Deathbybandaid Wiki - User contributions [en]

Proxmox-VE

2023-04-28T10:49:53Z

Deathbybandaid: /* Too many open files */

=Terminology=
'Node' is a computer running proxmox.

'Cluster' is a group of proxmox nodes, that can being used together for easy migration or high availability.

'Container' is a guest operating system that shares the kernel with the proxmox host, can give a performance boost compared to a normal Virtual OS.
=VM/LXC Specifics=
*[[Proxmox VM]]
*[[Proxmox LXC]]
=Installation=
Download the [https://www.proxmox.com/en/downloads ISO] and install on bare metal. Alternatively, you can [https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Buster install on top of an existing Debian]
==Extra Notes==
If ZFS is the storage system of choice, it helps to install on SSD for OS, and set up a ZFS pool manually later.
==Advice on Container/VM Numbering==
Create a VLAN for your containers, and allow the container number to reflect the IP address assigned to it. This will save you a great deal of headache.

Example, say Plex, sonarr, radarr, lidarr, sabnzbd, etc are all on VLAN 12, and Plex's IP is 10.0.12.90 you can number the plex container 12090 to reflect VLANID+IP
==Enable Non-Subscription Updates==
Complete the following steps to your source lists to get updates.
===Enable No Subscription Repo===
<nowiki>nano /etc/apt/sources.list.d/pve-nosub.list</nowiki>
add:
<nowiki>deb http://download.proxmox.com/debian bullseye pve-no-subscription</nowiki>

<nowiki>nano /etc/apt/sources.list.d/pve-enterprise.list</nowiki>
===Comment out Enterprise Repo===
add a # symbol in front) of this line:
<nowiki>#deb https://enterprise.proxmox.com/debian/pve bullseye pve-enterprise</nowiki>
===Install any and all available updates===
<nowiki>apt-get update && apt-get dist-upgrade -y</nowiki>
==Non-production Bleeding Edge==
===PVE Testing Repo===
<nowiki>nano /etc/apt/sources.list.d/pve-testing.list</nowiki>
add:
<nowiki>deb http://download.proxmox.com/debian/pve bullseye pvetest</nowiki>
===Debian Sid===
<nowiki>nano /etc/apt/sources.list</nowiki>
add:
<nowiki>
deb http://deb.debian.org/debian sid main non-free contrib
deb-src http://deb.debian.org/debian/ sid main contrib non-free
</nowiki>
===Install any and all available updates===
<nowiki>apt-get update && apt-get dist-upgrade -y</nowiki>
===Fix Proxmox Web Interface===
If you see:
<nowiki>unable to parse codename from '/etc/os-release' (500)</nowiki>
Then Modify the following file and add this line:
<nowiki>nano /etc/os-release</nowiki>
add:
<nowiki>VERSION_CODENAME=bullseye</nowiki>
==Disable subscription nag after login==
<nowiki>wget https://git.deathbybandaid.net/attachments/3d08b1b4-b896-497b-893b-c9c0dbb830ca</nowiki>
<nowiki>dpkg -i pve-fake-subscription_*.deb</nowiki>
<nowiki>echo "127.0.0.1 shop.maurer-it.com" | tee -a /etc/hosts</nowiki>
<nowiki>pve-fake-subscription</nowiki>
==Update Template Listing==
<nowiki>pveam update</nowiki>
==Download Virtio iso==
[https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-virtio/virtio-win.iso ISO file]
==Headless Laptop==
If you want a laptop node, you may want to disable the lid closing action, or your node will go into standby.
<nowiki>nano /etc/systemd/logind.conf</nowiki>
Change the lines below.
<nowiki>HandleLidSwitch=ignore</nowiki>
<nowiki>HandleLidSwitchDocked=ignore</nowiki>
restart the logind service.
<nowiki>systemctl restart systemd-logind.service</nowiki>
==Change Network Settings without reboot==
<nowiki>apt install ifupdown2</nowiki>
==Add an L2 virtual switch==
<nowiki>apt-get install openvswitch-switch</nowiki>

==Add libraries for virgl==
<nowiki>apt install libgl1 libegl1 -y</nowiki>

==Create sudo user==
<nowiki>adduser sysop</nowiki>

<nowiki>usermod -aG sudo sysop</nowiki>
==Install a desktop environment (optional)==
This takes a few minutes... Make sure you have a non-root user!
<nowiki>apt-get install tasksel</nowiki>

<nowiki>tasksel install desktop kde-desktop</nowiki>

<nowiki>systemctl set-default graphical.target</nowiki>

<nowiki>reboot</nowiki>
==Dark Theme (Optional)==
[https://github.com/Weilbyte/PVEDiscordDark PVEDiscordDark]

==Two Node Cluster==

<nowiki>nano /etc/pve/corosync.conf</nowiki>

look for the `quorum` section and add

<nowiki>
two_node: 1
wait_for_all: 0
</nowiki>

=manual add of cifs share=
<nowiki>pvesm add cifs DrivePoolold --server 192.168.1.101 --share DrivePool --username Administrator --password ********* --smbversion 2.1</nowiki>
=Clustering=
==Create a cluster==
<nowiki>pvecm create YOUR-CLUSTER-NAME</nowiki>
==Add a node to a cluster==
From the node you want to add. (new nodes must be empty)
<nowiki>pvecm add IP-ADDRESS-CLUSTER</nowiki>
==Remove a node from a cluster==
Remove all containers from the node, and login to a node that you are keeping.

it does not hurt to run these commands on all remaining nodes

Delete the node
<nowiki>pvecm delnode hp4 NODE_NAME_TO_DELETE</nowiki>
Delete node configuration files
<nowiki>cd /etc/pve/nodes</nowiki>

<nowiki>rm -r NODE_NAME_TO_DELETE</nowiki>
This step is purely to help with if you want to readd a new node with the same IP address as one you've removed
<nowiki>nano /etc/ssh/ssh_known_hosts</nowiki>
And remove ip, and node name lines
<nowiki>pvecm updatecerts</nowiki>

<nowiki>ssh-keygen -R 192.168.1.103</nowiki>

<nowiki>ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "192.168.1.103"</nowiki>
<nowiki>ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "NODE_NAME_TO_DELETE"</nowiki>
This step is when the replacement node is running:
<nowiki>ssh -o 'HostKeyAlias=pve5' root@10.0.4.5</nowiki>
==Set Node to not wait for cluster votes==
<nowiki>
pvecm expected 1
</nowiki>
=ZFS Tricks and Tips=
==Proxmox Default ZFS setup==
<nowiki>zpool create -f -o ashift=12 rpool /dev/sda /dev/sdb</nowiki>

<nowiki>zfs create rpool/data</nowiki>
==Directory mounted on ZFS==
<nowiki>zfs create rpool/downloads -o mountpoint=/downloads</nowiki>
===backups directory in ZFS===
Create Directory
<nowiki>zfs create tank/bkup -o mountpoint=/bkup</nowiki>
Add to storage.cfg
<nowiki>nano /etc/pve/storage.cfg</nowiki>

<nowiki>
dir: bkup
path /bkup
content vztmpl,iso,backup
maxfiles 4
shared 0
</nowiki>
==Add ZFS swap space==
This will add 8GB of swap space for ZFS to use.
===Verify Current===
<nowiki>root@Proxmox1:~# swapon -s</nowiki>
<nowiki>Filename Type Size Used Priority</nowiki>
<nowiki>/dev/zd0 partition 8388604 4036884 -2</nowiki>
===Add and activate===
<nowiki>root@Proxmox1:~# zfs create -V 8G rpool/swap2</nowiki>

<nowiki>mkswap /dev/zvol/rpool/swap2</nowiki>

<nowiki>swapon /dev/zvol/rpool/swap2</nowiki>
===Verify New===
<nowiki>root@Proxmox1:~# swapon -s</nowiki>
<nowiki>Filename Type Size Used Priority</nowiki>
<nowiki>/dev/zd0 partition 8388604 4036884 -2</nowiki>
<nowiki>/dev/zd96 partition 8388604 0 -3</nowiki>
===Make Load at boot===
<nowiki>nano /etc/fstab</nowiki>

<nowiki>/dev/zvol/rpool/swap2 none swap sw 0 0</nowiki>
===Rename a pool===
<nowiki>zpool export [poolname]</nowiki>
As an example, for a pool named tank which we wish to rename notankshere:
<nowiki>zpool export tank</nowiki>
Then run:
<nowiki>zpool import [poolname] [newpoolname]</nowiki>
e.g.:
<nowiki>zpool import tank notankshere</nowiki>
The pool will be imported as “notankshere” instead.
=Find and remove unused container disks=
Find:
<nowiki>pct rescan</nowiki>
Look for lines that say "add unreferenced volume"

To remove, use the webui
=Troubleshooting and Error Handling Tips=
==Too many open files, OOM Killer, Out Of Memory==
If you start receiving errors regarding "too many open files", try applying these fixes.

These errors increase when you start running large numbers of containers.
<nowiki>nano /etc/security/limits.conf</nowiki>
Add to the bottom of the file:
<nowiki>
* soft nofile 1048576
* hard nofile 1048576
root soft nofile 1048576
root hard nofile 1048576
* soft memlock unlimited
* hard memlock unlimited
</nowiki>

<nowiki>nano /proc/sys/fs/inotify/max_user_watches</nowiki>

Make the contents of the file:
<nowiki>1048576</nowiki>

<nowiki>nano /usr/lib/sysctl.d/override.conf</nowiki>

Add to the bottom of the file:
<nowiki>
fs.inotify.max_queued_events=1048576
fs.inotify.max_user_instances=1048576
fs.inotify.max_user_watches=1048576
vm.max_map_count=262144
kernel.dmesg_restrict=1
net.core.rmem_max = 16777216
fs.file-max = 1048576
</nowiki>

Apply the New Settings:
<nowiki>sysctl -p</nowiki>

<nowiki>sysctl --system</nowiki>

==increase ulimit or decrease threads==
<nowiki>lxc.prlimit.nofile = 20000</nowiki>
==Container Names missing in left pane==
<nowiki>
service pvedaemon restart
</nowiki>

<nowiki>
service pvestatd restart
</nowiki>

<nowiki>
service pveproxy restart
</nowiki>
==Backup Fails because ZFS Snapshot is already there==
I got an error on backup that said:
<nowiki>
INFO: starting new backup job: vzdump 190 --remove 0 --compress lzo --node Proxmox1 --storage DBB-Proxmox --mode snapshot
INFO: filesystem type on dumpdir is 'cifs' -using /var/tmp/vzdumptmp29423 for temporary files
INFO: Starting Backup of VM 190 (lxc)
INFO: status = running
INFO: CT Name: sonarr.dbb.local
INFO: excluding bind mount point mp0 ('/Drivepool') from backup
INFO: excluding bind mount point mp1 ('/Downloads') from backup
INFO: backup mode: snapshot
INFO: ionice priority: 7
INFO: create storage snapshot 'vzdump'
snapshot create failed: starting cleanup
no lock found trying to remove 'backup' lock
ERROR: Backup of VM 190 failed - zfs error: cannot create snapshot 'rpool/data/subvol-190-disk-1@vzdump': dataset already exists
INFO: Backup job finished with errors
TASK ERROR: job errors
</nowiki>
The solution was to run:
<nowiki>
root@Proxmox1:~# zfs list -t snapshot
NAME USED AVAIL REFER MOUNTPOINT
rpool/data/subvol-190-disk-1@vzdump 86.5M - 2.13G -
root@Proxmox1:~# zfs destroy rpool/data/subvol-190-disk-1@vzdump
root@Proxmox1:~# zfs list -t snapshot
no datasets available
</nowiki>
==Found stale copy during migration==
I got this message
<nowiki>
ERROR: found stale volume copy 'local-zfs:subvol-2032-disk-0' on node 'Proxmox-HP'
</nowiki>
Solution (on host you are migrating TO):
<nowiki>
qm rescan --vmid 2032

OR for LXC

pct rescan --vmid 2032
</nowiki>

<nowiki>
zfs list -rt all rpool

zfs destroy rpool/data/subvol-2032-disk-0

</nowiki>

Proxmox LXC

2023-04-20T17:03:25Z

Deathbybandaid: /* GPU Passthrough */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

DrivePool -fstype=cifs,vers=3.0,rw,relatime,sec=ntlmssp,cache=strict,credentials=/etc/autofs/DrivePool.creds,uid=1001,forceuid,gid=111,forcegid,file_mode=0777,dir_mode=0777,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1 ://IPADDRESS/DrivePool

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

/FS1 /etc/autofs/DrivePool.conf --ghost --timeout 0 --verbose
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
<nowiki>apt install -y pve-headers-$(uname -r)</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

<nowiki>apt install -y build-essential gcc-multilib dkms</nowiki>

=====Blacklist Nouveau Drivers=====

<nowiki>nano /etc/modprobe.d/blacklist-nouveau.conf</nowiki>

<nowiki>blacklist nouveau
options nouveau modeset=0</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

=====Download Nvidia Driver for your card=====

======Manual======
[https://www.nvidia.com/Download/index.aspx]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run --dkms -s</nowiki>

======Apt======

<nowiki>nano /etc/apt/sources.list</nowiki>

add to your main repo
<nowiki>non-free</nowiki>

=====Create Kernel rules=====
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>

<nowiki>nano /etc/modules-load.d/modules.conf</nowiki>

Add these lines

<nowiki>
# Nvidia modules
nvidia
nvidia-modeset
nvidia_uvm
</nowiki>

=====Update initramfs=====

<nowiki>update-initramfs -u</nowiki>

=====Do a reboot=====
<nowiki>reboot</nowiki>

=====Find the GPU device number.=====
This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

=====ADD these lines to /etc/pve/lxc/<container-id>.conf=====
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

=====Setup Nvidia persistanced service=====

To avoid that the driver/kernel module is unloaded whenever the GPU is not used, we should run the Nvidia provided persistence service. It’s made available to us after the driver install.

Copy and extract

<nowiki>cp /usr/share/doc/NVIDIA_GLX-1.0/samples/nvidia-persistenced-init.tar.bz2 .</nowiki>
<nowiki>bunzip2 nvidia-persistenced-init.tar.bz2</nowiki>
<nowiki>tar -xf nvidia-persistenced-init.tar</nowiki>
Remove old, if any (to avoid masked service)

<nowiki>rm /etc/systemd/system/nvidia-persistenced.service</nowiki>
Install

<nowiki>chmod +x nvidia-persistenced-init/install.sh</nowiki>
<nowiki>./nvidia-persistenced-init/install.sh</nowiki>
Check that it’s ok

<nowiki>systemctl status nvidia-persistenced.service</nowiki>
<nowiki>rm -rf nvidia-persistenced-init*</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>

===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox LXC

2023-04-03T15:17:32Z

Deathbybandaid: /* On Host */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

DrivePool -fstype=cifs,vers=3.0,rw,relatime,sec=ntlmssp,cache=strict,credentials=/etc/autofs/DrivePool.creds,uid=1001,forceuid,gid=111,forcegid,file_mode=0777,dir_mode=0777,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1 ://IPADDRESS/DrivePool

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

/FS1 /etc/autofs/DrivePool.conf --ghost --timeout 0 --verbose
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
<nowiki>apt install -y pve-headers-$(uname -r)</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

=====Blacklist Nouveau Drivers=====

<nowiki>nano /etc/modprobe.d/blacklist.conf</nowiki>

<nowiki>blacklist nouveau</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

<nowiki>apt install -y build-essential</nowiki>

=====Download Nvidia Driver for your card=====

======Manual======
[https://www.nvidia.com/Download/index.aspx]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>

======Apt======

<nowiki>nano /etc/apt/sources.list</nowiki>

add to your main repo
<nowiki>non-free</nowiki>

=====Create Kernel rules=====
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>

<nowiki>nano /etc/modules-load.d/modules.conf</nowiki>

Add these lines

<nowiki>
# Nvidia modules
nvidia
nvidia-modeset
nvidia_uvm
</nowiki>

=====Update initramfs=====

<nowiki>update-initramfs -u</nowiki>

=====Do a reboot=====
<nowiki>reboot</nowiki>

=====Find the GPU device number.=====
This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

=====ADD these lines to /etc/pve/lxc/<container-id>.conf=====
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

=====Setup Nvidia persistanced service=====

To avoid that the driver/kernel module is unloaded whenever the GPU is not used, we should run the Nvidia provided persistence service. It’s made available to us after the driver install.

Copy and extract

<nowiki>cp /usr/share/doc/NVIDIA_GLX-1.0/samples/nvidia-persistenced-init.tar.bz2 .</nowiki>
<nowiki>bunzip2 nvidia-persistenced-init.tar.bz2</nowiki>
<nowiki>tar -xf nvidia-persistenced-init.tar</nowiki>
Remove old, if any (to avoid masked service)

<nowiki>rm /etc/systemd/system/nvidia-persistenced.service</nowiki>
Install

<nowiki>chmod +x nvidia-persistenced-init/install.sh</nowiki>
<nowiki>./nvidia-persistenced-init/install.sh</nowiki>
Check that it’s ok

<nowiki>systemctl status nvidia-persistenced.service</nowiki>
<nowiki>rm -rf nvidia-persistenced-init*</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>

===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox-VE

2023-03-28T15:16:05Z

Deathbybandaid: /* Add an L2 virtual switch */

=Terminology=
'Node' is a computer running proxmox.

'Cluster' is a group of proxmox nodes, that can being used together for easy migration or high availability.

'Container' is a guest operating system that shares the kernel with the proxmox host, can give a performance boost compared to a normal Virtual OS.
=VM/LXC Specifics=
*[[Proxmox VM]]
*[[Proxmox LXC]]
=Installation=
Download the [https://www.proxmox.com/en/downloads ISO] and install on bare metal. Alternatively, you can [https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Buster install on top of an existing Debian]
==Extra Notes==
If ZFS is the storage system of choice, it helps to install on SSD for OS, and set up a ZFS pool manually later.
==Advice on Container/VM Numbering==
Create a VLAN for your containers, and allow the container number to reflect the IP address assigned to it. This will save you a great deal of headache.

