Thank you so much man. There is a saying in here which you are living proof of that. Which is "We would have build his statue but there is not enogh concrete for his balls.". Great Tutorial.
@rajumondal4283Ай бұрын
Tell me , tell me you earn in millions from your gigs Otherwise i will be sure that AI will take my job BTW if you ever decide to sell course under 30 dollars USD i will be biying it Also share your knowledge regarding application security and developing
@evgenwhatever8225Ай бұрын
Wow, this method with QEMU is awesome, thank you! I wish Hetzner promoted it themselves. It's so much easier than request for a KVM Console and hassle with attaching ISO there.
@cheebadigga4092Ай бұрын
I also recommend to look at their auction servers. I have a beast of a machine (AMD Ryzen 9 5950X, 1TB NVMe + 2x2TB NVMe, 4x32 GB RAM) for basically around 100€ a month. I use it for learning mostly, and we have clustered vSphere/ESXi at work so I use that whenerver I need to learn/implement some clustering stuff. Best of both worlds I guess lol
@aditya9462Ай бұрын
This is very helpful and one of the best guides for eBPF XDP! Good Job
@PolitePixelsАй бұрын
I am glad you enjoyed the video!
@starstreamlabАй бұрын
Awsome video, clean and informative! A interesting follow up would be how to hook this up with the CI part. commit, build test to creating the artifact that is releasable here.
@PolitePixelsАй бұрын
Hey, I will see about making this the next video as there seems to be some interest. Thank you for the insights.
@starstreamlabАй бұрын
@@PolitePixels Awsome! Tekton looks nice :)
@MatthewKennedyUKАй бұрын
That was excellent, very clear and informative, I'm already looking forward to more videos. One question, I am curious what is a good folder structure for a production ArgoCD with several environments and apps.
@PolitePixelsАй бұрын
So that really depends on your project. To me, it depends more on who your target audience is, and what their competency is regarding infrastructure. I tend to like to keep things in Helm if the people managing it are trained on Kubernetes. I keep these helm charts in the "infra" repo, and I usually have one helm chart, which acts as the master gitops chart which deploys all the rest. You can provide different values.yaml files for different environments, and I might make a follow-up video on how to do exactly that. Then in the application repo, which is usually co-maintained by the developers & infra, I usually like to use Kustomize or a simple helm chart, which little logic. I usually put this at the root of the target repos directory, usually in an /infra folder.
@tonycaveirametalАй бұрын
great content, where we can find the video with the pipeline integration? Thanks
@jarnoruuskanen2 ай бұрын
This video series has been invaluable. Thanks 👍
@PolitePixels2 ай бұрын
Happy to hear that!
@supernerd69832 ай бұрын
Fundamentally.
@random-jq9fp2 ай бұрын
any idea how to use OPNsense as the main router for the VMs with a failover IP from Hetzner in a 3 node cluster?
@kandarv2 ай бұрын
This is hands down one of the best Docker references on KZbin! I've already shared it with my peers-hoping they become even more grateful for my Dockerfile wizardry. 😁 By the way, could you share details about the small tablet you use for drawing? It looks super handy!
@PolitePixels2 ай бұрын
It is a Boox tablet and I am connecting to it wirelessly with ADB and SCRCPY. Thank you for the kind words!
@recursivecube442 ай бұрын
This was an excellent video! Got recommended it out of the blue and it should definitely have more than a couple hundred views! I use docker on a daily basis for hosting production apps and I will definitely be using the information from this video on them. Thanks sm and keep up the great work! Next thing I'm doing is binging the rest of ur catalog
@PolitePixels2 ай бұрын
Sounds great, if there is any topic you think would be nice for me to cover, please let me know.
2 ай бұрын
I just got this recommended out of nowhere. Most of the time when building Docker containers, I would just copy bits from various Dockerfile's and get it to work somehow, but it would always end up with some unexplained bugs after some months down the line, and I would just franticly try to resolve these issues by copying more stuff around. There was this nag that I should really learn this in a more abstract holistic way, but "there's never time" for something that ends up working just fine for 8 more months after a little bit of stackoverflowing. Watching this got me really excited about building docker images! How cool is that you share all of this! And I love your style in explaining it all by building from fundamentals! Great stuff! Thank you so much for putting it out there! 🫶
@PolitePixels2 ай бұрын
Thanks so much! Glad it got you excited about Docker and that the approach clicked for you.
@dovazencot2 ай бұрын
You’ve got some top tier content, keep up the good work, it’s definitely appreciated! 😁
@PolitePixels2 ай бұрын
I am glad you are enjoying the content! 😁
@ultrasive2 ай бұрын
Is this like for running / building other peoples code and avoiding it escaping chroot and namespaces?
