{"id":233011,"date":"2021-04-07T11:39:20","date_gmt":"2021-04-07T09:39:20","guid":{"rendered":"https:\/\/www.ma-solution.fr\/?p=233011"},"modified":"2024-02-01T23:47:02","modified_gmt":"2024-02-01T22:47:02","slug":"configuration-serveur-reseau-proxmox-heberge-chez-ovh","status":"publish","type":"post","link":"https:\/\/www.ma-solution.fr\/?p=233011","title":{"rendered":"Installer Proxmox 7 \/ 8 \u00e0 partir du template OVH"},"content":{"rendered":"<p>[et_pb_section fb_built=\u00a0\u00bb1&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_row _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb4_4&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>D\u00e9marrer l&rsquo;installation d&rsquo;un clusteur de 3 serveurs d\u00e9di\u00e9 chez OVH.<br \/>Pour l&rsquo;exemple j&rsquo;ai choisi des serveurs d\u00e9di\u00e9s avec 64Go Ram et diff\u00e9rentes configurations de disques dur (SSD 2*480Go, Sata 4*2TO).<br \/>La 1\u00e8re \u00e9tape consiste \u00e0 installer les serveurs et le choix du partitionnement \/ syst\u00e8me de fichier ZFS permet ainsi de profiter des fonctions pratiques comme les r\u00e9plications et snap shot &#8230;<\/p>\n<p>Documentzation OVH :<br \/><a href=\"https:\/\/docs.ovh.com\/fr\/dedicated\/\">https:\/\/docs.ovh.com\/fr\/dedicated\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb1_3,1_3,1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/02\/ovh-dedie-installer-os.png\u00a0\u00bb title_text=\u00a0\u00bbovh-dedie-installer-os\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/02\/ovh-dedie-installer-template.png\u00a0\u00bb title_text=\u00a0\u00bbovh-dedie-installer-template\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/02\/ovh-dedie-template-proxmox7.png\u00a0\u00bb title_text=\u00a0\u00bbovh-dedie-template-proxmox7&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb1_2,1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_color=\u00a0\u00bb#2F4476&Prime; background_enable_image=\u00a0\u00bboff\u00a0\u00bb parallax=\u00a0\u00bbon\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_icon font_icon=\u00a0\u00bb&#xf594;||fa||900&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_icon][et_pb_text _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb text_orientation=\u00a0\u00bbcenter\u00a0\u00bb background_layout=\u00a0\u00bbdark\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>CPU : Intel Xeon E5-1630v3 &#8211; 4c\/8t &#8211; 3.7 GHz\/3,8 GHz<br \/>M\u00e9moire: 64 Go DDR4 ECC<br \/>Stockage: 2 x 480 Go SSD SATA Soft RAID<\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_icon font_icon=\u00a0\u00bb&#xf233;||fa||900&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_icon][et_pb_text _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb text_orientation=\u00a0\u00bbcenter\u00a0\u00bb background_layout=\u00a0\u00bbdark\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>CPU : Intel Xeon E5-1630v3 &#8211; 4c\/8t &#8211; 3,7 GHz\/3,8 GHz<br \/>M\u00e9moire : 64 Go DDR4 ECC<br \/>Stockage: 4 x 2 To HDD SATA Soft RAID<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb3_5,2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/02\/ovh-dedie-proxmox-partition-2480Go-SSD.png\u00a0\u00bb title_text=\u00a0\u00bbovh-dedie-proxmox-partition-2*480Go-SSD\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][et_pb_text _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Pour le swap je d\u00e9fini sa taille \u00e0 1\/4 de la RAM (64Go) soit donc 16 Go. Etant donn\u00e9 que j&rsquo;ai 2 disques il suffit de d\u00e9finir 8Go (8192 MB).<\/p>\n<p>Pour le volume \/var\/lib\/vz j&rsquo;ai choisi le syst\u00e8me de fichier ZFS en RAID1 (ayant que 2 disques sur ce serveur).<\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion_item title=\u00a0\u00bbzpool list\u00a0\u00bb open=\u00a0\u00bbon\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<pre><strong>NAME   SIZE  ALLOC   FREE  CKPOINT  EXPANDSZ   FRAG    CAP  DEDUP    HEALTH  ALTROOT<\/strong>\nzp0    416G   860K   416G        -         -     0%     0%  1.00x    ONLINE  -\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzfs list\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>NAME      USED  AVAIL     REFER  MOUNTPOINT<\/strong>\nzp0       680K   403G       96K  none\nzp0\/zd0   104K   403G      104K  \/var\/lib\/vz\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbdf -h\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>Filesystem      Size  Used Avail Use% Mounted on<\/strong>\nudev             32G     0   32G   0% \/dev\ntmpfs           6.3G  1.3M  6.3G   1% \/run\n\/dev\/md3         20G  3.1G   16G  17% \/\ntmpfs            32G   43M   32G   1% \/dev\/shm\ntmpfs           5.0M     0  5.0M   0% \/run\/lock\n\/dev\/md2        988M   91M  831M  10% \/boot\n\/dev\/sda1       511M  168K  511M   1% \/boot\/efi\nzp0\/zd0         404G  128K  404G   1% \/var\/lib\/vz\n\/dev\/fuse       128M   16K  128M   1% \/etc\/pve\ntmpfs           6.3G     0  6.3G   0% \/run\/user\/0\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzpool history\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>History for 'zp0':<\/strong>\nzpool create -R \/tmp\/a -f -m none -o <strong>ashift=12<\/strong> zp0 mirror \/dev\/sdb5 \/dev\/sda5\nzpool set autoexpand=off zp0\nzpool set autoreplace=off zp0\nzfs set recordsize=128KB zp0\nzfs set xattr=sa zp0\nzfs set acltype=posixacl zp0\nzfs create zp0\/zd0 -o canmount=off\nzfs set quota=448425623552B zp0\/zd0\nzfs set recordsize=128KB zp0\/zd0\nzfs set xattr=sa zp0\/zd0\nzfs set acltype=posixacl zp0\/zd0\nzfs set compression=off zp0\/zd0\nzfs set mountpoint=\/var\/lib\/vz zp0\/zd0\nzfs inherit -S canmount zp0\/zd0\nzpool export -a\nzpool import -aN -d \/dev\/disk\/by-id -o cachefile=none\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzpool status\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>  pool: zp0<\/strong>\n state: ONLINE\nstatus: Some supported and requested features are not enabled on the pool.\n\tThe pool can still be used, but some features are unavailable.\naction: Enable all features using 'zpool upgrade'. Once this is done,\n\tthe pool may no longer be accessible by software that does not support\n\tthe features. See zpool-features(7) for details.