Is your homelab actually safe? Self-hosting & supply-chain attacks

Made a video about recent OSS supply chain attacks. Found a security gap in my own setup while making it. Nobody's immune to this stuff.

https://youtu.be/3AyAKwvViuE

#selfhosted #homelab #proxmox #cybersecurity

#3GoodThings #ThreeGoodThings

🧇 Breakfast with friends from our former church
🎥 Saw Project Hail Mary with the wife and daughter
🖥️ Set up a dedicated Proxmox VM for those rare times I have to access Facebook

#Proxmox #Facebook #HailMary #Friends

Ceph sous pression : comment j'ai récupéré un cluster Ceph dans Proxmox sans sauvegarde de configuration - J.HOMMET.NET J.HOMMET.NET - Humain analogue dans un monde numérique.

Ceph est un puissant système de stockage, mais c’est aussi un colosse au pied d’argile. Un fichier de conf manque à l’appel et tout est dépeuplé.

j.hommet.net/ceph-proxmox...

#Ceph #Proxmox #Stockage

Alors, tu prends la pilule rouge ou la pilule bleue ? 🐧✨

#BlablaLinux #Matrix #SysAdmin #Nginx #WebDesign #AutoHebergement #Proxmox #OpenSource

Je pense que je vais attendre deux mois 😜
#Proxmox

BlablaLinux Mes services PUBLICS BlablaLinux : état, descriptions et liens Découvrez la liste complète des services PUBLICS que j’auto-héberge avec Blabla Linux (Nextcloud, Mastodon, Gitea…) et consultez leur état de santé en temps réel.

Retrouvez l'ensemble de mes services ici : blablalinux.be/mes-services-publics/

#Selfhosted #Proxmox

Infrastructure Proxmox Déployez une infrastructure Proxmox souveraine pour votre cloud privé, en haute disponibilité, performante et maîtrisez vos données.

Un seul serveur physique = un seul point de défaillance.
Cloud privé Proxmox au Québec, en France ou dans la juridiction de votre choix.

HA. Ceph. ZFS. 99,99 %.

👉 dataenligne.com/infrastructu...

#CloudPrivé #Proxmox #DATAenligne #Québec

Et vous, vous faites le vide quand ?
#Proxmox #Backup #PBS #Garbage #Collect

Homelab-Sucht offiziell als Krankheit anerkannt: ICD-12 listet 'Servus Compulsivus' Die WHO hat Homelab-Sucht als Krankheit anerkannt. Symptom Nr. 3: 'Nur noch einen Contai

Homelab-Sucht offiziell als Krankheit anerkannt: ICD-12 listet 'Servus Compulsivus'

Die WHO hat Homelab-Sucht als Krankheit anerkannt. Symptom Nr. 3: 'Nur noch einen Contai

www.kalika.de/posts/homelab-sucht-icd1...

#homelab #selfhosted #proxmox #aprilfools #raspberrypi

2️⃣ Gestion à distance : allumez (WOL), éteignez ou redémarrez vos serveurs sans quitter votre canapé. Idéal pour votre facture d'électricité ! ⚡
👉 wiki.blablalinux.be/fr/gestion-a...

À vos terminaux, et vive l'automatisation ! 🐧💻

#Proxmox #SysAdmin #Linux #OpenSource #BlablaLinux #AutoHost

You’re telling me enterprise SAS HDDs are THAT much cheaper than SATA HDDs???? Why tf does no one talk about this for homelab setups 😭

#homelab #proxmox

Original post on social.penzberg.me

Welt-News & Server-Status 🌍🖥️

- Welt: Eskalation im Nahen Osten (USA erwägen Bodenoffensive im Iran) treibt Ölpreise hoch. Anzeichen für russische Frühjahrsoffensive in der Ukraine.

Status C1: 50.0°C, 24GB RAM frei, Load 1.45
Status C2: 48.0°C, 14GB RAM frei, Load 1.27
Status KVM 377: Uptime […]

ZFS snapshots on Proxmox make VM backups instant, consistent, and space-efficient.

A single command like `zfs snap pool/vmdata@backup` lets you capture a full system state you can roll back to in seconds.

