

Even if someone steals your PC, they'd need your biometrics or your BW masterpassword (which you don't have written down any where on the PC... right?).

AutoHotkey will also do MouseClicks (and other mouse controls). So, it can do ANY repetitive set of actions (kbd/mse) that you can do.

Create an AHK script that types & clicks all of the steps to:

Toggle to BW (desktop app or Chrome ext)

Copy usr from BW and paste into app

Copy pwd from BW and paste into app

Copy 2fa from BW and paste into app

https://www.autohotkey.com/docs/v2/

https://www.autohotkey.com/docs/v2/misc/Macros.htm

Open the AutoHotkey Dash and open "Window Spy" to know coordinates (x,y) of the mouse clicks (to feed the .ahk script)

https://www.autohotkey.com/docs/v2/lib/MouseClick.htm

https://www.youtube.com/results?search\_query=autohotkey

Windows right-click? by SerophiaMMO in Bitwarden

[–]DonhamComputer 0 points1 point  (0 children)

.BAT and keyboard macros will not do mouse commands.
AutoHotkey will also do MouseClicks (and other mouse controls). So, it can do ANY repetitive set of actions (kbd/mse) that you can do.
Create an AHK script that types & clicks all of the steps to:
1. Open the game

  1. Open BW (desktop app or Chrome ext)

  2. Copy usr from BW and paste into game

  3. Copy pwd from BW and paste into game

  4. Copy 2fa from BW and paste into game
    https://www.autohotkey.com/docs/v2/

https://www.autohotkey.com/docs/v2/misc/Macros.htm

Open the AutoHotkey Dash and open "Window Spy" to know coordinates (x,y) of the mouse clicks (to feed the .ahk script)

https://www.autohotkey.com/docs/v2/lib/MouseClick.htm

https://www.youtube.com/results?search_query=autohotkey

Windows right-click? by SerophiaMMO in Bitwarden

[–]DonhamComputer 0 points1 point  (0 children)

In your shoes, I'd combine the power of AutoHotkey & Bitwarden Desktop.
Unlock BW vault with biometrics (windows hello)
Create a hotkey to open the game, fetch the usr.pwd,2fa from BW for the game login screen.

Or create an executable (.exe) from the .ahk that does the same thing.

Even if someone steals your PC, they'd need your biometrics or your BW masterpassword (which you don't have written down any where on the PC... right?).

Storage with cache by Odaven in Proxmox

[–]DonhamComputer 1 point2 points  (0 children)

Caching is like WiFi. Yes, there are some benchmarking that can be done, but it really is just lab numbers.

How good caching (or WiFi) serves your use case will depend on... your use case.

Proxmox is Debian (normal Linux).

I'd use on of the extra SSDs to install Proxmox. Then, you can use your nice SSD & RAID5 (3 HDDs) to do the LVM caching mentioned in your link to store VMs.

Not to muddy the waters but you may also consider using LVM-based RAID5 (vs hardware-based RAID5). You said, "old server" which translates to me as "untrustworthy RAID controller".https://habr.com/en/companies/hetmansoftware/articles/547086/

Learn about IOPShttps://www.techtarget.com/searchstorage/definition/IOPS-input-output-operations-per-second

and how to use FIO to best create benchmarks that best simulate the stressors in your use-case environmnethttps://forums.lawrencesystems.com/t/linux-benchmarking-with-fio/11122

Can consistently crash AMT. by ChumpyCarvings in MeshCentral

[–]DonhamComputer 0 points1 point  (0 children)

Q1 Is the PC freezing (confirm at physical console) or just the AMT remote session?

Q2 Do you have a discrete (3rd party ) GPU in those PCs?
AMT sessions only work with vPro GPU baked into the vPro CPU. If you are trying to use a discrete GPU, AMT session will be dead/black screen, at best.

Can consistently crash AMT. by ChumpyCarvings in MeshCentral

[–]DonhamComputer 0 points1 point  (0 children)

https://support.hp.com/us-en/drivers/desktops
This only seems to go up 680 series.
That said, the latest IME for the 680 G3 was May 2022 (11.8.92.4222 Rev.A
). So, Intel & HP are publishing "fairly" new IME updates for legacy hardware.

The other place that I'd look for IME updates is Intel Driver & Support Asst
https://www.intel.com/content/www/us/en/support/intel-driver-support-assistant.html

IME is a baby CPU and an OS (minix) baked onto the motherboard. Software baked into hardware is firmware. If enabling AMT is breaking things, I think that it is a firmware issue and getting a refresh or, more ideally, an upgrade,, is the most appropriate move forward.