\nconfig:\n\n\tNAME                              STATE     READ WRITE CKSUM\n\tzp0                               ONLINE       0     0     0\n\t  mirror-0                        ONLINE       0     0     0\n\t    wwn-0x55cd2e414dce04b0-part5  ONLINE       0     0     0\n\t    wwn-0x55cd2e414d51121d-part5  ONLINE       0     0     0\n\nerrors: No known data errors\n<\/pre>\n<p>[\/et_pb_accordion_item][\/et_pb_accordion][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb3_5,2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/08\/ovh-proxmox8-partition-2disques.png\u00a0\u00bb title_text=\u00a0\u00bbovh-proxmox8-partition-2disques\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][et_pb_text _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Pour le swap je d\u00e9fini sa taille \u00e0 1\/4 de la RAM (64Go) soit donc 16 Go. Etant donn\u00e9 que j&rsquo;ai 2 disques il suffit de d\u00e9finir 8Go (8192 MB).<\/p>\n<p>Pour le volume \/var\/lib\/vz j&rsquo;ai choisi le syst\u00e8me de fichier ZFS en RAID1 (ayant que 2 disques sur ce serveur).<\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion_item title=\u00a0\u00bbzpool list\u00a0\u00bb open=\u00a0\u00bbon\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<pre><strong>NAME SIZE ALLOC FREE CKPOINT EXPANDSZ FRAG CAP DEDUP HEALTH ALTROOT<\/strong>\ndata 3.61T 218K 3.61T - - 0% 0% 1.00x ONLINE -\nzp0 19.5G 2.90G 16.6G - - 0% 14% 1.00x ONLINE -<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzfs list\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>NAME      USED  AVAIL     REFER  MOUNTPOINT<\/strong><br \/>data 180K 3.50T 24K none<br \/>data\/zd1 26K 3.50T 26K \/var\/lib\/vz<br \/>zp0 2.90G 16.0G 24K none<br \/>zp0\/zd0 2.90G 16.0G 2.90G \/\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbdf -h\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>Filesystem Size Used Avail Use% Mounted on<\/strong>\nudev 32G 0 32G 0% \/dev\ntmpfs 6.3G 1.2M 6.3G 1% \/run\nzp0\/zd0 19G 2.9G 16G 16% \/\ntmpfs 32G 28M 32G 1% \/dev\/shm\ntmpfs 5.0M 0 5.0M 0% \/run\/lock\n\/dev\/md2 988M 102M 820M 12% \/boot\n\/dev\/sda1 511M 5.9M 505M 2% \/boot\/efi\ndata\/zd1 3.5T 128K 3.5T 1% \/var\/lib\/vz\n\/dev\/fuse 128M 16K 128M 1% \/etc\/pve\ntmpfs 6.3G 0 6.3G 0% \/run\/user\/0\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzpool history\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p><strong>History for &lsquo;data&rsquo;:<\/strong><br \/>2023-08-23.21:13:08 zpool create -O acltype=posixacl -O compression=off -O recordsize=128K -O xattr=sa -R \/tmp\/a -f -m none data mirror \/dev\/sda5 \/dev\/sdb5<br \/>2023-08-23.21:13:08 zpool set ashift=12 data<br \/>2023-08-23.21:13:08 zpool set autoexpand=off data<br \/>2023-08-23.21:13:08 zpool set autoreplace=off data<br \/>2023-08-23.21:13:09 zfs create data\/zd1 -o canmount=off<br \/>2023-08-23.21:13:09 zfs set quota=3.61T data\/zd1<br \/>2023-08-23.21:13:14 zfs set mountpoint=\/var\/lib\/vz data\/zd1<br \/>2023-08-23.21:13:14 zfs inherit -S canmount data\/zd1<br \/>2023-08-23.21:15:59 zpool export -a<br \/>2023-08-23.21:20:24 zpool import -aN -d \/dev\/disk\/by-id -o cachefile=none<\/p>\n<p><strong>History for &lsquo;zp0&rsquo;:<\/strong><br \/>2023-08-23.21:13:07 zpool create -O acltype=posixacl -O compression=off -O recordsize=128K -O xattr=sa -R \/tmp\/a -f -m none zp0 mirror \/dev\/sda3 \/dev\/sdb3<br \/>2023-08-23.21:13:07 zpool set ashift=12 zp0<br \/>2023-08-23.21:13:07 zpool set autoexpand=off zp0<br \/>2023-08-23.21:13:07 zpool set autoreplace=off zp0<br \/>2023-08-23.21:13:09 zfs create zp0\/zd0 -o canmount=off<br \/>2023-08-23.21:13:09 zfs set quota=20G zp0\/zd0<br \/>2023-08-23.21:13:13 zfs set mountpoint=\/ zp0\/zd0<br \/>2023-08-23.21:13:13 zfs inherit -S canmount zp0\/zd0<br \/>2023-08-23.21:15:59 zpool export -a<br \/>2023-08-23.21:20:16 zpool import -N zp0<\/p>\n<pre><\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzpool status\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p><strong>pool: data<\/strong><br \/>state: ONLINE<br \/>status: Some supported and requested features are not enabled on the pool.<br \/>The pool can still be used, but some features are unavailable.<br \/>action: Enable all features using &lsquo;zpool upgrade&rsquo;. Once this is done,<br \/>the pool may no longer be accessible by software that does not support<br \/>the features. See zpool-features(7) for details.<br \/>config:<\/p>\n<p>NAME STATE READ WRITE CKSUM<br \/>data ONLINE 0 0 0<br \/>mirror-0 ONLINE 0 0 0<br \/>ata-HGST_HUS726040ALA610_K7JJ0SEL-part5 ONLINE 0 0 0<br \/>wwn-0x5000cca25df16bb4-part5 ONLINE 0 0 0<\/p>\n<p>errors: No known data errors<\/p>\n<p><strong>pool: zp0<\/strong><br \/>state: ONLINE<br \/>status: Some supported and requested features are not enabled on the pool.<br \/>The pool can still be used, but some features are unavailable.<br \/>action: Enable all features using &lsquo;zpool upgrade&rsquo;. Once this is done,<br \/>the pool may no longer be accessible by software that does not support<br \/>the features. See zpool-features(7) for details.<br \/>config:<\/p>\n<p>NAME STATE READ WRITE CKSUM<br \/>zp0 ONLINE 0 0 0<br \/>mirror-0 ONLINE 0 0 0<br \/>sda3 ONLINE 0 0 0<br \/>sdb3 ONLINE 0 0 0<\/p>\n<p>errors: No known data errors<\/p>\n<p>[\/et_pb_accordion_item][\/et_pb_accordion][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb3_5,2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/02\/ovh-dedie-proxmox-partition-zfs-42T.png\u00a0\u00bb title_text=\u00a0\u00bbovh-dedie-proxmox-partition-zfs-4*2T\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][et_pb_text _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Pour le swap je d\u00e9fini sa taille \u00e0 1\/4 de la RAM (64Go) soit donc 16 Go. Etant donn\u00e9 que j&rsquo;ai 4 disques il suffit de d\u00e9finir 4 Go ainsi le swap sera r\u00e9parti sur les 4 disque pour obtenir un total de 16Go.<\/p>\n<p>Pour le volume \/ et \/var\/lib\/vz, j&rsquo;ai choisi le syst\u00e8me de fichier ZFS en RAID5, ainsi 2 pools zfs en raidZ1 vont \u00eatre cr\u00e9es.