Example, say Plex, sonarr, radarr, lidarr, sabnzbd, etc are all on VLAN 12, and Plex's IP is 10.0.12.90 you can number the plex container 12090 to reflect VLANID+IP
==Enable Non-Subscription Updates==
Complete the following steps to your source lists to get updates.
===Enable No Subscription Repo===
<nowiki>nano /etc/apt/sources.list.d/pve-nosub.list</nowiki>
add:
<nowiki>deb http://download.proxmox.com/debian bullseye pve-no-subscription</nowiki>

<nowiki>nano /etc/apt/sources.list.d/pve-enterprise.list</nowiki>
===Comment out Enterprise Repo===
add a # symbol in front) of this line:
<nowiki>#deb https://enterprise.proxmox.com/debian/pve bullseye pve-enterprise</nowiki>
===Install any and all available updates===
<nowiki>apt-get update && apt-get dist-upgrade -y</nowiki>
==Non-production Bleeding Edge==
===PVE Testing Repo===
<nowiki>nano /etc/apt/sources.list.d/pve-testing.list</nowiki>
add:
<nowiki>deb http://download.proxmox.com/debian/pve bullseye pvetest</nowiki>
===Debian Sid===
<nowiki>nano /etc/apt/sources.list</nowiki>
add:
<nowiki>
deb http://deb.debian.org/debian sid main non-free contrib
deb-src http://deb.debian.org/debian/ sid main contrib non-free
</nowiki>
===Install any and all available updates===
<nowiki>apt-get update && apt-get dist-upgrade -y</nowiki>
===Fix Proxmox Web Interface===
If you see:
<nowiki>unable to parse codename from '/etc/os-release' (500)</nowiki>
Then Modify the following file and add this line:
<nowiki>nano /etc/os-release</nowiki>
add:
<nowiki>VERSION_CODENAME=bullseye</nowiki>
==Disable subscription nag after login==
<nowiki>wget https://git.deathbybandaid.net/attachments/3d08b1b4-b896-497b-893b-c9c0dbb830ca</nowiki>
<nowiki>dpkg -i pve-fake-subscription_*.deb</nowiki>
<nowiki>echo "127.0.0.1 shop.maurer-it.com" | tee -a /etc/hosts</nowiki>
<nowiki>pve-fake-subscription</nowiki>
==Update Template Listing==
<nowiki>pveam update</nowiki>
==Download Virtio iso==
[https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-virtio/virtio-win.iso ISO file]
==Headless Laptop==
If you want a laptop node, you may want to disable the lid closing action, or your node will go into standby.
<nowiki>nano /etc/systemd/logind.conf</nowiki>
Change the lines below.
<nowiki>HandleLidSwitch=ignore</nowiki>
<nowiki>HandleLidSwitchDocked=ignore</nowiki>
restart the logind service.
<nowiki>systemctl restart systemd-logind.service</nowiki>
==Change Network Settings without reboot==
<nowiki>apt install ifupdown2</nowiki>
==Add an L2 virtual switch==
<nowiki>apt-get install openvswitch-switch</nowiki>

==Add libraries for virgl==
<nowiki>apt install libgl1 libegl1 -y</nowiki>

==Create sudo user==
<nowiki>adduser sysop</nowiki>

<nowiki>usermod -aG sudo sysop</nowiki>
==Install a desktop environment (optional)==
This takes a few minutes... Make sure you have a non-root user!
<nowiki>apt-get install tasksel</nowiki>

<nowiki>tasksel install desktop kde-desktop</nowiki>

<nowiki>systemctl set-default graphical.target</nowiki>

<nowiki>reboot</nowiki>
==Dark Theme (Optional)==
[https://github.com/Weilbyte/PVEDiscordDark PVEDiscordDark]

==Two Node Cluster==

<nowiki>nano /etc/pve/corosync.conf</nowiki>

look for the `quorum` section and add

<nowiki>
two_node: 1
wait_for_all: 0
</nowiki>

=manual add of cifs share=
<nowiki>pvesm add cifs DrivePoolold --server 192.168.1.101 --share DrivePool --username Administrator --password ********* --smbversion 2.1</nowiki>
=Clustering=
==Create a cluster==
<nowiki>pvecm create YOUR-CLUSTER-NAME</nowiki>
==Add a node to a cluster==
From the node you want to add. (new nodes must be empty)
<nowiki>pvecm add IP-ADDRESS-CLUSTER</nowiki>
==Remove a node from a cluster==
Remove all containers from the node, and login to a node that you are keeping.

it does not hurt to run these commands on all remaining nodes

Delete the node
<nowiki>pvecm delnode hp4 NODE_NAME_TO_DELETE</nowiki>
Delete node configuration files
<nowiki>cd /etc/pve/nodes</nowiki>

<nowiki>rm -r NODE_NAME_TO_DELETE</nowiki>
This step is purely to help with if you want to readd a new node with the same IP address as one you've removed
<nowiki>nano /etc/ssh/ssh_known_hosts</nowiki>
And remove ip, and node name lines
<nowiki>pvecm updatecerts</nowiki>

<nowiki>ssh-keygen -R 192.168.1.103</nowiki>

<nowiki>ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "192.168.1.103"</nowiki>
<nowiki>ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "NODE_NAME_TO_DELETE"</nowiki>
This step is when the replacement node is running:
<nowiki>ssh -o 'HostKeyAlias=pve5' root@10.0.4.5</nowiki>
==Set Node to not wait for cluster votes==
<nowiki>
pvecm expected 1
</nowiki>
=ZFS Tricks and Tips=
==Proxmox Default ZFS setup==
<nowiki>zpool create -f -o ashift=12 rpool /dev/sda /dev/sdb</nowiki>

<nowiki>zfs create rpool/data</nowiki>
==Directory mounted on ZFS==
<nowiki>zfs create rpool/downloads -o mountpoint=/downloads</nowiki>
===backups directory in ZFS===
Create Directory
<nowiki>zfs create tank/bkup -o mountpoint=/bkup</nowiki>
Add to storage.cfg
<nowiki>nano /etc/pve/storage.cfg</nowiki>

<nowiki>
dir: bkup
path /bkup
content vztmpl,iso,backup
maxfiles 4
shared 0
</nowiki>
==Add ZFS swap space==
This will add 8GB of swap space for ZFS to use.
===Verify Current===
<nowiki>root@Proxmox1:~# swapon -s</nowiki>
<nowiki>Filename Type Size Used Priority</nowiki>
<nowiki>/dev/zd0 partition 8388604 4036884 -2</nowiki>
===Add and activate===
<nowiki>root@Proxmox1:~# zfs create -V 8G rpool/swap2</nowiki>

<nowiki>mkswap /dev/zvol/rpool/swap2</nowiki>

<nowiki>swapon /dev/zvol/rpool/swap2</nowiki>
===Verify New===
<nowiki>root@Proxmox1:~# swapon -s</nowiki>
<nowiki>Filename Type Size Used Priority</nowiki>
<nowiki>/dev/zd0 partition 8388604 4036884 -2</nowiki>
<nowiki>/dev/zd96 partition 8388604 0 -3</nowiki>
===Make Load at boot===
<nowiki>nano /etc/fstab</nowiki>

<nowiki>/dev/zvol/rpool/swap2 none swap sw 0 0</nowiki>
===Rename a pool===
<nowiki>zpool export [poolname]</nowiki>
As an example, for a pool named tank which we wish to rename notankshere:
<nowiki>zpool export tank</nowiki>
Then run:
<nowiki>zpool import [poolname] [newpoolname]</nowiki>
e.g.:
<nowiki>zpool import tank notankshere</nowiki>
The pool will be imported as “notankshere” instead.
=Find and remove unused container disks=
Find:
<nowiki>pct rescan</nowiki>
Look for lines that say "add unreferenced volume"

To remove, use the webui
=Troubleshooting and Error Handling Tips=
==Too many open files==
If you start receiving errors regarding "too many open files", try applying these fixes.

These errors increase when you start running large numbers of containers.
<nowiki>nano /etc/security/limits.conf</nowiki>
Add to the bottom of the file:
<nowiki>
* soft nofile 1048576
* hard nofile 1048576
root soft nofile 1048576
root hard nofile 1048576
* soft memlock unlimited
* hard memlock unlimited
</nowiki>

<nowiki>nano /etc/sysctl.conf</nowiki>
Add to the bottom of the file:
<nowiki>
fs.inotify.max_queued_events=1048576
fs.inotify.max_user_instances=1048576
fs.inotify.max_user_watches=1048576
vm.max_map_count=262144
kernel.dmesg_restrict=1
net.core.rmem_max = 16777216
fs.file-max = 1048576
</nowiki>

<nowiki>nano /proc/sys/fs/inotify/max_user_watches</nowiki>
Make the contents of the file:
<nowiki>1048576</nowiki>
Apply the New Settings:
<nowiki>sysctl -p</nowiki>

<nowiki>sysctl --system</nowiki>
==increase ulimit or decrease threads==
<nowiki>lxc.prlimit.nofile = 20000</nowiki>
==Container Names missing in left pane==
<nowiki>
service pvedaemon restart
</nowiki>

<nowiki>
service pvestatd restart
</nowiki>

<nowiki>
service pveproxy restart
</nowiki>
==Backup Fails because ZFS Snapshot is already there==
I got an error on backup that said:
<nowiki>
INFO: starting new backup job: vzdump 190 --remove 0 --compress lzo --node Proxmox1 --storage DBB-Proxmox --mode snapshot
INFO: filesystem type on dumpdir is 'cifs' -using /var/tmp/vzdumptmp29423 for temporary files
INFO: Starting Backup of VM 190 (lxc)
INFO: status = running
INFO: CT Name: sonarr.dbb.local
INFO: excluding bind mount point mp0 ('/Drivepool') from backup
INFO: excluding bind mount point mp1 ('/Downloads') from backup
INFO: backup mode: snapshot
INFO: ionice priority: 7
INFO: create storage snapshot 'vzdump'
snapshot create failed: starting cleanup
no lock found trying to remove 'backup' lock
ERROR: Backup of VM 190 failed - zfs error: cannot create snapshot 'rpool/data/subvol-190-disk-1@vzdump': dataset already exists
INFO: Backup job finished with errors
TASK ERROR: job errors
</nowiki>
The solution was to run:
<nowiki>
root@Proxmox1:~# zfs list -t snapshot
NAME USED AVAIL REFER MOUNTPOINT
rpool/data/subvol-190-disk-1@vzdump 86.5M - 2.13G -
root@Proxmox1:~# zfs destroy rpool/data/subvol-190-disk-1@vzdump
root@Proxmox1:~# zfs list -t snapshot
no datasets available
</nowiki>
==Found stale copy during migration==
I got this message
<nowiki>
ERROR: found stale volume copy 'local-zfs:subvol-2032-disk-0' on node 'Proxmox-HP'
</nowiki>
Solution (on host you are migrating TO):
<nowiki>
qm rescan --vmid 2032

OR for LXC

pct rescan --vmid 2032
</nowiki>

<nowiki>
zfs list -rt all rpool

zfs destroy rpool/data/subvol-2032-disk-0

</nowiki>

Proxmox LXC

2023-03-23T15:20:50Z

Deathbybandaid: /* On Host */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

DrivePool -fstype=cifs,vers=3.0,rw,relatime,sec=ntlmssp,cache=strict,credentials=/etc/autofs/DrivePool.creds,uid=1001,forceuid,gid=111,forcegid,file_mode=0777,dir_mode=0777,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1 ://IPADDRESS/DrivePool

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

/FS1 /etc/autofs/DrivePool.conf --ghost --timeout 0 --verbose
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
<nowiki>apt install -y pve-headers-$(uname -r)</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

Blacklist Nouveau Drivers

<nowiki>nano /etc/modprobe.d/blacklist.conf</nowiki>

<nowiki>blacklist nouveau</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

<nowiki>apt install -y build-essential</nowiki>

Download Nvidia Driver for your card

=====Manual=====
[https://www.nvidia.com/Download/index.aspx]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>

=====Apt=====

<nowiki>nano /etc/apt/sources.list</nowiki>

add to your main repo
<nowiki>non-free</nowiki>

Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>

<nowiki>nano /etc/modules-load.d/modules.conf</nowiki>

Add these lines

<nowiki>
# Nvidia modules
nvidia
nvidia-modeset
nvidia_uvm
</nowiki>

Update initramfs

<nowiki>update-initramfs -u</nowiki>

Do a reboot
<nowiki>reboot</nowiki>

Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>

===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox LXC

2023-01-17T17:46:43Z

Deathbybandaid: /* Mounting a CIFS share in a container */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

DrivePool -fstype=cifs,vers=3.0,rw,relatime,sec=ntlmssp,cache=strict,credentials=/etc/autofs/DrivePool.creds,uid=1001,forceuid,gid=111,forcegid,file_mode=0777,dir_mode=0777,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1 ://IPADDRESS/DrivePool

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

/FS1 /etc/autofs/DrivePool.conf --ghost --timeout 0 --verbose
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
<nowiki>apt install -y pve-headers-$(uname -r)</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

Blacklist Nouveau Drivers

<nowiki>nano /etc/modprobe.d/blacklist.conf</nowiki>

<nowiki>blacklist nouveau</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

<nowiki>apt install -y build-essential</nowiki>

[https://www.nvidia.com/Download/index.aspx Download Nvidia Driver for your card]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>
Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>

<nowiki>nano /etc/modules-load.d/modules.conf</nowiki>

Add these lines

<nowiki>
# Nvidia modules
nvidia
nvidia-modeset
nvidia_uvm
</nowiki>

Update initramfs

<nowiki>update-initramfs -u</nowiki>

Do a reboot
<nowiki>reboot</nowiki>

Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>

===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox LXC

2023-01-13T18:09:00Z

Deathbybandaid: /* Nvidia */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

<nowiki>DrivePool -fstype=cifs,rw,credentials=/etc/autofs/DrivePool.creds,file_mode=0777,dir_mode=0777 ://IPADDRESS/DrivePool</nowiki>

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/FS1 /etc/autofs/DrivePool.conf --ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
<nowiki>apt install -y pve-headers-$(uname -r)</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

Blacklist Nouveau Drivers

<nowiki>nano /etc/modprobe.d/blacklist.conf</nowiki>

<nowiki>blacklist nouveau</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

<nowiki>apt install -y build-essential</nowiki>

[https://www.nvidia.com/Download/index.aspx Download Nvidia Driver for your card]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>
Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>

<nowiki>nano /etc/modules-load.d/modules.conf</nowiki>

Add these lines

<nowiki>
# Nvidia modules
nvidia
nvidia-modeset
nvidia_uvm
</nowiki>

Update initramfs

<nowiki>update-initramfs -u</nowiki>

Do a reboot
<nowiki>reboot</nowiki>

Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>

===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox LXC

2023-01-13T17:31:00Z

Deathbybandaid: /* GPU Passthrough */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

<nowiki>DrivePool -fstype=cifs,rw,credentials=/etc/autofs/DrivePool.creds,file_mode=0777,dir_mode=0777 ://IPADDRESS/DrivePool</nowiki>

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/FS1 /etc/autofs/DrivePool.conf --ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
<nowiki>apt install -y pve-headers-$(uname -r)</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

Blacklist Nouveau Drivers

<nowiki>nano /etc/modprobe.d/blacklist.conf</nowiki>

<nowiki>blacklist nouveau</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

<nowiki>apt install -y build-essential</nowiki>

[https://www.nvidia.com/Download/index.aspx Download Nvidia Driver for your card]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>
Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>
Do a reboot
<nowiki>reboot</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>
===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox LXC

2023-01-13T17:29:19Z

Deathbybandaid: /* On Host */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

<nowiki>DrivePool -fstype=cifs,rw,credentials=/etc/autofs/DrivePool.creds,file_mode=0777,dir_mode=0777 ://IPADDRESS/DrivePool</nowiki>

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/FS1 /etc/autofs/DrivePool.conf --ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

Blacklist Nouveau Drivers

<nowiki>nano /etc/modprobe.d/blacklist.conf</nowiki>

<nowiki>blacklist nouveau</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

<nowiki>apt install -y build-essential</nowiki>

[https://www.nvidia.com/Download/index.aspx Download Nvidia Driver for your card]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>
Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>
Do a reboot
<nowiki>reboot</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>
===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox LXC

2023-01-13T17:17:24Z

Deathbybandaid: /* On Host */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

<nowiki>DrivePool -fstype=cifs,rw,credentials=/etc/autofs/DrivePool.creds,file_mode=0777,dir_mode=0777 ://IPADDRESS/DrivePool</nowiki>

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/FS1 /etc/autofs/DrivePool.conf --ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====

Blacklist Nouveau Drivers

<nowiki>nano /etc/modprobe.d/blacklist.conf</nowiki>

<nowiki>blacklist nouveau</nowiki>

<nowiki>update-initramfs -u</nowiki>

<nowiki>reboot</nowiki>

[https://www.nvidia.com/Download/index.aspx Download Nvidia Driver for your card]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>
Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>
Do a reboot
<nowiki>reboot</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>

====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>
===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

FreeIPA

2022-12-12T18:04:16Z

Deathbybandaid:

This is a cheatsheet of config for various apps to authenticate against FreeIPA.

==Emby==

LDAP server address:
<nowiki>127.0.0.1</nowiki>

LDAP server Port number:
<nowiki>389</nowiki>

Bind DN:
<nowiki>uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb</nowiki>
Bind credentials:
<nowiki>Password1</nowiki>

User search base:
<nowiki>cn=users,cn=accounts,dc=ipa,dc=dbb</nowiki>

User search filter:
<nowiki>(&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE)))</nowiki>

FreeIPA

2022-12-12T17:58:04Z

Deathbybandaid:

This is a cheatsheet of config for various apps to authenticate against FreeIPA.

==Emby==

LDAP
LDAP server address:
127.0.0.1
LDAP server Port number:
389

Enable SSL
SSL certificate thumbprint (SHA1):
Example: AAF4C61DDCC5E8A2DABEDE0F3B482CD9AEA9434D. Multiple thumbprints are accepted, comma delimted.
Bind DN:
uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb
Example: CN=user,OU=branch,DC=contoso,DC=local
Bind credentials:
Password1
Example: secret_password
User search base:
cn=users,cn=accounts,dc=ipa,dc=dbb
Use to limit the LDAP users that can be imported into Emby.
Example: DC=contoso,DC=local
User search filter:
(&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE)))
Example: (uid={0})
Important: This must contain {0} in order to allow specific user lookups.

FreeIPA

2022-12-12T17:55:27Z

Deathbybandaid: Created page with "This is a cheatsheet of config for various apps to authenticate against FreeIPA."

This is a cheatsheet of config for various apps to authenticate against FreeIPA.

Main Page

2022-12-12T17:54:52Z

Deathbybandaid: /* Starter Topics */

Welcome to the deathbybandaid wiki. Entries here will be primarily tech related. Pages will be created for a variety of topics with tips and tricks to get the most out of your computing resources.