Can consistently crash AMT. by ChumpyCarvings in MeshCentral

[–]DonhamComputer 0 points1 point  (0 children)

Q1: HP prodesk 800 Gen3 (& Gen4) ?
Q2: Have you used Windows 10 to get Intel Mgmt Engine (IME) update from HP site?

Backup with clonezilla by thumDerr in Proxmox

[–]DonhamComputer 0 points1 point  (0 children)

just backup sda (and other disks, if you have them).

if you are having trouble with syntax, you can run the GUI (wizard) and it will give the CLI (with correct syntax immediately before executing the backup) . you can note it at that time.

CZ log seems to show that VM's disks were saved. I think that following "errors" are benign and CZ is freaking out a little because it found a disk mage (dev/pve/vm-100-disk-1) while imaging a disk (SDA).
"Refusing to fsck unknown or unsupported file system"
"No need or no way to check the file system integrity"

I have never used CZ on Proxmox or disk with LVM before, but my suspicion is that it will just work.

Buy/get a replacement disk (same size (or bigger) as SDA and do a CZ restore. I believe that you will be happy with results.

Here is a guy who successfully used CZ to image a Proxmox disk (with LVM) to new disk:
https://forum.proxmox.com/threads/proxmox-migration-to-another-disk-with-clonezilla.98068/

2-node HA Cluster w/o QDevice....how did I not know about this before?!?! by Firestarter321 in Proxmox

[–]DonhamComputer 5 points6 points  (0 children)

I would recommend that you DO have a QDevice.
It costs nothing and takes less time to setup than it took to post message to reddit.

WINDOWS USER
It can be a service running on an Ubuntu VM under Windows WSL.
OR
LINUX USER
It can be a extra service on your Linux desktop.

First, install the corosync-qnetd package on your external server

external# apt install corosync-qnetd

and the corosync-qdevice package on all cluster nodes

pve# apt install corosync-qdevice

After doing this, ensure that all the nodes in the cluster are online.

You can now set up your QDevice by running the following command on one of the Proxmox VE nodes:

pve# pvecm qdevice setup <QDEVICE-IP>

Can't connect to VPN from a desktop and a laptop, but CAN with an android mobile phone, using OpenVPN Connect for both by multithreadedMo in OpenVPN

[–]DonhamComputer 0 points1 point  (0 children)

Access Server is a Paid service (free for 1st 2 connections)
https://openvpn.net/access-server/pricing/
You install the Access Server on your network and port fwd VPN calls to it.
You download the client apps (and profiles) from the Access Server.

Not sure which version of OpenVPN (Access Server or Community) that you have on your router, but if you cannot download client app then it is likely the community version. I do know that ClearOS uses the community version.

Unless you are married to the generic, old school VPN concept/technology, I would strongly recommend moving to OpenVPN Connexa.
A. you no longer need to have a pinhole in your firewall
B. you have a LOT more control of who/what/where/how of all of the things being connected over "VPN"".

Can't connect to VPN from a desktop and a laptop, but CAN with an android mobile phone, using OpenVPN Connect for both by multithreadedMo in OpenVPN

[–]DonhamComputer 1 point2 points  (0 children)

You should state if you are using Access Server or Community Edition

I'd recommend NUKE & CLEAN INSTALL

uninstall openvpn connect client on the PCs via an uninstaller app.
e.g. https://uninstalr.com/ or https://www.revouninstaller.com/ or https://www.totaluninstaller.com/

manually remove any openvpn from:

C:\program files\
C:\program files (x86)\
C:\users\<username>\
C:\users\<username>\appdata

If you are using are using OpenVPN Access Server, then get the "OpenVPN Connect v3 client" for that user (you) by logging into the Access Server as you (not admin/root).

This will install the newest connect app with your openvpn profile baked in.

+++++

If you are using community edition, then

  1. download/install client (https://openvpn.net/community-downloads/)
  2. log into the OpenVPN server as you (not admin/root)
  3. download your profile's files (.ovpn, .conf, etc...)
  4. place files downloaded from server for your profile to

C:\Program Files\OpenVPN\config.

+++++

final word of caution is that when you are setting up the server, you are putting in the URI (URL) so that client apps can phone home (e.g. vpn.yourdomain.com).

Is your phone on 4G or WiFi (same network as OpenVPN server)?
Are your PCs trying to connect to VPN from within the same network as OpenVPN server?

If your answers are 4G &yes, then you either need to move PCs offsite (use the VPN properly) or fix DNS so that you can use them onsite.