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion_item title=\u00a0\u00bbzpool list\u00a0\u00bb open=\u00a0\u00bbon\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<pre><strong>NAME   SIZE  ALLOC   FREE  CKPOINT  EXPANDSZ   FRAG    CAP  DEDUP    HEALTH  ALTROOT<\/strong>\nzp0   19.5G  3.26G  16.2G        -         -     1%    16%  1.00x    ONLINE  -\nzp1   14.5T  1.70M  14.5T        -         -     0%     0%  1.00x    ONLINE  -\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzfs list\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>NAME      USED  AVAIL     REFER  MOUNTPOINT<\/strong>\nzp0      3.26G  15.6G       96K  none\nzp0\/zd0  3.26G  15.6G     3.26G  \/\nzp1      1006K  10.4T      140K  none\nzp1\/zd1   151K  3.62T      151K  \/var\/lib\/vz\n<\/pre>\n<p>Ajouter le point de montage ZFS \/VZ :<\/p>\n<pre>zfs set mountpoint=\/VZ zp1<\/pre>\n<pre>NAME      USED      AVAIL      REFER      MOUNTPOINT\nzp0      2.96G      15.9G      24K none\nzp0\/zd0  2.96G      15.9G      2.96G      \/\nzp1      269K      10.7T       32.9K      \/VZ\nzp1\/zd1  35.9K      3.61T      35.9K      \/var\/lib\/vz\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbdf -h  \u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>Filesystem      Size  Used Avail Use% Mounted on<\/strong>\nudev             32G     0   32G   0% \/dev\ntmpfs           6.3G  1.4M  6.3G   1% \/run\nzp0\/zd0          19G  3.3G   16G  18% \/\ntmpfs            32G   40M   32G   1% \/dev\/shm\ntmpfs           5.0M     0  5.0M   0% \/run\/lock\n\/dev\/md2        988M   90M  831M  10% \/boot\n\/dev\/sdb1       511M  168K  511M   1% \/boot\/efi\nzp1\/zd1         3.7T  256K  3.7T   1% \/var\/lib\/vz\n\/dev\/fuse       128M   16K  128M   1% \/etc\/pve\ntmpfs           6.3G     0  6.3G   0% \/run\/user\/0\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzpool history\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre><strong>History for 'zp0':<\/strong>\nzpool create -R \/tmp\/a -f -m none -o <strong>ashift=12<\/strong> zp0 mirror \/dev\/sda3 \/dev\/sdb3 \/dev\/sdc3 \/dev\/sdd3\nzpool set autoexpand=off zp0\nzpool set autoreplace=off zp0\nzfs set recordsize=128KB zp0\nzfs set xattr=sa zp0\nzfs set acltype=posixacl zp0\nzfs create zp0\/zd0 -o canmount=off\nzfs set quota=21474836480B zp0\/zd0\nzfs set recordsize=128KB zp0\/zd0\nzfs set xattr=sa zp0\/zd0\nzfs set acltype=posixacl zp0\/zd0\nzfs set compression=off zp0\/zd0\nzfs set mountpoint=\/ zp0\/zd0\nzfs inherit -S canmount zp0\/zd0\nzpool export -a\nzpool import -N zp0\n\n<strong>History for 'zp1':<\/strong>\nzpool create -R \/tmp\/a -f -m none -o ashift=12 zp1 raidz1 \/dev\/sdc5 \/dev\/sdd5 \/dev\/sda5 \/dev\/sdb5\nzpool set autoexpand=off zp1\nzpool set autoreplace=off zp1\nzfs set recordsize=128KB zp1\nzfs set xattr=sa zp1\nzfs set acltype=posixacl zp1\nzfs create zp1\/zd1 -o canmount=off\nzfs set quota=3976624865280B zp1\/zd1\nzfs set recordsize=128KB zp1\/zd1\nzfs set xattr=sa zp1\/zd1\nzfs set acltype=posixacl zp1\/zd1\nzfs set compression=off zp1\/zd1\nzfs set mountpoint=\/var\/lib\/vz zp1\/zd1\nzfs inherit -S canmount zp1\/zd1\nzpool export -a\nzpool import -aN -d \/dev\/disk\/by-id -o cachefile=none\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzpool status\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<pre>\n  pool: zp0\n state: ONLINE\nstatus: Some supported and requested features are not enabled on the pool.\n\tThe pool can still be used, but some features are unavailable.\naction: Enable all features using 'zpool upgrade'. Once this is done,\n\tthe pool may no longer be accessible by software that does not support\n\tthe features. See zpool-features(7) for details.\nconfig:\n\n\tNAME        STATE     READ WRITE CKSUM\n\tzp0         ONLINE       0     0     0\n\t  mirror-0  ONLINE       0     0     0\n\t    sda3    ONLINE       0     0     0\n\t    sdb3    ONLINE       0     0     0\n\t    sdc3    ONLINE       0     0     0\n\t    sdd3    ONLINE       0     0     0\n\nerrors: No known data errors\n\n  pool: zp1\n state: ONLINE\nstatus: Some supported and requested features are not enabled on the pool.\n\tThe pool can still be used, but some features are unavailable.\naction: Enable all features using 'zpool upgrade'. Once this is done,\n\tthe pool may no longer be accessible by software that does not support\n\tthe features. See zpool-features(7) for details.\nconfig:\n\n\tNAME                              STATE     READ WRITE CKSUM\n\tzp1                               ONLINE       0     0     0\n\t  raidz1-0                        ONLINE       0     0     0\n\t    wwn-0x5000cca097ce27b1-part5  ONLINE       0     0     0\n\t    wwn-0x5000cca0bcd162b5-part5  ONLINE       0     0     0\n\t    wwn-0x5000cca097d00cb3-part5  ONLINE       0     0     0\n\t    wwn-0x5000cca097cdb805-part5  ONLINE       0     0     0\n\nerrors: No known data errors\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzpool import -a\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p><code>#monter tous les volumes ZFS au d\u00e9marrage : <\/code><\/p>\n<p><code>systemctl enable zfs.target zfs-import.service zfs-mount.service<\/code><\/p>\n<p>[\/et_pb_accordion_item][\/et_pb_accordion][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb1_2,1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion toggle_icon=\u00a0\u00bb&#x22;||divi||400&Prime; _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion_item title=\u00a0\u00bbZFS &#8211; V\u00e9rifier la compression\u00a0\u00bb open=\u00a0\u00bbon\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>V\u00e9rifier la compression ZFS, l&rsquo;option ATIME permet d&rsquo;optimiser les acc\u00e9s disque de notre serveur.<\/p>\n<p><a href=\"https:\/\/openzfs.readthedocs.io\/en\/latest\/performance-tuning.html\" target=\"_blank\" rel=\"noopener\">openzfs &#8211; performance-tuning<\/a><br \/><a href=\"https:\/\/arstechnica.com\/information-technology\/2020\/05\/zfs-101-understanding-zfs-storage-and-performance\/\" target=\"_blank\" rel=\"noopener\">zfs-101-understanding-zfs-storage-and-performance<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbActiver la compression ZFS\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p>Activer la compression ZFS permet de r\u00e9duire le entr\u00e9es sorties IO augmentant les performances de lecture \/ \u00e9criture en prenant l\u00e9g\u00e8rement des ressources CPU (Et oui ecrire et lire moins de donn\u00e9es compress\u00e9e en lz4 est plus rapide due \u00e0 la vitesse des disques dur, m\u00eame pour un ssd). De plus on gagnera de la place sur le disque.