Efficiency, reliability, and simplicity—built right into ZFS.
#ZFS #proxmox #Klarasystems

Quand ta stack Proxmox décide d'être très bavarde entre 9h39 et 10h29 ce matin... ☕️🤖
Résultat : une avalanche de notifications Gotify ! Mon téléphone a fait son sport pour le lundi 😂📜
👉 picsur.blablalinux.be/i/ee03af7b-c...
Bonne semaine à tous ! 💻🔥
#Proxmox #Gotify #Lundi #SysAdmin #SelfHosted

Original post on burningboard.net

I wrote up my entire backup strategy for my across FreeBSD and Linux:

- ZFS snapshots with sanoid
- Off-site replication via syncoid to rsync.net (encrypted at rest)
- Proxmox Backup Server fronting Backblaze B2 for VMs
- A Podman trick for backing up RHEL hosts without native packages
- Dead […]

🤫 Chuuut ! Bientôt, je vous raconte ma stratégie pour ne plus rien faire. Blog & Wiki arrivent !
#Proxmox

Comment je sécurise mes services : ma stratégie de sauvegarde multi-niveaux sous Proxmox Découvrez ma stratégie complète de sauvegarde sous Proxmox : snapshots horaires, double redondance sur PBS avec rétention GFS, et protection granulaire des bases de données. Un système éprouvé pour sécuriser vos services en toute sérénité.

« BlablaLinux, comment tu dors tranquille avec tes serveurs ? » 😴

Hop ! Ma stratégie de sauvegarde Proxmox est en ligne ! Snapshots, PBS et scripts SQLite maison... Une méthode robuste, même pour les pros ! 🛡️🚀

#Proxmox #Backup

Il est peut-être temps de leur offrir un petit redémarrage bien mérité pour repartir sur de bonnes bases, non ?

#Proxmox #Uptime

Entre snapshots horaires, double redondance sur PBS et scripts maison pour le SQLite, rien n'est laissé au hasard !

Curieux de voir comment j'organise tout ça ? C'est par ici : joplin.blablalinux.be/shares/Bn6m1...

Bonne lecture et... sauvegardez bien ! 😉

#Proxmox #Backup #Snapshot

Sauvegarde et restauration SQLite multiservices Protégez vos bases de données SQLite avec un LXC dédié nommé sqlite-backup. Une solution maison pour automatiser vos sauvegardes Vaultwarden sans coupure et garantir une restauration fiable à 100%.

Découvrez comment mettre ça en place sur le wiki :
👉 wiki.blablalinux.be/fr/sauvegard...

#SelfHosted #Proxmox #SQLite #BlablaLinux #Backup #Linux #SysAdmin

Bonnes sauvegardes !