Entries may sometimes have a biased opinion based on personal experiences, but don't let that stop you from voicing yours in the Discussion tabs.
=Getting started=
I will continue to theme this page at some point with dynamic information that displays wiki stats.
=Offtopic =
==Food==
*[[Zick Ham]]
=Calendars=
*[https://calendar.google.com/calendar?cid=dThxYzFraWZtNGRjN2FvYjFqb2w0YzM1Ym9AZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ SpiceWorks]
*[https://calendar.google.com/calendar?cid=cnNmczNmM2QxY2FxcGJvZThmdWIyYXE4b2NAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ ActualTechMedia]
*[https://calendar.google.com/calendar?cid=aHI4bGR1Y2htZ2dmZjBlZWhmbTZtcTJsaGtAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ Comptia]
*[https://calendar.google.com/calendar?cid=MzNicHYyczc1M3JqZzZsZHEzZGZpYXY3dmdAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ TruthInIT]
*[https://calendar.google.com/calendar?cid=bGFzNjVmZ2ZnYzk5NXBldGEwOGpycG9uNW9AZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ ultimatewindowssecurity]
=RSS=
[https://rss.deathbybandaid.net/feeds/ Generated Feeds]
=Starter Topics=

==Networking==
*[[FreeIPA]]

==Networking==
*[[pfSense]]
*[[Unbound]] (For Use with Pi-hole)
*[[Pi-Hole]]
==IRC==
*[[ZNC]]
==systemd==
*[[bash script service]]
==Update Caching==
*[[Apt-Cacher NG]]
*[[WSUSoffline (on linux)]]
==Windows Server==
*[[Windows Server 2016]]
==Firewall==
*[[pfSense]]
==Hypervisor==
*[[Proxmox-VE]]
==Helpdesk==
*[[Tronprem]]
==DNS==
*[[Pi-hole]]
*[[Adguard Home]]
*[[NoTrack]]
*[[Metiix Blockade]]
*[[Piholeparser]]
*[[Shell DNS Blaster]]
==Web Server / Proxy==
*[[Nginx]]
*[[haproxy]] ([http://www.haproxy.org/ Official website])
==Dynamic DNS==
*[[Noip Duc]]
==Printer==
*[[CUPS]]
==Network Controller==
*[[Unifi]]
==VPN==
*[[Pritunl]]
*[[WireGuard]] ([https://www.wireguard.com/ Official website])
==Remote Desktop==
*[[Guacamole]]
*[[Simple-Help]]
==IRC==
*[[ZNC]]
*[[Kiwi]]
*[[Sopel]]
==Email==
*[[Mailcow]]
==Group Chat==
*[[Mattermost]]
*[[matrix]] ([http://matrix.org/ Official website])
==Web Application==
*[[Wordpress]]
*[[Mediawiki]]
==Download Clients==
*[[SABnzbd]]
*[[airdc]]
*[[jdownloader]]
*[[pyLoad]]
*[[Transmission]]
*[[Deluge]]
*[[rtorrent]] ([https://rakshasa.github.io/rtorrent/ Official website])
==Media Managers==
*[[Sonarr]] ([https://sonarr.tv/ Official website])
*[[Radarr]] ([https://radarr.video/ Official website])
*[[Lidarr]] ([https://lidarr.audio/ Official website])
*[[Readarr]] ([https://readarr.com/ Official website])
*[[Ubooquity]] ([https://vaemendis.net/ubooquity/ Official website])
==Download Indexers==
*[[NZBHydra]]
*[[Cardigann]]
*[[AirDC]]
*[[Jackett]]
*[[flexget]] ([https://flexget.com/ Official website])
==Media Controllers==
*[[Tautulli]]
*[[Ombi]]
==Media Playback==
*[[Emby]] ([https://emby.media/ Official website])
*[[Jellyfin]] ([https://jellyfin.org/ Official website])
*[[Kodi]] ([https://kodi.tv/ Official website])
*[[Plex]] ([https://www.plex.tv/ Official website])
==Service Monitors==
*[[Monitorr]]
*[[Logarr]]
==File Naming==
*[[Filebot]]
*[[ranger]] (specifically the bulkrename feature) ([https://ranger.github.io/ Official website])
*[[Rename My TV Series 2]] ([https://www.tweaking4all.com/home-theatre/rename-my-tv-series-v2/ Official website])
==Software KVM==
*[[Synergy]]
*[[Mouse Without Borders]]
==Computer Cleanup==
*[[CCleaner]]
*[[Privazr]]
==Disk Storage==
*[[Stablebit]]
==Digital Game Platforms==
*[[Battle.net]] ([https://battle.net/ Official website])
*[[Bethesda.net]] ([https://bethesda.net/ Official website])
*[[Epic Games]] ([https://emby.media/ Official website])
*[[GOG]] ([https://gog.com/ Official website])
*[[itch.io]] ([https://itch.io/ Official website])
*[[Origin]] ([https://www.origin.com/usa/en-us/ Official website])
*[[Steam]] ([https://store.steampowered.com/ Official website])
*[[Ubisoft]]([https://store.ubi.com/us/home/?lang=en_US Official website])
==RSS Feed Management==
*[[Selfoss]]
*[[TTRSS]]
*[[Commafeed]]
*[[FreshRSS]]

*

Main Page

2022-12-12T17:53:56Z

Deathbybandaid: /* Starter Topics */

Welcome to the deathbybandaid wiki. Entries here will be primarily tech related. Pages will be created for a variety of topics with tips and tricks to get the most out of your computing resources.

Entries may sometimes have a biased opinion based on personal experiences, but don't let that stop you from voicing yours in the Discussion tabs.
=Getting started=
I will continue to theme this page at some point with dynamic information that displays wiki stats.
=Offtopic =
==Food==
*[[Zick Ham]]
=Calendars=
*[https://calendar.google.com/calendar?cid=dThxYzFraWZtNGRjN2FvYjFqb2w0YzM1Ym9AZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ SpiceWorks]
*[https://calendar.google.com/calendar?cid=cnNmczNmM2QxY2FxcGJvZThmdWIyYXE4b2NAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ ActualTechMedia]
*[https://calendar.google.com/calendar?cid=aHI4bGR1Y2htZ2dmZjBlZWhmbTZtcTJsaGtAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ Comptia]
*[https://calendar.google.com/calendar?cid=MzNicHYyczc1M3JqZzZsZHEzZGZpYXY3dmdAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ TruthInIT]
*[https://calendar.google.com/calendar?cid=bGFzNjVmZ2ZnYzk5NXBldGEwOGpycG9uNW9AZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ ultimatewindowssecurity]
=RSS=
[https://rss.deathbybandaid.net/feeds/ Generated Feeds]
=Starter Topics=

==Networking==
*[[LDAP]]

==Networking==
*[[pfSense]]
*[[Unbound]] (For Use with Pi-hole)
*[[Pi-Hole]]
==IRC==
*[[ZNC]]
==systemd==
*[[bash script service]]
==Update Caching==
*[[Apt-Cacher NG]]
*[[WSUSoffline (on linux)]]
==Windows Server==
*[[Windows Server 2016]]
==Firewall==
*[[pfSense]]
==Hypervisor==
*[[Proxmox-VE]]
==Helpdesk==
*[[Tronprem]]
==DNS==
*[[Pi-hole]]
*[[Adguard Home]]
*[[NoTrack]]
*[[Metiix Blockade]]
*[[Piholeparser]]
*[[Shell DNS Blaster]]
==Web Server / Proxy==
*[[Nginx]]
*[[haproxy]] ([http://www.haproxy.org/ Official website])
==Dynamic DNS==
*[[Noip Duc]]
==Printer==
*[[CUPS]]
==Network Controller==
*[[Unifi]]
==VPN==
*[[Pritunl]]
*[[WireGuard]] ([https://www.wireguard.com/ Official website])
==Remote Desktop==
*[[Guacamole]]
*[[Simple-Help]]
==IRC==
*[[ZNC]]
*[[Kiwi]]
*[[Sopel]]
==Email==
*[[Mailcow]]
==Group Chat==
*[[Mattermost]]
*[[matrix]] ([http://matrix.org/ Official website])
==Web Application==
*[[Wordpress]]
*[[Mediawiki]]
==Download Clients==
*[[SABnzbd]]
*[[airdc]]
*[[jdownloader]]
*[[pyLoad]]
*[[Transmission]]
*[[Deluge]]
*[[rtorrent]] ([https://rakshasa.github.io/rtorrent/ Official website])
==Media Managers==
*[[Sonarr]] ([https://sonarr.tv/ Official website])
*[[Radarr]] ([https://radarr.video/ Official website])
*[[Lidarr]] ([https://lidarr.audio/ Official website])
*[[Readarr]] ([https://readarr.com/ Official website])
*[[Ubooquity]] ([https://vaemendis.net/ubooquity/ Official website])
==Download Indexers==
*[[NZBHydra]]
*[[Cardigann]]
*[[AirDC]]
*[[Jackett]]
*[[flexget]] ([https://flexget.com/ Official website])
==Media Controllers==
*[[Tautulli]]
*[[Ombi]]
==Media Playback==
*[[Emby]] ([https://emby.media/ Official website])
*[[Jellyfin]] ([https://jellyfin.org/ Official website])
*[[Kodi]] ([https://kodi.tv/ Official website])
*[[Plex]] ([https://www.plex.tv/ Official website])
==Service Monitors==
*[[Monitorr]]
*[[Logarr]]
==File Naming==
*[[Filebot]]
*[[ranger]] (specifically the bulkrename feature) ([https://ranger.github.io/ Official website])
*[[Rename My TV Series 2]] ([https://www.tweaking4all.com/home-theatre/rename-my-tv-series-v2/ Official website])
==Software KVM==
*[[Synergy]]
*[[Mouse Without Borders]]
==Computer Cleanup==
*[[CCleaner]]
*[[Privazr]]
==Disk Storage==
*[[Stablebit]]
==Digital Game Platforms==
*[[Battle.net]] ([https://battle.net/ Official website])
*[[Bethesda.net]] ([https://bethesda.net/ Official website])
*[[Epic Games]] ([https://emby.media/ Official website])
*[[GOG]] ([https://gog.com/ Official website])
*[[itch.io]] ([https://itch.io/ Official website])
*[[Origin]] ([https://www.origin.com/usa/en-us/ Official website])
*[[Steam]] ([https://store.steampowered.com/ Official website])
*[[Ubisoft]]([https://store.ubi.com/us/home/?lang=en_US Official website])
==RSS Feed Management==
*[[Selfoss]]
*[[TTRSS]]
*[[Commafeed]]
*[[FreshRSS]]

*

Proxmox LXC

2022-11-30T19:58:30Z

Deathbybandaid: /* Application Tricks for running in LXC */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

<nowiki>DrivePool -fstype=cifs,rw,credentials=/etc/autofs/DrivePool.creds,file_mode=0777,dir_mode=0777 ://IPADDRESS/DrivePool</nowiki>

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/FS1 /etc/autofs/DrivePool.conf --ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====
[https://www.nvidia.com/Download/index.aspx Download Nvidia Driver for your card]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>
Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>
Do a reboot
<nowiki>reboot</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>
===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>

==LXC elasticsearch==
<nowiki>nano /etc/elasticsearch/jvm.options.d/heap.options</nowiki>

<nowiki>
-Xms4g
-Xmx4g
</nowiki>

<nowiki>systemctl restart elasticsearch.service</nowiki>

==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>

=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

Proxmox VM

2022-07-12T14:13:17Z

Deathbybandaid:

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Direct Drive Passthrough=
[https://pve.proxmox.com/wiki/Passthrough_Physical_Disk_to_Virtual_Machine_(VM) Passthrough Physical Disk to Virtual Machine (VM)]
=Boot into VM BIOS=
During boot, F2 or DEL should get you in
=Linux ISO won't boot with OVMF=
Enter VM BIOS and disable Secure Boot
=Windows 10 VM=
==VM creation==
Create the VM selecting:
===OS===
Set Guest OS to Microsoft Windows, with the appropriate version.
===Hard Disk===
Set Bus to VirtIO block, and cache to Write Back.
===Network===
Set Model to Virtio
===Confirm===
DO NOT START VM at this point!!!

Confirm creation.
==VM Options==
Set start at boot to yes.

Set Qemu Agent to Enabled
==VM Hardware==
Add the virtio iso (above link) as a second cd drive.
==Start the VM==
==Add drivers==
The windows installation will stop when it doesn't have drivers for the hard drive.

We will add that, and other drivers at this point.

Each driver folder has a windows version, and a subfolder for amd64. You need to go down the directories for each.
*Balloon

*NetKVM

*vioserial

*viostor
==Install Windows as normal==
==After install==
===Qemu guest agent===
Open the virtio disk in the guest machine and install the Guest agent.

make sure services.msc has both qemu services running and set to automatic
===Balloon Service===
on the virtio disk go into the balloon folder, and the subdirectory for your version of windows.

Copy the amd64 folder to the root of C:\

rename the folder to Balloon

enter balloon folder

BLNSVR.exe -i

make sure services.msc has balloon service running and set to automatic
===HID Button over Interrupt Driver in device manager without driver===
Open Device Manager -> Right click HID Button over Interrupt Driver -> Click Update Driver Software…

Click Browse my computer for driver software

Click Let me pick from a list of device drivers on my computer

Select Generic Bus and click Next

Click Close and the device should now be operating fine.

Proxmox-VE

2022-03-15T16:19:26Z

Deathbybandaid: /* Installation */

=Terminology=
'Node' is a computer running proxmox.

'Cluster' is a group of proxmox nodes, that can being used together for easy migration or high availability.

'Container' is a guest operating system that shares the kernel with the proxmox host, can give a performance boost compared to a normal Virtual OS.
=VM/LXC Specifics=
*[[Proxmox VM]]
*[[Proxmox LXC]]
=Installation=
Download the [https://www.proxmox.com/en/downloads ISO] and install on bare metal. Alternatively, you can [https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Buster install on top of an existing Debian]
==Extra Notes==
If ZFS is the storage system of choice, it helps to install on SSD for OS, and set up a ZFS pool manually later.
==Advice on Container/VM Numbering==
Create a VLAN for your containers, and allow the container number to reflect the IP address assigned to it. This will save you a great deal of headache.

Example, say Plex, sonarr, radarr, lidarr, sabnzbd, etc are all on VLAN 12, and Plex's IP is 10.0.12.90 you can number the plex container 12090 to reflect VLANID+IP
==Enable Non-Subscription Updates==
Complete the following steps to your source lists to get updates.
===Enable No Subscription Repo===
<nowiki>nano /etc/apt/sources.list.d/pve-nosub.list</nowiki>
add:
<nowiki>deb http://download.proxmox.com/debian bullseye pve-no-subscription</nowiki>

<nowiki>nano /etc/apt/sources.list.d/pve-enterprise.list</nowiki>
===Comment out Enterprise Repo===
add a # symbol in front) of this line:
<nowiki>#deb https://enterprise.proxmox.com/debian/pve bullseye pve-enterprise</nowiki>
===Install any and all available updates===
<nowiki>apt-get update && apt-get dist-upgrade -y</nowiki>
==Non-production Bleeding Edge==
===PVE Testing Repo===
<nowiki>nano /etc/apt/sources.list.d/pve-testing.list</nowiki>
add:
<nowiki>deb http://download.proxmox.com/debian/pve bullseye pvetest</nowiki>
===Debian Sid===
<nowiki>nano /etc/apt/sources.list</nowiki>
add:
<nowiki>
deb http://deb.debian.org/debian sid main non-free contrib
deb-src http://deb.debian.org/debian/ sid main contrib non-free
</nowiki>
===Install any and all available updates===
<nowiki>apt-get update && apt-get dist-upgrade -y</nowiki>
===Fix Proxmox Web Interface===
If you see:
<nowiki>unable to parse codename from '/etc/os-release' (500)</nowiki>
Then Modify the following file and add this line:
<nowiki>nano /etc/os-release</nowiki>
add:
<nowiki>VERSION_CODENAME=bullseye</nowiki>
==Disable subscription nag after login==
<nowiki>wget https://git.deathbybandaid.net/attachments/3d08b1b4-b896-497b-893b-c9c0dbb830ca</nowiki>
<nowiki>dpkg -i pve-fake-subscription_*.deb</nowiki>
<nowiki>echo "127.0.0.1 shop.maurer-it.com" | tee -a /etc/hosts</nowiki>
<nowiki>pve-fake-subscription</nowiki>
==Update Template Listing==
<nowiki>pveam update</nowiki>
==Download Virtio iso==
[https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-virtio/virtio-win.iso ISO file]
==Headless Laptop==
If you want a laptop node, you may want to disable the lid closing action, or your node will go into standby.
<nowiki>nano /etc/systemd/logind.conf</nowiki>
Change the lines below.
<nowiki>HandleLidSwitch=ignore</nowiki>
<nowiki>HandleLidSwitchDocked=ignore</nowiki>
restart the logind service.
<nowiki>systemctl restart systemd-logind.service</nowiki>
==Change Network Settings without reboot==
<nowiki>apt install ifupdown2</nowiki>
==Add an L2 virtual switch==
<nowiki>apt-get install openvswitch-switch</nowiki>
==Create sudo user==
<nowiki>adduser sysop</nowiki>

<nowiki>usermod -aG sudo sysop</nowiki>
==Install a desktop environment (optional)==
This takes a few minutes... Make sure you have a non-root user!
<nowiki>apt-get install tasksel</nowiki>

<nowiki>tasksel install desktop kde-desktop</nowiki>

<nowiki>systemctl set-default graphical.target</nowiki>

<nowiki>reboot</nowiki>
==Dark Theme (Optional)==
[https://github.com/Weilbyte/PVEDiscordDark PVEDiscordDark]

==Two Node Cluster==

<nowiki>nano /etc/pve/corosync.conf</nowiki>

look for the `quorum` section and add

<nowiki>
two_node: 1
wait_for_all: 0
</nowiki>

=manual add of cifs share=
<nowiki>pvesm add cifs DrivePoolold --server 192.168.1.101 --share DrivePool --username Administrator --password ********* --smbversion 2.1</nowiki>
=Clustering=
==Create a cluster==
<nowiki>pvecm create YOUR-CLUSTER-NAME</nowiki>
==Add a node to a cluster==
From the node you want to add. (new nodes must be empty)
<nowiki>pvecm add IP-ADDRESS-CLUSTER</nowiki>
==Remove a node from a cluster==
Remove all containers from the node, and login to a node that you are keeping.

it does not hurt to run these commands on all remaining nodes

Delete the node
<nowiki>pvecm delnode hp4 NODE_NAME_TO_DELETE</nowiki>
Delete node configuration files
<nowiki>cd /etc/pve/nodes</nowiki>

<nowiki>rm -r NODE_NAME_TO_DELETE</nowiki>
This step is purely to help with if you want to readd a new node with the same IP address as one you've removed
<nowiki>nano /etc/ssh/ssh_known_hosts</nowiki>
And remove ip, and node name lines
<nowiki>pvecm updatecerts</nowiki>

<nowiki>ssh-keygen -R 192.168.1.103</nowiki>

<nowiki>ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "192.168.1.103"</nowiki>
<nowiki>ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "NODE_NAME_TO_DELETE"</nowiki>
This step is when the replacement node is running:
<nowiki>ssh -o 'HostKeyAlias=pve5' root@10.0.4.5</nowiki>
==Set Node to not wait for cluster votes==
<nowiki>
pvecm expected 1
</nowiki>
=ZFS Tricks and Tips=
==Proxmox Default ZFS setup==
<nowiki>zpool create -f -o ashift=12 rpool /dev/sda /dev/sdb</nowiki>

<nowiki>zfs create rpool/data</nowiki>
==Directory mounted on ZFS==
<nowiki>zfs create rpool/downloads -o mountpoint=/downloads</nowiki>
===backups directory in ZFS===
Create Directory
<nowiki>zfs create tank/bkup -o mountpoint=/bkup</nowiki>
Add to storage.cfg
<nowiki>nano /etc/pve/storage.cfg</nowiki>

<nowiki>
dir: bkup
path /bkup
content vztmpl,iso,backup
maxfiles 4
shared 0
</nowiki>
==Add ZFS swap space==
This will add 8GB of swap space for ZFS to use.
===Verify Current===
<nowiki>root@Proxmox1:~# swapon -s</nowiki>
<nowiki>Filename Type Size Used Priority</nowiki>
<nowiki>/dev/zd0 partition 8388604 4036884 -2</nowiki>
===Add and activate===
<nowiki>root@Proxmox1:~# zfs create -V 8G rpool/swap2</nowiki>

<nowiki>mkswap /dev/zvol/rpool/swap2</nowiki>

<nowiki>swapon /dev/zvol/rpool/swap2</nowiki>
===Verify New===
<nowiki>root@Proxmox1:~# swapon -s</nowiki>
<nowiki>Filename Type Size Used Priority</nowiki>
<nowiki>/dev/zd0 partition 8388604 4036884 -2</nowiki>
<nowiki>/dev/zd96 partition 8388604 0 -3</nowiki>
===Make Load at boot===
<nowiki>nano /etc/fstab</nowiki>

<nowiki>/dev/zvol/rpool/swap2 none swap sw 0 0</nowiki>
===Rename a pool===
<nowiki>zpool export [poolname]</nowiki>
As an example, for a pool named tank which we wish to rename notankshere:
<nowiki>zpool export tank</nowiki>
Then run:
<nowiki>zpool import [poolname] [newpoolname]</nowiki>
e.g.:
<nowiki>zpool import tank notankshere</nowiki>
The pool will be imported as “notankshere” instead.
=Find and remove unused container disks=
Find:
<nowiki>pct rescan</nowiki>
Look for lines that say "add unreferenced volume"

To remove, use the webui
=Troubleshooting and Error Handling Tips=
==Too many open files==
If you start receiving errors regarding "too many open files", try applying these fixes.