<\/p>\n<p><code>zfs get compression<\/code><\/p>\n<pre>NAME PROPERTY VALUE SOURCE\nzp0         compression off default\nzp0\/zd0     compression off local\nzp1         compression off default\nzp1\/zd1     compression off local\n<\/pre>\n<p><strong>Activer la compression :<\/strong><br \/><code><\/code><\/p>\n<p>zfs set compression=lz4 zp0<br \/>zfs set compression=lz4 zp0\/zd0<br \/><strong><\/strong><\/p>\n<p>zfs set compression=lz4 zp1<br \/>zfs set compression=lz4 zp1\/zd1<\/p>\n<p><strong>V\u00e9rifier :<\/strong><\/p>\n<p><code>zfs get all | grep compress<\/code><\/p>\n<pre>zp0      compressratio         1.01x                  -\nzp0      compression           on                     local\nzp0      refcompressratio      1.00x                  -\nzp0\/zd0  compressratio         1.01x                  -\nzp0\/zd0  compression           on                     local\nzp0\/zd0  refcompressratio      1.01x                  -\nzp1      compressratio         1.00x                  -\nzp1      compression           on                     local\nzp1      refcompressratio      1.00x                  -\nzp1\/zd1  compressratio         1.00x                  -\nzp1\/zd1  compression           on                     local\nzp1\/zd1  refcompressratio      1.00x                  -\n<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbD\u00e9sactiver ATIME\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p>Par d\u00e9faut l&rsquo;option atime est activ\u00e9e; A chaque fois q&rsquo;un finchier est ouvert zfs va enregistrer cette date, ce qui engendre des acc\u00e8s disques suppl\u00e9mentaire.<br \/>Sur un serveur, avons nous vraiment besoin de cette date de erni\u00e8re lecture ? Pour ma part je pr\u00e9f\u00e8re optimiser les acc\u00e8s disque, est donc je d\u00e9sactive cette option.<\/p>\n<pre><code>zfs get all | grep time<\/code><\/pre>\n<pre><code>zfs set atime=off zp0\nzfs set atime=off zp0\/zd0\nzfs set atime=off zp1\nzfs set atime=off zp1\/zd1<\/code><\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbTaille des sectors du volume zfs : ashift\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p>Ashift d\u00e9finit la taille du \u00ab\u00a0sector\u00a0\u00bb de la partition zfs et peut donc influancer les performances des acc\u00e8s disques.<\/p>\n<p style=\"line-height: 100%; margin-bottom: 0cm;\"><strong><span style=\"font-weight: normal;\">ashift=9 : 512B sectors (utilis\u00e9 sur les disques anciens),<br \/>ashift=12 : 4K sectors (utilis\u00e9 par d\u00e9faut sur les disques actuels),<br \/>and ashift=13 : 8K sectors (plut\u00f4t utilis\u00e9s avec les SSD).<\/span><\/strong><strong><span style=\"font-weight: normal;\"><\/span><\/strong><\/p>\n<p style=\"line-height: 100%; margin-bottom: 0cm;\"><strong><span style=\"font-weight: normal;\">L&rsquo;installation standard par OVH set le ashift \u00e0 la valeur 12, comme vous pouvez le voir avec la commande \u00ab\u00a0zfs history\u00a0\u00bb :<\/span><\/strong><\/p>\n<pre><strong><span style=\"font-weight: normal;\">zpool set ashift=12 zp0\n\nLiens utiles :\n<\/span><\/strong><\/pre>\n<p style=\"line-height: 100%; margin-bottom: 0cm;\"><strong><span style=\"font-weight: normal;\"><a href=\"https:\/\/jrs-s.net\/2018\/08\/17\/zfs-tuning-cheat-sheet\/\" target=\"_blank\" rel=\"noopener\">https:\/\/jrs-s.net\/2018\/08\/17\/zfs-tuning-cheat-sheet\/<\/a><\/span><\/strong><\/p>\n<p style=\"line-height: 100%; margin-bottom: 0cm;\"><strong><span style=\"font-weight: normal;\"><br \/><a href=\"https:\/\/arstechnica.com\/information-technology\/2020\/05\/zfs-101-understanding-zfs-storage-and-performance\/\" target=\"_blank\" rel=\"noopener\">https:\/\/arstechnica.com\/information-technology\/2020\/05\/zfs-101-understanding-zfs-storage-and-performance\/<\/a><\/span><\/strong><\/p>\n<pre><strong><span style=\"font-weight: normal;\">\u00a0<\/span><\/strong><\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbZFS ARC (Adaptive Replacement Cache)\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p>ZFS ARC est un systeme de cache pour accelerer les acc\u00e8s disque. L&rsquo;inconv\u00e9nient c&rsquo;est qu&rsquo;il peut parfois \u00eatre gourmand en m\u00e9moire RAM. En fait il prend l&rsquo;espace libre \u00e0 un instant T, mais la lib\u00e8re pas toujours aussi vite.<\/p>\n<p>Voici quelques conseils en anglais :<br \/><a href=\"https:\/\/www.cyberciti.biz\/faq\/how-to-set-up-zfs-arc-size-on-ubuntu-debian-linux\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cyberciti.biz\/faq\/how-to-set-up-zfs-arc-size-on-ubuntu-debian-linux\/<\/a><\/p>\n<p>surveiller la RAM : <code>free -g<\/code><br \/><code>zpool iostat -v<\/code><br \/><code>arc_summary | more<code><\/code><\/code><br \/><code>cat \/proc\/spl\/kstat\/zfs\/arcstats |grep c_<\/code><\/p>\n<p>Le principe g\u00e9rn\u00e9ral :<\/p>\n<p>D\u00e9sactiver ou r\u00e9duirre\u00a0 la cache ZFS ARC pour des volumes utilisant MYSQL, NGINX, APACHE &#8230; et utiliser plut\u00f4t le syst\u00e8me de cache impl\u00e9ment\u00e9 dans ces applications.<\/p>\n<p><a href=\"https:\/\/openzfs.github.io\/openzfs-docs\/Performance%20and%20Tuning\/Module%20Parameters.html\" target=\"_blank\" rel=\"noopener\">https:\/\/openzfs.github.io\/openzfs-docs\/Performance%20and%20Tuning\/Module%20Parameters.html<\/a><br \/><a href=\"https:\/\/dannyda.com\/2021\/12\/20\/how-to-check-zfs-io-status-and-arc-l2arc-zil-slog-status\/\" target=\"_blank\" rel=\"noopener\">https:\/\/dannyda.com\/2021\/12\/20\/how-to-check-zfs-io-status-and-arc-l2arc-zil-slog-status\/<\/a><a href=\"https:\/\/wiki.deimos.fr\/ZFS_:_Le_FileSystem_par_excellence.html#Le_cache_ARC_ZFS\" target=\"_blank\" rel=\"noopener\">https:\/\/wiki.deimos.fr\/ZFS_:_Le_FileSystem_par_excellence.html#Le_cache_ARC_ZFS<\/a><br \/><a href=\"https:\/\/pve.proxmox.com\/wiki\/ZFS_on_Linux\">https:\/\/pve.proxmox.com\/wiki\/ZFS_on_Linux<\/a><\/p>\n<pre>2GB = 2 147 483 648 Bytes\n4GB = 4 294 967 296 Bytes<\/pre>\n<p>cat \/sys\/module\/zfs\/parameters\/zfs_arc_max<code><\/code><\/p>\n<pre><tt>echo \"$[2 * 1024*1024*1024 - 1]\" &gt;\/sys\/module\/zfs\/parameters\/zfs_arc_min\necho \"$[4 * 1024*1024*1024]\" &gt;\/sys\/module\/zfs\/parameters\/zfs_arc_max<\/tt><\/pre>\n<pre>vi \/etc\/modprobe.d\/zfs.conf<br \/>options zfs zfs_arc_min=2147483647<br \/>options zfs zfs_arc_max=4294967296<code><\/code><\/pre>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbCr\u00e9er un volume ZFS apel\u00e9 VZ\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p>Cr\u00e9ons un volume ZFS appel\u00e9 vz sur l&rsquo;ensemble des noeuds du furtur cluster de serveurs proxmox. Ainsi ce volume ZFS ayant le m\u00eame nom de pool et de volume, on pourra profiter de la r\u00e9plication ZFS entre noeud directement dans l&rsquo;interface web de proxmox.