@PolitePixels2 ай бұрын
It is more about good practices when creating containers to ensure you have reduced possible attack vectors. I am planning on creating another video, in the future, which focuses on how to run containers securely.
@ultrasive2 ай бұрын
@ would anything other than kata containers Qemu plus a namespaced wireguard overlay network be necessary for running 3rd party tenants apps?
@nislab_2 ай бұрын
Nice to see you again 😊
@mask17ful2 ай бұрын
Everything is cool until u can be sure they will not compromise you :) u never know
@PolitePixels2 ай бұрын
That is why having a Zero Trust setup is so important, so even if they get access to a pod, then further authorisation layers still need to be breached.
@NrJuan2 ай бұрын
Great video! This ties really well in with fluxcd concept of multitenancy and add a seperation with git sources as well allowing developers to have a cicd setup with in their own repo and deploying from there as well in to their own namespaces that is allocated for them. Regarding resources, wouldn't it be better give every developer team their own namespace and then build resource quotas on that namespace. That will give you fair use in the cluster and it builds a great dashboard for who is using how much.
@PolitePixels2 ай бұрын
Yeah, in that situation I often give each team its own domain namespace. Usually I try to split it up by the logical unit in the organisation, so then the permission structure is really easy to understand from a quick glance. I would also say though that sometimes its worth considering a hard segmentation, depending on your situation, and actually create a different cluster.
@zx9rmario2 ай бұрын
Traffic on vswitch is limited to 1TB/month. Each more TB costs 1 euro.
@АлексейЯкимович2 ай бұрын
Great video! Thanks a lot!
@PolitePixels2 ай бұрын
I'm glad you liked it!
@dmitrijit58512 ай бұрын
Note - You CANNOT join cluster if you have VMs already created on a node !!!
@dmitrijit58512 ай бұрын
Thanks @PolitePixels ! Can you do extra video for simplier more common setups and hetzners failover IP ? Basically 2 machines, wher one replicates from another, and in case of hardware failure failoverIP could be switched to another machine ? Also Proxmox BACKUP server seems very powerfull, and would be good to have video tutorial on that ? Thanks !
@souzadavi24092 ай бұрын
PS.: on minute 5:46 when is creating a cluster you should change to vmbr1 and not use vbmr0. On video show the public IP, this is bit confusing, but that should be the private IP 192.168.50.11. If you didn't pay attention this will give a ssl error and the PVE2 not connect. To fix you need change the file: /etc/corosync/corosync.conf in file change ring0_addr: to 192.168.50.11 on totem config change the version number: config_version: 3 Save the file and copy it to cp /etc/corosync/corosync.conf /etc/pve/corosync.conf ...stop all these services pveproxy, pvedaemon, pve-cluster, corosync. .. And delete all files in /var/lib/corosync/* than restart the service at this order: corosync, pve-cluster, pvedaemon, pveproxy ... You need to do this process on all node... thanks for great video!!!
@hansun17572 ай бұрын
eBPF basic example wirte ebpf_probe.c but runner.py path(ebpf_watch.c) ?? not good example indeed
@veli33yilmaz3 ай бұрын
Great tutorial! Thank you. How auctions work in hetzner? if i buy a machine from auction will the peocess be same for connecting to the machine or setup
@TheXISU3 ай бұрын
Now if I have a bunch of lxcs and few containers inside a Ubuntu vm, how do I access them through the internet?
@moddofx3 ай бұрын
Hi very nice tutorial. Just a question. Do you have a bug in your DNS setup? I think 4.4.4.4 is not DNS, shouldn't it be 8.8.4.4 from Google?
@souzadavi24093 ай бұрын
Yes change to 8.8.4.4
@bmdyy3 ай бұрын
Super helpful video, thank you!
@MatthewKennedyUK3 ай бұрын
What is this seth thing?
@spooterify2 ай бұрын
It’s Ceph, it’s an object storage deamon for creating a shared storage pool across 3 nodes.
@MatthewKennedyUK3 ай бұрын
I would pay for a more in depth version of this that expands on some of the concepts covered, as the last video (Pt 3) went in to some concepts I had absolutely no idea about, and while I can follow along, I would like to understand what and why.
@MatthewKennedyUK3 ай бұрын
Would be nice if a script existed to take care of a lot of this.
@nobewayo3 ай бұрын
After doing sudo ifreload -a i lose all connection to the ssh.... Can still access with VNC though. But after doing everything after that and rebooting out of rescue it won\t connect to the ssh anymore. What is going on here?
@moddofx3 ай бұрын
Same problem, did you finally solve it?
@souzadavi24093 ай бұрын
if you rescue_bridge isn't not set, after sudo ifreload -a you will lose the access, the only way to stay in ssh from rescue mode and not VNC is from rescue_bridge config.
