Disaster Recovery Strategies
31:51
Who are PolitePixels?
1:09
Ай бұрын
Getting started with ArgoCD
33:21
Building Secure Containers
48:23
2 ай бұрын
Shift Your Security Left
14:27
2 ай бұрын
Future of FluxCD?
7:39
11 ай бұрын
Clustering Proxmox On Hetzner
16:59
Configuring Proxmox For Hetzner
25:30
Installing Proxmox On Hetzner
17:56
Kubernetes Supply Chain Security
14:36
What Is Containerisation
9:11
Жыл бұрын
Democratising Data With Metalakes
9:13
3 Cool Things About Kubernetes 1.26
4:06
Пікірлер
@veli33yilmaz
@veli33yilmaz 5 күн бұрын
Thank you so much man. There is a saying in here which you are living proof of that. Which is "We would have build his statue but there is not enogh concrete for his balls.". Great Tutorial.
@rajumondal4283
@rajumondal4283 Ай бұрын
Tell me , tell me you earn in millions from your gigs Otherwise i will be sure that AI will take my job BTW if you ever decide to sell course under 30 dollars USD i will be biying it Also share your knowledge regarding application security and developing
@evgenwhatever8225
@evgenwhatever8225 Ай бұрын
Wow, this method with QEMU is awesome, thank you! I wish Hetzner promoted it themselves. It's so much easier than request for a KVM Console and hassle with attaching ISO there.
@cheebadigga4092
@cheebadigga4092 Ай бұрын
I also recommend to look at their auction servers. I have a beast of a machine (AMD Ryzen 9 5950X, 1TB NVMe + 2x2TB NVMe, 4x32 GB RAM) for basically around 100€ a month. I use it for learning mostly, and we have clustered vSphere/ESXi at work so I use that whenerver I need to learn/implement some clustering stuff. Best of both worlds I guess lol
@aditya9462
@aditya9462 Ай бұрын
This is very helpful and one of the best guides for eBPF XDP! Good Job
@PolitePixels
@PolitePixels Ай бұрын
I am glad you enjoyed the video!
@starstreamlab
@starstreamlab Ай бұрын
Awsome video, clean and informative! A interesting follow up would be how to hook this up with the CI part. commit, build test to creating the artifact that is releasable here.
@PolitePixels
@PolitePixels Ай бұрын
Hey, I will see about making this the next video as there seems to be some interest. Thank you for the insights.
@starstreamlab
@starstreamlab Ай бұрын
@@PolitePixels Awsome! Tekton looks nice :)
@MatthewKennedyUK
@MatthewKennedyUK Ай бұрын
That was excellent, very clear and informative, I'm already looking forward to more videos. One question, I am curious what is a good folder structure for a production ArgoCD with several environments and apps.
@PolitePixels
@PolitePixels Ай бұрын
So that really depends on your project. To me, it depends more on who your target audience is, and what their competency is regarding infrastructure. I tend to like to keep things in Helm if the people managing it are trained on Kubernetes. I keep these helm charts in the "infra" repo, and I usually have one helm chart, which acts as the master gitops chart which deploys all the rest. You can provide different values.yaml files for different environments, and I might make a follow-up video on how to do exactly that. Then in the application repo, which is usually co-maintained by the developers & infra, I usually like to use Kustomize or a simple helm chart, which little logic. I usually put this at the root of the target repos directory, usually in an /infra folder.
@tonycaveirametal
@tonycaveirametal Ай бұрын
great content, where we can find the video with the pipeline integration? Thanks
@jarnoruuskanen
@jarnoruuskanen 2 ай бұрын
This video series has been invaluable. Thanks 👍
@PolitePixels
@PolitePixels 2 ай бұрын
Happy to hear that!
@supernerd6983
@supernerd6983 2 ай бұрын
Fundamentally.
@random-jq9fp
@random-jq9fp 2 ай бұрын
any idea how to use OPNsense as the main router for the VMs with a failover IP from Hetzner in a 3 node cluster?
@kandarv
@kandarv 2 ай бұрын
This is hands down one of the best Docker references on KZbin! I've already shared it with my peers-hoping they become even more grateful for my Dockerfile wizardry. 😁 By the way, could you share details about the small tablet you use for drawing? It looks super handy!