<\/p>\n<pre>zfs create zp0\/vz -o canmount=off<br \/>zfs set mountpoint=\/vz zp0\/vz<br \/>zfs inherit -S canmount zp0\/vz<br \/>zpool export -a<br \/>zpool import -N zp0<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbD\u00e9finir un quota sur un volume zfs\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p>Pour ne pas saturer votre serveur par une op\u00e9ration de backup journalier ou la purge n&rsquo;\u00e0 pas \u00e9t\u00e9 effectu\u00e9e, il peut \u00eatre judicieux de limiter un volume ZFS.<\/p>\n<p><a href=\"https:\/\/docs.oracle.com\/cd\/E23823_01\/html\/819-5461\/gazvb.html\" target=\"_blank\" rel=\"noopener\">https:\/\/docs.oracle.com\/cd\/E23823_01\/html\/819-5461\/gazvb.html<\/a><\/p>\n<p>Par exemple, mon disque fait 450Go, les backups se font par defaut sur \/var\/lib\/vz\/dumps, je vais donc limiter le quota de ce volume. Les VMs \u00e9tant cr\u00e9\u00e9s sur un autre volume ZFS, le volume VZ, ainsi les backups ne pourrons pas saturer le fonctionnement normale du serveur et de VMs proxmox.<\/p>\n<p><strong>zfs get quota \/var\/lib\/vz<\/strong><br \/>NAME PROPERTY VALUE SOURCE<br \/>zp0\/zd1 quota 418G local<\/p>\n<p><strong>zfs set quota=250G zp0\/zd1<\/strong><\/p>\n<p>[\/et_pb_accordion_item][\/et_pb_accordion][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion toggle_icon=\u00a0\u00bb&#x22;||divi||400&Prime; _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_accordion_item title=\u00a0\u00bbAlertes e-mail\u00a0\u00bb open=\u00a0\u00bbon\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Etre alert\u00e9 par e-mail d&rsquo;un probl\u00e8me sur le serveur. Par defaut les services envoient des alertes dans la boite local du server postmaster \/ root &#8230; Sinon, au travers du fichier de configuration il est aussi possible de configurer l&#8217;email, comme par exemple les alerte ZFS avec le service ZED.<\/p>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbAjouter un email dans \/etc\/aliases\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p><strong>vi \/etc\/aliases<\/strong><\/p>\n<pre># See man 5 aliases for format\npostmaster: root\nroot: <a href=\"mailto:monemail@mondomaine.fr\">monemail@mondomaine.fr<\/a>\n<\/pre>\n<p>Puis executer la commande suivante pour actualiser <strong>aliases.db<\/strong> :<\/p>\n<pre>newaliases<\/pre>\n<p>Puis red\u00e9marrer <strong>postfix<\/strong> :<\/p>\n<pre>systemctl restart postfix<\/pre>\n<p>Tester :<\/p>\n<pre>echo test | mail -s \"test message\" root<\/pre>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbzfs zed.rc\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p>vi \/etc\/zfs\/zed.d\/zed.rc<\/p>\n<p># Email address of the zpool administrator for receipt of notifications;<br \/>ZED_EMAIL_ADDR=\u00a0\u00bbroot\u00a0\u00bb<\/p>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\u00a0\u00bbarc_summary | more\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.2&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb open=\u00a0\u00bboff\u00a0\u00bb]<\/p>\n<p><code>free -g<\/code><\/p>\n<pre>               total        used        free      shared  buff\/cache   available\nMem:              62           2          59           0           0          59\nSwap:              3           0           3\n\n<\/pre>\n<p><code>arc_summary | more<\/code><\/p>\n<pre>ARC status:                                                      HEALTHY\n        Memory throttle count:                                         0\n\nARC size (current):                                     3.0 %  963.4 MiB\n        Target size (adaptive):                         6.2 %    2.0 GiB\n        Min size (hard limit):                          6.2 %    2.0 GiB\n        Max size (high water):                           16:1   31.3 GiB\n\n<\/pre>\n<p>[\/et_pb_accordion_item][\/et_pb_accordion][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb2_5,3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_color=\u00a0\u00bb#2F4476&Prime; global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_icon font_icon=\u00a0\u00bb&#xe05a;||divi||400&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_icon][\/et_pb_column][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_layout=\u00a0\u00bbdark\u00a0\u00bb custom_margin=\u00a0\u00bb10px||||false|false\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<h2>Commandes utiles<\/h2>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb1_3,1_3,1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbInstaller et configurer VIM\u00a0\u00bb _builder_version=\u00a0\u00bb4.24.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb hover_enabled=\u00a0\u00bb0&Prime; global_colors_info=\u00a0\u00bb{}\u00a0\u00bb sticky_enabled=\u00a0\u00bb0&Prime;]<\/p>\n<p>apt install vim<\/p>\n<pre>echo \"set term=xterm-256color\" &gt;&gt; ~\/.vimrc<br \/>echo \"syntax on\" &gt;&gt; ~\/.vimrc<br \/>echo \"export TERM=xterm-256color\" &gt;&gt; \/etc\/profile<\/pre>\n<p>[\/et_pb_toggle][et_pb_toggle title=\u00a0\u00bbConfigurer les langues %22locales%22&Prime; _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>apt install locales<\/p>\n<p>dpkg-reconfigure locales<\/p>\n<pre>  fr_FR ISO-8859-1 \n  fr_FR.UTF-8 UTF-8 \n\nlocale-gen<\/pre>\n<p>[\/et_pb_toggle][et_pb_toggle title=\u00a0\u00bb\/etc\/aliases &#8211; e-mail pour root\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<h3>vi \/etc\/aliases<\/h3>\n<pre>  root: <a href=\"mailto:mon_email@domaine.fr\">mon_email@domaine.fr<\/a><\/pre>\n<p>Executer la commande suivante pour actualiser <strong>aliases.db<\/strong> :<\/p>\n<pre style=\"margin-bottom: 0.5cm;\">newaliases<b><\/p>\n<p>Reconfiguer postfix :<\/b><\/pre>\n<pre style=\"margin-bottom: 0.5cm;\">dpkg-reconfigure postfix<\/pre>\n<p style=\"margin-bottom: 0.5cm;\">Ainsi les fichiers suivants ont \u00e9t\u00e9 configur\u00e9s :<\/p>\n<pre style=\"margin-bottom: 0.5cm;\">vi \/etc\/mailname<br \/>vi \/etc\/postfix\/main.cf<br \/>    monhost.domaine.fr<br \/><b><\/b><\/pre>\n<h3>Puis red\u00e9marrer <strong>postfix<\/strong> :<\/h3>\n<pre style=\"margin-bottom: 0.5cm;\">systemctl restart postfix<\/pre>\n<h3>Tester :<\/h3>\n<pre style=\"margin-bottom: 0.5cm;\">echo test | mail -s \"test message\" root<\/pre>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_toggle][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbInstaller fail2ban\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p><code>apt install fail2ban<\/code><br \/><code>cp \/etc\/fail2ban\/jail.conf \/etc\/fail2ban\/jail.local<\/code><\/p>\n<p>[\/et_pb_toggle][et_pb_toggle title=\u00a0\u00bbInstaller logwatch\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>apt install logwatch<\/p>\n<p>Tout \u00e9nnement sont inscrits dans les logs et logwatch permet de faire un rapport r\u00e9gulier des \u00e9vennements importants dans ses journaux de log.