@spooterify2 ай бұрын
In rescue_bridge conf make sure you remove the source line at the end
@JordAuke-s5s4 ай бұрын
Jones Donald Garcia Dorothy Perez Brian
@pawesieniewicz64804 ай бұрын
Hi, could you make a video about pfsense with proxmox? 🙏🙏
@flohfloh11574 ай бұрын
What is the reason for the 3 partitions. I guess one is for EFI/Bootloader but for what is the other one?
@DarraghMcCarthy5 ай бұрын
also interested to see if SDNs can work seamlessly with Wireguard, rather than using a vSwitch
@vivekshinde47615 ай бұрын
You made it Unbelievably simple 😊
@mithubopensourcelab4826 ай бұрын
Good one.... Ceph on 1 gb network is asking for disaster. I would recommend minimum of 10 G. Secondly, with ceph, you will never get snapshots. I generally prefer a Linux box with max possible drives as storage to Proxmox storage. I also prefer nfs over any other fancy stuff like smb/cifs or iscsi for its simplicity, able to mount any where in case required.
@mithubopensourcelab4826 ай бұрын
There is much better way to install Proxmox. Simply install stock Debian. Then you can install proxmox over debian. No need of rescue mode and additional stuff. Always install with default drive and then order additional drives.
@spooterify2 ай бұрын
Yeah but can you configure ZFS following this method?
@mithubopensourcelab4822 ай бұрын
@@spooterify off course !!
@mithubopensourcelab4822 ай бұрын
@@spooterify off course, yes.
@ZhivkoKabaivanov7 ай бұрын
VNC asks me for a password. In your qemu-system-x86_64 command, you don't specify any password for VNC. Could give me hint what I might be doing wrong?
@angelshce7 ай бұрын
How i can acces via RDP to a windows machine?
@alphaomega50177 ай бұрын
At the Current situation we need go to lesser pricing not on the higher side
@domjag6007 ай бұрын
Would it make sense to use pfSense or OPNSense to handle the firewall rules and DHCP?
@miguelmendez2417 ай бұрын
Awesome video, one the best explanations 👍
@frankoonk26707 ай бұрын
Advice: i found out that sometimes the networkcard has 2 altnames, when i used the second altname i wasn't able to boot into proxmox, but when i use the first altname it works!
@alexocarroll54127 ай бұрын
thanks pal, that one helped me since I had 2 altnames also. switching from the second to the first (eno1 in my case) allowed me to boot into pve.
@OmobiloАй бұрын
I also used 2nd: 'enp0s31f6" and after reboot, cant ping either to ssh into server. so I should use 'eno1' instead of 'enp0s31f6"? below my ip addr with the 2 altnames. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether b4:****62 brd ff:ff:ff:ff:ff:ff altname eno1 altname enp0s31f6 inet 8*****99/27 scope global eth0 valid_lft forever preferred_lft forever
8 ай бұрын
hi thank you so much. But pastebin link is broken. Can you fix it please
@Keaza.8 ай бұрын
I got it working without rescue mode at one point, but then I restarted the machine and now I cant longer access proxmox, I have to go into rescue mode and boot a vm from rescue mode. Wtf am I doing wrong?
@frankoonk26707 ай бұрын
Same problem over here! Also the fix to comment source /etc/network/interfaces.d/* doesn't work.
@cresuso8 ай бұрын
Wow I thought the only way to install proxmox on hetzner was through the installimage script. I've tried with installimage, but had the issue of mdadm raid enabled + wanting to use zfs instead (also bad idea to put zfs on top of mdadm), and couldn't just put the filesystem in the script (it doesn't support zfs). This a very cool way to installing an os on hetzner machines, allows for much more customization thank you very much !!
@BunkerFrog8 ай бұрын
After following guide and rebooting (without using backup link and "source /etc/network/interfaces.d/*" ) system is not reachable. I was trying few times to reinstall system.
@souzadavi24092 ай бұрын
Before installing PROXMOX there is a trick, he said but if you do not pay attention on video you gone to see the problem when you boot, after boot the server doesn't ping anymore. Before installing PROMOX You should check ls -al /sys/firmware/efi or efibootmgr if is the result is empty, nothing showing, you need to remove -bios /usr/share/ovmf/OVMF.fd from the Command 1 and command 2. If this parameter is wrong the server will be unbootable!!! Five nights without sleep because of this, I hope no one getting into it! The tutorial is awesome!!! thank you!!!
@rtv13388 ай бұрын
Tnks, like
@ilintech8 ай бұрын
Thank you so much! I've just set up my very first Homelab on Hetzner with you. I've spent 4 to 5 hours on your two videos, but they are worth every minute. Great content!