These errors increase when you start running large numbers of containers.
<nowiki>nano /etc/security/limits.conf</nowiki>
Add to the bottom of the file:
<nowiki>
* soft nofile 1048576
* hard nofile 1048576
root soft nofile 1048576
root hard nofile 1048576
* soft memlock unlimited
* hard memlock unlimited
</nowiki>

<nowiki>nano /etc/sysctl.conf</nowiki>
Add to the bottom of the file:
<nowiki>
fs.inotify.max_queued_events=1048576
fs.inotify.max_user_instances=1048576
fs.inotify.max_user_watches=1048576
vm.max_map_count=262144
kernel.dmesg_restrict=1
net.core.rmem_max = 16777216
fs.file-max = 1048576
</nowiki>

<nowiki>nano /proc/sys/fs/inotify/max_user_watches</nowiki>
Make the contents of the file:
<nowiki>1048576</nowiki>
Apply the New Settings:
<nowiki>sysctl -p</nowiki>

<nowiki>sysctl --system</nowiki>
==increase ulimit or decrease threads==
<nowiki>lxc.prlimit.nofile = 20000</nowiki>
==Container Names missing in left pane==
<nowiki>
service pvedaemon restart
</nowiki>

<nowiki>
service pvestatd restart
</nowiki>

<nowiki>
service pveproxy restart
</nowiki>
==Backup Fails because ZFS Snapshot is already there==
I got an error on backup that said:
<nowiki>
INFO: starting new backup job: vzdump 190 --remove 0 --compress lzo --node Proxmox1 --storage DBB-Proxmox --mode snapshot
INFO: filesystem type on dumpdir is 'cifs' -using /var/tmp/vzdumptmp29423 for temporary files
INFO: Starting Backup of VM 190 (lxc)
INFO: status = running
INFO: CT Name: sonarr.dbb.local
INFO: excluding bind mount point mp0 ('/Drivepool') from backup
INFO: excluding bind mount point mp1 ('/Downloads') from backup
INFO: backup mode: snapshot
INFO: ionice priority: 7
INFO: create storage snapshot 'vzdump'
snapshot create failed: starting cleanup
no lock found trying to remove 'backup' lock
ERROR: Backup of VM 190 failed - zfs error: cannot create snapshot 'rpool/data/subvol-190-disk-1@vzdump': dataset already exists
INFO: Backup job finished with errors
TASK ERROR: job errors
</nowiki>
The solution was to run:
<nowiki>
root@Proxmox1:~# zfs list -t snapshot
NAME USED AVAIL REFER MOUNTPOINT
rpool/data/subvol-190-disk-1@vzdump 86.5M - 2.13G -
root@Proxmox1:~# zfs destroy rpool/data/subvol-190-disk-1@vzdump
root@Proxmox1:~# zfs list -t snapshot
no datasets available
</nowiki>
==Found stale copy during migration==
I got this message
<nowiki>
ERROR: found stale volume copy 'local-zfs:subvol-2032-disk-0' on node 'Proxmox-HP'
</nowiki>
Solution (on host you are migrating TO):
<nowiki>
qm rescan --vmid 2032

OR for LXC

pct rescan --vmid 2032
</nowiki>

<nowiki>
zfs list -rt all rpool

zfs destroy rpool/data/subvol-2032-disk-0

</nowiki>

Proxmox LXC

2022-02-22T13:01:28Z

Deathbybandaid: /* Docker */

==Proxmox-VE Main Page==
[[Proxmox-VE]]
=Mounts=
==Mounting a directory available to the host machine==
In this example, Drivepool is a cifs share on another machine. The container we are adding this to is 230. The first location is on the host machine, and the second is where you want it located in the container.

The container should be shutdown/stopped before running this command.
<nowiki>pct set 230 -mp0 /mnt/pve/Drivepool,mp=/Drivepool</nowiki>
OR add to the config file located in
<nowiki>/etc/pve/lxc/</nowiki>

<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool</nowiki>
If your shared directory is present on all nodes add
<nowiki>,shared=1</nowiki>
Like this:
<nowiki>mp0: /mnt/pve/DrivePool,mp=/Drivepool,shared=1</nowiki>
==Mounting a CIFS share in a container==
With the container stopped, Go to Options and edit the features. Enable CIFS and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/DrivePool.conf</nowiki>

<nowiki>DrivePool -fstype=cifs,rw,credentials=/etc/autofs/DrivePool.creds,file_mode=0777,dir_mode=0777 ://IPADDRESS/DrivePool</nowiki>

<nowiki>nano /etc/autofs/DrivePool.creds</nowiki>

<nowiki>
domain=YOURDOMAIN
username=YOURUSERNAME
password=YOURPASSWORD
</nowiki>
Install AutoFS
<nowiki>apt install -y cifs-utils autofs</nowiki>
Add Our Configuration
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/FS1 /etc/autofs/DrivePool.conf --ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
==Mount directories from other containers==
===Method 1 AutoFS + sshfs===
With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.

Start the container.

We're going to create some configuration files
<nowiki>mkdir /etc/autofs</nowiki>

<nowiki>nano /etc/autofs/plex1.conf</nowiki>

<nowiki>bar -fstype=fuse,rw,nodev,nonempty,noatime,allow_other,max_read=65536 :sshfs\#sysop@10.0.12.90:/your/remote/path</nowiki>

<nowiki>apt-get install sshfs autofs</nowiki>
Now we setup passwordless auth to the other container
<nowiki>ssh-keygen -t rsa</nowiki>

<nowiki>ssh-copy-id -i .ssh/id_rsa.pub sysop@10.0.12.90</nowiki>
It will prompt you for the password.

We'll create the mount directory
<nowiki>mkdir /mnt/sshfs</nowiki>
And add our configuration to autofs
<nowiki>nano /etc/auto.master</nowiki>

<nowiki>/mnt/sshfs --timeout=30,--ghost</nowiki>
Restart The Service
<nowiki>service autofs restart</nowiki>
===Method 2 just sshfs===
Mount directories from other containers

With the container stopped, Go to Options and edit the features. Enable FUSE, and nesting.
<nowiki>apt-get install sshfs</nowiki>

<nowiki>nano /home/sshfsmounts.sh</nowiki>

<nowiki>echo "yourpass" | sshfs youruser@10.0.15.31:/path/on/remote /mnt/pathyouwant -o password_stdin</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>@reboot /bin/bash /home/sshfsmounts.sh</nowiki>
==Passthrough Physical Disk to Container==
[https://forum.proxmox.com/threads/container-with-physical-disk.42280/#post-203292 Passthrough Physical Disk to Container]
=Device Passthrough=
==GPU Passthrough==
Install pve-headers, before and after you do any driver installs on host a below
<nowiki>apt install pve-headers</nowiki>
===NOTES===
This seems to need to be done sometimes after running updates on the host and rebooting.
===Nvidia===
====On Host====
[https://www.nvidia.com/Download/index.aspx Download Nvidia Driver for your card]
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>
<nowiki>./NVIDIA-Linux-x86_64-460.84.run</nowiki>
Create Kernel rules
<nowiki>nano /etc/udev/rules.d/70-nvidia.rules</nowiki>

<nowiki>
KERNEL=="nvidia_modeset", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -m && /bin/chmod 666 /dev/nvidia-modeset*'"
# Create /nvidia0, /dev/nvidia1 … and /nvidiactl when nvidia module is loaded
KERNEL=="nvidia", RUN+="/bin/bash -c '/usr/bin/nvidia-smi -L && /bin/chmod 666 /dev/nvidia*'"
# Create the CUDA node when nvidia_uvm CUDA module is loaded
KERNEL=="nvidia_uvm", RUN+="/bin/bash -c '/usr/bin/nvidia-modprobe -c0 -u && /bin/chmod 0666 /dev/nvidia-uvm*'"
</nowiki>
Do a reboot
<nowiki>reboot</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
AND
<nowiki>ls -al /dev/nvidia*</nowiki>

<nowiki>
crw-rw-rw- 1 root root 195, 0 Feb 11 18:11 /dev/nvidia0
crw-rw-rw- 1 root root 195, 255 Feb 11 18:11 /dev/nvidiactl
crw-rw-rw- 1 root root 195, 254 Feb 11 18:11 /dev/nvidia-modeset
crw-rw-rw- 1 root root 236, 0 Feb 11 18:11 /dev/nvidia-uvm
crw-rw-rw- 1 root root 236, 1 Feb 11 18:11 /dev/nvidia-uvm-tools
</nowiki>
Take note of the numbers in the fifth column above 195, 236 and 226 respectively.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 195:0 rw
lxc.cgroup2.devices.allow: c 195:255 rw
lxc.cgroup2.devices.allow: c 195:254 rw
lxc.cgroup2.devices.allow: c 236:0 rw
lxc.cgroup2.devices.allow: c 236:1 rw
lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
lxc.mount.entry: /dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file
</nowiki>

<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>chmod +x NVIDIA-Linux-x86_64-460.84.run</nowiki>

<nowiki>./NVIDIA-Linux-x86_64-460.84.run --no-kernel-module</nowiki>
===AMD Radeon===
====On Host====
[https://www.amd.com/en/support Download AMD Driver for your card]

Extract file, and navigate into the extracted contents.
<nowiki>./amdgpu-pro-install --no-32 --opencl=legacy,rocr -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
Find the GPU device number. This usually is 226:0,128
<nowiki>ls -l /dev/dri</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
====In Container====
Copy the drivers over from the host somehow.
<nowiki>./amdgpu-install --opencl=legacy --headless --no-dkms --no-32 -y</nowiki>
<nowiki>apt install amf-amdgpu-pro</nowiki>
===Intel Quick Sync===
I've not personally tested this, but:

"

All Intel CPU’s since Sandy Bridge released in 2011 have hardware acceleration for H.264 built in.

So if your CPU supports Quick Sync you can speed up transcoding and reduce load as well as energy consumption.

"
<nowiki>
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
</nowiki>
==Net Passthrough==
This is important if your container needs to be able to create a TUN device. This is useful for applications like openvpn.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</nowiki>
==DVB Passthrough (TV Tuner Cards)==
This is useful for applications like tvheadend, nextpvr, plex, emby, jellyfin.

ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 212:* rwm
lxc.mount.entry: /dev/dvb dev/dvb none bind,optional,create=dir
</nowiki>
==USB Passthrough==
Find the applicable usb major and minor numbers via:
<nowiki>
#: lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 013: ID 045e:0800 Microsoft Corp.
Bus 001 Device 020: ID 04a9:1746 Canon, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
</nowiki>
ADD these lines to /etc/pve/lxc/<container-id>.conf
<nowiki>
lxc.cgroup2.devices.allow: c 189:* rwm
lxc.mount.entry: /dev/bus/usb/001/020 dev/bus/usb/001/020 none bind,optional,create=file
</nowiki>
=Application Tricks for running in LXC=
==Docker==

===Host===

<nowiki>
nano /etc/modules-load.d/modules.conf
</nowiki>

<nowiki>
overlay
</nowiki>

<nowiki>
modprobe overlay
</nowiki>

With the container stopped, Go to Options and edit the features. Enable nesting and keyctl.

===Container===

Install
<nowiki>
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
</nowiki>

==Run NTP server in LXC==
<nowiki>lxc.cap.drop = sys_module mac_admin mac_override</nowiki>
==Run avahi in LXC==
<nowiki>mkdir -p /etc/systemd/system/avahi-daemon.service.d</nowiki>
<nowiki>

cat <<EOF > /etc/systemd/system/avahi-daemon.service.d/override.conf
[Service]
ExecStart=
ExecStart=/usr/sbin/avahi-daemon -s --no-rlimits
EOF
</nowiki>

<nowiki>
systemctl daemon-reload
systemctl start avahi-daemon
systemctl status avahi-daemon
</nowiki>
==Running Ubuntu Snaps in LXC==
install squashfuse in the container
<nowiki>apt install squashfuse fuse</nowiki>
then install snap
<nowiki>apt install snap</nowiki>
==LXC apache2 NAMESPACE fix==
<nowiki>sed -i -e 's,PrivateTmp=true,PrivateTmp=false\nNoNewPrivileges=yes,g' /lib/systemd/system/apache2.service</nowiki>

<nowiki>systemctl daemon-reload</nowiki>

<nowiki>systemctl start apache2.service</nowiki>
==Forward ALSA audio to LXC container==
===Host Machine===
<nowiki>apt-get update</nowiki>

<nowiki>
apt-get install dkms

apt-get install libasound2 alsa-utils alsa-oss
</nowiki>

<nowiki>
root@pve:~# arecord -l
**** List of CAPTURE Hardware Devices ****
card 0: PCH [HDA Intel PCH], device 0: ALC283 Analog [ALC283 Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 1: CameraB409241 [USB Camera-B4.09.24.1], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
</nowiki>

<nowiki>
root@pve:~# ls -la /dev/snd
total 0
drwxr-xr-x 4 root root 360 Jul 10 23:26 .
drwxr-xr-x 24 root root 4300 Jul 10 23:26 ..
drwxr-xr-x 2 root root 60 Jul 10 23:26 by-id
drwxr-xr-x 2 root root 80 Jul 10 23:26 by-path
crw-rw---- 1 root audio 116, 2 Jul 11 08:50 controlC0
crw-rw---- 1 root audio 116, 12 Jul 11 08:50 controlC1
...
</nowiki>

<nowiki>
lxc.cgroup.devices.allow = c 116:* rwm
lxc.mount.entry = /dev/snd dev/snd none bind,create=dir 0 0
</nowiki>
==Remove apparmor from a container==
There may be times that apparmor prevents a container from running properly (This is rare). If you trust the container, you can edit the configuration file to disable apparmor:

Configs are located in `/etc/pve/lxc`

add to the bottom of the config:
<nowiki>
lxc.apparmor.profile: unconfined
</nowiki>
=Reduce the size of a container=
Containers can always be easily increased in size via the web panel. Reducing their size is a slightly more complicated procedure that must be done via CLI.

This process requires you to backup a container, and then restore it with the new size. Note: directories may be different for you.
<nowiki>
pct stop <id>
vzdump <id> -storage local -compress lzo
pct destroy <id>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo --rootfs local:<newsize>
pct fsck <id>
</nowiki>
=Restore a Container from storage=
<nowiki>
pct restore <id> /var/lib/lxc/vzdump-lxc-<id>-....tar.lzo -storage local-zfs
</nowiki>
=Clone a container=
<nowiki>
pct clone <id> <newid> --full --storage local-zfs --hostname newhostname
</nowiki>

MediaWiki:Vector.css

2022-02-03T21:37:54Z

Deathbybandaid:

@import url("https://assets.deathbybandaid.net/theme.park/css/theme-options/plex.css");

body {
background: var(--main-bg-color);
background-repeat: repeat, no-repeat;
background-attachment: fixed, fixed;
background-position: center center, center center;
background-size: auto, cover;
-webkit-background-size: auto, cover;
-moz-background-size: auto, cover;
-o-background-size: auto, cover;
color: var(--text);
border-color: var(--accent-color-hover);
}

.mw-body {
background: var(--main-bg-color);
background-repeat: repeat, no-repeat;
background-attachment: fixed, fixed;
background-position: center center, center center;
background-size: auto, cover;
-webkit-background-size: auto, cover;
-moz-background-size: auto, cover;
-o-background-size: auto, cover;
color: var(--text);
border-color: var(--accent-color-hover);
}

#mw-head {
background: var(--main-bg-color);
}

a {
color: var(--link-color);
}

a:visited {
color: var(--accent-color-hover);
}

h1,h2,h3,h4,h5,h6 {
color: var(--text);
}

.mw-portlet-tb span {
color: var(--text);
}

.vector-menu-portal .vector-menu-content li a {
color: var(--link-color);
}

.vector-menu-portal .vector-menu-content li a:visited {
color: var(--accent-color-hover);
}

.toc {
background: var(--modal-bg-color);
border-color: var(--accent-color-hover);
}

.vector-menu-tabs li a {
#background: var(--modal-bg-color);
color: var(--text);
}

.mw-parser-output a.external.external {
color: var(--link-color);
}

a.external.external:visited {
color: var(--accent-color-hover);
}

#footer-info-lastmod {
color: var(--text);
}

#searchInput {
background-color:var(--modal-bg-color);
border-color: var(--modal-bg-color);
color: var(--text)
}

.suggestions-results {
background-color:var(--drop-down-menu-bg);
border-color: var(--drop-down-menu-bg);
color: var(--text)
}

.suggestions-results:hover {
background-color:var(--drop-down-menu-bg);
border-color: var(--drop-down-menu-bg);
color: var(--text)
}

.special-query {
background-color:var(--drop-down-menu-bg);
border-color: var(--drop-down-menu-bg);
color: var(--text)
}

.special-label {
background-color:var(--modal-bg-color);
border-color: var(--modal-bg-color);
color: var(--text)
}

.suggestions-special {
background-color:var(--drop-down-menu-bg);
border-color: var(--drop-down-menu-bg);
color: var(--text)
}

.mw-searchSuggest-link {
background-color:var(--drop-down-menu-bg);
border-color: var(--drop-down-menu-bg);
color: var(--link-color)
}

MediaWiki:Vector.css

2022-02-03T20:33:45Z

Deathbybandaid: Blanked the page

MediaWiki:Vector.css

2022-02-03T20:30:38Z

Deathbybandaid:

/* CSS placed here will affect users of the Vector skin */
/* Override Vector colour scheme to make it dark (compiled from modified LESS code) */
h1,h2,h3,h4,h5,h6{
color:#c1c1c1
}
hr{
color:#222
}
.editOptions{
background-color:#333;
border-color:#4c4c4c
}
input,textarea{
background-color:#4c4c4c;
border-color:#4c4c4c;
color:#c1c1c1
}
a,.mw-body a.external,.mw-body a.extiw{
color:#e69710
}
a:visited,.mw-body a.external:visited,.mw-body a.extiw:visited{
color:#8a7f6c
}
a.new,#p-personal a.new{
color:#d44
}
ul{
list-style-image:none
}
div.thumbinner,.catlinks{
background-color:#4c4c4c;
border-color:#666
}
#toc,div.toc,ul#filetoc,li.gallerybox div.thumb{
background-color:#4c4c4c;
border-color:#666
}
code{
border:none;
background-color:inherit;
color:inherit
}
table.mw_metadata td,table.mw_metadata th,table.wikitable,table.wikitable>*>tr>th,table.wikitable>*>tr>td,pre{
color:#c1c1c1;
background-color:#4c4c4c;
border-color:#666
}
table.mw_metadata th,table.wikitable>*>tr>th{
background-color:#595959
}
table.diff{
background-color:#4c4c4c
}
td .diffchange{
color:#4c4c4c
}
#pagehistory li.selected,td.diff-context{
background-color:inherit;
color:inherit
}
#pagehistory li{
border:0
}
ul.mw-gallery-packed-hover li.gallerybox:hover div.gallerytextwrapper,ul.mw-gallery-packed-overlay li.gallerybox div.gallerytextwrapper,ul.mw-gallery-packed-hover li.gallerybox.mw-gallery-focused div.gallerytextwrapper{
background-color:rgba(0,0,0,0.8)
}
#left-navigation div.vectorTabs,#right-navigation div.vectorTabs{
background-image:inherit;
background-color:#250b2d
}
#left-navigation div.vectorTabs ul,#right-navigation div.vectorTabs ul{
background-color:#250b2d
}
#left-navigation div.vectorTabs ul li,#right-navigation div.vectorTabs ul li{
background-color:#222;
background-image:-moz-linear-gradient(top, #2e2e2e 20%, #222 100%);
background-image:-webkit-gradient(linear, left top, left bottom, color-stop(20%, #2e2e2e), color-stop(100%, #222));
background-image:-webkit-linear-gradient(top, #2e2e2e 20%, #222 100%);
background-image:linear-gradient(#2e2e2e 20%, #222 100%)
}
#left-navigation div.vectorTabs li.new a,#right-navigation div.vectorTabs li.new a,#left-navigation div.vectorTabs li.new a:visited,#right-navigation div.vectorTabs li.new a:visited{
color:#d44
}
#left-navigation div.vectorTabs li.selected,#right-navigation div.vectorTabs li.selected{
background-color:#333;
background-image:-moz-linear-gradient(top, #e69710 0, #333 10%);
background-image:-webkit-gradient(linear, left top, left bottom, color-stop(0, #e69710), color-stop(10%, #333));
background-image:-webkit-linear-gradient(top, #e69710 0, #333 10%);
background-image:linear-gradient(#e69710 0, #333 10%)
}
#left-navigation div.vectorTabs li.selected a,#right-navigation div.vectorTabs li.selected a,#left-navigation div.vectorTabs li.selected a:visited,#right-navigation div.vectorTabs li.selected a:visited{
color:#8a7f6c
}
#left-navigation div.vectorTabs li a,#right-navigation div.vectorTabs li a{
color:#e69710
}
#left-navigation div.vectorTabs span,#right-navigation div.vectorTabs span{
background:transparent
}
div#mw-head #right-navigation div.vectorMenu h3{
background:inherit
}
div#mw-head div.vectorMenu h3 span{
color:#e69710
}
div.vectorMenu h3 a{
background:inherit
}
div.vectorMenu ul{
background-color:black;
border:solid 1px #0c0c0c
}
div.vectorMenu li a{
color:#e69710
}
div.vectorMenu li.selected a,div.vectorMenu li.selected a:visited{
color:#8a7f6c;
text-decoration:none
}
div.vectorMenu#p-cactions div.menu{
border-color:#666
}
div.vectorMenu#p-cactions ul{
border:0;
background-color:#4c4c4c
}
#mw-navigation div#mw-panel div.portal{
background-image:none;
border-top:1px solid #4c4c4c
}
#mw-navigation div#mw-panel div.portal#p-logo,#mw-navigation div#mw-panel div.portal#p-navigation{
border-top:none
}
html{
font-size:100%
}
html,body{
height:100%;
margin:0;
padding:0;
font-family:sans-serif
}
body{
background-color:#2a2a2a
}
.mw-body{
margin-left:10em;
padding:1em;
border:1px solid #250b2d;
border-right-width:0;
margin-top:-1px;
background-color:#333;
color:#c1c1c1;
direction:ltr
}
.mw-body .mw-editsection,.mw-body .mw-editsection-like{
font-family:sans-serif
}
.mw-body p{
line-height:inherit;
margin:.5em 0
}
.mw-body h1,.mw-body h2,.mw-body #firstHeading{
font-family:"Linux Libertine",Georgia,Times,serif;
line-height:1.3;
margin-bottom:.25em;
padding:0
}
.mw-body h1,.mw-body #firstHeading{
font-size:1.8em
}
.mw-body h2{
font-size:1.5em;
margin-top:1em
}
.mw-body h3,.mw-body h4,.mw-body h5,.mw-body h6{
line-height:1.6;
margin-top:.3em;
margin-bottom:0;
padding-bottom:0
}
.mw-body h3{
font-size:1.17em
}
.mw-body h3,.mw-body h4{
font-weight:bold
}
.mw-body h4,.mw-body h5,.mw-body h6{
font-size:100%
}
.mw-body #toc h2,.mw-body .toc h2{
font-size:100%;
font-family:sans-serif
}
div.emptyPortlet{
display:none
}
ul{
list-style-type:disc;
list-style-image:
/* @embed */
url('skins/Vector/images/bullet-icon.png')
}
pre,.mw-code{
line-height:1.3em
}
#siteNotice{
font-size:.8em
}
.redirectText{
font-size:140%
}
.redirectMsg img{
vertical-align:text-bottom
}
.mw-body-content{
position:relative;
line-height:1.6;
font-size:.875em
}
body.vector-animateLayout .mw-body,body.vector-animateLayout div#footer,body.vector-animateLayout #left-navigation{
-webkit-transition:margin-left 250ms,padding 250ms;
-moz-transition:margin-left 250ms,padding 250ms;
-o-transition:margin-left 250ms,padding 250ms;
transition:margin-left 250ms,padding 250ms
}
body.vector-animateLayout #p-logo{
-webkit-transition:left 250ms;
-moz-transition:left 250ms;
-o-transition:left 250ms;
transition:left 250ms
}
body.vector-animateLayout #mw-panel{
-webkit-transition:padding-right 250ms;
-moz-transition:padding-right 250ms;
-o-transition:padding-right 250ms;
transition:padding-right 250ms
}
body.vector-animateLayout #p-search{
-webkit-transition:margin-right 250ms;
-moz-transition:margin-right 250ms;
-o-transition:margin-right 250ms;
transition:margin-right 250ms
}
body.vector-animateLayout #p-personal{
-webkit-transition:right 250ms;
-moz-transition:right 250ms;
-o-transition:right 250ms;
transition:right 250ms
}
body.vector-animateLayout #mw-head-base{
-webkit-transition:margin-left 250ms;
-moz-transition:margin-left 250ms;
-o-transition:margin-left 250ms;
transition:margin-left 250ms
}
#p-personal{
position:absolute;
top:.33em;
right:.75em;
z-index:100
}
#p-personal h3{
display:none
}
#p-personal ul{
list-style-type:none;
list-style-image:none;
margin:0;
padding-left:10em
}
#p-personal li{
line-height:1.125em;
float:left;
margin-left:.75em;
margin-top:.5em;
font-size:.75em;
white-space:nowrap
}
#pt-userpage,#pt-anonuserpage{
background-position:left top;
background-repeat:no-repeat;
background-image:url('skins/Vector/images/user-icon.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/user-icon.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/user-icon.svg');
padding-left:15px !important
}
#p-search{
float:left;
margin-right:.5em;
margin-left:.5em
}
#p-search h3{
display:none
}
#p-search form,#p-search input{
margin:0;
margin-top:.4em
}
div#simpleSearch{
display:block;
width:12.6em;
padding-right:1.4em;
height:1.4em;
margin-top:.65em;
position:relative;
min-height:1px;
border:solid 1px #aaa;
color:black;
background-color:white;
background-image:
/* @embed */
url('skins/Vector/images/search-fade.png');
background-position:top left;
background-repeat:repeat-x
}
div#simpleSearch input{
margin:0;
padding:0;
border:0;
background-color:transparent;
color:black
}
div#simpleSearch #searchInput{
width:100%;
padding:.2em 0 .2em .2em;
font-size:13px;
direction:ltr;
-webkit-appearance:textfield
}
div#simpleSearch #searchInput:focus{
outline:none
}
div#simpleSearch #searchInput.placeholder{
color:#999
}
div#simpleSearch #searchInput:-ms-input-placeholder{
color:#999
}
div#simpleSearch #searchInput:-moz-placeholder{
color:#999
}
div#simpleSearch #searchInput::-webkit-search-decoration,div#simpleSearch #searchInput::-webkit-search-cancel-button,div#simpleSearch #searchInput::-webkit-search-results-button,div#simpleSearch #searchInput::-webkit-search-results-decoration{
-webkit-appearance:textfield
}
div#simpleSearch #searchButton,div#simpleSearch #mw-searchButton{
position:absolute;
top:0;
right:0;
width:1.65em;
height:100%;
cursor:pointer;
text-indent:-99999px;
line-height:1;
direction:ltr;
white-space:nowrap;
overflow:hidden;
background-image:url('skins/Vector/images/search-ltr.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/search-ltr.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/search-ltr.svg');
background-position:center center;
background-repeat:no-repeat
}
div#simpleSearch #mw-searchButton{
z-index:1
}
div.vectorTabs h3{
display:none
}
div.vectorTabs{
float:left;
height:2.5em;
background-image:
/* @embed */
url('skins/Vector/images/tab-break.png');
background-position:bottom left;
background-repeat:no-repeat;
padding-left:1px
}
div.vectorTabs ul{
float:left;
height:100%;
list-style-type:none;
list-style-image:none;
margin:0;
padding:0;
background-image:
/* @embed */
url('skins/Vector/images/tab-break.png');
background-position:right bottom;
background-repeat:no-repeat
}
div.vectorTabs ul li{
float:left;
line-height:1.125em;
display:inline-block;
height:100%;
margin:0;
padding:0;
background-color:#f3f3f3;
background-image:
/* @embed */
url('skins/Vector/images/tab-normal-fade.png');
background-position:bottom left;
background-repeat:repeat-x;
white-space:nowrap
}
div.vectorTabs ul>li{
display:block
}
div.vectorTabs li.new a,div.vectorTabs li.new a:visited{
color:#a55858
}
div.vectorTabs li.selected{
background-image:
/* @embed */
url('skins/Vector/images/tab-current-fade.png')
}
div.vectorTabs li.selected a,div.vectorTabs li.selected a:visited{
color:#333;
text-decoration:none
}
div.vectorTabs li.icon a{
background-position:bottom right;
background-repeat:no-repeat
}
div.vectorTabs li a{
display:inline-block;
height:1.9em;
padding-left:.5em;
padding-right:.5em;
color:#e69710;
cursor:pointer;
font-size:.8em
}
div.vectorTabs li>a{
display:block
}
div.vectorTabs span{
display:inline-block;
background-image:
/* @embed */
url('skins/Vector/images/tab-break.png');
background-position:bottom right;
background-repeat:no-repeat
}
div.vectorTabs span a{
display:inline-block;
padding-top:1.25em
}
div.vectorTabs span>a{
float:left;
display:block
}
div.vectorMenu{
direction:ltr;
float:left;
cursor:pointer;
position:relative
}
body.rtl div.vectorMenu{
direction:rtl
}
div#mw-head div.vectorMenu h3{
float:left;
background-image:
/* @embed */
url('skins/Vector/images/tab-break.png');
background-repeat:no-repeat;
background-position:bottom right;
margin-left:-1px;
font-size:1em;
height:2.5em;
padding-right:1px;
margin-right:-1px
}
div.vectorMenu h3 span{
display:block;
font-size:.8em;
padding-left:.7em;
padding-top:1.375em;
margin-right:20px;
font-weight:normal;
color:#4d4d4d
}
div.vectorMenu h3 a{
position:absolute;
top:0;
right:0;
width:20px;
height:2.5em;
background-image:url('skins/Vector/images/arrow-down-icon.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/arrow-down-icon.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/arrow-down-icon.svg');
background-position:100% 70%;
background-repeat:no-repeat;
-webkit-transition:background-position 250ms;
-moz-transition:background-position 250ms;
-o-transition:background-position 250ms;
transition:background-position 250ms
}
div.vectorMenu.menuForceShow h3 a{
background-position:100% 100%
}
div.vectorMenuFocus h3 a{
background-image:url('skins/Vector/images/arrow-down-focus-icon.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/arrow-down-focus-icon.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/arrow-down-focus-icon.svg')
}
div.vectorMenu div.menu{
min-width:100%;
position:absolute;
top:2.5em;
left:-1px;
background-color:white;
border:solid 1px silver;
border-top-width:0;
clear:both;
text-align:left;
display:none
}
div.vectorMenu:hover div.menu,div.vectorMenu.menuForceShow div.menu{
display:block
}
div.vectorMenu ul{
list-style-type:none;
list-style-image:none;
padding:0;
margin:0;
text-align:left
}
div.vectorMenu ul,x:-moz-any-link{
min-width:5em
}
div.vectorMenu ul,x:-moz-any-link,x:default{
min-width:0
}
div.vectorMenu li{
padding:0;
margin:0;
text-align:left;
line-height:1em
}
div.vectorMenu li a{
display:inline-block;
padding:.5em;
white-space:nowrap;
color:#e69710;
cursor:pointer;
font-size:.8em
}
div.vectorMenu li>a{
display:block
}
div.vectorMenu li.selected a,div.vectorMenu li.selected a:visited{
color:#333;
text-decoration:none
}
@-webkit-keyframes rotate{
from{
-webkit-transform:rotate(0deg);
-moz-transform:rotate(0deg);
transform:rotate(0deg)
}
to{
-webkit-transform:rotate(360deg);
-moz-transform:rotate(360deg);
transform:rotate(360deg)
}
}
@-moz-keyframes rotate{
from{
-webkit-transform:rotate(0deg);
-moz-transform:rotate(0deg);
transform:rotate(0deg)
}
to{
-webkit-transform:rotate(360deg);
-moz-transform:rotate(360deg);
transform:rotate(360deg)
}
}
@-o-keyframes rotate{
from{
-webkit-transform:rotate(0deg);
-moz-transform:rotate(0deg);
transform:rotate(0deg)
}
to{
-webkit-transform:rotate(360deg);
-moz-transform:rotate(360deg);
transform:rotate(360deg)
}
}
@keyframes rotate{
from{
-webkit-transform:rotate(0deg);
-moz-transform:rotate(0deg);
transform:rotate(0deg)
}
to{
-webkit-transform:rotate(360deg);
-moz-transform:rotate(360deg);
transform:rotate(360deg)
}
}
#ca-unwatch.icon a,#ca-watch.icon a{
margin:0;
padding:0;
display:block;
width:26px;
padding-top:3.1em;
margin-top:0;
height:0;
overflow:hidden;
background-position:5px 60%
}
#ca-unwatch.icon a{
background-image:url('skins/Vector/images/unwatch-icon.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/unwatch-icon.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/unwatch-icon.svg')
}
#ca-watch.icon a{
background-image:url('skins/Vector/images/watch-icon.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/watch-icon.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/watch-icon.svg')
}
#ca-unwatch.icon a:hover,#ca-unwatch.icon a:focus{
background-image:url('skins/Vector/images/unwatch-icon-hl.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/unwatch-icon-hl.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/unwatch-icon-hl.svg')
}
#ca-watch.icon a:hover,#ca-watch.icon a:focus{
background-image:url('skins/Vector/images/watch-icon-hl.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/watch-icon-hl.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/watch-icon-hl.svg')
}
#ca-unwatch.icon a.loading,#ca-watch.icon a.loading{
background-image:url('skins/Vector/images/watch-icon-loading.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/watch-icon-loading.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/watch-icon-loading.svg');
-webkit-animation:rotate 700ms infinite linear;
-moz-animation:rotate 700ms infinite linear;
-o-animation:rotate 700ms infinite linear;
animation:rotate 700ms infinite linear;
outline:none;
cursor:default;
pointer-events:none;
background-position:50% 60%;
-webkit-transform-origin:50% 57%;
transform-origin:50% 57%
}
#ca-unwatch.icon a span,#ca-watch.icon a span{
display:none
}
#mw-navigation h2{
position:absolute;
top:-9999px
}
#mw-page-base{
height:5em;
background-position:bottom left;
background-repeat:repeat-x;
background-image:url('skins/Vector/images/page-fade.png');
background-color:#2a2a2a;
background-image:-moz-linear-gradient(top, #333 50%, #2a2a2a 100%);
background-image:-webkit-gradient(linear, left top, left bottom, color-stop(50%, #333), color-stop(100%, #2a2a2a));
background-image:-webkit-linear-gradient(top, #333 50%, #2a2a2a 100%);
background-image:linear-gradient(#333 50%, #2a2a2a 100%);
background-color:#333
}
#mw-head-base{
margin-top:-5em;
margin-left:10em;
height:5em
}
div#mw-head{
position:absolute;
top:0;
right:0;
width:100%
}
div#mw-head h3{
margin:0;
padding:0
}
#left-navigation{
float:left;
margin-left:10em;
margin-top:2.5em;
margin-bottom:-2.5em;
display:inline
}
#right-navigation{
float:right;
margin-top:2.5em
}
#p-logo{
position:absolute;
top:-160px;
left:0;
width:10em;
height:160px
}
#p-logo a{
display:block;
width:10em;
height:160px;
background-repeat:no-repeat;
background-position:center center;
text-decoration:none
}
div#mw-panel{
font-size:inherit;
position:absolute;
top:160px;
padding-top:1em;
width:10em;
left:0
}
div#mw-panel div.portal{
margin:0 .6em 0 .7em;
padding:.25em 0;
direction:ltr;
background-position:top left;
background-repeat:no-repeat;
background-image:
/* @embed */
url('skins/Vector/images/portal-break.png')
}
div#mw-panel div.portal h3{
font-size:.75em;
color:#4d4d4d;
font-weight:normal;
margin:0;
padding:.25em 0 .25em .25em;
cursor:default;
border:none
}
div#mw-panel div.portal div.body{
margin:0 0 0 1.25em;
padding-top:0
}
div#mw-panel div.portal div.body ul{
list-style-type:none;
list-style-image:none;
margin:0;
padding:0
}
div#mw-panel div.portal div.body ul li{
line-height:1.125em;
margin:0;
padding:.25em 0;
font-size:.75em;
word-wrap:break-word
}
div#mw-panel div.portal div.body ul li a{
color:#e69710
}
div#mw-panel div.portal div.body ul li a:visited{
color:#8a7f6c
}
div#mw-panel div.portal.first{
background-image:none;
margin-top:0
}
div#mw-panel div.portal.first h3{
display:none
}
div#mw-panel div.portal.first div.body{
margin-left:.5em
}
div#footer{
margin-left:10em;
margin-top:0;
padding:.75em;
direction:ltr
}
div#footer ul{
list-style-type:none;
list-style-image:none;
margin:0;
padding:0
}
div#footer ul li{
margin:0;
padding:0;
padding-top:.5em;
padding-bottom:.5em;
color:#333;
font-size:.7em
}
div#footer #footer-icons{
float:right
}
div#footer #footer-icons li{
float:left;
margin-left:.5em;
line-height:2em;
text-align:right
}
div#footer #footer-info li{
line-height:1.4em
}
div#footer #footer-places li{
float:left;
margin-right:1em;
line-height:2em
}
body.ltr div#footer #footer-places{
float:left
}
.mw-body .external{
background-position:center right;
background-repeat:no-repeat;
background-image:url('skins/Vector/images/external-link-ltr-icon.png');
background-image:-webkit-linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/external-link-ltr-icon.svg');
background-image:linear-gradient(transparent, transparent),
/* @embed */
url('skins/Vector/images/external-link-ltr-icon.svg');
padding-right:13px
}

Unbound

2021-12-09T19:11:47Z

Deathbybandaid: /* Conf file */

=Opening Disclaimers=
==Proxmox==
This Guide is written based on the use of [[Proxmox-VE]] version 7.0 and more specifically [[Proxmox_LXC]]. These instructions should be adaptable to other situations.
===Container Creation===
====General====
*Unpriviliged container: checked
*Nesting: unchecked
====Template====
*Template: ubuntu-21.04-standard_21.04-1_amd64
====Disks====
*Disk Size (GiB): 4
====CPU====
Cores: 1
====Memory====
*Memory (MiB): 256
*Swap (MiB): 512
====Network====
*IPv4 Static
*IPv4 Gateway
====DNS====
*DNS Servers: 8.8.8.8 (Change to 127.0.0.1 post-install)
====Confirm====
*Start After Created: unchecked
===Container Tweaks===
====Options====
*Start at boot: yes
===Container First Run Steps===
Run Updates
<nowiki>apt update && apt full-upgrade -y</nowiki>
Add a sudo user
<nowiki>adduser sysop</nowiki>
<nowiki>usermod -aG sudo sysop</nowiki>
Cleanup The Container for some easy space savings.
<nowiki>apt autoremove -y && apt clean -y</nowiki>
=Unbound Installation=
==My Insights==
*It's good practice to have both 2 instances of Unbound, so you can update one at a time, and still have DNS for your home network. You can either follow this guide twice, or clone the container.
==Prerequisite Guide(s)==
==Dependency Installs==
==Unbound Installation==
<nowiki>apt install unbound</nowiki>
Let's free up port 53 from systemd-resolved
<nowiki>nano /etc/systemd/resolved.conf</nowiki>
Change
<nowiki>#DNSStubListener=yes</nowiki>
To
<nowiki>DNSStubListener=no</nowiki>
Change
<nowiki>#DNS=</nowiki>
To
<nowiki>DNS=127.0.0.1</nowiki>
===For Use With Pi-Hole===

==== Root Hints from Package Manager ====
If you have `dns-root-data` installed skip the below script.