<\/p>\n<p>[\/et_pb_toggle][et_pb_toggle title=\u00a0\u00bbCertificat SSL gratuit avec  certbot\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<h3>Installer Let&rsquo;s encrypt &#8211; certbot<\/h3>\n<p><a href=\"https:\/\/eff-certbot.readthedocs.io\/en\/stable\/using.html\" target=\"_blank\" rel=\"noopener\">https:\/\/eff-certbot.readthedocs.io\/en\/stable\/using.html<\/a><\/p>\n<p>apt update<br \/>apt install certbot python3-certbot-nginx<\/p>\n<p>Ouvrir le firexwall OVH sur les ports 80 et 443<a href=\"http:\/\/www.mondomaine.fr\"><\/a><\/p>\n<p>certbot run &#8211;key-type ecdsa &#8211;cert-name mondomaine.fr -d www.mondomaine.fr<br \/>certbot certonly &#8211;key-type ecdsa &#8211;cert-name mondomaine.fr -d www.mondomaine.fr<\/p>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_toggle][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_3&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb2_5,3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_color=\u00a0\u00bb#2F4476&Prime; global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_icon font_icon=\u00a0\u00bb&#xe06c;||divi||400&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_icon][\/et_pb_column][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_layout=\u00a0\u00bbdark\u00a0\u00bb custom_margin=\u00a0\u00bb10px||||false|false\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<h2>S\u00e9curisez le serveur Proxmox<\/h2>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb2_5,3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Votre serveur \u00e9tant fraichement install\u00e9, il convient de le s\u00e9curiser au plus vite.<\/p>\n<p>&#8211; Connectez vous en SSH sur votre serveur et changez le mot de passe root. Ajoutez un nouvel utilisateur, et installez une clef ssh pour cet utilisateur, ajoutez le au groupe sudo.<br \/>Modifiez la conf sshd pour ne pas autoriser un l&rsquo;acces root et n&rsquo;autoriser que les acc\u00e8s avec clef SSH (pas de mot passe).<\/p>\n<p>&#8211; Connectez-vous avec votre navigateur \u00e0 Proxmox <a href=\"https:\/\/monserveur.fr:8006\/\">https:\/\/monserveur.fr:8006\/<\/a><br \/>Configurez le firewal avec au minimum les r\u00e8gles suivantes :<\/p>\n<ul>\n<li>Autorisez l&rsquo;acc\u00e8s SSH et l&rsquo;acc\u00e8s https sur le port 8006 exclusivement pour votre IP fixe.<\/li>\n<li>Autorisez les Pings afin que le monitoring d&rsquo;OVH consid\u00e8re toujours votre serveur actif.<\/li>\n<li>Autorisez le protocole HTTP (temporairement) pour mettre en place un certificat LetsEncryp avec la m\u00e9thos HTTP.<\/li>\n<li>Enfin, activez les firewall avec l&rsquo;Input Plolicy sur DROP ou EJECT afin que tout ce qui n&rsquo;est pas inscrit dans les r\u00e8gles du firewall soit bloqu\u00e9.<\/li>\n<\/ul>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/02\/proxmox-inital-firewall-rules.png\u00a0\u00bb title_text=\u00a0\u00bbproxmox-inital-firewall-rules\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][et_pb_image src=\u00a0\u00bbhttps:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/02\/proxmox-firewall-option.png\u00a0\u00bb title_text=\u00a0\u00bbproxmox-firewall-option\u00a0\u00bb _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb2_5,3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_color=\u00a0\u00bb#2F4476&Prime; global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_icon font_icon=\u00a0\u00bb&#xf287;||fa||400&Prime; _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_icon][\/et_pb_column][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_layout=\u00a0\u00bbdark\u00a0\u00bb custom_margin=\u00a0\u00bb10px||||false|false\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<h2>Configuration r\u00e9seau du serveur proxmox<\/h2>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb1_2,1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbIP V4 OVH et passerelle\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p class=\"western\">L\u2019adresse de la passerelle est constitu\u00e9e des trois premiers octets de l\u2019adresse IP principale de votre serveur, le dernier octet \u00e9tant de 254. Par exemple, si l\u2019adresse IP principale de votre serveur\u00a0est\u00a0:<\/p>\n<ul>\n<li>\n<p class=\"western\">123.456.789.111<\/p>\n<\/li>\n<\/ul>\n<p class=\"western\">Votre adresse de passerelle sera\u00a0alors\u00a0:<\/p>\n<ul>\n<li>\n<p class=\"western\">123.456.789.254<\/p>\n<\/li>\n<\/ul>\n<p>[\/et_pb_toggle][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbIP V6 OVH et passerelle\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">La passerelle par d\u00e9faut de votre Block IPv6 (IPv6_GATEWAY) est toujours IP:v:6FF:FF:FF:FF:FF.<\/p>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">Quelques exemples :<\/p>\n<ul>\n<ul>\n<li>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">L\u2019IPv6 du serveur est 2607:5300:60:62ac::\/64<\/p>\n<\/li>\n<li>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">L\u2019IPv6_GATEWAY sera alors 2607:5300:60:62FF:FF:FF:FF:FF<\/p>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">\n<\/li>\n<li>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">L\u2019IPv6 du serveur est 2001:41D0:1:46e::\/64<\/p>\n<\/li>\n<li>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">L\u2019IPV6_GATEWAY sera alors 2001:41D0:1:4FF:FF:FF:FF:FF.