#Proxmox #SysAdmin #OpenSource #DevOps #Automatisation #BlablaLinux #Sauvegarde

This 1 Simple Proxmox Setting Change Can Significantly Improve VM CPU Performance DISCLOSURE This article may contain affiliate program links that pay a commission if you make a purchase after clicking. Please read the full affiliate information page for more details. Affiliate links are noted where it says _(affiliate)_ after the link. This tutorial owes its existence to an accidental oversight on my part. The last thing anyone wants to do is waste a couple hours of time running benchmark tests only to find out that you forgot to alter the CPU type on the VM you’re testing half way through. During testing to compare virtual machine performance between Proxmox and TrueNAS Scale on identical hardware, I realized I’d done exactly that. When I created the Proxmox VM, I neglected to set the CPU type, leaving it set to the default – making the data I’d collected up to that point seemingly useless. This tutorial was born out of the desire to not have wasted the effort of testing with the wrong VM setting with the added benefit of being able to have a quantifiable idea of just how much of a performance difference not changing the setting can make. With the decision made, I thought to myself, _“I wonder how many people don’t even bother to change this setting during VM creation.”_ It is, after all, an easy setting to leave alone and have your VM still function. I decided I’d put a poll out on Mastodon to see if it’s common for people to not change their VM CPU type. The poll closed with 101 responses – 56% of which indicated they leave their VMs set to the default. The one thing I didn’t think to address with the poll, unfortunately, was whether your choice to use the default was deliberate or not. With all of that said, what exactly is the impact of leaving the VM CPU type set to the default? Let’s dive into the details and see how changing this setting can significantly improve the performance of your virtual machines. * * * ## Table of Contents * What Is The CPU Type Setting? * Effects On VM Performance * Testing Setup * FFmpeg Encoding * Sysbench – Memory * Tests With Little Performance Difference * When Not To Use The Host Type * Live Migration / High Availability * How To Modify The CPU Type * During VM Creation * On Existing VMs * Closing * * * ## What Is The CPU Type Setting? Virtual machines in Promox are based on QEMU/KVM, which allows for emulation of different CPU types using the **CPU TYPE** setting. For instance, if you wanted to emulate an old Intel 486 CPU – perhaps you’re looking to setup DOS to play old PC games – the CPU type setting will allow you to do that. This feature is especially useful for those who wish to setup “Hackintosh” VMs as compatible versions of MacOS only work with specific Intel CPU architectures. The default value for any new VM’s CPU type, however, is a generic **KVM64** type that will work regardless of what CPU architecture your Proxmox host is running on. While this is great for compatibility, it isn’t ideal for performance. The solution to this performance issue is to modify the CPU type to **HOST** – which in some systems is referred to as _host passthrough_ – which tells KVM to pass the host CPU through to the VM without modification or abstraction and in doing so deliver superior CPU performance. ## Effects On VM Performance I ran a selection of benchmark tests to demonstrate the kind of effect setting CPU type to host can have on VM performance. While some tests show a negligible difference in performance, other scenarios show a boost of more than 10% – simply by changing a single setting on your Proxmox VM. ### Testing Setup All testing was performed on a Skylake architecture based i5-6500T mini PC – like I’ve covered in a number of previous articles – seeing as I own a number of these devices. Testing was performed with a fresh install of Proxmox as well as a new Debian 11 VM. No other VMs were running during the time of testing. #### Host System **OS Version**| Proxmox Virtual Environment 7.3-4 ---|--- **Test System**| HP ProDesk 600 G2 Mini **CPU**| Intel i5-6500T – 4 Cores / 4 Threads **Memory**| 16GB Dual Channel – 2x 8GB SK Hynix DDR4-2133MT/s (affiliate) **Swap**| Enabled **Boot Disk**| TeamGroup MP33 NVMe SSD (affiliate) #### VM Configuration **VM OS**| Debian 11 / Kernel 5.10.0-21-amd64 ---|--- **CPU Cores**| 1 – 4 Cores Tested **CPU Types**| Default (KVM64), Host **Memory**| 4GB **Swap**| None **VM Disks**| ZFS Mirror – 2x Crucial MX500 SATA SSD (affiliate) ### GnuPG Encryption While I wasn’t originally intending to include single-threaded test results in this tutorial, I opted to run the GnuPG test in hopes that it would prove to be a good example of the main point of this tutorial. I’d say … point made. By simply changing the CPU type, the VM was able to make use of enhanced CPU instructions to boost performance by 10.8%! Modern CPUs include a set of instructions called AES – short for advanced encryption standard – instructions. Leaving the CPU type set to the default prevents the VM from having access to those instructions. **Support Ad-Free, Privacy-Respecting Tech Content** At Tech Addressed, we're passionate about providing an ad-free and privacy-respecting environment for our tech-savvy community. If you've found value in our high-quality technical content, your support can make a significant difference. * **Ad-Free:** Having zero invasive ads makes for a better overall browsing experience. * **Data Privacy:** We never collect your personal information, let alone share it with others. * **Community:** Our community's growth is fueled by your contributions. Your contribution matters. Every donation, no matter the size, plays a vital role in sustaining our mission and is greatly appreciated. Join us in maintaining a tech space that respects your privacy and values your experience. ### Linux Kernel Compilation The Linux kernel compilation test is the most CPU intensive benchmark I ran on these VMs. Tests like this that require longer periods of time to complete often have more pronounced performance differences. Here we see the single core and dual core results both show a 5.3% improvement after changing the CPU type. The three core test had an even greater improvement at 5.5%, and the four core test topping this test at 5.7% improvement. With any task that requires time to completion – like code compilation or any kind of rendering tasks – a 5% or greater improvement translates into significant time and energy savings. ### FFmpeg Encoding The FFmpeg encoding test results might not look as dramatic as the previous two benchmarks, however, I’ll do my best to put the scores into perspective. Here we see improvements between 3.5% and 4.1% as we increase the number of cores in the VM. While not nearly as impressive sounding as the last two tests, consider that this test uses a small sample video allowing the test to complete relatively quickly. Like I mentioned previously with regards to time savings, a 4% time savings when performing encoding work across the entire time that these tasks might take can also translate into a real time savings. A real-world homelab example for exactly what I’m talking about would be setting up a VM to transcode files for your home media server. The sooner your VM completes the task, the sooner those resources are freed up for other VMs. ### Sysbench – Memory Lastly, let’s take a look at one of my favorite tests – the Sysbench memory test. This benchmark doesn’t strictly measure memory bandwidth but, by design, factors in CPU performance to give an idea of how memory sensitive tests would perform. Here we see the single core through three core VMs performing 3.1% to 4.4% better with the CPU type change in place. The outlier here is the quad core test with a mere 1.7% improvement – likely being hampered by the fact that the system is only a quad core system and the hypervisor is running still in the background. ### Tests With Little Performance Difference Unfortunately, not every workload has specialized CPU instructions that will benefit it by adjusting your CPU type. Of my standard test suite, the PHPbench and 7-zip tests showed less than 0.5% difference – which can’t be distinguished from testing variance. It’s important for you to understand what your VM workloads are like to determine whether making a change will benefit you. At the very least, any task that can benefit from better memory performance – as shown by the Sysbench test – might show an improvement. ## When Not To Use The Host Type While I just wrote over 1000 words telling you to change your CPU type to host, there are situations where that might not be the best setting for your specific virtual environment. ### Live Migration / High Availability If you’re running a high availability Proxmox cluster or make use of live VM migration between systems, you’ll need to carefully consider what CPU type to select for your VMs. If you don’t know anything about the types of CPUs in your host systems, the safest option is to leave your VMs configured to the default for maximum compatibility between hosts, should a VM need to migrate between systems. If you have a cluster with mixed CPU architectures that have a base commonality to them – say for example some systems are Intel Skylake based Xeons and others are newer Tiger Lake based Xeons – you could set your VMs to use the Skylake Server setting (as opposed to Skylake Client which would correspond to desktop class chips) to allow for the largest common instruction set between host types. There are a number of resources online that can provide you with information on what instruction sets are available in various CPUs. * Intel Product Specifications * AMD Processor Specifications * CPU World If you can’t find what you’re looking for from one of these options, you’ll want to search online for your specific CPU specs. ## How To Modify The CPU Type Once you know what CPU type you’re going to use for your VMs, setting the type is pretty straightforward. ### During VM Creation If you’re creating a new VM in Proxmox, as you step through the creation process, on the **CPU** step, select the **TYPE** dropdown then scroll to locate your desired setting. ### On Existing VMs If you need to modify the setting on an existing VM, go into the VM’s hardware list and double click on **PROCESSORS** (or highlight and click the **EDIT** button). This will bring up the **EDIT PROCESSORS** modal. Click on the **TYPE** dropdown and find your desired setting. ## Closing As I’ve demonstrated, using the host CPU type in your Proxmox VMs from the default to the host setting can have a major impact on their performance in situations where it’s safe to use. If you’re looking to improve the performance of your VMs – especially if you aren’t making use of live migration / high availability – I highly recommend giving this simple setting change a try. Whether you’re creating a new VM or modifying an existing one, the process is straightforward and well worth the effort. If you found this tutorial helpful and would like to support our efforts to create additional resources like this, please consider making a donation. Your support is greatly appreciated! If you can’t make a donation, please consider sharing this tutorial with others who may be interested. If you have questions about anything regarding this review, please be sure to leave them in the comments below. Thanks for reading, and I hope you visit again soon!

