The world's best hypervisor!
Proxmox
I won't lie, this post is in large part for my own benefit. I set up a lot of Proxmox systems, and there are a few steps that need to happen for hardware passthrough to work correctly. This is the quick and dirty guide to get it working.
Linux
Say we have a system where we need a single encrypted drive for all our rare and expensive Linux ISOs. Say we don't want to enter a password to decrypt the drive every time we boot. Say in the event the drive gets stolen or tossed, we don&
Linux
I was searching for an image of a progress bar and found this. So there's that. Irrelevant cover photos aside, It is in fact possible to set up Debian to automatically update all of the things and reboot if necessary. Is it smart? Probably not. Do I use
Linux
Hehe... the photo is of a shell. Get it? Like Secure SHell? It was funnier in my head. Anyway, the two most common ways to access a remote computer CLI via SSH is using a username and password, or using certificates. Certificates are far more secure, and not nearly as
Linux
I've done a lot of experimenting, and I have found a really great combination of settings for Proxmox to optimize the performance of Linux-based VMs. It's not as difficult as wrangling Windows VMs but there are a few potential pitfalls to avoid. Let's get
Tutorial
fail2ban is a magical little program that does precisely what it says on the tin. Fail to authenticate properly enough times, and you'll be banned. Banned from what? Well, just about anything. fail2ban is super flexible; It reads log files and executes commands when certain conditions are met,
Linux
I was digging through logs with journalctl --since=yesterday to verify our Proxmox servers were good to go, and I saw plenty of nonsense. When in doubt, I tend to skim for the bright red things that say Error. There were more than zero, and some were a tad concerning.
Proxmox
In the state of Oregon, education institutions with PACE insurance (and many others) are beginning to require not just antivirus, but antivirus with Endpoint Detection and Response (EDR). We chose to go with Crowdstrike, which, despite having the world's cringiest product names, actually provides a cheap, well-functioning base