<\/p>\n<\/li>\n<\/ul>\n<\/ul>\n<p>[\/et_pb_toggle][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb3_5,2_5&Prime; _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbConfiguration r\u00e9seau : \/etc\/network\/interface &#8211; bridge vmbr0&Prime; admin_label=\u00a0\u00bbnetwork\/interface\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<h4># D\u00e9finition des interfaces locales \/ loopback :<\/h4>\n<pre>auto lo\niface lo inet loopback\niface lo inet6 loopback\n<\/pre>\n<h4># D\u00e9finition des interfaces physique<\/h4>\n<pre>iface eno1 inet manual\niface eno2 inet manual\n<\/pre>\n<h4># D\u00e9finir l&rsquo;adresse IP V4 et V6<br \/># sur une interface bridge (plut\u00f4t que sur l&rsquo;interface physique)<\/h4>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-ip-vmbr0.png\" alt=\"\" class=\"wp-image-233646 alignnone size-full\" width=\"1186\" height=\"490\" srcset=\"https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-ip-vmbr0.png 1186w, https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-ip-vmbr0-980x405.png 980w, https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-ip-vmbr0-480x198.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1186px, 100vw\" \/><\/p>\n<p>Cette configuration va d\u00e9finir les adresses IP de mani\u00e8re statique sur une interface bridge (vmbr0). Le fait de d\u00e9finir l&rsquo;adresse IP sur une interface bridge et non pas sur l&rsquo;interface physique va permettre de partager ce bridge, et donc l&rsquo;ip publique avec d&rsquo;autres interfaces bridge au travers de la translation d&rsquo;adresse (NAT \/ SNAT).<\/p>\n<pre>auto vmbr0\n#iface vmbr0 inet dhcp\n\niface vmbr0 inet static\n  address 46.105.104.97\/24\n  gateway 46.105.104.254\n  bridge-ports eno1\n  bridge-stp off\n  bridge-fd 0<\/pre>\n<pre>iface vmbr0 inet6 static\n  address 2001:41d0:2:d761::1\/64\n  gateway 2001:41d0:2:d7FF:FF:FF:FF:FF<\/pre>\n<p>[\/et_pb_toggle][\/et_pb_column][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbcmd r\u00e9seau\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Voici quelques commandes pour v\u00e9rifier la configuration r\u00e9seau et comprendre les interfaces cr\u00e9\u00e9 avec proxmox.<\/p>\n<p id=\"developer-materials\"><span>Voir aussi : <a href=\"https:\/\/developers.redhat.com\/blog\/2018\/10\/22\/introduction-to-linux-interfaces-for-virtual-networking\" target=\"_blank\" rel=\"noopener\">Introduction to Linux interfaces for virtual networking<\/a><\/span><\/p>\n<h2>\u00a0brctl show<\/h2>\n<p>Lister les interfaces bridge :<\/p>\n<pre><strong>bridge name bridge id STP enabled interfaces<\/strong>\nvmbr0 8000.0cc47aa91eb2 no eno1\nvmbr192 8000.72f430766b48 no veth601i0<\/pre>\n<h2>\u00a0bridge link<\/h2>\n<p>Lister les liens entre interface(s) physique et interface(s) bridge :<\/p>\n<pre>2: eno1: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 master vmbr0 state forwarding priority 32 cost 4 \n8: veth601i0@eno1: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 master vmbr192 state forwarding priority 32 cost 2<\/pre>\n<p>VETH601i0 correspond \u00e0 une interface Ethernet virtuelle d&rsquo;une machine virtuelle (VM)en cours d&rsquo;ex\u00e9cution.<br \/>Si l&rsquo;on active le firewall sur l&rsquo;interface r\u00e9seau de cette machine virtuelle (VM) on verra appara\u00eetre 1 nouvlle interface bridge (fwbr601i0) li\u00e9s entre eux par les liens fwpr et fwln pour effectuer les filtres du firewall aveavec iptables :<\/p>\n<pre><strong>veth601i0<\/strong> &lt;= veth601i0@eno1 =&gt; <strong>fwbr601i0<\/strong> &lt;= fwpr601p0@fwln601i0 =&gt;<strong> vmbr192<\/strong><strong><\/strong><strong><\/strong>\n                                            fwln601i0@fwpr601p0\n<\/pre>\n<pre>2: eno1: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 master vmbr0 state forwarding priority 32 cost 4 \n12: veth601i0@eno1: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 master <strong>fwbr601i0<\/strong> state forwarding priority 32 cost 2 \n14: fwpr601p0@fwln601i0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 master vmbr192 state forwarding priority 32 cost 2 \n15: fwln601i0@fwpr601p0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 master <strong>fwbr601i0<\/strong> state forwarding priority 32 cost 2<\/pre>\n<h2>ip r<\/h2>\n<p>Lister les r\u00e9seaux par interface et lur passerelle.<\/p>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_toggle][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb1_2,1_2&Prime; _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbSous r\u00e9seau pour les VM sur un bridge + SNAT\u00a0\u00bb admin_label=\u00a0\u00bbbridge &#8211; snat\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Les VM vont pouvoir communiquer entre \u00eatre au travers d&rsquo;un sous r\u00e9seau local. Pour ce sous r\u00e9seau, sur le serveur h\u00f4te on va donc cr\u00e9er une nouvelle interface bridge, ind\u00e9peandante (non li\u00e9e \u00e0 une interface physque : bridge-ports none) :<\/p>\n<pre>auto vmbr192\niface vmbr192 inet static\n\u00a0 address 192.168.1.254\/24\n\u00a0 bridge-ports none\n\u00a0 bridge-stp off\n\u00a0 bridge-fd 0<\/pre>\n<p>Pour permettre \u00e0 ces VM d&rsquo;acc\u00e9der \u00e0 Internet, on va utiliser le SNAT (Source NAT &#8211; ip_forward &#8211; la translation d&rsquo;adresse). C&rsquo;est \u00e0 dire que le va retransmettre les paquets TCP\/IP issus d&rsquo;une VM (r\u00e9seau 192.168.1.0\/24) pour passer par l&rsquo;IP publique du serveur hote (46.105.104.97) et donc via l&rsquo;interfacde physique (en1). Pour cela l&rsquo;on va utiliser les r\u00e8gles IPTABLE suivantes :<\/p>\n<pre>post-up echo 1 &gt; \/proc\/sys\/net\/ipv4\/ip_forward\npost-up iptables -t nat -A POSTROUTING -s '192.168.1.0\/24' -o eno1 -j SNAT --to-source 46.105.104.97\npost-down iptables -t nat -D POSTROUTING -s '192.168.1.0\/24' -o eno1 -j SNAT --to-source 46.105.104.97\n\npost-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1\npost-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1<\/pre>\n<p>Ainsi, dans une VM vous pourrez allors acc\u00e9der \u00e0 Internet, par exemple pour effectuer les mises \u00e0 jour.