So I found an answer to the ‘what should I set as type and why’ question:

www.techaddressed.com/tutorials/proxmox-improv...

Thanks for the detailed write up @techaddressed

#proxmox #virtualisation

Can someone with experience in #proxmox or #virtualisation more generally help me wrap my head around how virtual processors work?

With RAM it's all fairly obvious: If my host has x GB, once they are allocated to VMs they are gone. But processors obviously […]

[Original post on mstdn.thms.uk]

5 Herramientas de Gestión de Proxmox que Uso en Mi Home Lab en 2026 | Linux | CIBERED Proxmox en home lab: 5 herramientas clave (PegaProx, Pulse, ProxMenux) para gestión de clústeres, monitorización y backups. ¡Potencia tu infraestructura 2026!

🖥️ 5 Herramientas de Gestión de Proxmox que Uso en Mi Home Lab en 2026 cibered.com/software/sis...

#Proxmox #HomeLab #Linux #Cibered

Sometimes you look at your #HomeLab running all sorts of things (like your home network DNS) on #k8s on VMs on #Proxmox and you think "maybe this is all a bit too complicated?"

But then you reboot one of the nodes for updates and it all keeps ticking. It's really very clever.

Proxmox Datacenter Manager: Complete Guide Proxmox Datacenter Manager (PDM) is a centralized management platform for overseeing multiple Proxmox VE clusters and Proxmox Backup Server instances from a single interface. This guide covers install...

🏢 NEW: Proxmox Datacenter Manager Complete Guide!

Multi-cluster management, centralized monitoring & VM migration between clusters. PDM 1.x in production.

📖 Read: devopstales.github.io/virtualizati...

#Proxmox #PDM #Virtualization #Homelab

I optimized Proxmox's defaults and cut my home lab energy costs without sacrificing speed Proxmox is still the best home lab OS, but its defaults are much rougher than they should be When you i...

#Linux #Proxmox

Origin | Interest | Match

Currently playing with #Unraid...

Unraid is set up in a #Proxmox VM for me to test...

Unraid (currently) boots from a passthrough USB key...

I just patched and rebooted Proxmox...

Any guesses for what I just spent the last few mins troubleshooting...

🤦🏻

Projet source sur GitHub : github.com/rackulalives...

Amusez-vous bien avec vos baies !

#SelfHosting #Docker #Linux #Rackula #BlablaLinux #SysAdmin #Proxmox

Windows Server on Proxmox with VirtIO Drivers Learn how to install Windows Server on Proxmox with VirtIO drivers, including VM setup, storage driver loading, and guest agent installation.

New on my blog: how I install Windows Server on Proxmox with VirtIO drivers.

I show the VM setup, how to load the vioscsi storage driver during setup, and why I now install the network driver only after first boot.

edywerder.ch/windows-serv...

#Proxmox #WindowsServer #Homelab