Reasons to not use Proxmox or how to "solve" them reddit / selfhosted ---------------------------------------------------------------------- Nassiel · 2023-11-04 22:41 Currently, all my hosts or VMs use Fedora or Debian as base distro, but more importantly, they all use Firewalld, systemd and SeLinux. I dedicated one of my lab baremetal servers to test Proxmox, because most of you use it, and honestly, I like it, but most of my Ansible automatism doesn't work. I don't know how to use AppArmor either, and the firewall is, by default, nonexistent. So, * Systemd - Check * Firewalld - I guess I can install it but something tells me that all the VM/CT management of Proxmox will break losing many of the benefits * AppArmor is just a big incognita, as everything I can remove it and install SeLinux, but I'm VERY sure that it'll require hours of rules creation to make Proxmox work again Did you suffer a similar situation or you don't care about hosts and you only automatize all the VMs?? If that so, my minimal requirement would be to report the hosts info to Prometheus (at least). ---------------------------------------------------------------------- Ariquitaun · 2023-11-04 22:52 What are you trying to accomplish exactly? Proxmox has a firewall and how is apparmor or selinux relevant to provisioning vms with ansible? ---------------------------------------------------------------------- Nassiel · 2023-11-04 22:56 All my hosts are connected though a Tinc network and have a node exporter to monitor the host. So it's not about the VMs, it's about the bare-metal machine itself, and my concern is by changing stuff, if I'm going to find that most of the out of the box stuff that it provides will be gone. Also, the pve-firewall provided is basically iptables but with other interface, so the level of support is quite limited. ---------------------------------------------------------------------- Ariquitaun · 2023-11-04 23:32 You can install node exporter on your proxmox hosts no problem. There's also a proxmox exporter you can peruse. The firewall is indeed iptables, basically the Linux standard on that regard. It's well understood and proxmox doesn't abstract it too much. ---------------------------------------------------------------------- Mintfresh22 · 2023-11-04 23:56 What has this to do with the topic of this sub? ---------------------------------------------------------------------- Nassiel · 2023-11-05 00:04 Well, indeed you're right, I thought about publishing in homelab but for some reason I wrote it in the wrong place. I think because lately I wrote more here so it was automatic typing. ---------------------------------------------------------------------- burningastroballs · 2023-11-05 02:30 Firewalld also uses iptables... ---------------------------------------------------------------------- veyper · 2023-11-05 03:34 I use proxmox and ansible as well. I started down the path of ansible managing proxmox but quickly abandoned it only to use ansible for managing my VMs and LXCs alone. Workflow is basically create a debian LXC with ssh keys and then let ansible manage it from that point forward. ---------------------------------------------------------------------- Nassiel · 2023-11-05 07:09 Yes but you have specific modules from ansible to interact with, not the same for pve-firewall. Some guy created a role but that's all I saw. ---------------------------------------------------------------------- SteelBlade79 · 2023-11-05 20:11 What about moving to containers where possibile? You might as well consider KVM/libvirt.