plateee

Yup, shared storage is a requirement. I’m using a combination of Ceph and NFS at the moment, but I wouldn’t recommend Ceph unless you’ve got a 10gb connection between nodes.

Here’s a guide to set up high availability with Proxmox: https://kiwicloud.ninja/2024/02/improved-high-availability-ha-for-vms-on-proxmox-ve-pve/

For me, I have three proxmox nodes that are configured to restart VMs and LXC containers if a host goes offline. There’s a Palo Alto pa-440 for my fw/router and a brocade switch (they were something work gave me for practicing for a network exam).

The nodes, Palo, brocade, and AT&T modem are all on two UPS 1500va systems along with my wifi ap. Run time in case of power loss is around an hour.

I’m this close to getting a comprehensive shutdown script working from a raspberry pi that is triggered if there’s power loss (most UPS systems have some capability to trigger scripts on a host that’s connected to the UPS’s console port).

If I can get that script working, the battery backup will run a PI for several days.

Back on the redundancy side, I host two PowerDNS systems in the proxmox cluster along with a 3 node/LXC container Vault.

Ah, I see your problem, you need to add --no-preserve-root.

See the French are super into wine - and grape vines are notoriously hard to get rid of, so if you want to really get rid of the French language pack, you need to rip that grapevine out by the root (e.g. don’t preserve the root). Otherwise, the French language pack will just grow back harder and Frenchier than before.

Sacrebleu!

Or move to a piracy method that is download only like newsgroups.

Not only never go on holiday or see your family ever again, but crucially “you better be loyal/work harder than citizens lest we fire you and your visa expires.”

Maybe a controversial take, but I like pihole for blocking only - I have a pair of powerDNS servers set up for my internal name resolution. They recurse to Pihole, but can fall back to internet DNS servers if Pihole isn’t responsive.

I tried pihole for local resolution and found it to be a fairly large pain to automate. Plus kubes has PDNS hooks for auto-updating DNS entries.

I have dyndns. I don’t recommend them, unless a coworker just gave you their lifetime pro account for free.

Thanks Roody, wherever you are!

When he said that, I instantly felt jealous.

Yup, another vote for brother laser printers. If you’re worried about them applying updates that add DRM to toner cartridges, but you still want network printing you can do one of two things:

1. Give the printer a static IPv4 address and block egress from your router with a firewall.
2. Give it a static IPv4 address but give it a non-functional gateway (e.g. if your gateway is 10.0.0.1, make the printer’s gateway 10.0.0.254)

Heck, do both if you’re paranoid.

Either way it’s not getting updates unless you manually change things or download the firmware updates on your Linux box and apply it that way.