====Root Hints Updating By Script====
<nowiki>nano /home/root_hints_update.sh</nowiki>

<nowiki>

#!/bin/bash

ROOTSURL=https://www.internic.net/domain/named.root
CURRENTROOTS=/var/lib/unbound/root.hints
TEMPROOTS=/tmp/root.hints
DOWNLOADFRESH=false

if [[ -f $CURRENTROOTS ]]
then
echo "Checking existing file"
SOURCEMODIFIEDLAST=$(curl --silent --head $ROOTSURL | awk -F: '/^Last-Modified/ { print $2 }')
SOURCEMODIFIEDTIME=$(date --date="$SOURCEMODIFIEDLAST" +%s)
LOCALFILEMODIFIEDLAST=$(stat -c %z "$CURRENTROOTS")
LOCALFILEMODIFIEDTIME=$(date --date="$LOCALFILEMODIFIEDLAST" +%s)
if [[ $LOCALFILEMODIFIEDTIME -lt $SOURCEMODIFIEDTIME ]]
then
DOWNLOADFRESH=true
echo "File updated online"
else
echo "File not updated online"
fi
else
DOWNLOADFRESH=true
echo "File Missing"
fi

if [[ $DOWNLOADFRESH = true ]]
then
echo "Attempting to download file"
wget -O $TEMPROOTS $ROOTSURL
FETCHFILESIZE=$(stat -c%s $TEMPROOTS)
if [[ $FETCHFILESIZE -gt 0 ]]
then
mv $TEMPROOTS $CURRENTROOTS
else
echo "File download failed"
fi
else
echo "Not downloading file"
fi

# restart unbound
if [[ $DOWNLOADFRESH = true ]]
then
service unbound restart
fi
</nowiki>

<nowiki>bash /home/root_hints_update.sh</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>0 0 * * 0 /bin/bash /home/root_hints_update.sh</nowiki>
====Conf file====
<nowiki>nano /etc/unbound/unbound.conf.d/pi-hole.conf</nowiki>

server:
# If no logfile is specified, syslog is used
# logfile: "/var/log/unbound/unbound.log"
verbosity: 0

# all interfaces
interface: 0.0.0.0
interface:e::0

port: 53
do-ip4: yes
do-udp: yes
do-tcp: yes

# May be set to yes if you have IPv6 connectivity
do-ip6: no

# Use this only when you downloaded the list of primary root servers!
root-hints: "/var/lib/unbound/root.hints" # If using above script
#/usr/share/dns/root.hints from package maintainer

# Trust glue only if it is within the servers authority
harden-glue: yes

# Require DNSSEC data for trust-anchored zones, if such data is absent, the zone becomes BOGUS
harden-dnssec-stripped: yes

# Don't use Capitalization randomization as it known to cause DNSSEC issues sometimes
# see <nowiki>https://discourse.pi-hole.net/t/unbound-stubby-or-dnscrypt-proxy/9378</nowiki> for further details
use-caps-for-id: no

# Reduce EDNS reassembly buffer size.
# Suggested by the unbound man page to reduce fragmentation reassembly problems
edns-buffer-size: 1472

# TTL bounds for cache
cache-min-ttl: 3600
cache-max-ttl: 86400

# Perform prefetching of close to expired message cache entries
# This only applies to domains that have been frequently queried
prefetch: yes

# One thread should be sufficient, can be increased on beefy machines
num-threads: 1

# Ensure kernel buffer is large enough to not loose messages in traffic spikes
so-rcvbuf: 1m

# Ensure privacy of local IP ranges
private-address: 192.168.0.0/16
private-address: 169.254.0.0/16
private-address: 172.16.0.0/12
private-address: 10.0.0.0/8
private-address: fd00::/8
private-address: fe80::/10

# Allow access from local IP ranges
access-control: 192.168.0.0/16 allow
access-control: 169.254.0.0/16 allow
access-control: 172.16.0.0/12 allow
access-control: 10.0.0.0/8 allow
access-control: fd00::/8 allow
access-control: fe80::/10 allow

# Allow access all IP ranges
#access-control: 0.0.0.0/0 allow
If you run into issues with Plex Rebind feel free to add
<nowiki>
# Plex Rebind fix
private-domain: plex.direct
</nowiki>

<nowiki>service unbound restart</nowiki>

Unbound

2021-12-09T17:40:26Z

Deathbybandaid: /* Conf file */

=Opening Disclaimers=
==Proxmox==
This Guide is written based on the use of [[Proxmox-VE]] version 7.0 and more specifically [[Proxmox_LXC]]. These instructions should be adaptable to other situations.
===Container Creation===
====General====
*Unpriviliged container: checked
*Nesting: unchecked
====Template====
*Template: ubuntu-21.04-standard_21.04-1_amd64
====Disks====
*Disk Size (GiB): 4
====CPU====
Cores: 1
====Memory====
*Memory (MiB): 256
*Swap (MiB): 512
====Network====
*IPv4 Static
*IPv4 Gateway
====DNS====
*DNS Servers: 8.8.8.8 (Change to 127.0.0.1 post-install)
====Confirm====
*Start After Created: unchecked
===Container Tweaks===
====Options====
*Start at boot: yes
===Container First Run Steps===
Run Updates
<nowiki>apt update && apt full-upgrade -y</nowiki>
Add a sudo user
<nowiki>adduser sysop</nowiki>
<nowiki>usermod -aG sudo sysop</nowiki>
Cleanup The Container for some easy space savings.
<nowiki>apt autoremove -y && apt clean -y</nowiki>
=Unbound Installation=
==My Insights==
*It's good practice to have both 2 instances of Unbound, so you can update one at a time, and still have DNS for your home network. You can either follow this guide twice, or clone the container.
==Prerequisite Guide(s)==
==Dependency Installs==
==Unbound Installation==
<nowiki>apt install unbound</nowiki>
Let's free up port 53 from systemd-resolved
<nowiki>nano /etc/systemd/resolved.conf</nowiki>
Change
<nowiki>#DNSStubListener=yes</nowiki>
To
<nowiki>DNSStubListener=no</nowiki>
Change
<nowiki>#DNS=</nowiki>
To
<nowiki>DNS=127.0.0.1</nowiki>
===For Use With Pi-Hole===

==== Root Hints from Package Manager ====
If you have `dns-root-data` installed skip the below script.

====Root Hints Updating By Script====
<nowiki>nano /home/root_hints_update.sh</nowiki>

<nowiki>

#!/bin/bash

ROOTSURL=https://www.internic.net/domain/named.root
CURRENTROOTS=/var/lib/unbound/root.hints
TEMPROOTS=/tmp/root.hints
DOWNLOADFRESH=false

if [[ -f $CURRENTROOTS ]]
then
echo "Checking existing file"
SOURCEMODIFIEDLAST=$(curl --silent --head $ROOTSURL | awk -F: '/^Last-Modified/ { print $2 }')
SOURCEMODIFIEDTIME=$(date --date="$SOURCEMODIFIEDLAST" +%s)
LOCALFILEMODIFIEDLAST=$(stat -c %z "$CURRENTROOTS")
LOCALFILEMODIFIEDTIME=$(date --date="$LOCALFILEMODIFIEDLAST" +%s)
if [[ $LOCALFILEMODIFIEDTIME -lt $SOURCEMODIFIEDTIME ]]
then
DOWNLOADFRESH=true
echo "File updated online"
else
echo "File not updated online"
fi
else
DOWNLOADFRESH=true
echo "File Missing"
fi

if [[ $DOWNLOADFRESH = true ]]
then
echo "Attempting to download file"
wget -O $TEMPROOTS $ROOTSURL
FETCHFILESIZE=$(stat -c%s $TEMPROOTS)
if [[ $FETCHFILESIZE -gt 0 ]]
then
mv $TEMPROOTS $CURRENTROOTS
else
echo "File download failed"
fi
else
echo "Not downloading file"
fi

# restart unbound
if [[ $DOWNLOADFRESH = true ]]
then
service unbound restart
fi
</nowiki>

<nowiki>bash /home/root_hints_update.sh</nowiki>

<nowiki>crontab -e</nowiki>

<nowiki>0 0 * * 0 /bin/bash /home/root_hints_update.sh</nowiki>
====Conf file====
<nowiki>nano /etc/unbound/unbound.conf.d/pi-hole.conf</nowiki>

server:
# If no logfile is specified, syslog is used
# logfile: "/var/log/unbound/unbound.log"
verbosity: 0

# all interfaces
interface: 0.0.0.0
interface: ::0

port: 53
do-ip4: yes
do-udp: yes
do-tcp: yes

# May be set to yes if you have IPv6 connectivity
do-ip6: no

# Use this only when you downloaded the list of primary root servers!
root-hints: "/var/lib/unbound/root.hints" # If using above script
#/usr/share/dns/root.hints from package maintainer

# Trust glue only if it is within the servers authority
harden-glue: yes

# Require DNSSEC data for trust-anchored zones, if such data is absent, the zone becomes BOGUS
harden-dnssec-stripped: yes

# Don't use Capitalization randomization as it known to cause DNSSEC issues sometimes
# see <nowiki>https://discourse.pi-hole.net/t/unbound-stubby-or-dnscrypt-proxy/9378</nowiki> for further details
use-caps-for-id: no

# Reduce EDNS reassembly buffer size.
# Suggested by the unbound man page to reduce fragmentation reassembly problems
edns-buffer-size: 1472

# TTL bounds for cache
cache-min-ttl: 3600
cache-max-ttl: 86400

# Perform prefetching of close to expired message cache entries
# This only applies to domains that have been frequently queried
prefetch: yes

# One thread should be sufficient, can be increased on beefy machines
num-threads: 1

# Ensure kernel buffer is large enough to not loose messages in traffic spikes
so-rcvbuf: 1m

# Ensure privacy of local IP ranges
private-address: 192.168.0.0/16
private-address: 169.254.0.0/16
private-address: 172.16.0.0/12
private-address: 10.0.0.0/8
private-address: fd00::/8
private-address: fe80::/10

If you run into issues with Plex Rebind feel free to add
<nowiki>
# Plex Rebind fix
private-domain: plex.direct
</nowiki>

<nowiki>service unbound restart</nowiki>

Apt-Cacher NG

2021-12-09T15:23:32Z

Deathbybandaid: /* Client Config */

=Opening Disclaimers=
==Proxmox==
This Guide is written based on the use of [[Proxmox-VE]] version 7.0 and more specifically [[Proxmox_LXC]]. These instructions should be adaptable to other situations.
===Container Creation===
====General====
*Unpriviliged container: checked
*Nesting: unchecked
====Template====
*Template: ubuntu-21.04-standard_21.04-1_amd64
====Disks====
*Disk Size (GiB): 4
====CPU====
Cores: 1
====Memory====
*Memory (MiB): 256
*Swap (MiB): 512
====Network====
*IPv4 Static
*IPv4 Gateway
====DNS====
*DNS Servers: 8.8.8.8 (Change to 127.0.0.1 post-install)
====Confirm====
*Start After Created: unchecked
===Container Tweaks===
====Options====
*Start at boot: yes
===Container First Run Steps===
Run Updates
<nowiki>apt update && apt full-upgrade -y</nowiki>
Add a sudo user
<nowiki>adduser sysop</nowiki>
<nowiki>usermod -aG sudo sysop</nowiki>
Cleanup The Container for some easy space savings.
<nowiki>apt autoremove -y && apt clean -y</nowiki>
=Apt-Cacher NG Installation=
<nowiki>apt-get install apt-cacher-ng</nowiki>
=Client Config=
<nowiki>echo 'Acquire::http { Proxy "http://proxy:3142"; }' | sudo tee -a /etc/apt/apt.conf.d/00proxy</nowiki>
OR

nano /etc/apt/apt.conf.d/00proxy
<code>Acquire {
HTTP::proxy "<nowiki>http://proxy_server:port/</nowiki>";
HTTPS::proxy "<nowiki>http://proxy_server:port/</nowiki>";
}</code>
=Tweaks=
<nowiki>nano /etc/apt-cacher-ng/acng.conf</nowiki>
add to the bottom
<nowiki>PassThroughPattern: .*</nowiki>
Find this section and tweak:
<nowiki>
# Repository remapping. See manual for details.
# In this example, some backends files might be generated during package
# installation using information collected on the system.
# Examples:
Remap-debrep: file:deb_mirror*.gz /debian ; file:backends_debian # Debian Archives
Remap-uburep: file:ubuntu_mirrors /ubuntu ; file:backends_ubuntu # Ubuntu Archives
Remap-uburepsec: security.ubuntu.com /uburepsec ; file:backends_ubuntu
Remap-cygwin: file:cygwin_mirrors /cygwin # ; file:backends_cygwin # incomplete, please create this file or specify preferred mirrors here
Remap-sfnet: file:sfnet_mirrors # ; file:backends_sfnet # incomplete, please create this file or specify preferred mirrors here
Remap-alxrep: file:archlx_mirrors /archlinux # ; file:backend_archlx # Arch Linux
Remap-fedora: file:fedora_mirrors # Fedora Linux
Remap-epel: file:epel_mirrors # Fedora EPEL
Remap-slrep: file:sl_mirrors # Scientific Linux
Remap-gentoo: file:gentoo_mirrors.gz /gentoo ; file:backends_gentoo # Gentoo Archives
Remap-openjdk: file:openjdk /openjdk ; file:openjdk
</nowiki>
Create this file if not there
<nowiki>nano /etc/apt-cacher-ng/sfnet_mirrors</nowiki>

<nowiki>
http://biznetnetworks.dl.sourceforge.net/project/
http://cdnetworks-us-1.dl.sourceforge.net/project/
http://citylan.dl.sourceforge.net/project/
http://dfn.dl.sourceforge.net/project/
http://fastbull.dl.sourceforge.net/project/
http://freefr.dl.sourceforge.net/project/
http://garr.dl.sourceforge.net/project/
http://heanet.dl.sourceforge.net/project/
http://hivelocity.dl.sourceforge.net/project/
http://ignum.dl.sourceforge.net/project/
http://internode.dl.sourceforge.net/project/
http://iweb.dl.sourceforge.net/project/
http://jaist.dl.sourceforge.net/project/
http://kent.dl.sourceforge.net/project/
http://mesh.dl.sourceforge.net/project/
http://nchc.dl.sourceforge.net/project/
http://ncu.dl.sourceforge.net/project/
http://netcologne.dl.sourceforge.net/project/
http://ovh.dl.sourceforge.net/project/
http://puzzle.dl.sourceforge.net/project/
http://softlayer.dl.sourceforge.net/project/
http://space.dl.sourceforge.net/project/
http://sunet.dl.sourceforge.net/project/
http://superb-east,.dl.sourceforge.net/project/
http://surfnet.dl.sourceforge.net/project/
http://switch.dl.sourceforge.net/project/
http://transact.dl.sourceforge.net/project/
http://ufpr.dl.sourceforge.net/project/
http://voxel.dl.sourceforge.net/project/
http://waix.dl.sourceforge.net/project/
</nowiki>

Apt-Cacher NG

2021-12-09T15:22:41Z

Deathbybandaid: /* Client Config */

=Opening Disclaimers=
==Proxmox==
This Guide is written based on the use of [[Proxmox-VE]] version 7.0 and more specifically [[Proxmox_LXC]]. These instructions should be adaptable to other situations.
===Container Creation===
====General====
*Unpriviliged container: checked
*Nesting: unchecked
====Template====
*Template: ubuntu-21.04-standard_21.04-1_amd64
====Disks====
*Disk Size (GiB): 4
====CPU====
Cores: 1
====Memory====
*Memory (MiB): 256
*Swap (MiB): 512
====Network====
*IPv4 Static
*IPv4 Gateway
====DNS====
*DNS Servers: 8.8.8.8 (Change to 127.0.0.1 post-install)
====Confirm====
*Start After Created: unchecked
===Container Tweaks===
====Options====
*Start at boot: yes
===Container First Run Steps===
Run Updates
<nowiki>apt update && apt full-upgrade -y</nowiki>
Add a sudo user
<nowiki>adduser sysop</nowiki>
<nowiki>usermod -aG sudo sysop</nowiki>
Cleanup The Container for some easy space savings.
<nowiki>apt autoremove -y && apt clean -y</nowiki>
=Apt-Cacher NG Installation=
<nowiki>apt-get install apt-cacher-ng</nowiki>
=Client Config=
<nowiki>echo 'Acquire::http { Proxy "http://proxy:3142"; }' | sudo tee -a /etc/apt/apt.conf.d/00proxy</nowiki>
<code>Acquire {
HTTP::proxy "<nowiki>http://proxy_server:port/</nowiki>";
HTTPS::proxy "<nowiki>http://proxy_server:port/</nowiki>";
}</code>
=Tweaks=
<nowiki>nano /etc/apt-cacher-ng/acng.conf</nowiki>
add to the bottom
<nowiki>PassThroughPattern: .*</nowiki>
Find this section and tweak:
<nowiki>
# Repository remapping. See manual for details.
# In this example, some backends files might be generated during package
# installation using information collected on the system.
# Examples:
Remap-debrep: file:deb_mirror*.gz /debian ; file:backends_debian # Debian Archives
Remap-uburep: file:ubuntu_mirrors /ubuntu ; file:backends_ubuntu # Ubuntu Archives
Remap-uburepsec: security.ubuntu.com /uburepsec ; file:backends_ubuntu
Remap-cygwin: file:cygwin_mirrors /cygwin # ; file:backends_cygwin # incomplete, please create this file or specify preferred mirrors here
Remap-sfnet: file:sfnet_mirrors # ; file:backends_sfnet # incomplete, please create this file or specify preferred mirrors here
Remap-alxrep: file:archlx_mirrors /archlinux # ; file:backend_archlx # Arch Linux
Remap-fedora: file:fedora_mirrors # Fedora Linux
Remap-epel: file:epel_mirrors # Fedora EPEL
Remap-slrep: file:sl_mirrors # Scientific Linux
Remap-gentoo: file:gentoo_mirrors.gz /gentoo ; file:backends_gentoo # Gentoo Archives
Remap-openjdk: file:openjdk /openjdk ; file:openjdk
</nowiki>
Create this file if not there
<nowiki>nano /etc/apt-cacher-ng/sfnet_mirrors</nowiki>

<nowiki>
http://biznetnetworks.dl.sourceforge.net/project/
http://cdnetworks-us-1.dl.sourceforge.net/project/
http://citylan.dl.sourceforge.net/project/
http://dfn.dl.sourceforge.net/project/
http://fastbull.dl.sourceforge.net/project/
http://freefr.dl.sourceforge.net/project/
http://garr.dl.sourceforge.net/project/
http://heanet.dl.sourceforge.net/project/
http://hivelocity.dl.sourceforge.net/project/
http://ignum.dl.sourceforge.net/project/
http://internode.dl.sourceforge.net/project/
http://iweb.dl.sourceforge.net/project/
http://jaist.dl.sourceforge.net/project/
http://kent.dl.sourceforge.net/project/
http://mesh.dl.sourceforge.net/project/
http://nchc.dl.sourceforge.net/project/
http://ncu.dl.sourceforge.net/project/
http://netcologne.dl.sourceforge.net/project/
http://ovh.dl.sourceforge.net/project/
http://puzzle.dl.sourceforge.net/project/
http://softlayer.dl.sourceforge.net/project/
http://space.dl.sourceforge.net/project/
http://sunet.dl.sourceforge.net/project/
http://superb-east,.dl.sourceforge.net/project/
http://surfnet.dl.sourceforge.net/project/
http://switch.dl.sourceforge.net/project/
http://transact.dl.sourceforge.net/project/
http://ufpr.dl.sourceforge.net/project/
http://voxel.dl.sourceforge.net/project/
http://waix.dl.sourceforge.net/project/
</nowiki>