@PolitePixels
@PolitePixels 2 ай бұрын
It is a Boox tablet and I am connecting to it wirelessly with ADB and SCRCPY. Thank you for the kind words!
@recursivecube44
@recursivecube44 2 ай бұрын
This was an excellent video! Got recommended it out of the blue and it should definitely have more than a couple hundred views! I use docker on a daily basis for hosting production apps and I will definitely be using the information from this video on them. Thanks sm and keep up the great work! Next thing I'm doing is binging the rest of ur catalog
@PolitePixels
@PolitePixels 2 ай бұрын
Sounds great, if there is any topic you think would be nice for me to cover, please let me know.
2 ай бұрын
I just got this recommended out of nowhere. Most of the time when building Docker containers, I would just copy bits from various Dockerfile's and get it to work somehow, but it would always end up with some unexplained bugs after some months down the line, and I would just franticly try to resolve these issues by copying more stuff around. There was this nag that I should really learn this in a more abstract holistic way, but "there's never time" for something that ends up working just fine for 8 more months after a little bit of stackoverflowing. Watching this got me really excited about building docker images! How cool is that you share all of this! And I love your style in explaining it all by building from fundamentals! Great stuff! Thank you so much for putting it out there! 🫶
@PolitePixels
@PolitePixels 2 ай бұрын
Thanks so much! Glad it got you excited about Docker and that the approach clicked for you.
@dovazencot
@dovazencot 2 ай бұрын
You’ve got some top tier content, keep up the good work, it’s definitely appreciated! 😁
@PolitePixels
@PolitePixels 2 ай бұрын
I am glad you are enjoying the content! 😁
@ultrasive
@ultrasive 2 ай бұрын
Is this like for running / building other peoples code and avoiding it escaping chroot and namespaces?
@PolitePixels
@PolitePixels 2 ай бұрын
It is more about good practices when creating containers to ensure you have reduced possible attack vectors. I am planning on creating another video, in the future, which focuses on how to run containers securely.
@ultrasive
@ultrasive 2 ай бұрын
@ would anything other than kata containers Qemu plus a namespaced wireguard overlay network be necessary for running 3rd party tenants apps?
@nislab_
@nislab_ 2 ай бұрын
Nice to see you again 😊
@mask17ful
@mask17ful 2 ай бұрын
Everything is cool until u can be sure they will not compromise you :) u never know
@PolitePixels
@PolitePixels 2 ай бұрын
That is why having a Zero Trust setup is so important, so even if they get access to a pod, then further authorisation layers still need to be breached.
@NrJuan
@NrJuan 2 ай бұрын
Great video! This ties really well in with fluxcd concept of multitenancy and add a seperation with git sources as well allowing developers to have a cicd setup with in their own repo and deploying from there as well in to their own namespaces that is allocated for them. Regarding resources, wouldn't it be better give every developer team their own namespace and then build resource quotas on that namespace. That will give you fair use in the cluster and it builds a great dashboard for who is using how much.
@PolitePixels
@PolitePixels 2 ай бұрын
Yeah, in that situation I often give each team its own domain namespace. Usually I try to split it up by the logical unit in the organisation, so then the permission structure is really easy to understand from a quick glance. I would also say though that sometimes its worth considering a hard segmentation, depending on your situation, and actually create a different cluster.
@zx9rmario
@zx9rmario 2 ай бұрын
Traffic on vswitch is limited to 1TB/month. Each more TB costs 1 euro.
@АлексейЯкимович
@АлексейЯкимович 2 ай бұрын
Great video! Thanks a lot!
@PolitePixels
@PolitePixels 2 ай бұрын
I'm glad you liked it!
@dmitrijit5851
@dmitrijit5851 2 ай бұрын
Note - You CANNOT join cluster if you have VMs already created on a node !!!
@dmitrijit5851
@dmitrijit5851 2 ай бұрын
Thanks @PolitePixels ! Can you do extra video for simplier more common setups and hetzners failover IP ? Basically 2 machines, wher one replicates from another, and in case of hardware failure failoverIP could be switched to another machine ? Also Proxmox BACKUP server seems very powerfull, and would be good to have video tutorial on that ? Thanks !