<\/p>\n<pre>apt update;\napt upgrade;<\/pre>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_toggle][\/et_pb_column][et_pb_column type=\u00a0\u00bb1_2&Prime; _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_toggle title=\u00a0\u00bbIP V6 pour les VM Proxmox\u00a0\u00bb admin_label=\u00a0\u00bbip v6&Prime; _builder_version=\u00a0\u00bb4.21.0&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<pre><tt><a href=\"http:\/\/howto.zw3b.fr\/linux\/reseaux\/howto-ipv6-proxmox-ovh\">http:\/\/howto.zw3b.fr\/linux\/reseaux\/howto-ipv6-proxmox-ovh<\/a><\/tt>\n<\/pre>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">Il faut savoir qu&rsquo;OVH propose un masque de 56 et non pas un masque de 64 (ce qui permet d&rsquo;attribuer \u00e0 nos VMs diff\u00e9rents sous-r\u00e9seaux).<\/p>\n<pre><\/pre>\n<p><p>Sur le \u00ab\u00a0host proxmox\u00a0\u00bb ajouter les routes par defaut sur une IP v6\u00a0:<\/p>\n<p><pre><tt>post-up \/sbin\/ip -f inet6 route add 2001:41d0:8:54d1::1 dev vmbr0<\/tt>\n<tt>post-up \/sbin\/ip -f inet6 route add default via 2001:41d0:8:54d1::1<\/tt>\n<tt>pre-down \/sbin\/ip -f inet6 route del default via 2001:41d0:8:54d1::1<\/tt>\n<tt>pre-down \/sbin\/ip -f inet6 route del 2001:41d0:8:54d1::1 dev vmbr0<\/tt>\n<\/pre>\n<p class=\"western\" style=\"margin-bottom: 0cm;\">Sur chaque container, mettre une ip v6 valide et comme passerelle celle inscrite comme route par d\u00e9faut.<\/p>\n<p>[\/et_pb_toggle][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb2_5,3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_color=\u00a0\u00bb#2F4476&Prime; global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb2_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_icon font_icon=\u00a0\u00bb&#xf6ff;||fa||900&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_icon][\/et_pb_column][et_pb_column type=\u00a0\u00bb3_5&Prime; _builder_version=\u00a0\u00bb4.19.5&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb background_layout=\u00a0\u00bbdark\u00a0\u00bb custom_margin=\u00a0\u00bb10px||||false|false\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<h2>Un cluster proxmox<\/h2>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb4_4&Prime; _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p>Your content goes here. Edit or remove this text inline or in the module Content settings. You can also style every aspect of this content in the module Design settings and even apply custom CSS to this text in the module Advanced settings.<\/p>\n<p>[\/et_pb_text][et_pb_toggle title=\u00a0\u00bbCr\u00e9er le cluster sur un 1er serveur\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p><a href=\"https:\/\/pve.proxmox.com\/wiki\/Cluster_Manager\" target=\"_blank\" rel=\"noopener\">https:\/\/pve.proxmox.com\/wiki\/Cluster_Manager<\/a><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-cluster-create.png\" alt=\"\" class=\"wp-image-233652 alignnone size-full\" width=\"1564\" height=\"638\" srcset=\"https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-cluster-create.png 1564w, https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-cluster-create-1280x522.png 1280w, https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-cluster-create-980x400.png 980w, https:\/\/www.ma-solution.fr\/wp-content\/uploads\/2023\/04\/proxmox-cluster-create-480x196.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) and (max-width: 1280px) 1280px, (min-width: 1281px) 1564px, 100vw\" \/><\/p>\n<p>[\/et_pb_toggle][et_pb_toggle title=\u00a0\u00bbRejoindre un cluster\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4&Prime; _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n<p><a href=\"https:\/\/pve.proxmox.com\/wiki\/Cluster_Manager\" target=\"_blank\" rel=\"noopener\">https:\/\/pve.proxmox.com\/wiki\/Cluster_Manager<\/a><\/p>\n<h4>DNS ou Hosts name<\/h4>\n<p>D\u00e9finir chaque host \/ ip dans votre serveur DNS.<\/p>\n<p>Dans le cas d&rsquo;un cluster sur un r\u00e9seau local, sans serveur DNS, ou d&rsquo;un cluser dans un VPN priv\u00e9,\u00a0 vous pouvez pour chaque noeud du cluster d\u00e9finir son non dans le fichier Hosts de cahque serveur :<\/p>\n<p>vi \/etc\/hosts<\/p>\n<pre>10.0.40.1 serveur1\n10.0.40.2 serveur2\n...<\/pre>\n<h4>Auttoriser l&rsquo;acc\u00e9s SSH par mot de passe pour root<\/h4>\n<p style=\"line-height: 100%; margin-bottom: 0cm;\">Sur l&rsquo;un des serveurs du cluster, autoriser (temporairement) l&rsquo;acc\u00e8s root par mot de passe :<\/p>\n<p>vi \/etc\/ssh\/sshd_config<\/p>\n<pre>  PermitRootLogin yes\n  #PermitRootLogin prohibit-password\n  PasswordAuthentication yes\n  #PasswordAuthentication no<\/pre>\n<p>systemctl restart sshd<\/p>\n<p>Enregistrer le clef ssh publique du host destinataire avant d&rsquo;ajouter le noeud au cluster. Pour cela, \u00e0 partir du serveur que l&rsquo;on veut inscrire dans le cluster, effectuer une 1ere connexion ssh :<\/p>\n<pre>root@serveur2:~# ssh root@serveur1\nThe authenticity of host 'serveur1 (10.0.60.1)' can't be established.\nECDSA key fingerprint is SHA256:O9ip0vGacWhaoiXeNyx3Qf57hjPZ4h1goZcYfksP\/mT.\nAre you sure you want to continue connecting (yes\/no\/[fingerprint])? yes<\/pre>\n<pre>Warning: Permanently added 'serveur1,10.0.60.1' (ECDSA) to the list of known hosts.\nConnection closed by 10.0.60.1 port 22<\/pre>\n<h4>Ajouter un serveur au cluster<\/h4>\n<p style=\"line-height: 100%; margin-bottom: 0cm;\"><code>pvecm add &lt;IP of master&gt; -link0 &lt;your IPv4&gt; -link1<\/code><\/p>\n<p>\u00a0<code>&lt;Your IPv6&gt;<\/code><\/p>\n<p>pvecm add\u00a0serveur1 -link0 10.0.40.2<\/p>\n<p>[\/et_pb_toggle][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Installer Proxmox 7 ou proxmox 8 \u00e0 partir du template OVH<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[101,22],"tags":[],"class_list":["post-233011","post","type-post","status-publish","format-standard","hentry","category-ovh-proxmox-7-cluster","category-serveur-dedie"],"_links":{"self":[{"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=\/wp\/v2\/posts\/233011","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=233011"}],"version-history":[{"count":105,"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=\/wp\/v2\/posts\/233011\/revisions"}],"predecessor-version":[{"id":233757,"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=\/wp\/v2\/posts\/233011\/revisions\/233757"}],"wp:attachment":[{"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=233011"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=233011"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ma-solution.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=233011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}