MediaWiki:Vector.css

2021-12-08T21:12:12Z

Deathbybandaid:

/* CSS placed here will affect users of the Vector skin */
/* Override Vector colour scheme to make it dark (compiled from modified LESS code) */
h1,h2,h3,h4,h5,h6{color:#c1c1c1}hr{color:#222}.editOptions{background-color:#333;border-color:#4c4c4c}input,textarea{background-color:#4c4c4c;border-color:#4c4c4c;color:#c1c1c1}a,.mw-body a.external,.mw-body a.extiw{color:#e69710}a:visited,.mw-body a.external:visited,.mw-body a.extiw:visited{color:#8a7f6c}a.new,#p-personal a.new{color:#d44}ul{list-style-image:none}div.thumbinner,.catlinks{background-color:#4c4c4c;border-color:#666}#toc,div.toc,ul#filetoc,li.gallerybox div.thumb{background-color:#4c4c4c;border-color:#666}code{border:none;background-color:inherit;color:inherit}table.mw_metadata td,table.mw_metadata th,table.wikitable,table.wikitable>*>tr>th,table.wikitable>*>tr>td,pre{color:#c1c1c1;background-color:#4c4c4c;border-color:#666}table.mw_metadata th,table.wikitable>*>tr>th{background-color:#595959}table.diff{background-color:#4c4c4c}td .diffchange{color:#4c4c4c}#pagehistory li.selected,td.diff-context{background-color:inherit;color:inherit}#pagehistory li{border:0}ul.mw-gallery-packed-hover li.gallerybox:hover div.gallerytextwrapper,ul.mw-gallery-packed-overlay li.gallerybox div.gallerytextwrapper,ul.mw-gallery-packed-hover li.gallerybox.mw-gallery-focused div.gallerytextwrapper{background-color:rgba(0,0,0,0.8)}#left-navigation div.vectorTabs,#right-navigation div.vectorTabs{background-image:inherit;background-color:#250b2d}#left-navigation div.vectorTabs ul,#right-navigation div.vectorTabs ul{background-color:#250b2d}#left-navigation div.vectorTabs ul li,#right-navigation div.vectorTabs ul li{background-color:#222;background-image:-moz-linear-gradient(top, #2e2e2e 20%, #222 100%);background-image:-webkit-gradient(linear, left top, left bottom, color-stop(20%, #2e2e2e), color-stop(100%, #222));background-image:-webkit-linear-gradient(top, #2e2e2e 20%, #222 100%);background-image:linear-gradient(#2e2e2e 20%, #222 100%)}#left-navigation div.vectorTabs li.new a,#right-navigation div.vectorTabs li.new a,#left-navigation div.vectorTabs li.new a:visited,#right-navigation div.vectorTabs li.new a:visited{color:#d44}#left-navigation div.vectorTabs li.selected,#right-navigation div.vectorTabs li.selected{background-color:#333;background-image:-moz-linear-gradient(top, #e69710 0, #333 10%);background-image:-webkit-gradient(linear, left top, left bottom, color-stop(0, #e69710), color-stop(10%, #333));background-image:-webkit-linear-gradient(top, #e69710 0, #333 10%);background-image:linear-gradient(#e69710 0, #333 10%)}#left-navigation div.vectorTabs li.selected a,#right-navigation div.vectorTabs li.selected a,#left-navigation div.vectorTabs li.selected a:visited,#right-navigation div.vectorTabs li.selected a:visited{color:#8a7f6c}#left-navigation div.vectorTabs li a,#right-navigation div.vectorTabs li a{color:#e69710}#left-navigation div.vectorTabs span,#right-navigation div.vectorTabs span{background:transparent}div#mw-head #right-navigation div.vectorMenu h3{background:inherit}div#mw-head div.vectorMenu h3 span{color:#e69710}div.vectorMenu h3 a{background:inherit}div.vectorMenu ul{background-color:black;border:solid 1px #0c0c0c}div.vectorMenu li a{color:#e69710}div.vectorMenu li.selected a,div.vectorMenu li.selected a:visited{color:#8a7f6c;text-decoration:none}div.vectorMenu#p-cactions div.menu{border-color:#666}div.vectorMenu#p-cactions ul{border:0;background-color:#4c4c4c}#mw-navigation div#mw-panel div.portal{background-image:none;border-top:1px solid #4c4c4c}#mw-navigation div#mw-panel div.portal#p-logo,#mw-navigation div#mw-panel div.portal#p-navigation{border-top:none}html{font-size:100%}html,body{height:100%;margin:0;padding:0;font-family:sans-serif}body{background-color:#2a2a2a}.mw-body{margin-left:10em;padding:1em;border:1px solid #250b2d;border-right-width:0;margin-top:-1px;background-color:#333;color:#c1c1c1;direction:ltr}.mw-body .mw-editsection,.mw-body .mw-editsection-like{font-family:sans-serif}.mw-body p{line-height:inherit;margin:.5em 0}.mw-body h1,.mw-body h2,.mw-body #firstHeading{font-family:"Linux Libertine",Georgia,Times,serif;line-height:1.3;margin-bottom:.25em;padding:0}.mw-body h1,.mw-body #firstHeading{font-size:1.8em}.mw-body h2{font-size:1.5em;margin-top:1em}.mw-body h3,.mw-body h4,.mw-body h5,.mw-body h6{line-height:1.6;margin-top:.3em;margin-bottom:0;padding-bottom:0}.mw-body h3{font-size:1.17em}.mw-body h3,.mw-body h4{font-weight:bold}.mw-body h4,.mw-body h5,.mw-body h6{font-size:100%}.mw-body #toc h2,.mw-body .toc h2{font-size:100%;font-family:sans-serif}div.emptyPortlet{display:none}ul{list-style-type:disc;list-style-image:/* @embed */ url('skins/Vector/images/bullet-icon.png')}pre,.mw-code{line-height:1.3em}#siteNotice{font-size:.8em}.redirectText{font-size:140%}.redirectMsg img{vertical-align:text-bottom}.mw-body-content{position:relative;line-height:1.6;font-size:.875em}body.vector-animateLayout .mw-body,body.vector-animateLayout div#footer,body.vector-animateLayout #left-navigation{-webkit-transition:margin-left 250ms,padding 250ms;-moz-transition:margin-left 250ms,padding 250ms;-o-transition:margin-left 250ms,padding 250ms;transition:margin-left 250ms,padding 250ms}body.vector-animateLayout #p-logo{-webkit-transition:left 250ms;-moz-transition:left 250ms;-o-transition:left 250ms;transition:left 250ms}body.vector-animateLayout #mw-panel{-webkit-transition:padding-right 250ms;-moz-transition:padding-right 250ms;-o-transition:padding-right 250ms;transition:padding-right 250ms}body.vector-animateLayout #p-search{-webkit-transition:margin-right 250ms;-moz-transition:margin-right 250ms;-o-transition:margin-right 250ms;transition:margin-right 250ms}body.vector-animateLayout #p-personal{-webkit-transition:right 250ms;-moz-transition:right 250ms;-o-transition:right 250ms;transition:right 250ms}body.vector-animateLayout #mw-head-base{-webkit-transition:margin-left 250ms;-moz-transition:margin-left 250ms;-o-transition:margin-left 250ms;transition:margin-left 250ms}#p-personal{position:absolute;top:.33em;right:.75em;z-index:100}#p-personal h3{display:none}#p-personal ul{list-style-type:none;list-style-image:none;margin:0;padding-left:10em}#p-personal li{line-height:1.125em;float:left;margin-left:.75em;margin-top:.5em;font-size:.75em;white-space:nowrap}#pt-userpage,#pt-anonuserpage{background-position:left top;background-repeat:no-repeat;background-image:url('skins/Vector/images/user-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/user-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/user-icon.svg');padding-left:15px !important}#p-search{float:left;margin-right:.5em;margin-left:.5em}#p-search h3{display:none}#p-search form,#p-search input{margin:0;margin-top:.4em}div#simpleSearch{display:block;width:12.6em;padding-right:1.4em;height:1.4em;margin-top:.65em;position:relative;min-height:1px;border:solid 1px #aaa;color:black;background-color:white;background-image:/* @embed */ url('skins/Vector/images/search-fade.png');background-position:top left;background-repeat:repeat-x}div#simpleSearch input{margin:0;padding:0;border:0;background-color:transparent;color:black}div#simpleSearch #searchInput{width:100%;padding:.2em 0 .2em .2em;font-size:13px;direction:ltr;-webkit-appearance:textfield}div#simpleSearch #searchInput:focus{outline:none}div#simpleSearch #searchInput.placeholder{color:#999}div#simpleSearch #searchInput:-ms-input-placeholder{color:#999}div#simpleSearch #searchInput:-moz-placeholder{color:#999}div#simpleSearch #searchInput::-webkit-search-decoration,div#simpleSearch #searchInput::-webkit-search-cancel-button,div#simpleSearch #searchInput::-webkit-search-results-button,div#simpleSearch #searchInput::-webkit-search-results-decoration{-webkit-appearance:textfield}div#simpleSearch #searchButton,div#simpleSearch #mw-searchButton{position:absolute;top:0;right:0;width:1.65em;height:100%;cursor:pointer;text-indent:-99999px;line-height:1;direction:ltr;white-space:nowrap;overflow:hidden;background-image:url('skins/Vector/images/search-ltr.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/search-ltr.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/search-ltr.svg');background-position:center center;background-repeat:no-repeat}div#simpleSearch #mw-searchButton{z-index:1}div.vectorTabs h3{display:none}div.vectorTabs{float:left;height:2.5em;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-position:bottom left;background-repeat:no-repeat;padding-left:1px}div.vectorTabs ul{float:left;height:100%;list-style-type:none;list-style-image:none;margin:0;padding:0;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-position:right bottom;background-repeat:no-repeat}div.vectorTabs ul li{float:left;line-height:1.125em;display:inline-block;height:100%;margin:0;padding:0;background-color:#f3f3f3;background-image:/* @embed */ url('skins/Vector/images/tab-normal-fade.png');background-position:bottom left;background-repeat:repeat-x;white-space:nowrap}div.vectorTabs ul>li{display:block}div.vectorTabs li.new a,div.vectorTabs li.new a:visited{color:#a55858}div.vectorTabs li.selected{background-image:/* @embed */ url('skins/Vector/images/tab-current-fade.png')}div.vectorTabs li.selected a,div.vectorTabs li.selected a:visited{color:#333;text-decoration:none}div.vectorTabs li.icon a{background-position:bottom right;background-repeat:no-repeat}div.vectorTabs li a{display:inline-block;height:1.9em;padding-left:.5em;padding-right:.5em;color:#e69710;cursor:pointer;font-size:.8em}div.vectorTabs li>a{display:block}div.vectorTabs span{display:inline-block;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-position:bottom right;background-repeat:no-repeat}div.vectorTabs span a{display:inline-block;padding-top:1.25em}div.vectorTabs span>a{float:left;display:block}div.vectorMenu{direction:ltr;float:left;cursor:pointer;position:relative}body.rtl div.vectorMenu{direction:rtl}div#mw-head div.vectorMenu h3{float:left;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-repeat:no-repeat;background-position:bottom right;margin-left:-1px;font-size:1em;height:2.5em;padding-right:1px;margin-right:-1px}div.vectorMenu h3 span{display:block;font-size:.8em;padding-left:.7em;padding-top:1.375em;margin-right:20px;font-weight:normal;color:#4d4d4d}div.vectorMenu h3 a{position:absolute;top:0;right:0;width:20px;height:2.5em;background-image:url('skins/Vector/images/arrow-down-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-icon.svg');background-position:100% 70%;background-repeat:no-repeat;-webkit-transition:background-position 250ms;-moz-transition:background-position 250ms;-o-transition:background-position 250ms;transition:background-position 250ms}div.vectorMenu.menuForceShow h3 a{background-position:100% 100%}div.vectorMenuFocus h3 a{background-image:url('skins/Vector/images/arrow-down-focus-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-focus-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-focus-icon.svg')}div.vectorMenu div.menu{min-width:100%;position:absolute;top:2.5em;left:-1px;background-color:white;border:solid 1px silver;border-top-width:0;clear:both;text-align:left;display:none}div.vectorMenu:hover div.menu,div.vectorMenu.menuForceShow div.menu{display:block}div.vectorMenu ul{list-style-type:none;list-style-image:none;padding:0;margin:0;text-align:left}div.vectorMenu ul,x:-moz-any-link{min-width:5em}div.vectorMenu ul,x:-moz-any-link,x:default{min-width:0}div.vectorMenu li{padding:0;margin:0;text-align:left;line-height:1em}div.vectorMenu li a{display:inline-block;padding:.5em;white-space:nowrap;color:#e69710;cursor:pointer;font-size:.8em}div.vectorMenu li>a{display:block}div.vectorMenu li.selected a,div.vectorMenu li.selected a:visited{color:#333;text-decoration:none}@-webkit-keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}@-moz-keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}@-o-keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}#ca-unwatch.icon a,#ca-watch.icon a{margin:0;padding:0;display:block;width:26px;padding-top:3.1em;margin-top:0;height:0;overflow:hidden;background-position:5px 60%}#ca-unwatch.icon a{background-image:url('skins/Vector/images/unwatch-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon.svg')}#ca-watch.icon a{background-image:url('skins/Vector/images/watch-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon.svg')}#ca-unwatch.icon a:hover,#ca-unwatch.icon a:focus{background-image:url('skins/Vector/images/unwatch-icon-hl.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon-hl.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon-hl.svg')}#ca-watch.icon a:hover,#ca-watch.icon a:focus{background-image:url('skins/Vector/images/watch-icon-hl.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-hl.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-hl.svg')}#ca-unwatch.icon a.loading,#ca-watch.icon a.loading{background-image:url('skins/Vector/images/watch-icon-loading.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-loading.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-loading.svg');-webkit-animation:rotate 700ms infinite linear;-moz-animation:rotate 700ms infinite linear;-o-animation:rotate 700ms infinite linear;animation:rotate 700ms infinite linear;outline:none;cursor:default;pointer-events:none;background-position:50% 60%;-webkit-transform-origin:50% 57%;transform-origin:50% 57%}#ca-unwatch.icon a span,#ca-watch.icon a span{display:none}#mw-navigation h2{position:absolute;top:-9999px}#mw-page-base{height:5em;background-position:bottom left;background-repeat:repeat-x;background-image:url('skins/Vector/images/page-fade.png');background-color:#2a2a2a;background-image:-moz-linear-gradient(top, #333 50%, #2a2a2a 100%);background-image:-webkit-gradient(linear, left top, left bottom, color-stop(50%, #333), color-stop(100%, #2a2a2a));background-image:-webkit-linear-gradient(top, #333 50%, #2a2a2a 100%);background-image:linear-gradient(#333 50%, #2a2a2a 100%);background-color:#333}#mw-head-base{margin-top:-5em;margin-left:10em;height:5em}div#mw-head{position:absolute;top:0;right:0;width:100%}div#mw-head h3{margin:0;padding:0}#left-navigation{float:left;margin-left:10em;margin-top:2.5em;margin-bottom:-2.5em;display:inline}#right-navigation{float:right;margin-top:2.5em}#p-logo{position:absolute;top:-160px;left:0;width:10em;height:160px}#p-logo a{display:block;width:10em;height:160px;background-repeat:no-repeat;background-position:center center;text-decoration:none}div#mw-panel{font-size:inherit;position:absolute;top:160px;padding-top:1em;width:10em;left:0}div#mw-panel div.portal{margin:0 .6em 0 .7em;padding:.25em 0;direction:ltr;background-position:top left;background-repeat:no-repeat;background-image:/* @embed */ url('skins/Vector/images/portal-break.png')}div#mw-panel div.portal h3{font-size:.75em;color:#4d4d4d;font-weight:normal;margin:0;padding:.25em 0 .25em .25em;cursor:default;border:none}div#mw-panel div.portal div.body{margin:0 0 0 1.25em;padding-top:0}div#mw-panel div.portal div.body ul{list-style-type:none;list-style-image:none;margin:0;padding:0}div#mw-panel div.portal div.body ul li{line-height:1.125em;margin:0;padding:.25em 0;font-size:.75em;word-wrap:break-word}div#mw-panel div.portal div.body ul li a{color:#e69710}div#mw-panel div.portal div.body ul li a:visited{color:#8a7f6c}div#mw-panel div.portal.first{background-image:none;margin-top:0}div#mw-panel div.portal.first h3{display:none}div#mw-panel div.portal.first div.body{margin-left:.5em}div#footer{margin-left:10em;margin-top:0;padding:.75em;direction:ltr}div#footer ul{list-style-type:none;list-style-image:none;margin:0;padding:0}div#footer ul li{margin:0;padding:0;padding-top:.5em;padding-bottom:.5em;color:#333;font-size:.7em}div#footer #footer-icons{float:right}div#footer #footer-icons li{float:left;margin-left:.5em;line-height:2em;text-align:right}div#footer #footer-info li{line-height:1.4em}div#footer #footer-places li{float:left;margin-right:1em;line-height:2em}body.ltr div#footer #footer-places{float:left}.mw-body .external{background-position:center right;background-repeat:no-repeat;background-image:url('skins/Vector/images/external-link-ltr-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/external-link-ltr-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/external-link-ltr-icon.svg');padding-right:13px}

MediaWiki:Vector.css

2021-12-08T21:10:33Z

Deathbybandaid: Replaced content with "/* CSS placed here will affect users of the Vector skin */"

/* CSS placed here will affect users of the Vector skin */

Pfsense dynamic IP

2021-12-08T21:09:26Z

Deathbybandaid: Created page with "File:pfsense-dyndnsstart.png On this page, we will add domains and subdomains that should periodically update the DNS IP address records online for various services (when your ISP issues you a new IP address). This is the only way to host web/mail without paying extra monthly fee for having a static IP address. We will do this for dbbexample.net and mail.dbbexample.net File:pfsense-dyndnscreate.png"

[[File:pfsense-dyndnsstart.png]]

On this page, we will add domains and subdomains that should periodically update the DNS IP address records online for various services (when your ISP issues you a new IP address).

This is the only way to host web/mail without paying extra monthly fee for having a static IP address.

We will do this for dbbexample.net and mail.dbbexample.net

[[File:pfsense-dyndnscreate.png]]

MediaWiki:Vector.css

2021-12-08T21:06:12Z

Deathbybandaid: Created page with "/* CSS placed here will affect users of the Vector skin */ /* CSS placed here will affect users of the Vector skin */ /* Override Vector colour scheme to make it dark (compiled from modified LESS code) */ h1,h2,h3,h4,h5,h6{color:#c1c1c1}hr{color:#222}.editOptions{background-color:#333;border-color:#4c4c4c}input,textarea{background-color:#4c4c4c;border-color:#4c4c4c;color:#c1c1c1}a,.mw-body a.external,.mw-body a.extiw{color:#e69710}a:visited,.mw-body a.external:visited,..."