@souzadavi2409
@souzadavi2409 2 ай бұрын
PS.: on minute 5:46 when is creating a cluster you should change to vmbr1 and not use vbmr0. On video show the public IP, this is bit confusing, but that should be the private IP 192.168.50.11. If you didn't pay attention this will give a ssl error and the PVE2 not connect. To fix you need change the file: /etc/corosync/corosync.conf in file change ring0_addr: to 192.168.50.11 on totem config change the version number: config_version: 3 Save the file and copy it to cp /etc/corosync/corosync.conf /etc/pve/corosync.conf ...stop all these services pveproxy, pvedaemon, pve-cluster, corosync. .. And delete all files in /var/lib/corosync/* than restart the service at this order: corosync, pve-cluster, pvedaemon, pveproxy ... You need to do this process on all node... thanks for great video!!!
@hansun1757
@hansun1757 2 ай бұрын
eBPF basic example wirte ebpf_probe.c but runner.py path(ebpf_watch.c) ?? not good example indeed
@veli33yilmaz
@veli33yilmaz 3 ай бұрын
Great tutorial! Thank you. How auctions work in hetzner? if i buy a machine from auction will the peocess be same for connecting to the machine or setup
@TheXISU
@TheXISU 3 ай бұрын
Now if I have a bunch of lxcs and few containers inside a Ubuntu vm, how do I access them through the internet?
@moddofx
@moddofx 3 ай бұрын
Hi very nice tutorial. Just a question. Do you have a bug in your DNS setup? I think 4.4.4.4 is not DNS, shouldn't it be 8.8.4.4 from Google?
@souzadavi2409
@souzadavi2409 3 ай бұрын
Yes change to 8.8.4.4
@bmdyy
@bmdyy 3 ай бұрын
Super helpful video, thank you!
@MatthewKennedyUK
@MatthewKennedyUK 3 ай бұрын
What is this seth thing?
@spooterify
@spooterify 2 ай бұрын
It’s Ceph, it’s an object storage deamon for creating a shared storage pool across 3 nodes.
@MatthewKennedyUK
@MatthewKennedyUK 3 ай бұрын
I would pay for a more in depth version of this that expands on some of the concepts covered, as the last video (Pt 3) went in to some concepts I had absolutely no idea about, and while I can follow along, I would like to understand what and why.
@MatthewKennedyUK
@MatthewKennedyUK 3 ай бұрын
Would be nice if a script existed to take care of a lot of this.
@nobewayo
@nobewayo 3 ай бұрын
After doing sudo ifreload -a i lose all connection to the ssh.... Can still access with VNC though. But after doing everything after that and rebooting out of rescue it won\t connect to the ssh anymore. What is going on here?
@moddofx
@moddofx 3 ай бұрын
Same problem, did you finally solve it?
@souzadavi2409
@souzadavi2409 3 ай бұрын
if you rescue_bridge isn't not set, after sudo ifreload -a you will lose the access, the only way to stay in ssh from rescue mode and not VNC is from rescue_bridge config.
@spooterify
@spooterify 2 ай бұрын
In rescue_bridge conf make sure you remove the source line at the end
@JordAuke-s5s
@JordAuke-s5s 4 ай бұрын
Jones Donald Garcia Dorothy Perez Brian
@pawesieniewicz6480
@pawesieniewicz6480 4 ай бұрын
Hi, could you make a video about pfsense with proxmox? 🙏🙏
@flohfloh1157
@flohfloh1157 4 ай бұрын
What is the reason for the 3 partitions. I guess one is for EFI/Bootloader but for what is the other one?
@DarraghMcCarthy
@DarraghMcCarthy 5 ай бұрын
also interested to see if SDNs can work seamlessly with Wireguard, rather than using a vSwitch
@vivekshinde4761
@vivekshinde4761 5 ай бұрын
You made it Unbelievably simple 😊
@mithubopensourcelab482
@mithubopensourcelab482 6 ай бұрын
Good one.... Ceph on 1 gb network is asking for disaster. I would recommend minimum of 10 G. Secondly, with ceph, you will never get snapshots. I generally prefer a Linux box with max possible drives as storage to Proxmox storage. I also prefer nfs over any other fancy stuff like smb/cifs or iscsi for its simplicity, able to mount any where in case required.
@mithubopensourcelab482
@mithubopensourcelab482 6 ай бұрын
There is much better way to install Proxmox. Simply install stock Debian. Then you can install proxmox over debian. No need of rescue mode and additional stuff. Always install with default drive and then order additional drives.
@spooterify
@spooterify 2 ай бұрын
Yeah but can you configure ZFS following this method?
@mithubopensourcelab482
@mithubopensourcelab482 2 ай бұрын
@@spooterify off course !!
@mithubopensourcelab482
@mithubopensourcelab482 2 ай бұрын
@@spooterify off course, yes.
@ZhivkoKabaivanov
@ZhivkoKabaivanov 7 ай бұрын
VNC asks me for a password. In your qemu-system-x86_64 command, you don't specify any password for VNC. Could give me hint what I might be doing wrong?
@angelshce
@angelshce 7 ай бұрын
How i can acces via RDP to a windows machine?
@alphaomega5017
@alphaomega5017 7 ай бұрын
At the Current situation we need go to lesser pricing not on the higher side
@domjag600
@domjag600 7 ай бұрын
Would it make sense to use pfSense or OPNSense to handle the firewall rules and DHCP?
@miguelmendez241
@miguelmendez241 7 ай бұрын
Awesome video, one the best explanations 👍
@frankoonk2670
@frankoonk2670 7 ай бұрын
Advice: i found out that sometimes the networkcard has 2 altnames, when i used the second altname i wasn't able to boot into proxmox, but when i use the first altname it works!
@alexocarroll5412
@alexocarroll5412 7 ай бұрын
thanks pal, that one helped me since I had 2 altnames also. switching from the second to the first (eno1 in my case) allowed me to boot into pve.
@Omobilo
@Omobilo Ай бұрын
I also used 2nd: 'enp0s31f6" and after reboot, cant ping either to ssh into server. so I should use 'eno1' instead of 'enp0s31f6"? below my ip addr with the 2 altnames. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether b4:****62 brd ff:ff:ff:ff:ff:ff altname eno1 altname enp0s31f6 inet 8*****99/27 scope global eth0 valid_lft forever preferred_lft forever
8 ай бұрын
hi thank you so much. But pastebin link is broken. Can you fix it please
@Keaza.
@Keaza. 8 ай бұрын
I got it working without rescue mode at one point, but then I restarted the machine and now I cant longer access proxmox, I have to go into rescue mode and boot a vm from rescue mode. Wtf am I doing wrong?
@frankoonk2670
@frankoonk2670 7 ай бұрын
Same problem over here! Also the fix to comment source /etc/network/interfaces.d/* doesn't work.
@cresuso
@cresuso 8 ай бұрын
Wow I thought the only way to install proxmox on hetzner was through the installimage script. I've tried with installimage, but had the issue of mdadm raid enabled + wanting to use zfs instead (also bad idea to put zfs on top of mdadm), and couldn't just put the filesystem in the script (it doesn't support zfs). This a very cool way to installing an os on hetzner machines, allows for much more customization thank you very much !!
@BunkerFrog
@BunkerFrog 8 ай бұрын
After following guide and rebooting (without using backup link and "source /etc/network/interfaces.d/*" ) system is not reachable. I was trying few times to reinstall system.
@souzadavi2409
@souzadavi2409 2 ай бұрын
Before installing PROXMOX there is a trick, he said but if you do not pay attention on video you gone to see the problem when you boot, after boot the server doesn't ping anymore. Before installing PROMOX You should check ls -al /sys/firmware/efi or efibootmgr if is the result is empty, nothing showing, you need to remove -bios /usr/share/ovmf/OVMF.fd from the Command 1 and command 2. If this parameter is wrong the server will be unbootable!!! Five nights without sleep because of this, I hope no one getting into it! The tutorial is awesome!!! thank you!!!
@rtv1338
@rtv1338 8 ай бұрын
Tnks, like
@ilintech
@ilintech 8 ай бұрын
Thank you so much! I've just set up my very first Homelab on Hetzner with you. I've spent 4 to 5 hours on your two videos, but they are worth every minute. Great content!