/* CSS placed here will affect users of the Vector skin */

/* CSS placed here will affect users of the Vector skin */

/* Override Vector colour scheme to make it dark (compiled from modified LESS code) */
h1,h2,h3,h4,h5,h6{color:#c1c1c1}hr{color:#222}.editOptions{background-color:#333;border-color:#4c4c4c}input,textarea{background-color:#4c4c4c;border-color:#4c4c4c;color:#c1c1c1}a,.mw-body a.external,.mw-body a.extiw{color:#e69710}a:visited,.mw-body a.external:visited,.mw-body a.extiw:visited{color:#8a7f6c}a.new,#p-personal a.new{color:#d44}ul{list-style-image:none}div.thumbinner,.catlinks{background-color:#4c4c4c;border-color:#666}#toc,div.toc,ul#filetoc,li.gallerybox div.thumb{background-color:#4c4c4c;border-color:#666}code{border:none;background-color:inherit;color:inherit}table.mw_metadata td,table.mw_metadata th,table.wikitable,table.wikitable>*>tr>th,table.wikitable>*>tr>td,pre{color:#c1c1c1;background-color:#4c4c4c;border-color:#666}table.mw_metadata th,table.wikitable>*>tr>th{background-color:#595959}table.diff{background-color:#4c4c4c}td .diffchange{color:#4c4c4c}#pagehistory li.selected,td.diff-context{background-color:inherit;color:inherit}#pagehistory li{border:0}ul.mw-gallery-packed-hover li.gallerybox:hover div.gallerytextwrapper,ul.mw-gallery-packed-overlay li.gallerybox div.gallerytextwrapper,ul.mw-gallery-packed-hover li.gallerybox.mw-gallery-focused div.gallerytextwrapper{background-color:rgba(0,0,0,0.8)}#left-navigation div.vectorTabs,#right-navigation div.vectorTabs{background-image:inherit;background-color:#250b2d}#left-navigation div.vectorTabs ul,#right-navigation div.vectorTabs ul{background-color:#250b2d}#left-navigation div.vectorTabs ul li,#right-navigation div.vectorTabs ul li{background-color:#222;background-image:-moz-linear-gradient(top, #2e2e2e 20%, #222 100%);background-image:-webkit-gradient(linear, left top, left bottom, color-stop(20%, #2e2e2e), color-stop(100%, #222));background-image:-webkit-linear-gradient(top, #2e2e2e 20%, #222 100%);background-image:linear-gradient(#2e2e2e 20%, #222 100%)}#left-navigation div.vectorTabs li.new a,#right-navigation div.vectorTabs li.new a,#left-navigation div.vectorTabs li.new a:visited,#right-navigation div.vectorTabs li.new a:visited{color:#d44}#left-navigation div.vectorTabs li.selected,#right-navigation div.vectorTabs li.selected{background-color:#333;background-image:-moz-linear-gradient(top, #e69710 0, #333 10%);background-image:-webkit-gradient(linear, left top, left bottom, color-stop(0, #e69710), color-stop(10%, #333));background-image:-webkit-linear-gradient(top, #e69710 0, #333 10%);background-image:linear-gradient(#e69710 0, #333 10%)}#left-navigation div.vectorTabs li.selected a,#right-navigation div.vectorTabs li.selected a,#left-navigation div.vectorTabs li.selected a:visited,#right-navigation div.vectorTabs li.selected a:visited{color:#8a7f6c}#left-navigation div.vectorTabs li a,#right-navigation div.vectorTabs li a{color:#e69710}#left-navigation div.vectorTabs span,#right-navigation div.vectorTabs span{background:transparent}div#mw-head #right-navigation div.vectorMenu h3{background:inherit}div#mw-head div.vectorMenu h3 span{color:#e69710}div.vectorMenu h3 a{background:inherit}div.vectorMenu ul{background-color:black;border:solid 1px #0c0c0c}div.vectorMenu li a{color:#e69710}div.vectorMenu li.selected a,div.vectorMenu li.selected a:visited{color:#8a7f6c;text-decoration:none}div.vectorMenu#p-cactions div.menu{border-color:#666}div.vectorMenu#p-cactions ul{border:0;background-color:#4c4c4c}#mw-navigation div#mw-panel div.portal{background-image:none;border-top:1px solid #4c4c4c}#mw-navigation div#mw-panel div.portal#p-logo,#mw-navigation div#mw-panel div.portal#p-navigation{border-top:none}html{font-size:100%}html,body{height:100%;margin:0;padding:0;font-family:sans-serif}body{background-color:#2a2a2a}.mw-body{margin-left:10em;padding:1em;border:1px solid #250b2d;border-right-width:0;margin-top:-1px;background-color:#333;color:#c1c1c1;direction:ltr}.mw-body .mw-editsection,.mw-body .mw-editsection-like{font-family:sans-serif}.mw-body p{line-height:inherit;margin:.5em 0}.mw-body h1,.mw-body h2,.mw-body #firstHeading{font-family:"Linux Libertine",Georgia,Times,serif;line-height:1.3;margin-bottom:.25em;padding:0}.mw-body h1,.mw-body #firstHeading{font-size:1.8em}.mw-body h2{font-size:1.5em;margin-top:1em}.mw-body h3,.mw-body h4,.mw-body h5,.mw-body h6{line-height:1.6;margin-top:.3em;margin-bottom:0;padding-bottom:0}.mw-body h3{font-size:1.17em}.mw-body h3,.mw-body h4{font-weight:bold}.mw-body h4,.mw-body h5,.mw-body h6{font-size:100%}.mw-body #toc h2,.mw-body .toc h2{font-size:100%;font-family:sans-serif}div.emptyPortlet{display:none}ul{list-style-type:disc;list-style-image:/* @embed */ url('skins/Vector/images/bullet-icon.png')}pre,.mw-code{line-height:1.3em}#siteNotice{font-size:.8em}.redirectText{font-size:140%}.redirectMsg img{vertical-align:text-bottom}.mw-body-content{position:relative;line-height:1.6;font-size:.875em}body.vector-animateLayout .mw-body,body.vector-animateLayout div#footer,body.vector-animateLayout #left-navigation{-webkit-transition:margin-left 250ms,padding 250ms;-moz-transition:margin-left 250ms,padding 250ms;-o-transition:margin-left 250ms,padding 250ms;transition:margin-left 250ms,padding 250ms}body.vector-animateLayout #p-logo{-webkit-transition:left 250ms;-moz-transition:left 250ms;-o-transition:left 250ms;transition:left 250ms}body.vector-animateLayout #mw-panel{-webkit-transition:padding-right 250ms;-moz-transition:padding-right 250ms;-o-transition:padding-right 250ms;transition:padding-right 250ms}body.vector-animateLayout #p-search{-webkit-transition:margin-right 250ms;-moz-transition:margin-right 250ms;-o-transition:margin-right 250ms;transition:margin-right 250ms}body.vector-animateLayout #p-personal{-webkit-transition:right 250ms;-moz-transition:right 250ms;-o-transition:right 250ms;transition:right 250ms}body.vector-animateLayout #mw-head-base{-webkit-transition:margin-left 250ms;-moz-transition:margin-left 250ms;-o-transition:margin-left 250ms;transition:margin-left 250ms}#p-personal{position:absolute;top:.33em;right:.75em;z-index:100}#p-personal h3{display:none}#p-personal ul{list-style-type:none;list-style-image:none;margin:0;padding-left:10em}#p-personal li{line-height:1.125em;float:left;margin-left:.75em;margin-top:.5em;font-size:.75em;white-space:nowrap}#pt-userpage,#pt-anonuserpage{background-position:left top;background-repeat:no-repeat;background-image:url('skins/Vector/images/user-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/user-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/user-icon.svg');padding-left:15px !important}#p-search{float:left;margin-right:.5em;margin-left:.5em}#p-search h3{display:none}#p-search form,#p-search input{margin:0;margin-top:.4em}div#simpleSearch{display:block;width:12.6em;padding-right:1.4em;height:1.4em;margin-top:.65em;position:relative;min-height:1px;border:solid 1px #aaa;color:black;background-color:white;background-image:/* @embed */ url('skins/Vector/images/search-fade.png');background-position:top left;background-repeat:repeat-x}div#simpleSearch input{margin:0;padding:0;border:0;background-color:transparent;color:black}div#simpleSearch #searchInput{width:100%;padding:.2em 0 .2em .2em;font-size:13px;direction:ltr;-webkit-appearance:textfield}div#simpleSearch #searchInput:focus{outline:none}div#simpleSearch #searchInput.placeholder{color:#999}div#simpleSearch #searchInput:-ms-input-placeholder{color:#999}div#simpleSearch #searchInput:-moz-placeholder{color:#999}div#simpleSearch #searchInput::-webkit-search-decoration,div#simpleSearch #searchInput::-webkit-search-cancel-button,div#simpleSearch #searchInput::-webkit-search-results-button,div#simpleSearch #searchInput::-webkit-search-results-decoration{-webkit-appearance:textfield}div#simpleSearch #searchButton,div#simpleSearch #mw-searchButton{position:absolute;top:0;right:0;width:1.65em;height:100%;cursor:pointer;text-indent:-99999px;line-height:1;direction:ltr;white-space:nowrap;overflow:hidden;background-image:url('skins/Vector/images/search-ltr.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/search-ltr.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/search-ltr.svg');background-position:center center;background-repeat:no-repeat}div#simpleSearch #mw-searchButton{z-index:1}div.vectorTabs h3{display:none}div.vectorTabs{float:left;height:2.5em;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-position:bottom left;background-repeat:no-repeat;padding-left:1px}div.vectorTabs ul{float:left;height:100%;list-style-type:none;list-style-image:none;margin:0;padding:0;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-position:right bottom;background-repeat:no-repeat}div.vectorTabs ul li{float:left;line-height:1.125em;display:inline-block;height:100%;margin:0;padding:0;background-color:#f3f3f3;background-image:/* @embed */ url('skins/Vector/images/tab-normal-fade.png');background-position:bottom left;background-repeat:repeat-x;white-space:nowrap}div.vectorTabs ul>li{display:block}div.vectorTabs li.new a,div.vectorTabs li.new a:visited{color:#a55858}div.vectorTabs li.selected{background-image:/* @embed */ url('skins/Vector/images/tab-current-fade.png')}div.vectorTabs li.selected a,div.vectorTabs li.selected a:visited{color:#333;text-decoration:none}div.vectorTabs li.icon a{background-position:bottom right;background-repeat:no-repeat}div.vectorTabs li a{display:inline-block;height:1.9em;padding-left:.5em;padding-right:.5em;color:#e69710;cursor:pointer;font-size:.8em}div.vectorTabs li>a{display:block}div.vectorTabs span{display:inline-block;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-position:bottom right;background-repeat:no-repeat}div.vectorTabs span a{display:inline-block;padding-top:1.25em}div.vectorTabs span>a{float:left;display:block}div.vectorMenu{direction:ltr;float:left;cursor:pointer;position:relative}body.rtl div.vectorMenu{direction:rtl}div#mw-head div.vectorMenu h3{float:left;background-image:/* @embed */ url('skins/Vector/images/tab-break.png');background-repeat:no-repeat;background-position:bottom right;margin-left:-1px;font-size:1em;height:2.5em;padding-right:1px;margin-right:-1px}div.vectorMenu h3 span{display:block;font-size:.8em;padding-left:.7em;padding-top:1.375em;margin-right:20px;font-weight:normal;color:#4d4d4d}div.vectorMenu h3 a{position:absolute;top:0;right:0;width:20px;height:2.5em;background-image:url('skins/Vector/images/arrow-down-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-icon.svg');background-position:100% 70%;background-repeat:no-repeat;-webkit-transition:background-position 250ms;-moz-transition:background-position 250ms;-o-transition:background-position 250ms;transition:background-position 250ms}div.vectorMenu.menuForceShow h3 a{background-position:100% 100%}div.vectorMenuFocus h3 a{background-image:url('skins/Vector/images/arrow-down-focus-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-focus-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/arrow-down-focus-icon.svg')}div.vectorMenu div.menu{min-width:100%;position:absolute;top:2.5em;left:-1px;background-color:white;border:solid 1px silver;border-top-width:0;clear:both;text-align:left;display:none}div.vectorMenu:hover div.menu,div.vectorMenu.menuForceShow div.menu{display:block}div.vectorMenu ul{list-style-type:none;list-style-image:none;padding:0;margin:0;text-align:left}div.vectorMenu ul,x:-moz-any-link{min-width:5em}div.vectorMenu ul,x:-moz-any-link,x:default{min-width:0}div.vectorMenu li{padding:0;margin:0;text-align:left;line-height:1em}div.vectorMenu li a{display:inline-block;padding:.5em;white-space:nowrap;color:#e69710;cursor:pointer;font-size:.8em}div.vectorMenu li>a{display:block}div.vectorMenu li.selected a,div.vectorMenu li.selected a:visited{color:#333;text-decoration:none}@-webkit-keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}@-moz-keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}@-o-keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes rotate{from{-webkit-transform:rotate(0deg);-moz-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);transform:rotate(360deg)}}#ca-unwatch.icon a,#ca-watch.icon a{margin:0;padding:0;display:block;width:26px;padding-top:3.1em;margin-top:0;height:0;overflow:hidden;background-position:5px 60%}#ca-unwatch.icon a{background-image:url('skins/Vector/images/unwatch-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon.svg')}#ca-watch.icon a{background-image:url('skins/Vector/images/watch-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon.svg')}#ca-unwatch.icon a:hover,#ca-unwatch.icon a:focus{background-image:url('skins/Vector/images/unwatch-icon-hl.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon-hl.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/unwatch-icon-hl.svg')}#ca-watch.icon a:hover,#ca-watch.icon a:focus{background-image:url('skins/Vector/images/watch-icon-hl.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-hl.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-hl.svg')}#ca-unwatch.icon a.loading,#ca-watch.icon a.loading{background-image:url('skins/Vector/images/watch-icon-loading.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-loading.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/watch-icon-loading.svg');-webkit-animation:rotate 700ms infinite linear;-moz-animation:rotate 700ms infinite linear;-o-animation:rotate 700ms infinite linear;animation:rotate 700ms infinite linear;outline:none;cursor:default;pointer-events:none;background-position:50% 60%;-webkit-transform-origin:50% 57%;transform-origin:50% 57%}#ca-unwatch.icon a span,#ca-watch.icon a span{display:none}#mw-navigation h2{position:absolute;top:-9999px}#mw-page-base{height:5em;background-position:bottom left;background-repeat:repeat-x;background-image:url('skins/Vector/images/page-fade.png');background-color:#2a2a2a;background-image:-moz-linear-gradient(top, #333 50%, #2a2a2a 100%);background-image:-webkit-gradient(linear, left top, left bottom, color-stop(50%, #333), color-stop(100%, #2a2a2a));background-image:-webkit-linear-gradient(top, #333 50%, #2a2a2a 100%);background-image:linear-gradient(#333 50%, #2a2a2a 100%);background-color:#333}#mw-head-base{margin-top:-5em;margin-left:10em;height:5em}div#mw-head{position:absolute;top:0;right:0;width:100%}div#mw-head h3{margin:0;padding:0}#left-navigation{float:left;margin-left:10em;margin-top:2.5em;margin-bottom:-2.5em;display:inline}#right-navigation{float:right;margin-top:2.5em}#p-logo{position:absolute;top:-160px;left:0;width:10em;height:160px}#p-logo a{display:block;width:10em;height:160px;background-repeat:no-repeat;background-position:center center;text-decoration:none}div#mw-panel{font-size:inherit;position:absolute;top:160px;padding-top:1em;width:10em;left:0}div#mw-panel div.portal{margin:0 .6em 0 .7em;padding:.25em 0;direction:ltr;background-position:top left;background-repeat:no-repeat;background-image:/* @embed */ url('skins/Vector/images/portal-break.png')}div#mw-panel div.portal h3{font-size:.75em;color:#4d4d4d;font-weight:normal;margin:0;padding:.25em 0 .25em .25em;cursor:default;border:none}div#mw-panel div.portal div.body{margin:0 0 0 1.25em;padding-top:0}div#mw-panel div.portal div.body ul{list-style-type:none;list-style-image:none;margin:0;padding:0}div#mw-panel div.portal div.body ul li{line-height:1.125em;margin:0;padding:.25em 0;font-size:.75em;word-wrap:break-word}div#mw-panel div.portal div.body ul li a{color:#e69710}div#mw-panel div.portal div.body ul li a:visited{color:#8a7f6c}div#mw-panel div.portal.first{background-image:none;margin-top:0}div#mw-panel div.portal.first h3{display:none}div#mw-panel div.portal.first div.body{margin-left:.5em}div#footer{margin-left:10em;margin-top:0;padding:.75em;direction:ltr}div#footer ul{list-style-type:none;list-style-image:none;margin:0;padding:0}div#footer ul li{margin:0;padding:0;padding-top:.5em;padding-bottom:.5em;color:#333;font-size:.7em}div#footer #footer-icons{float:right}div#footer #footer-icons li{float:left;margin-left:.5em;line-height:2em;text-align:right}div#footer #footer-info li{line-height:1.4em}div#footer #footer-places li{float:left;margin-right:1em;line-height:2em}body.ltr div#footer #footer-places{float:left}.mw-body .external{background-position:center right;background-repeat:no-repeat;background-image:url('skins/Vector/images/external-link-ltr-icon.png');background-image:-webkit-linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/external-link-ltr-icon.svg');background-image:linear-gradient(transparent, transparent),/* @embed */ url('skins/Vector/images/external-link-ltr-icon.svg');padding-right:13px}

/* This removes the credit link, but if possible we ask that you try and
re-theme it to your liking instead as a courtesy to the TurnKey Linux
project */

#turnkey-credit { display: none; }

File:Pfsense-shared-front-https-c.jpg

2021-12-08T21:04:18Z

Deathbybandaid:

File:Pfsense-shared-front-https-b.jpg

2021-12-08T21:03:28Z

Deathbybandaid:

File:Pfsense-shared-front-https-a.jpg

2021-12-08T21:03:01Z

Deathbybandaid:

File:Pfsense-shared-front-http-b.jpg

2021-12-08T21:02:31Z

Deathbybandaid:

File:Pfsense-shared-front-http-a.jpg

2021-12-08T21:01:59Z

Deathbybandaid:

File:Pfsense-shared-front-hostmatch-b.jpg

2021-12-08T21:01:19Z

Deathbybandaid:

File:Pfsense-shared-front-hostmatch-a.jpg

2021-12-08T21:00:37Z

Deathbybandaid:

File:Pfsense-robotstxt.jpg

2021-12-08T20:58:49Z

Deathbybandaid:

File:Pfsense-removenat.png

2021-12-08T20:57:55Z

Deathbybandaid:

File:Pfsense-port.png

2021-12-08T20:57:25Z

Deathbybandaid:

File:Pfsense-natports.png

2021-12-08T20:56:53Z

Deathbybandaid:

File:Pfsense-lb-virtserver.png

2021-12-08T20:56:22Z

Deathbybandaid:

File:Pfsense-lb-virt1.png

2021-12-08T20:55:04Z

Deathbybandaid:

File:Pfsense-lb-pool.png

2021-12-08T20:54:02Z

Deathbybandaid:

File:Pfsense-lb-nat1.png

2021-12-08T20:53:31Z

Deathbybandaid:

File:Pfsense-http-to-https-b.jpg

2021-12-08T20:53:05Z

Deathbybandaid:

File:Pfsense-http-to-https-a.jpg

2021-12-08T20:52:38Z

Deathbybandaid:

File:Pfsense-haproxy rules.png

2021-12-08T20:52:11Z

Deathbybandaid:

File:Pfsense-haproxy rules.jpg

2021-12-08T20:51:14Z

Deathbybandaid:

File:Pfsense-ha pre settings.png

2021-12-08T20:50:27Z

Deathbybandaid: